Privacy Policy

Last updated: August 12, 2025 (Asia/Kathmandu)

1. Scope

This Privacy Policy describes how we collect, use, disclose and protect personal data when you visit our website, place orders (including custom/made-to-order items), or contact our support (collectively, the “Services”).

2. Data We Collect

• Identity & Contact Data: name, phone numbers, email address, delivery/billing addresses, organization (if any).
• Account Data: login identifier, hashed password, preferences, wishlist, support history.
• Order & Transaction Data: items purchased, pricing, VAT, order notes, delivery instructions, service interactions. For payments we receive status references from payment providers (we do not store full card/bank credentials).
• Customization Materials: artwork, text, photos, logos, specifications and approvals that you upload or provide for production.
• Device & Usage Data: log data, IP address, browser type/version, pages viewed, timestamps, referral URLs, and basic analytics (cookies or similar technologies).
• Communications: messages, recordings or transcripts of your communications with us where permitted by law (e.g., email/SMS/support).

3. Sources of Data

We collect data directly from you; automatically from your device/browser; and from third parties such as payment providers, delivery/courier partners, fraud-prevention and analytics providers where applicable.

4. Purposes of Processing

• Provide, operate and improve the Services and our website.
• Process and fulfil orders; produce custom items; arrange delivery and returns.
• Handle customer support, warranties and defect claims.
• Send transactional notices (order confirmations, shipping updates, invoices).
• Comply with legal, tax and accounting obligations; prevent fraud and abuse.
• With your consent, send marketing communications you can opt out of at any time.

5. Legal Bases

We process personal data where necessary to perform a contract with you or to take steps at your request; to comply with legal obligations (e.g., tax/VAT records); for our legitimate interests (e.g., securing our Services, preventing fraud, improving quality) provided those interests are not overridden by your rights; and with your consent where required (e.g., certain marketing or cookies).

6. Cookies & Similar Technologies

We use essential cookies to enable core functionality (e.g., cart, checkout, security). Optional performance/analytics cookies may help us understand site usage. You can control cookies through your browser settings; disabling essential cookies may break the site. If we deploy analytics or advertising cookies, we will disclose them in a cookie banner or settings panel.

7. Disclosures to Third Parties

We disclose personal data only as necessary for the purposes above, including to:

• Payment processors: e.g., eSewa, Khalti, banking partners (for COD reconciliation or bank transfers).
• Logistics/courier partners: to deliver, collect returns or handle warranty pickup.
• IT/Hosting/Support providers: website hosting, security, email/SMS services, backup and analytics (if enabled).
• Professional advisers & authorities: auditors, accountants, lawyers, courts or regulators where legally required.

We do not sell personal data.

8. International Transfers

Our providers may operate servers outside Nepal. Where data is transferred internationally, we take appropriate safeguards consistent with applicable law (e.g., contractual protections) and require service providers to implement reasonable security measures.

9. Data Retention

We keep personal data for as long as necessary to fulfil the purposes described above, including to comply with legal, accounting and tax requirements, resolve disputes and enforce agreements. Typical retention: order and invoice records for the period required by applicable tax/accounting laws; support records for operational needs; and marketing data until you opt out or your consent is withdrawn.

10. Security

We implement reasonable technical and organizational measures to protect personal data (access controls, encryption in transit where applicable, least-privilege access, backups). No method of transmission or storage is 100% secure; residual risk remains.

11. Your Rights

Subject to applicable law, you may have rights to access, rectify, update, delete or receive a copy of your personal data; object to or restrict processing; and withdraw consent where processing is based on consent. To exercise these rights, contact admin@kraftbasket.com. We will verify your identity and respond within a reasonable time.

12. Children’s Privacy

The site may be used by persons aged 6+. Purchases by individuals under 18 require the involvement and consent of a parent or legal guardian. We do not knowingly solicit personal data from children without such consent.

13. User-Provided Content for Custom Work

If you upload or provide artwork, photos, logos or text for customization, you must ensure you have the rights to use that content. Such materials may be retained with the order record for quality, warranty and legal compliance purposes.

14. Communications Preferences

We send transactional communications related to your orders or account. Marketing emails/SMS are sent with your consent or as permitted by law; you may opt out via the link or instructions in the message, or by contacting us.

15. Third-Party Links

Our website may contain links to third-party sites. Those sites have their own privacy practices. We are not responsible for their content or policies.

16. Changes to this Policy

We may amend this Policy by posting a revised version with a new “Last updated” date. Your continued use of the Services after the effective date constitutes acceptance of the changes.

17. Contact

For questions or requests concerning this Policy or your personal data, contact admin@kraftbasket.com or call 056-510845 / 9767467642.