01 — Overview
Our Commitment to Your Privacy
At Kiviro, we believe that the trust you place in us when you shop for your child is as precious as the garments we make. This Privacy Policy explains how Kiviro ("we," "our," or "us") collects, uses, and protects your personal information when you visit kiviro.in or make a purchase with us.
We operate under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, along with other applicable Indian data protection laws.
By using our website or placing an order, you consent to the practices described in this Privacy Policy. We encourage you to read it carefully.
We do not sell, rent, or trade your personal information. Our goal is simple: to use your data only to give you the best possible shopping experience and keep you informed about Kiviro.
02 — Information We Collect
What We Collect & Why
We collect information in the following ways:
| Category | Examples | When Collected |
|---|---|---|
| Identity & Contact | Name, email address, phone number, shipping & billing address | When you create an account or place an order |
| Transaction Data | Order history, products purchased, payment method type (not full card details) | At checkout |
| Account Data | Username, password (encrypted), saved addresses, wish lists | When you register an account |
| Usage & Device Data | IP address, browser type, pages visited, time spent, referring URLs | Automatically via cookies and analytics |
| Communications | Customer service enquiries, gift messages, personalisation requests | When you contact us |
| Marketing Preferences | Newsletter subscription, communication preferences | When you sign up to the Kiviro Circle |
We never collect sensitive personal data such as financial account numbers, national identification numbers, or health information. Payment processing is handled entirely by our secure, PCI-DSS-compliant payment partners — your full card details are never stored on our servers.
03 — How We Use Your Information
Purposes of Processing
We use the information we collect for clearly defined, legitimate purposes:
- Order fulfilment: Processing, packaging, and shipping your orders; sending order confirmations, dispatch notifications, and delivery updates.
- Customer support: Responding to your queries, managing returns, refunds, and exchanges in accordance with our policies.
- Account management: Maintaining your account, enabling order history access, and managing your saved preferences.
- Marketing communications: Sending newsletters, new arrivals, and exclusive offers to subscribers who have opted in. You may unsubscribe at any time.
- Personalisation: Improving your browsing experience, recommending relevant products, and tailoring our communications to your preferences.
- Site improvement: Analysing usage data to enhance the website, fix issues, and develop new features.
- Legal obligations: Complying with applicable laws, regulations, and lawful requests from authorities.
- Fraud prevention: Detecting, investigating, and preventing fraudulent transactions and other illegal activities.
We will not use your data for any purpose that is incompatible with the reasons stated above without first notifying you and, where required, obtaining your consent.
04 — Sharing Your Information
Who We Share Data With
Kiviro does not sell or rent your personal information to third parties. We share your data only with trusted service providers who help us run our business, strictly for the purposes described in this policy:
- Shopify Inc.: Our e-commerce platform provider, which hosts our store and processes orders. Shopify's own privacy practices apply to data processed on their infrastructure.
- Payment processors: Secure, RBI-compliant payment gateways (such as Razorpay or similar) that handle your payment transactions.
- Logistics partners: Courier and shipping companies to whom we share your name, address, and contact number solely for the purpose of delivering your order.
- Email & marketing tools: Email service providers used to send order confirmations and, with your consent, marketing communications.
- Analytics providers: Tools such as Google Analytics that help us understand how visitors use our site (data is anonymised or pseudonymised).
All third-party providers are contractually obligated to process your data securely and only for the specific purposes we have authorised.
We may disclose your information if required to do so by law, court order, or government authority, or if we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.
In the event of a business transfer, merger, or acquisition, your data may be transferred to the acquiring entity. We will notify you via email and a prominent website notice before your data is transferred and becomes subject to a different privacy policy.
05 — Cookies & Tracking
Cookies & Similar Technologies
We use cookies and similar tracking technologies to enhance your experience on kiviro.in. Cookies are small text files stored on your device that help our website function correctly and allow us to understand how you use our site.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for the website to function — shopping cart, session management, secure login | Session / up to 1 year |
| Functional | Remembers your preferences such as saved addresses and language | Up to 1 year |
| Analytics | Collects anonymised data about how visitors use our site to help us improve it | Up to 2 years |
| Marketing | Tracks visits to deliver relevant ads and measure campaign effectiveness (only with consent) | Up to 90 days |
You can control or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.
06 — Data Retention
How Long We Keep Your Data
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.
- Order and transaction records: Retained for a minimum of 7 years to comply with Indian tax and accounting laws.
- Customer accounts: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is legally required.
- Marketing data: Retained until you withdraw consent or unsubscribe, after which data is deleted within 30 days.
- Support communications: Retained for up to 3 years after resolution to assist with future queries.
- Analytics data: Retained in anonymised or aggregated form and may be kept indefinitely for trend analysis.
When your data is no longer required, we ensure it is securely deleted or anonymised.
07 — Security
How We Protect Your Information
We take the security of your personal information seriously and implement technical and organisational measures designed to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our website (HTTPS)
- Secure, encrypted storage of passwords and sensitive data
- Access controls ensuring only authorised Kiviro personnel can access customer data
- Regular security reviews and updates to our systems
- Use of Shopify's enterprise-grade security infrastructure
- PCI-DSS compliant payment processing — we never store full card details
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
08 — Your Rights
Your Data Rights
You have the following rights with respect to your personal information. To exercise any of these rights, please contact us at the details provided in Section 10.
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Correction: Request that we correct inaccurate or incomplete personal information.
- Right to Deletion: Request that we delete your personal data, subject to our legal retention obligations.
- Right to Object: Object to the processing of your data for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on consent (e.g. marketing emails), withdraw your consent at any time without affecting prior processing.
- Right to Data Portability: Request your data in a commonly used, machine-readable format.
We will respond to all legitimate requests within 30 days. In some cases, we may need to verify your identity before processing your request. There is no charge for exercising your rights in most circumstances.
If you believe your data has been processed unlawfully or that your rights have not been respected, you have the right to lodge a complaint with the appropriate authority under Indian law.
09 — Children's Privacy
A Note on Children
Our products are designed for children — but our website and services are intended solely for adults. Kiviro does not knowingly collect personal information directly from children under the age of 18.
When you provide personal information in connection with a purchase for a child (such as a delivery address or gift message), that information is used only to fulfil your order and is treated with the same care and protections described in this policy.
If you believe a child under 18 has provided us with personal information without parental consent, please contact us immediately and we will take steps to remove the information.
10 — Contact
Get in Touch
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, we are here to help.
Kiviro — Privacy & Data
Email: hello@kiviro.in
Website: kiviro.in/pages/contact
Instagram: @shopkiviro
Phone: +91 8197968767. We aim to respond to all privacy-related enquiries within 5 business days.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.