Privacy policy

3. Privacy Policy


Last Updated: 24th June, 2026

This Privacy Policy describes how Korvane ('we', 'us', or 'our') collects, uses, stores, and protects personal data submitted by users ('you' or 'Data Principal') in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), the DPDP Rules, 2025, and the Information Technology Act, 2000 and its associated rules.

3.1 Data We Collect
We collect the following categories of personal data solely for the purposes described in this policy:

  • Identity Data: Full name, email address, phone number.
  • Delivery Data: Shipping address, pin code, city, state.
  • Transaction Data: Order details, payment confirmation references (we do not store full card details).
  • Technical Data: IP address, browser type, device type, pages visited (via cookies and analytics tools).
  • Communication Data: Emails, messages, or queries you send to our support team.

3.2 Purpose of Processing
Your personal data is processed for the following specified purposes:

  • Processing and fulfilling your orders, including shipping and delivery.
  • Communicating with you regarding your orders, replacement requests, or queries.
  • Improving our website, products, and services.
  • Sending promotional communications (only with your explicit consent, which you may withdraw at any time).
  • Legal compliance and fraud prevention.

3.3 Consent
By placing an order or using our website, you provide free, specific, informed, and unambiguous consent to the collection and processing of your personal data as described in this policy, in compliance with Section 6 of the DPDPA, 2023. You have the right to withdraw your consent at any time by contacting us at support@korvane.in. Withdrawal of consent may affect our ability to fulfil your pending orders or provide services.

3.4 Data Sharing
We do not sell, rent, or trade your personal data. Your data may be shared with:

  • Courier/Logistics Partners: For the purpose of shipping and delivery of your order.
  • Payment Gateways: For secure processing of transactions.
  • Analytics Providers: In anonymised or aggregated form only, for website improvement.

All third parties are contractually obligated to process your data only for the specified purpose and maintain appropriate security standards.

3.5 Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Order and transaction data is retained for a minimum of 3 years for compliance purposes.

3.6 Your Rights Under the DPDPA, 2023
As a Data Principal under Indian law, you have the following rights:

  • Right to access information about your personal data being processed.
  • Right to correction and erasure of inaccurate or unnecessary data.
  • Right to grievance redressal regarding processing of your personal data.
  • Right to nominate another individual to exercise your rights in case of death or incapacity.
  • Right to file a complaint with the Data Protection Board of India if your rights are violated.

To exercise any of these rights, contact us at support@korvane.in.

3.7 Cookies
Our website uses cookies to enhance your browsing experience. You may adjust your browser settings to refuse cookies, though this may affect certain website functionalities. By continuing to use our site, you consent to our use of cookies.

3.8 Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, in compliance with the DPDP Rules, 2025.

3.9 Contact — Grievance Officer
For any data privacy concerns or to exercise your rights under the DPDPA, contact our Grievance Officer:
Email: support@korvane.in | Address: Chandannagar, West Bengal – 712136, India
We will respond to all privacy-related queries within 30 days of receipt.