Effective Date:  01 January 2026

Owner: Ritu Jain, Sole Proprietor

Website: www.kararamujassme.com

At Karara Mujassme India, we (we, our, us) recognize the importance of respecting your privacy and handling your personal information responsibly. Hence, we have ensured that our data protection practices comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules) and other applicable laws. This Privacy Policy is intended to help you understand our data collection, use, sharing, and protection practices when you use our website and other channels to book consultations, purchase products, or otherwise interact with us.

By using our services, you agree to the terms described in this Privacy Policy.

1. Types of Personal Information We Gather

We gather users' personal information in the following ways:

A. Directly Provided Information

i. Name, email address, phone number, and physical address collected during account creation, wishlist usage, or checkout.

ii. Project details, site measurements, design specifications, and consultation inputs submitted through website forms.

iii. Communication content exchanged via WhatsApp, email, Zoom, and other third-party communication tools.

B. Data Collected Automatically

i.     Cookies that monitor browsing habits, website preferences, cart activity, and recently viewed items.

ii.    IP address, browser type, device information, length of session, and technical logs for security and performance reasons.

C. Third-Party Integrations

i. Partially processed payment information handled securely by gateways such as Razorpay.

ii. Shipping information shared with logistics providers for order delivery.

iii. Social media tracking pixel data from platforms such as Facebook and Instagram.

2. Purpose and Use of Personal Data

We use your personal data strictly for lawful and legitimate purposes, including:

i. Processing and fulfilling orders, payments, invoicing, and delivery.

ii. Managing custom and bespoke projects, including design planning and communication tracking.

iii. Improving website performance, user journey, technical stability, and overall customer experience.

iv. Providing customer service, appointment confirmations, and operational updates.

v. Sending marketing emails, promotions, product recommendations, or event updates only with your explicit consent.

3. Consent and Your Rights Under the DPDP Act

We obtain your consent before processing any personal data that is not essential to providing our services. Certain processing activities such as fulfilling orders, preventing fraud or complying with law may proceed without consent as permitted by the DPDP Act.

You are entitled to see, amend, update, or request the removal of your personal information. Additionally, you can file complaints with the Data Protection Board of India, designate a representative to exercise your rights, or revoke your consent for marketing activities. You can use the contact details below to make requests.

4. Data Sharing & Disclosure

We do not sell personal data. However, we may provide your information to trustworthy third-party service providers, including marketing platforms, communication tools, IT security companies, logistics companies, and payment processors. These partners follow strict data protection and confidentiality guidelines. To protect our rights, safety, and legal interests, or when required by law or government authorities, we may share information.

5. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes stated in this policy:

· Order and transaction records: up to 7 years for legal, regulatory, and accounting requirements.

· Custom order and consultation records: until project completion plus an additional 2 years.

· Marketing and promotional data: until you withdraw consent or opt out.

· Customer service and communication logs: stored temporarily and deleted when no longer needed.

6. Data Security Measures

We use strong technical and organizational measures to protect your personal data:

i. Encrypted payment transactions handled through PCI-DSS-compliant payment gateways.

ii. Firewalls, secure servers, restricted access controls, and authentication protocols.

iii. Regular security testing, malware scans, and vulnerability assessments.

iv. Access to personal data limited to authorized personnel on a need-to-know basis.

In line with Section 43A of the Information Technology Act, 2000, and the SPDI Rules 2011, we follow reasonable security practices and procedures to secure all personal data we process or store. We also confirm that we do not store sensitive financial information, such as full credit card numbers, passwords, CVV codes, or banking login details. All such data is managed securely by third-party payment providers.

7. Children’s Data

Our services are intended for users aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under 18. If such data is identified, it will be removed promptly.

8. Updates to This Policy

We may revise this Privacy Policy occasionally to reflect regulatory updates, business changes, or technological improvements. The updated versions will be posted with a revised effective date. Continued use of our website signifies acceptance of the updated policy.

9. Contact Information

For privacy-related inquiries, data access requests, corrections, or consent withdrawal, please contact:

Karara Mujassme India
Owner: Ritu Jain
Chandra Gardens, Near Airforce Station
Rajokri, Delhi – 110038, India

Email: info@mujassme.com
Phone: +91 9999845551

10. Governing Law & Dispute Resolution

This Privacy Policy is governed exclusively by the laws of India. Any disputes or claims arising out of this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Delhi.

11. Grievance Redressal Mechanism

According to the DPDP Act and IT Rules, we have set up a process for addressing grievances. If you have concerns about how we handle personal data, security, withdrawing consent, or user rights, you can reach out to our Grievance Officer. We will acknowledge and respond to all complaints within the required time frames.

Grievance Officer:
Contact no.: 85120 46545
Email id : admin@mujassme.com

12. International Data Transfers

Some of our service providers, like hosting providers, cloud storage, or analytics services, may process data on servers outside India. When these transfers happen, we make sure these providers maintain good security and follow data protection standards that meet DPDP Act requirements.