Welcome to the Krushal website and/or mobile application (the "Platform"). The Platform is operated by Krushal Open Commerce Private Limited, having its registered office at L-148, 5th Main Road, Sector 6, HSR Layout, Bengaluru – 560 102, India (referred to as the "Company", "us" or "we").
This Privacy Policy sets out the Company's privacy practices for the collection, usage, storage, disclosure and transfer of sensitive personal data or information on the Platform, published in accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011.
By visiting or accessing the Platform and voluntarily providing us with information, you consent to our use of it in accordance with this Privacy Policy. If you object, please do not use the Platform.
You are the sole owner of your information. The Company collects your information through the Platform solely to provide the services you have signed up for. We will not sell, share, transfer or rent any personal information in ways different from what is disclosed in this policy.
Modes of Collection
1.1 The Company may collect information from both online and offline sources, including through the Register/Log-in page (name, mobile number, email ID, etc.). The purpose of any identity inquiry will be clearly indicated before information is requested.
1.2 Data collected may be classified as:
- Anonymized – contains no personally identifiable information.
- Private / Personal Data – personally identifiable information collected, stored, and used per this Policy.
- Permissioned Data – personally identifiable data obtained with prior user consent.
- Regulatory Data – data required to be collected under applicable law.
1.3 Web servers automatically collect technical data such as IP address, browser type, referring/exit pages, URLs, number of clicks, domain names, landing pages, pages viewed, mobile phone data, and location data. This is used to analyse trends and may be linked to personally identifiable information.
1.4 The Company collects marketing and communications data based on your interaction with the Platform, including subscription or opt-out decisions.
1.5 The Company collects information you provide by writing directly to us (including by email).
1.6 The Company collects information provided over telephone and may keep a record of such communications.
Other Modes
1.7 Information provided via surveys.
1.8 Information required by third-party partners ("Partners"), including regulated financial institutions, or under applicable law.
1.9 Information for KYC checks on behalf of Partners, including bank statement analysis and eKYC. KYC may be conducted directly or through third-party service providers.
1.10 Any information required to be collected under applicable laws.
1.11 Non-personal or anonymised data such as statistical or demographic data.
Collection from Third-Party Sources
1.12 Profile data from social platforms and networks, with your permission, where applicable.
1.13 Technical data for fraud and risk assessments.
1.14 Data from contracted external third parties who adhere to our data protection requirements.
1.15 Identity and contact data from publicly available sources in accordance with applicable laws.
1.16 Data from internal third parties such as audit support and information technology providers.
By accessing or connecting to the Platform or by providing the information sought by us, you authorise the Company to collect, store, use and retain such information in accordance with this Privacy Policy.
Your information will be retained with the Company as long as your account is active or as needed to provide services to you. The Company will retain and use your information as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements or for other business purposes.
Upon initial communication from the Company, you may opt-out of receiving further communications. To be completely removed from the Company mailing list, contact us at legal@krushal.in. If using an email forwarding service, please include the correct email address.
The Company may act as a pass-through facilitator for data under a contract with an Enterprise Client. In such cases, the Enterprise Client is deemed the owner of the information collected on the Platform. Post-service, a copy of identified and de-identified data may still be retained by the Company for legal, dispute, and business purposes.
Use for Services
The Company may use your personal information for the following purposes:
- To provide you with products and services.
- To facilitate, process your requests and transactions; improving and marketing products and services, including site content and performance.
- Resolve technical issues via telephone or email.
- To evaluate your use of the services.
- Better understand users' needs and interests.
- Identify and reach you.
- For marketing and advertising purposes, including newsletters.
- Personalise your experience and customise program experience.
- To check the identity and suitability of clients for certain products and services.
- To ensure the security and operation of our IT environment.
- Improving our artificial intelligence protocols and chatbots.
- To provide to third-party service entities bound by the same privacy restrictions.
- Providing aggregated de-identified data to enterprise clients or partners under the terms of agreement.
- For audits and due diligence for effecting investments in the Company.
- As part of sale, merger or similar change of the business or its affiliates.
- Detect and protect against error, fraud, and other criminal activity.
- Make disclosures as required under applicable law.
- To comply with legal processes and requests from public, regulatory or government authorities.
- To monitor your compliance with terms and conditions, including to confirm your identity.
- To perform internal business processes such as data analysis, audits, and product development.
- Improve the Platform to better serve you.
- Allow us to better service you in responding to customer service requests.
- Administer contests, promotions, surveys or other site features.
- For all other incidental and associated purposes relating to the provision of our products and services.
Processing of Personal Information
We process your personal information in the following circumstances:
- In connection with the performance of a contract we have with you.
- Where necessary for our legitimate interests or those of a third party, with appropriate privacy measures in place.
- To comply with legal obligations, such as anti-bribery and anti-money laundering requirements.
- In accordance with applicable data protection laws and for as long as required.
If none of the above applies, we may seek your explicit consent, which you may decline or revoke at any time.
Storage of Information
We store and process personal information on secure servers within India or outside, including cloud service providers such as Amazon Web Services, Google, and Microsoft. We use reasonable security practices as mandated under applicable law.
Please note that data transmission over the internet is not completely secure. Any information you transmit to us is at your own risk. The Company assumes no liability for disclosure due to errors in transmission, unauthorized third-party access, or acts beyond our reasonable control.
Disclosure of Information
- We may share your personal information for any purpose described in this Policy.
- Internal third parties: Affiliates and other internal third parties, committed to protecting personal information for legitimate business purposes only.
- External third parties: Third-party service providers under contract; Partners with whom we jointly create or offer products and services; credit bureaus as permitted by law; prospective buyers or sellers in a business sale; law enforcement or government authorities when required; or when compelled by law to protect the rights, property, or safety of the Company, its Users, or others.
Data Retention (Detailed)
Personal information is retained for as long as required to fulfil the purposes for which it was collected, or as needed to provide services, comply with legal, accounting, and compliance reporting requirements.
- To cancel your account or request the Company to stop using your information, contact the Company by email. The Company will nonetheless retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
- Post account termination, the Company may continue to use anonymised, aggregated data for analysis, profiling, and research. Contact information and application details may be retained for fraud prevention or legal proceedings.
Treatment of Data in Case of Sale, Merger, Acquisition
The Company reserves the right to disclose and transfer all information to a subsequent owner or operator, or in connection with a corporate merger, consolidation, restructuring, or sale of assets. You will be notified via email and/or a prominent notice on the Platform of any such change.
Collection via Cookies
Cookies are small pieces of information saved by your browser. They are used to record aspects of your visit and assist the Company in providing uninterrupted service.
- By default, the Company uses a persistent cookie storing login credentials for convenience. Users may remove or block cookies via browser settings.
- The Company stores transaction history and may collect additional information from customer service interactions and survey responses to improve services.
- Third-party service providers may use cookies to serve interest-based ads. You may opt out of interest-based ads but will continue to receive generic ads.
Web Beacons
The Platform uses web beacons (single-pixel gifs) along with cookies to compile aggregated statistics about Platform usage. Web beacons may also be used in Company emails to gauge the effectiveness of marketing campaigns.
The Company pledges not to sell or rent your personal details to anyone. Your personal information will be kept strictly confidential except in the following cases:
- When required by law, rule, regulation, law enforcement, governmental official, or legal or regulatory authorities.
- To provide services, enforce terms of use, or to protect the rights, property, or safety of the Company, its users or others, including for fraud prevention.
- To third parties to whom the Company transfers its rights and duties under any agreement.
- To any of the Company's affiliates or related entities.
Sharing
The Company may share aggregated, non-personally identifiable information with partners and clients, including after completion of services. The Company shall not be liable for any transfer of personal identification information resulting from events beyond its control.
Consulting and Sub-Contracting
The Company may sub-contract all or part of its services to a third party. Sub-contractors are not permitted to use personally identifiable information except for the explicit purpose of providing those services.
The Company maintains a strict "No-Spam" policy. The Company does not intend to sell, rent, or otherwise give your email address to a third party without your consent.
9.1 This Privacy Policy does not apply to unsolicited information provided through the Platform or any other means. All such unsolicited information shall be deemed non-confidential and the Company may freely use or disclose it.
9.2 Access to your personal information is limited to employees, agents, partners, and third parties reasonably believed to need it for providing services. The Company is not responsible for the confidentiality or security of your information by partners outside the scope of our agreements.
Security of Information
- The Company protects your information from loss, misuse, and unauthorized access using generally accepted industry standards and appropriate managerial procedures. Users may access, correct, amend, or delete inaccurate personal information via the Platform.
- The Company uses commercially reasonable precautions to preserve the integrity and security of your information.
- Your information may be transferred to, stored and processed at any destination within or outside India. By submitting information on the Platform, you agree to this transfer, storage, and processing.
- By using the Platform, you accept the inherent security implications of data transmission over the internet. The Company assumes no liability for disclosure due to errors in transmission or unauthorised third-party access.
- In the event the Company becomes aware of any security breach, it will promptly notify you and take appropriate action to remedy the breach.
The Company takes all necessary precautions to protect your personal information both online and offline. No administrator at the Company will have knowledge of your password. Be sure to log off from the Platform when finished.
The Platform may contain links to other sites not under the control of the Company. The Company is not responsible for the privacy practices of such other sites. Accessing third-party sites linked to the Platform is entirely at your own risk.
We may update this Privacy Policy at any time, with or without advance notice. Significant changes will be communicated via a notice on the Platform and/or by email. If you object to any changes, you may contact legal@krushal.in to deactivate your account. Continuing to use the Platform after a notice of changes constitutes your consent to the updated terms.
For any grievance regarding the Platform, Services, or the processing of your information, contact our Grievance Officer at legal@krushal.in.
Grievances will be redressed within one (1) month from the date of receipt.
The Company strongly encourages parents and guardians to supervise the online activities of their minor children. Although the Platform is not intended for use by minors, the Company respects the privacy of minors who may inadvertently use the Platform.
This Policy shall be governed by the laws of the Republic of India. The courts at Mumbai shall have exclusive jurisdiction in relation to any disputes arising out of or in connection with this Privacy Policy.
Any dispute shall be referred to and finally resolved by arbitration in accordance with the Indian Arbitration and Conciliation Act, 1996. There shall be one (1) arbitrator and the seat of arbitration shall be Bengaluru, India. The language of proceedings shall be English.
By consenting to the terms under this Privacy Policy, you provide express consent to the Company to collect, share, transfer, store, retain, disseminate, or use the information collected from your usage of the Platform.
You may withdraw consent at any time by emailing legal@krushal.in. Upon verification, the Company may, subject to its legal obligations, destroy all such information from its servers. Note that the Company shall continue to retain a copy for periodic audit purposes.
YOU HAVE READ THIS PRIVACY POLICY AND AGREE TO ALL OF THE PROVISIONS CONTAINED ABOVE.