Privacy policy

Last Updated: May 23, 2025

1. Introduction

At mykotwal.com (“we”, “us”, “our”), your privacy is paramount. This Policy explains how we collect, process, store, disclose and safeguard your Personal Data in accordance with Indian law, including the SPDI Rules and the DPDPA-2023.

2. Definitions

• Personal Data: Any data by which an individual can be identified (e.g., name, email).
• Sensitive Personal Data or Information (SPDI): Passwords, financial information, health data, biometric data, etc.
• Data Fiduciary: Any person or entity determining purpose and means of processing.
• Data Principal: The individual to whom the Personal Data relates.

3. Information We Collect

• Personal Data you provide directly: Name, email address, phone number, billing/shipping address.
• Payment Data (if you make purchases): credit/debit card details, UPI IDs.
• SPDI: Only if necessary (e.g., medical info for specialised services).
• Technical & Usage Data: IP address, browser type, device identifiers, pages visited, referral URLs—collected via cookies and similar technologies.

4. Purpose of Collection & Legal Basis

We process your data to:

• Perform contracts with you (order fulfilment, payments).
• Comply with legal obligations under Indian law (e.g., tax records).
• Legitimate interests (website performance analytics, fraud prevention).
• Consent (sending marketing communications)—you can withdraw at any time.

5. Disclosure of Your Data

• Service Providers (payment processors, logistics partners, analytics providers) under confidentiality agreements.
• Legal Authorities when required by court order, law enforcement or to exercise/defend legal claims.
• Business Transfers: in connection with a merger, acquisition, or sale of assets.

6. Data Security

• Encryption of sensitive data in transit and at rest.
• Network firewalls, intrusion detection systems.
• Regular security audits and employee training.

7. Data Retention

Personal Data is retained only as long as necessary to fulfil purposes stated here or to meet legal obligations. SPDI must not be retained beyond the period required for the original purpose, unless otherwise mandated by law.

8. Your Rights

Under the DPDPA-2023 you have the right to:

• Access your Personal Data.
• Rectify inaccurate or incomplete data.
• Withdraw consent at any time (where processing is consent-based).
• Erasure (“right to be forgotten”), subject to legal exceptions.
• Data portability (receive your data in a structured, machine-readable format).

To exercise these rights, please contact our Grievance Officer at contact@mykotwal.com. We’ll acknowledge within 7 days and resolve within 30 days per the SPDI Rules.

9. Cookies & Tracking Technologies

• Improve user experience (e.g., “remember me”).
• Analyze site traffic and performance.

You may disable cookies via your browser, but this may affect site functionality.

10. Children’s Privacy

Our website is intended for users aged 18+. We do not knowingly collect data from minors. If you believe we have, please contact us for deletion.

11. Changes to This Policy

We may update this Policy to reflect changes in law or business practices. The “Last Updated” date will indicate when changes were made.

12. Contact Us

Grievance Officer: Hemant Kotwal
Email:contact@mykotwal.com
Address: Vijay Stambh Siddharth Nagar, Shirpur, Dist. Dhule, MH, 425405, IN.