Privacy & Data Protection Policy

The digital commerce domain https://kashitvam.com (including all allied checkout engines and communication vectors) is operated exclusively by M/s. Rocklike Infratech (Udyam: UDYAM-UP-75-0129955, GSTIN: 09ACDPP1828L1ZA), maintaining registered operational facilities at Arazi N. 461, Dafi, BHU Road, Varanasi-221011, Uttar Pradesh, India (hereinafter designated as “Kashitvam”, “Data Fiduciary”, “We”, “Us”, or “Our”).

We recognize that devotees and patrons acquiring sacred Vedic essentials, Yajnopavita threads, botanical tilaks, and sanctified rosaries place sacred trust in our custodial purity and ethical integrity. This Privacy Charter governs our institutional duty of care regarding the collection, transmission, processing, custodial archiving, and deletion of personal identifiable information (PII).

In accordance with the SPDI Rules, 2011 and the DPDP Act, 2023, data processed by Kashitvam is categorized into distinct transactional classes:

Kashitvam operates under a strict **Zero Financial Data Footprint Architecture**:

Transactions executed via Razorpay, Cashfree, PhonePe, Paytm, or allied certified payment switches are governed directly by the respective aggregator’s security controls and RBI directives. Kashitvam receives solely a tokenized transaction receipt containing the unique Gateway Payment ID, timestamp, and authorization status (Success/Failure) to generate the commercial GST invoice.

Personal identifiable information is utilized exclusively for legitimate fulfillment operations under the doctrine of Purpose Specification:

• Order Fulfillment & Invoicing: Generating statutory tax invoices, packaging slips, and packing manifests compliant with the CGST Act, 2017.
• Third-Party Carrier Disclosures: We disclose only the recipient’s name, destination shipping address, and contact number to authorized courier aggregators and carriers (Delhivery, Blue Dart, DTDC, Xpressbees, India Post) solely to facilitate doorstep parcel transit and OTP delivery verification.
• Operational Notifications: Dispatch alerts, Air Waybill (AWB) tracking URLs, and critical order status communications delivered via Hostinger SMTP transactional email or transactional SMS/WhatsApp gateways.
• Non-Commercialization Pledge: Kashitvam does not sell, rent, monetize, barter, or distribute customer lists or user information to third-party telemarketing networks, advertising syndicates, or external data brokers.

Our portal utilizes first-party and restricted third-party cookies to ensure functional stability, navigation security, and performance optimization:

• Essential Cookies: Required for the core operation of WooCommerce (maintaining items in the shopping cart across page requests, user authentication sessions, and CSRF token defenses).
• Analytics & Performance Cookies: Aggregate, anonymized usage telemetry (such as bounce rates and page load speeds) deployed through Google Analytics to optimize page performance without storing unmasked IP addresses.
• Cookie Management: Users maintain full autonomy to restrict, disable, or delete cookies via browser settings. Please note that disabling essential cookies may impair checkout functionality.

• Custodial Storage Period: Transactional order data (invoices, customer names, addresses) is archived for eight (8) statutory financial years in strict compliance with Section 44 of the Central Goods and Services Tax Act, 2017 and the Companies Act, 2013 for tax auditing purposes. Non-transactional session tokens are purged systematically every thirty (30) days.
• Reasonable Security Practices (Section 43A IT Act): Our hosting infrastructure operates behind enterprise firewalls, SSL/TLS cryptographic protocols, brute-force mitigation defenses, and restricted access protocols limited to authorized personnel.
• Data Principal Rights (DPDP Act, 2023): You possess the lawful right to request confirmation of data processing, request correction of inaccurate records, or seek deletion of non-transactional marketing profiles by writing to our compliance desk at care@kashitvam.com.

In accordance with Section 5(9) of the Digital Personal Data Protection Act, 2023 and Rule 5(2) of the Consumer Protection (E-Commerce) Rules, 2020, our designated Grievance & Compliance Authority is identified below:

This Privacy Charter, data protection covenants, and all allied disputes arising from digital information handling shall be governed by, interpreted, and construed exclusively under the substantive laws of India.