Privacy Policy

Known Click Technologies Private Limited (“KCT”, “we”, “us”, “our”) operates the brand MiniVelvet and the website minivelvet.com (the “Site”). This Privacy Policy explains how we collect, use, share, store, and protect your personal data, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and other applicable Indian law.

By using the Site, placing an order, creating an account, or interacting with our brand on third-party platforms (such as WhatsApp, Instagram, or Facebook), you consent to this Privacy Policy. If you do not agree, please do not use the Site or our services.

1. Data Fiduciary

For the purpose of the DPDP Act, the Data Fiduciary is Known Click Technologies Private Limited, with registered office at SF-203, Sayam Sapphire, Opposite Madhuban Resort, Karamsad, Anand, Gujarat 388325, India.

2. What we collect

We collect the following categories of personal data:

• Identity & contact data: name, mobile number, email, shipping and billing addresses.
• Order & transaction data: products ordered, prices, payment status, and invoice details.
• Account data: login OTPs, session identifiers, account preferences, and marketing-consent flags.
• Communication data: messages you exchange with us by email, WhatsApp, Instagram, Facebook, or phone.
• Device & technical data: IP address, device type, browser, operating system, referring URL, and timestamps — used for security, fraud prevention, and Site reliability.
• Order activity: items added to your cart and your purchases — used to fulfil orders and improve our products.

3. How we use your data

• To process and fulfil your orders, ship products, and issue GST tax invoices.
• To provide customer support across email, WhatsApp, Instagram, and phone.
• To send transactional messages (OTPs, order confirmations, shipping and delivery updates, refund alerts) via SMS, email, and WhatsApp.
• To send marketing communications about offers and launches — only where you have opted in, with the ability to opt out at any time.
• To prevent fraud and abuse, and to enforce our Terms.
• To comply with applicable Indian law, including tax, accounting, and consumer-protection obligations.

4. Lawful basis for processing

We process your personal data on one or more of the following bases recognised under the DPDP Act and Indian law: your consent; performance of the contract between you and us (your order); compliance with a legal obligation; or our legitimate uses (security, fraud prevention, and Site improvement) where these do not override your rights.

5. Sharing with third-party processors

We share the minimum personal data necessary with processors and partners, each bound by data-protection obligations:

• Razorpay Software Pvt Ltd — payment processing for UPI, cards, net banking, and wallets. We do not store full payment-instrument details on our servers.
• Shiprocket and integrated couriers (Delhivery, BlueDart, and others) — shipping, last-mile delivery, and reverse pickup.
• SMS / WhatsApp messaging provider — OTP and transactional message delivery.
• Meta Platforms, Inc. (WhatsApp, Instagram, Facebook) — WhatsApp delivery of OTP and transactional messages, and any messages you send us on these channels (processed by Meta under its own terms).
• Hosting and infrastructure providers — for transactional email delivery, content delivery, and hosting.
• Professional advisors and authorities — auditors, legal counsel, and tax/regulatory authorities, where required by law.

We do not sell or rent your personal data to anyone.

6. Cross-border transfers

Some processors (such as Meta) operate servers outside India. When personal data is transferred to them, we rely on the protections available under Indian law, including any restrictions or notifications issued by the Central Government under the DPDP Act, and the contractual safeguards imposed on those processors.

7. Marketing communications and WhatsApp

Transactional messages (OTPs, order, delivery, and refund updates) are sent via SMS, email, and WhatsApp because they are necessary to fulfil your order. Marketing messages are sent only with your opt-in consent. You may withdraw consent at any time by replying STOP on WhatsApp or SMS, using the unsubscribe link in any email, or writing to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Cookies and tracking

We use only strictly necessary cookies — they keep the Site working (your session, cart, and security) and cannot be switched off. We do not currently use analytics, advertising, or third-party tracking cookies or pixels. If that changes, we will update this policy and obtain your consent where the law requires it. You can manage cookies through your browser settings, though blocking the necessary cookies may stop parts of the Site working.

9. Data retention

Order, invoice, and tax records are retained for the period required by Indian tax, accounting, and consumer-protection law (typically eight years from the end of the relevant financial year). Account data is retained while your account is active and for a reasonable period thereafter, unless you request deletion. Marketing data is retained until you withdraw consent or after a period of inactivity, whichever is earlier.

10. Your rights under the DPDP Act, 2023

You have the right to:

• Obtain a summary of personal data we process about you;
• Correct or update inaccurate or incomplete data;
• Erase data that is no longer necessary, subject to legal-retention obligations;
• Withdraw consent for processing that is based on your consent;
• Nominate another person to exercise your rights in case of death or incapacity;
• Have your grievance redressed (see the Grievance Officer below).

To exercise any of these rights, write to our Grievance Officer or to [email protected]. We will respond within the timelines prescribed under the DPDP Act.

11. Children’s data

The Site is not directed at children under the age of 18, and we do not knowingly collect or process their personal data. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

12. Security

We implement reasonable technical and organisational safeguards — including encryption in transit (HTTPS), access controls, OTP-based authentication, and security monitoring — to protect your personal data. No system is completely secure, and we cannot guarantee absolute security against every threat.

13. Grievance Officer

In compliance with the DPDP Act, 2023, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer can be reached at:

• Name: Amit Goyal
• Designation: Director, Known Click Technologies Pvt Ltd
• Email: [email protected]
• Address: SF-203, Sayam Sapphire, Opposite Madhuban Resort, Karamsad, Anand, Gujarat 388325, India
• Hours: Mon–Sat, 10AM–7PM IST (excluding public holidays)

We will acknowledge your grievance within 48 hours and resolve it within 30 days, as required by law.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Continued use of the Site after any change constitutes acceptance of the revised policy.

15. Contact

For privacy questions, write to [email protected]. For formal grievances under the DPDP Act, contact the Grievance Officer above.