Client care
What we collect, why we collect it, and the choices you have. Written with India's Digital Personal Data Protection Act, 2023 in mind.
Draft for review: to be confirmed by Aashna and her legal advisorLast updated: not yet published
Who we are
Kosh Couture ("Kosh", "we") is the data fiduciary for the personal data you share with us through this website, on WhatsApp, by email or at the atelier. This means we decide why and how your data is processed, and we are responsible for it.
Placeholder: Registered legal entity name and address to be confirmed
What we collect
- Contact details: your name, email address, phone number and delivery address.
- Order details: what you bought, sizes, and body measurements you share for made-to-measure pieces.
- Enquiries: messages and reference images you send us.
- Payment confirmation: our payment partners process your card or UPI details. We never see or store your full card number.
- Usage data: pages viewed and device information, only if you agree to analytics cookies.
Why we use it
We only use your personal data for the purposes we tell you about when we collect it:
- To make, deliver and support your order, including fittings and alterations.
- To reply to your enquiries and arrange appointments.
- To send you letters from the atelier, only if you have opted in.
- To understand how the site is used and improve it, only if you have accepted analytics cookies.
- To meet our legal obligations, such as tax and accounting records.
Consent and withdrawing it
Where we rely on your consent, we ask for it clearly and separately for each purpose. You can withdraw consent at any time, as easily as you gave it: use the unsubscribe link in any email, change your cookie preferences in the footer, or write to us.
Withdrawing consent does not affect processing that already took place, but it may mean we cannot complete a service that depends on it, such as a made-to-measure order without measurements.
Your rights as a data principal
- To access a summary of the personal data we hold about you and how we process it.
- To correct, complete or update inaccurate data.
- To have your data erased when it is no longer needed for the purpose you shared it for, unless the law requires us to keep it.
- To nominate another person to exercise these rights on your behalf in the event of death or incapacity.
- To have your grievances addressed, first by us and then by the Data Protection Board of India.
We respond to requests within the timelines set by law.
Grievance officer
If you have a concern about how we handle your data, please contact our grievance officer. We will acknowledge your message promptly and resolve it within the period prescribed under the Act.
Placeholder: Grievance officer name, email and postal address to be appointed
How long we keep it
We keep personal data only for as long as the purpose requires. Order and invoice records are kept for the period required by tax law. Measurements are kept so that your next piece fits as well as your last, and you can ask us to erase them at any time. Enquiries that do not lead to an order are deleted after 24 months.
Placeholder: Retention periods to be confirmed with legal advisor
Children
This site is intended for adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not track or target advertising at children.
Keeping it safe
We use reasonable security safeguards, including encrypted connections, access controls and trusted providers, to protect your data. If a personal data breach occurs, we will inform you and the Data Protection Board as the law requires.
Changes to this notice
If we change how we use your data, we will update this page and, where the change is significant, tell you directly.