Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Koffista (operating as Koffista or “We,” “Us,” or “Our”) collects, uses, and shares the personal information of users (“You”) who access our website at www.koffista.com and purchase our products.

By using our Service, you agree to the collection and use of information in accordance with this policy. Our registered office is located in Mumbai, India, and this policy is governed by the laws of India, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.

2. Information We Collect

We collect several types of information for various purposes to provide and improve our Service.

We collect Personal Identifiable Information (PII) that you directly provide to us, including your Name, Email Address, Shipping Address, and Phone Number. This data is essential for processing, fulfilling, and delivering your coffee orders, managing your account, and providing customer support.

We also collect Transaction Data, which includes details of the products purchased, order value, and date of transaction. This is necessary for managing orders, handling refunds, and maintaining sales records for legal and tax compliance.

Finally, we automatically collect Automatically Collected Data, such as your IP Address, Browser Type, Device Information, operating system, and data collected via Cookies (see Section 5). This data is used for website diagnostics, security, improving user experience, and analyzing site usage via Google Analytics.

Crucial Payment Gateway Clarification: We do not store or process your credit card, debit card, or other sensitive financial details. All payment transactions are handled by secure, PCI-DSS compliant third-party payment gateways (e.g., Razorpay, PayU, etc.). The collection and processing of your financial data are governed by the respective payment gateway’s privacy policy.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

3. How We Use Your Data

The information we collect is used in the following specific ways:

  • To Process and Fulfill your orders for coffee and related products.
  • To Communicate with you regarding your orders, shipping status, and customer service inquiries.
  • To Improve our products, services, and website functionality based on aggregated analytics.
  • For Legal Compliance, Fraud Prevention, and Security to protect our website and users.
  • To send you Marketing and Promotional Communications (newsletters, special offers) only where you have given your explicit consent. You can opt-out at any time via the unsubscribe link in the emails.

4. Sharing and Disclosure of Data

We share your personal information only with the following third parties and strictly for the purposes described:

  • Logistics/Shipping Partners: We share your Name, Shipping Address, and Phone Number with courier companies solely for the purpose of order delivery.
  • Payment Gateways: To facilitate the processing of payments for your purchases.
  • Analytics Providers: We use third-party tools, such as Google Analytics, to help us analyze website usage. This data is typically anonymized or aggregated.
  • Legal Requirements: We may disclose your Personal Data if required by law or governmental authorities (e.g., Police, tax authorities, or pursuant to a court order).

5. Cookies Policy

We use “cookies” and similar tracking technologies. Cookies are small text files stored on your device. We use them for essential website functions (like keeping items in your shopping cart) and for performance and analytics (to see how visitors use the site). You can instruct your browser to refuse all cookies. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Your Rights (As a Data Principal under Indian Law)

As per the Digital Personal Data Protection Act, 2023, and other applicable Indian laws, you have the following rights:

  • Right to Access: The right to request a summary of the personal data we hold about you.
  • Right to Correction: The right to request that we correct any inaccurate or incomplete data.
  • Right to Erasure (Deletion): The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
  • Right to Withdraw Consent: The right to withdraw your consent for us to process your data for specific purposes (like marketing) at any time.

7. Grievance Officer and Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our designated Grievance Officer:

Response Timeline: We aim to resolve all complaints within 30 days of receipt.

Grievance Officer Name: Saima Khan

Grievance Officer Email: [email protected]