Last updated: 1 January 2026

At Kalakari Crafts ("we", "our", or "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains in detail what information we collect, how and why we use it, who we share it with, how long we keep it, how we protect it, and the rights and choices available to you. It applies to our website, our online and offline services, and any other interaction you have with us.

Please read this policy carefully. By using our website or providing us with your information, you acknowledge that you have read and understood the practices described here. If you do not agree with this policy, please do not use our website or services.

1. Who We Are and Scope

Kalakari Crafts is the "data controller" (or "data fiduciary") responsible for the personal information collected through our website and services. This policy covers personal information about our customers, prospective customers, website visitors, and others who interact with us. Where we link to or use third-party services, those services have their own privacy policies, and this policy does not apply to them.

2. Information We Collect

We collect personal information in three ways: information you give us directly, information we collect automatically, and information we receive from third parties.

(a) Information you provide to us — for example when you make an enquiry, request a quote, book or order, create an account, leave a review, subscribe to communications, or contact us. This may include:

• Identity and contact details — your name, email address, telephone number, postal or billing address, and (where relevant) date of birth.
• Account information — your login credentials and account preferences, where you create an account.
• Transaction information — details of the products or services you enquire about, book or purchase, and related correspondence.
• Payment information — payment is handled by our payment providers; we receive confirmation of payment and limited details, but we do not store your full card number.
• Communications and preferences — the content of messages you send us, your contact preferences, marketing consents, and any notes or special requests you choose to share.

(b) Information we collect automatically when you visit our website, through cookies and similar technologies (see section 5):

• Device and technical data — your IP address, device type and identifiers, browser type and version, operating system, and language settings.
• Usage data — the pages you view, links you click, time spent on the site, the website you came from, and the dates and times of your visits.
• Approximate location — a general location derived from your IP address.

(c) Information from third parties — such as our payment processors, analytics providers, advertising partners, and, if you choose to connect them, social media platforms.

3. How We Use Your Information

We use your personal information for the following purposes:

• to respond to your enquiries, provide quotes, and deliver the products and services you request;
• to manage your bookings, orders, account and payments, and to send confirmations, reminders and service updates;
• to personalise your experience and recommend relevant products or services;
• to send you marketing communications, where you have given your consent or where otherwise permitted by law, and to measure their effectiveness;
• to operate, analyse, maintain and improve our website, products and services;
• to protect our website, prevent fraud and misuse, and ensure security;
• to comply with our legal, tax, accounting and regulatory obligations; and
• to establish, exercise or defend legal claims where necessary.

4. Legal Bases for Processing

Where data protection law requires a legal basis, we rely on one or more of the following: performance of a contract with you (for example, to fulfil a booking or order); your consent (for example, to send you marketing or to set non-essential cookies), which you may withdraw at any time; our legitimate interests in operating and improving our business, provided these are not overridden by your rights; and compliance with a legal obligation. Where we rely on consent or legitimate interests, you have the rights described in section 9.

5. Cookies and Similar Technologies

Cookies are small text files stored on your device that help websites function and provide information to their owners. We use the following categories of cookies and similar technologies:

• Strictly necessary cookies — required for the website to work, such as keeping you logged in or remembering items in a cart. These cannot be switched off.
• Performance and analytics cookies — help us understand how visitors use our site so we can improve it. They collect information in an aggregated way.
• Functional cookies — remember your choices and preferences to give you a better experience.
• Marketing and advertising cookies — used, with your consent, to deliver relevant advertising and measure campaigns.

You can manage your preferences through any cookie banner we provide and through your browser settings. Disabling certain cookies may affect how the website works.

6. How and Why We Share Your Information

We do not sell your personal information. We share it only as necessary, with the following categories of recipients:

• Service providers who help us operate, such as website hosting, payment processing, email and communications, customer support, delivery and logistics, and analytics. They may only use your information to provide services to us and must keep it secure.
• Professional advisers such as accountants, auditors and lawyers, where necessary.
• Authorities and regulators where we are required to disclose information by law, or to protect our rights, property, or the safety of others.
• A successor business in the event of a merger, acquisition or sale of assets, subject to this policy.
• Other parties where you have given us your consent to do so.

7. International Data Transfers

Some of our service providers may be located outside your country, which can mean your information is transferred internationally. Where this happens, we take steps to ensure your information continues to be protected to an appropriate standard, including through the use of recognised safeguards such as contractual protections.

8. Data Retention

We keep your personal information only for as long as necessary for the purposes set out in this policy, and then securely delete or anonymise it. In general:

• Transaction and accounting records are kept for the period required by tax and accounting law.
• Account and customer-relationship data is kept while your account is active and for a reasonable period afterwards.
• Marketing consent records are kept until you withdraw consent, and for a short period thereafter as proof of your preferences.
• Enquiry and support correspondence is kept for a reasonable period to handle follow-up queries.

9. Your Privacy Rights

Depending on where you live and the applicable law, you may have some or all of the following rights in relation to your personal information:

• Access — to request a copy of the information we hold about you;
• Correction — to ask us to correct inaccurate or incomplete information;
• Erasure — to ask us to delete your information in certain circumstances;
• Restriction and objection — to ask us to restrict, or to object to, certain processing, including direct marketing;
• Portability — to receive certain information in a portable, machine-readable format;
• Withdraw consent — at any time, where we rely on your consent; and
• Not be subject to a decision based solely on automated processing that has a significant effect on you.

To exercise any of these rights, please contact us using the details in section 13. We will respond within the timeframe required by law. You also have the right to complain to your local data protection authority if you are unhappy with how we have handled your information.

10. Marketing Communications

Where you have opted in, we may send you news, offers and updates. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not affect service-related messages, such as booking confirmations, which we need to send to provide our services.

11. Third-Party Links

Our website may contain links to other websites and services that we do not control. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies before providing any information.

12. Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to This Policy and How to Contact Us

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. The current version will always be posted here with a revised "last updated" date, and we will draw your attention to significant changes where appropriate.

If you have any questions, requests, or concerns about this policy or your personal information — including to exercise your rights or to reach our Grievance/Privacy Officer where one is required by law — please contact Kalakari Crafts using the details on our Contact page. We take your privacy seriously and will respond as promptly as we can.