Legal

Privacy Policy

This policy explains what personal data we collect when you use karinivastra.com, why we collect it, who we share it with, and the choices you have. We have written it to describe how this website actually works.

Last updated: 13 September 2026

Who we are

This website is operated by KARINI VASTRA, H.no. 34-26/102, plot no. 102, road no. 3, Vivekanandapuram, Sainikpuri, 500094, HYDERABAD, TELANGANA, 500094, India.

You can contact us at care.karinivastra@gmail.com or 7288011028.

What we collect, and why

When you place an order: your name, email address, phone number and delivery address, what you ordered and what you paid. We use these to process, deliver and support your order, and to keep the business and tax records the law requires. Your phone number is needed by the courier.
Payment: you pay in Razorpay's secure window. Your card, UPI or bank details go to Razorpay and never reach our servers. We receive only a payment reference and the type of payment method used.
When you create an account: your name, email address and password. Your password is stored only as a secure hash by our authentication provider — nobody at Karini Vastra can see it. One-time sign-in codes are stored only as a keyed hash and expire after 10 minutes.
If you ask for news and offers: your email address. We only add you when you ask us to — from the form in our footer, from Account → Settings, or by ticking the box at checkout. Every promotional email carries a one-click unsubscribe link, and we keep a record of what we sent, when, and whether it was delivered. Emails about an order you have placed are not marketing and cannot be unsubscribed from.
If you use the contact form: your name, email address and message, which are emailed to our inbox so we can reply. The form does not store them anywhere else.
Technical information: your IP address is used to protect the site from abuse (sign-in and checkout attempt limits — stored only as a one-way hash and deleted within about an hour of the limit expiring) and to estimate your country so we can show prices in your currency (not stored). Our hosting provider keeps standard server logs, such as IP address, browser type and pages requested, for security and reliability.
Information stored on your device — such as your bag and saved sarees — is described in our Cookie Policy.

What we don't do

We don't sell or rent your personal data.
We don't use advertising cookies, tracking pixels or third-party advertising networks.
We don't currently run website analytics. If we add privacy-friendly analytics in future, we will update this policy first.

We use a small number of service providers who process data on our behalf, only for the purposes described here:

Razorpay — payment processing and fraud prevention (India).
Supabase — our database, customer accounts and image storage (servers in South Korea).
Vercel — website hosting and server logs.
Resend — sending emails such as sign-in codes and order confirmations (sent through servers in Japan).
Our courier — your name, delivery address and phone number, to deliver your order.
Meta (WhatsApp) — only if you ask for your order confirmation on WhatsApp at checkout: your name, phone number, order reference, total, what you ordered and the delivery town and postcode. Leave that box unticked and nothing is sent to WhatsApp.
Authorities — where we are required to by law.

Where your data is processed

Some of these providers process data outside India, including in South Korea, Japan and the United States. We use providers that apply appropriate security to the data they handle for us.

How long we keep it

Orders: for as long as we are required to keep business and tax records.
Your account: until you close it. Closing your account deletes your profile, saved addresses and wishlist; past orders are kept as our business record but are no longer linked to you.
News and offers: until you unsubscribe. The record of promotional emails we sent is kept as our sending record.
Contact messages: in our inbox for as long as we need them to deal with your enquiry.
Sign-in codes: 10 minutes. Abuse-protection records: about an hour.

Your rights and choices

Access, correction and deletion: email care.karinivastra@gmail.com and we will help. You can also edit or delete saved addresses yourself in your account.
Close your account at any time from Account → Settings.
Stop the news and offers at any time: the unsubscribe link in any of those emails, Account → Settings, or the form below.
You can nominate someone to exercise your rights for you if you are unable to, and you may complain to us (see below) or to the relevant data protection authority.

Security

The site uses encrypted connections (HTTPS). Access to customer data is restricted by database access rules, and staff access is protected. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.

Children

Our store is intended for adults. We do not knowingly collect personal data from children. If you believe a child has given us their details, please contact us and we will delete them.

Complaints and grievances

Grievance officer: MADHURI, Proprietor.

Email: karinivastra@gmail.com · Phone: 7288011028.

We acknowledge complaints within 48 hours and aim to resolve them within one month of receiving them.

Additional information from Karini Vastra

At Karini Vastra, we respect your privacy and are committed to protecting your personal information.

* We collect details such as your name, phone number, email address, and delivery address only for order processing and communication. * Your information is used to process orders, arrange delivery, provide customer support, and share important order updates. * We do not sell or share your personal information with third parties, except trusted service providers required for payment, shipping, or order fulfilment. * Payment details are processed securely through our payment partners and are not stored by us. * By placing an order, you agree to this Privacy Policy.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.