Privacy Policy

1. Introduction

Kholeshwari Fabric Pvt Ltd, operating under the brand name Turnberry Kids® ("we", "us", "our"), is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit www.turnberrykids.com, in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

2. Information We Collect

a) Personal Information

• Full name
• Email address
• Phone number
• Shipping and billing address
• Payment information (processed securely via payment gateways; we do not store complete card details)

b) Non-Personal Information

• Browser type and version
• Device type and operating system
• IP address
• Pages visited, time spent, and browsing patterns
• Referral source

3. How We Use Your Information

• To process and fulfill your orders
• To communicate order updates, shipping notifications, and customer support
• To personalise your shopping experience
• To send promotional communications (only with your explicit consent; you may opt out at any time)
• To improve our Website, products, and services
• To comply with legal obligations under Indian law
• To detect and prevent fraud or unauthorized transactions

4. Legal Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent: You provide explicit consent when placing an order or subscribing to communications.
• Legitimate Use: Processing necessary to fulfill a contract (e.g., delivering your order).
• Legal Obligation: Compliance with applicable Indian laws and regulations.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data with:

• Logistics Partners: To deliver your orders (e.g., courier services).
• Payment Processors: To securely process transactions.
• Analytics Providers: To understand Website usage (data is anonymised).
• Legal Authorities: When required by law, court order, or government regulation.

6. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your browsing experience. You can manage cookie preferences through your browser settings. Essential cookies required for Website functionality cannot be disabled.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Indian law. Order records are retained for a minimum of 8 years as per the Companies Act, 2013 and GST regulations.

8. Your Rights (Under DPDPA 2023)

As a data principal, you have the right to:

• Access: Request a summary of your personal data being processed.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Withdraw Consent: Withdraw consent for data processing at any time.
• Grievance Redressal: Lodge a complaint with our Grievance Officer.
• Nominate: Nominate another person to exercise your rights in case of death or incapacity.

9. Data Security

We implement industry-standard security measures including SSL encryption, secure payment gateways, access controls, and regular security audits to protect your personal data against unauthorized access, alteration, disclosure, or destruction, as mandated under the IT (Reasonable Security Practices) Rules, 2011.

10. Children's Privacy

Our Website sells children's clothing but is intended for use by adults (parents/guardians). We do not knowingly collect personal data from children under 18 years of age. If you believe a child has provided us with personal information, please contact us immediately.

11. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDPA 2023:

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the Website after changes constitutes acceptance of the updated policy.