Privacy Policy

KHWAB Studios Pvt. Ltd. ("we", "us", "KHWAB") respects your privacy. This Policy explains what personal data we collect, why, how it is shared, how long it is kept, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Data Fiduciary: KHWAB Studios Pvt. Ltd.. CIN U74999MH2026PTC000000. GSTIN 27AABCK1234F1Z5. Registered office — Shop 04, Bandra West Lane, Off Hill Road, Mumbai 400050, Maharashtra, India.

Data we collect

Name, email address, shipping address, order history, device & browser info, cookies, and any data you share in reviews or support messages. Phone number is collected at checkout for delivery purposes only — it is not used to log you in. Card numbers are never stored on our servers; payments are tokenised by Razorpay.

How we collect it

Directly from you (account sign-up via email + one-time code, checkout, contact form, reviews), automatically (cookies, device info), and from payment / logistics partners when you place an order.

Why we collect it

To process orders, deliver products, provide customer support, send transactional emails (order confirmations, shipping updates, password resets), and — with your explicit consent — send marketing updates. We do not profile you for behavioural advertising without consent.

Legal basis

Your consent, performance of a contract (your order), legal obligation (tax compliance), and legitimate business interests (fraud prevention, analytics) — applied per the DPDP Act and standard contractual practice.

Sharing with third parties

We share the minimum necessary data with: Shiprocket (shipping & tracking), Razorpay (payments), our transactional email provider (sign-in & verification codes, order receipts), Meta / Google (analytics & ads, only if you consent), and law enforcement where legally required. We never sell your personal data.

Your DPDP rights

You have the right to: (a) access your data, (b) correct or update it, (c) request erasure, (d) withdraw consent at any time, (e) request data portability where technically feasible, and (f) file a grievance. Write to privacy@khwab.in — we acknowledge within 48 hours and respond within 7 working days.

Data retention

Order data: retained for 8 years for tax compliance under Indian law. Marketing data: until you unsubscribe (one-click in every email). Account data: deleted within 30 days of a verified deletion request, except where retention is required by law.

Cookies

We use essential cookies (cart, session, CSRF) by default, and — only with your explicit consent through the on-site banner — analytics & marketing cookies. You can change your choice anytime via the cookie banner or your browser settings.

Children

KHWAB does not knowingly collect data from anyone under 18 without verifiable parental consent. If you believe we hold such data, write to privacy@khwab.in and we will delete it.

10.

Grievance Officer (DPDP §10)

As required by the DPDP Act, our Grievance Officer is:

Name: Priya Shah
Designation: Grievance & Privacy Officer
Email: grievance@khwab.in
Postal address: Grievance & Privacy Officer, KHWAB Studios Pvt. Ltd., Shop 04, Bandra West Lane, Off Hill Road, Mumbai 400050, Maharashtra, India
Hours: Mon–Fri, 10am–5pm IST
Response window: Acknowledged within 48 hours, resolved within 30 days as required by DPDP Act

If your grievance is not satisfactorily resolved, you may escalate to the Data Protection Board of India established under the DPDP Act 2023.

11.

Updates to this Policy

We post the date of the last update at the top of this page. Material changes are also notified by email to active accounts.