Privacy Policy

A LEGAL DISCLAIMER

AT A GLANCE
We collect what's needed to take your order, ship your candles, and keep the Site running — things like your name, address, and payment details (handled securely by Razorpay). We use Google Analytics and ad pixels (Meta/Google) to understand and improve the Site, and we only send marketing emails if you opt in. We never sell your data. Full details, your rights, and how to reach us are below.

Koreeh ("Koreeh," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website www.koreeh.com (the "Site") and purchase our candles and related products (the "Services"). This Privacy Policy explains what personal data we collect, how we use and protect it, who we share it with, and the choices and rights available to you.
This Policy is framed in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act). By accessing or using the Site, you agree to the collection and use of information in accordance with this Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our Site, you may voluntarily provide us with certain personal data. This includes contact and account details such as your name, email address, phone number, and password, if you choose to create an account. It also includes billing and shipping information, such as your address, city, state, PIN code, and country, which we need to deliver your order, as well as order details like the products purchased, order value, order history, gift notes, and delivery preferences. When you check out, your payment information is processed via our payment partner Razorpay, and we do not store your full card, UPI, or net-banking credentials on our servers (see Section 4). If you write to us through our contact form, email, or live chat/chatbot, we collect the content of that communication and any details you choose to share while seeking support. If you opt in to our newsletter via the checkbox at checkout or on a sign-up form, we collect your email address and marketing preferences. Finally, if you submit a product review, testimonial, or survey response, we collect that feedback as well.

1.2 Information Collected Automatically

We also collect certain information automatically as you browse the Site. This includes device and usage data, such as your IP address, browser type, device type, operating system, referring URLs, pages viewed, and time spent on the Site, which we collect via Google Analytics. We use cookies and similar technologies to remember your preferences, keep items in your cart, and understand how you use the Site, as described further in Section 6. Through Facebook Pixel and Google Ads tags, we also collect advertising identifiers that help us measure and deliver relevant advertising, which may involve cookies or device identifiers being shared with those platforms. If you use our live chat/chatbot widget, we and our chat service provider may collect your name, contact details, and the content of your conversation in order to respond to your query.

1.3 Information from Third Parties

We may receive limited information from our service providers (such as Razorpay, shipping/courier partners, and email/analytics platforms) about the status of a transaction, delivery, or campaign engagement, which we use solely to operate and improve our Services.

2. How We Use Your Information

We use the personal data described above to process, fulfil, and deliver your orders, including payment processing and shipment tracking, and to create and manage your account and communicate with you about orders, returns, and refunds. We also use it to respond to customer service requests, questions, or complaints, including via live chat, and, where you have opted in, to send you marketing emails, offers, and updates about new candle collections; you may unsubscribe from these at any time. In addition, we use Google Analytics to analyse Site traffic and usage patterns so that we can improve our product range, content, and user experience, and we use platforms such as Meta (Facebook/Instagram) and Google Ads to run and measure the performance of our advertising campaigns. Finally, we use personal data to detect, investigate, and prevent fraud, unauthorised transactions, and misuse of the Site, and to comply with applicable law, regulatory requirements, and lawful requests from government or judicial authorities.

3. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the basis of your consent (for example, when you place an order, create an account, or opt in to marketing), the performance of our contract with you (fulfilling and delivering your order), our legal obligations (such as tax and consumer-protection record-keeping), and, where permitted by law, our legitimate uses, such as fraud prevention and Site security.

4. Payment Processing

All payments made on the Site are processed through Razorpay, a PCI-DSS compliant third-party payment gateway. When you make a payment, your card, UPI, net-banking, or wallet details are transmitted directly to Razorpay through a secure, encrypted connection. Koreeh does not collect, view, or store your full payment credentials on its own servers. Razorpay's use of your data is governed by its own privacy policy, and we encourage you to review it.

5. Sharing and Disclosure of Information

We do not sell your personal data. We share it only where necessary to run our business and provide our Services. This includes sharing with Razorpay to process your payments, and with courier and delivery partners to fulfil and deliver your orders. We also share aggregated usage data with Google Analytics to help us understand Site usage and improve our Services, and we work with Meta (Facebook/Instagram) and Google Ads, which may use cookies or device identifiers, to deliver and measure targeted advertising. If you have opted in to our newsletter, your details are shared with our email marketing platform to send you marketing communications, and if you use our chat widget, your details are shared with our chatbot/live-chat software provider to enable real-time customer support. We may also disclose personal data where required to comply with a law, regulation, court order, or valid governmental request, or to protect the rights, property, or safety of Koreeh, our customers, or others, and if Koreeh is ever involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to confidentiality obligations.

Some of our third-party service providers (such as Google, Meta, and certain analytics or email platforms) may process or store data on servers located outside India. Where this occurs, we take reasonable steps to ensure such providers maintain adequate data protection standards.

6. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies, such as pixels and local storage, for a few different purposes. Essential cookies enable core Site functionality, such as your shopping cart and checkout process, while analytics cookies, via Google Analytics, help us measure Site traffic and user behaviour in aggregate. Advertising cookies, via Facebook Pixel and Google Ads, allow us to show you relevant ads on and off our Site and measure their effectiveness.
Most web browsers allow you to control cookies through their settings, including blocking or deleting them. Please note that disabling certain cookies may affect the functionality of the Site, such as your ability to complete a purchase. We do not currently display a dedicated cookie-consent banner; by continuing to use the Site, you consent to our use of cookies as described in this Policy. We may introduce a cookie consent mechanism in the future, particularly if we expand to serve customers in regions requiring one.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy. Order and transaction records are retained for the period required under applicable tax, accounting, and consumer-protection laws in India, while account information is retained for as long as your account remains active, or until you request deletion. Marketing data is retained until you unsubscribe or withdraw consent, and chat and support records are kept for a reasonable period to resolve your query and maintain service quality. Once data is no longer required, we securely delete, anonymise, or archive it in accordance with applicable law.

8. Data Security

We implement reasonable security practices and procedures, consistent with the IT (Reasonable Security Practices) Rules, 2011, including encryption of data in transit (SSL/TLS), restricted access to personal data on a need-to-know basis, secure payment processing through a PCI-DSS compliant gateway, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

As a data principal under the DPDP Act, 2023, and subject to applicable law, you have the right to access the personal data we hold about you and obtain a summary of how it is being processed, and to correct or update inaccurate or incomplete personal data. You may withdraw consent at any time, including by unsubscribing from marketing emails using the link in any such email, and you may request erasure of your personal data, subject to our legitimate need to retain certain records, for example for legal, tax, or fraud-prevention purposes. You also have the right to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, and to register a complaint regarding the processing of your personal data with our Grievance Officer (see Section 12), and thereafter with the Data Protection Board of India, where applicable.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before acting on your request.

10. Children's Privacy

Koreeh does not knowingly collect personal data from children under the age of 18. Our Services are intended for use by adults capable of entering into a binding contract under Indian law. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete such information promptly.

11. Third-Party Links

Our Site may contain links to third-party websites, including social media platforms and payment providers. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their respective privacy policies before providing any personal data.

12. Grievance Officer & Contact Us

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, the details of our Grievance Officer are provided below. If you have any questions, concerns, or complaints about this Privacy Policy or how your personal data is handled, please contact:

Business Name: Koreeh
Grievance Officer: Customer Support Team, Koreeh
Address: Koreeh, Saraswati Masion, 3rd floor, Yendada, Visakhapatnam, India
Instagram: @koreeh_official
Website: www.koreeh.com

We aim to acknowledge and resolve grievances in accordance with the timelines prescribed under applicable Indian law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be indicated by a revised "Effective Date" at the top of this page. We encourage you to review this Policy periodically. Continued use of the Site after any changes constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please message @koreeh_official on Instagram or via the address listed in Section 12.