Welcome to iTokri. We are deeply committed to safeguarding your privacy and ensuring that your personal information is protected. This Privacy Policy outlines how we collect, use, disclose, and secure your data when you interact with our website, mobile applications, and other online services. As India’s largest curated portal for art and handicraft products, iTokri values the trust our customers place in us, and we strive to maintain transparency in our data practices.
This policy applies to all customers globally, including those in regions governed by strict privacy regulations such as the European Union’s General Data Protection Regulation (GDPR) and California’s Consumer Privacy Act (CCPA). By using our services, you consent to the practices described in this policy.
Effective Date 05/11/2012
This Privacy Policy is effective as of 05/11/2012
Last Changes Made on 23/08/2024
This Privacy Policy covers:
• Information we collect from you when you visit our website or engage with our services.
• How we use, share, and protect that information.
• Your rights regarding your personal data.
• How to contact us with questions or concerns about our privacy practices.
iTokri’s mission extends beyond commerce; we are focused on celebrating and preserving India’s rich traditional crafts. Part of this mission is ensuring that our community, including artisans and customers, feels secure and informed. We take our responsibility to protect your personal data seriously and comply with applicable privacy laws worldwide.
At iTokri, we collect and process different types of personal information to provide our services effectively and enhance your shopping experience. Here is a detailed explanation of the categories of information we collect:
When you interact with iTokri, whether by browsing our site, creating an account, making a purchase, or contacting us, you may voluntarily provide personal data, which includes:
• Identity Information: Your full name, username or similar identifier, and gender.
• Contact Information: Email address, postal address, phone number, and other communication details.
• Payment Information: Payment card details, billing address, and transaction history (processed securely and not stored by iTokri directly).
• Account Information: Passwords, purchase history, preferences, and other details related to your account.
• Communication Records: Any correspondence between you and iTokri, including emails, chat transcripts, and phone call records.
• Feedback and Reviews: Information you provide in response to surveys, product reviews, and testimonials.
When you interact with our website or services, we automatically collect certain technical and usage information, including:
• Device Information: Details about the device you use to access our services, including IP address, operating system, browser type, and version.
• Usage Data: Information about how you use our website, such as pages viewed, time spent on the site, links clicked, and products viewed or searched for.
• Location Data: Approximate geographic location inferred from your IP address to tailor the website experience to your location.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect data about your browsing behavior and preferences.
We may also receive information about you from third parties, including:
• Social Media Platforms: If you choose to link your social media accounts with iTokri or interact with us via social media, we may receive certain information from those platforms.
• Payment Providers: Information necessary to process your transactions, such as payment status and fraud prevention data.
• Marketing Partners: Data from third-party marketing and analytics providers that helps us understand your preferences and improve our services.
Cookies are small text files stored on your device by your web browser. They are used to make websites work more efficiently and to provide information to the site owners. At iTokri, we use cookies for the following purposes:
• Essential Cookies: These are necessary for the website to function and cannot be turned off. They enable basic functions like page navigation and access to secure areas.
• Performance Cookies: These cookies collect information about how visitors use our site, allowing us to improve the website’s performance and your experience.
• Functional Cookies: These remember choices you make, such as language preference or region, to provide a more personalized experience.
• Targeting Cookies: Used to deliver ads relevant to you and your interests. They also help measure the effectiveness of advertising campaigns.
You can manage or disable cookies through your browser settings. However, please note that disabling cookies may affect your ability to use certain features of our website.
At iTokri, your data is used to enhance your shopping experience, improve our services, and maintain the security of our operations. Here’s a detailed breakdown of how we use your information:
• Order Processing: Your personal information is essential for processing your orders, including managing payments, shipping products, and providing order confirmations.
• Customer Support: We use your data to respond to inquiries, resolve issues, and provide assistance throughout your shopping experience.
• Account Management: Information like your email and password is used to create and manage your account, allowing you to access your order history and saved preferences.
• Customized Experience: We use your data to tailor our website and communications to your preferences, ensuring a more relevant shopping experience.
• Promotional Communications: With your consent, we may send you marketing emails and special offers. You can opt out of these communications at any time by following the unsubscribe instructions in the email.
• Product Recommendations: Based on your browsing and purchase history, we may recommend products that we think you’ll love.
COMMUNICATION
When You visit the iTokri.com website or send emails to us, You are communicating with us electronically. We communicate with You by email, SMS, RCS, or by posting notices on the website. For contractual purposes, You consent to receive communications from us electronically and You agree that all agreements, notices, disclosures, and other communications that we provide to You electronically satisfy any legal requirement that those communications be in writing. This condition does not affect Your statutory rights. You understand that once You register as an iTokri.com user on the iTokri.com platform, upon placing an order on our website, we shall be entitled to use your registered mobile number on the website to send transaction-related SMS or RCS to you, irrespective of DND services being activated on your mobile. We may occasionally send promotional SMS or RCS to your registered mobile number. The customer hereby authorizes us to send transactional SMS or RCS to their registered number, even if the number is registered for the DND "Do Not Disturb" service.
• Regulatory Compliance: We process your data as required by applicable laws, including tax reporting, accounting requirements, and legal obligations.
• Fraud Prevention: Your information is used to detect and prevent fraudulent activities, unauthorized access, and other illegal activities on our platform.
• Data Security: We implement security measures to protect your data from unauthorized access, use, or disclosure. This includes encryption, secure servers, and regular security audits.
• Site Performance: Usage data helps us understand how visitors interact with our site, allowing us to improve performance, security, and user experience.
• Product Development: Insights gained from your interactions with iTokri help us develop new products, services, and features that better meet your needs.
At iTokri, we understand the importance of maintaining your trust, and that includes being transparent about how and with whom we share your personal information. We only share your data in specific situations and with trusted partners, ensuring that your privacy is always protected.
We work with a variety of third-party service providers who assist us in delivering our services. These providers are carefully selected to ensure they meet our high standards of security and privacy. Examples of service providers include:
• Payment Processors: We partner with secure payment gateways to process your transactions. These providers may access your payment details to facilitate the purchase, but they are bound by strict confidentiality agreements and are not allowed to use your data for any other purpose.
• Shipping and Logistics: To ensure your orders reach you safely and on time, we share your shipping information with delivery partners. This includes your name, address, and contact details.
• Email and Marketing Services: We use third-party email services to send you order confirmations, promotional emails, and newsletters. These partners have access to your contact information but are strictly prohibited from using it for anything other than sending communications on our behalf.
• Analytics Providers: We use analytics tools to understand how users interact with our website, which helps us improve your experience. These providers may collect information about your browsing behavior but do not receive any personal information that directly identifies you.
In the event that iTokri undergoes a business transaction such as a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. If such a transfer occurs, we will ensure that your data remains protected and that the acquiring company honors the commitments made in this Privacy Policy.
We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). This includes:
• Compliance with Legal Obligations: We may disclose your data to comply with legal obligations, such as tax reporting, regulatory compliance, or responding to lawful requests from law enforcement.
• Protecting Our Rights: We may also disclose your information when necessary to protect our legal rights, enforce our terms of service, prevent fraud, or ensure the safety of our users and the public.
As iTokri operates globally, your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws in your country, but we take steps to ensure your information is protected, including:
• Data Transfer Agreements: When transferring personal data outside of your country, we rely on legally-approved mechanisms such as the European Union’s Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
• Data Processing Locations: Our primary data processing occurs in India, but we may also process data in other jurisdictions. Regardless of where your data is processed, we take the necessary steps to ensure it is handled securely and in accordance with this Privacy Policy.
• Third-Party Compliance: We require all third parties who process your data on our behalf to adhere to the same strict privacy and security standards that we follow, regardless of their location.
iTokri is committed to giving you control over your personal information. Depending on where you live, you may have certain rights under applicable data protection laws. These rights are designed to give you transparency and control over how your data is used.
• Right to Access: You have the right to request a copy of the personal information we hold about you. This allows you to check that we are processing your data lawfully.
• Right to Rectification: If any of the information we hold about you is inaccurate or incomplete, you have the right to request corrections or updates.
• Right to Data Portability: In certain circumstances, you have the right to request that we provide your personal data to you or another service provider in a structured, commonly used, and machine-readable format. This applies to data you have provided to us that is processed based on your consent or for the performance of a contract.
• Right to Object to Processing: You have the right to object to our processing of your personal data if we are processing it based on our legitimate interests or for direct marketing purposes. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing or it is needed for legal reasons.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we carried out before your withdrawal, nor will it affect processing of your data under other lawful grounds.
To exercise any of the above rights, please contact us using the contact details provided in this Privacy Policy. We will respond to your request in accordance with the applicable data protection laws. In some cases, we may need to verify your identity before fulfilling your request.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so that we can address your concerns directly.
At iTokri, we take the security of your personal data seriously and have implemented a range of measures to protect your information from unauthorized access, use, or disclosure. Here’s a detailed overview of how we secure your data:
• Encryption: We use Secure Sockets Layer (SSL) encryption technology to protect your data during transmission. This ensures that all sensitive information, such as payment details, is encrypted and cannot be intercepted by third parties.
• Secure Storage: Personal data is stored on secure servers with strict access controls. We employ firewalls, anti-virus software, and other security technologies to prevent unauthorized access.
• Access Controls: Access to personal data is restricted to authorized personnel only, and we regularly review access privileges to ensure they are up to date.
• Regular Security Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security risks. This helps us stay ahead of evolving security threats.
• Two-Factor Authentication (2FA): Where applicable, we offer two-factor authentication to provide an additional layer of security for your account.
• Incident Response Plan: In the event of a data breach, we have an incident response plan in place to minimize the impact. This includes containing the breach, assessing the damage, and implementing corrective measures.
• Notification of Affected Parties: If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant data protection authorities as required by law. This notification will include information about the nature of the breach, the potential impact, and the steps we are taking to mitigate the effects.
• Retention Periods: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods are determined based on the type of data and the purpose for which it is processed.
• Data Deletion: Once the retention period has expired, we securely delete or anonymize your personal data, ensuring it cannot be reconstructed or read.
iTokri is committed to protecting the privacy of children. We do not knowingly collect personal information from children under the age of 16. Here’s how we handle children’s data:
1. Age Restrictions
• No Data Collection: Our website and services are not intended for children under 16 years of age, and we do not knowingly collect or solicit personal data from anyone under the age of 16.
• Parental Controls: If you are a parent or guardian and believe that your child under 16 has provided us with personal information, please contact us immediately at privacy@itokri.com. We will take steps to delete that information from our servers.
• Request for Deletion: Parents or guardians can request the deletion of their child’s personal data if it has been inadvertently collected. Please contact us using the details provided in this Privacy Policy, and we will take prompt action to remove the data.
As we continue to evolve and expand our services, we may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. Here’s how we will keep you informed:
• Policy Revisions: We will revise this Privacy Policy as necessary to stay compliant with applicable laws and to accurately reflect our data practices. When changes are made, we will update the “Effective Date” at the top of the policy to indicate when the changes take effect.
• Notification of Changes: For significant changes, we will notify you through the following methods:
• Website Banner: A prominent notice on our website’s homepage.
• Email Notification: If you have an account with us, we may send you an email summarizing the changes and providing a link to the updated policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Continued use of our services after the changes take effect will constitute your acceptance of the revised Privacy Policy.
How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we are here to help. Please contact us using the following details:
• Data Protection Officer (DPO): If you have any specific concerns regarding data protection, you may contact our Data Protection Officer at dpo@itokri.com. Our DPO is responsible for overseeing our compliance with data protection laws and ensuring that your rights are upheld.
Different regions have specific privacy laws that may apply to our users. Here’s how we comply with those regulations:
If you are located in the European Union (EU) or European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you specific rights:
• Legal Basis for Processing: We process your personal data based on your consent, to perform a contract, to comply with legal obligations, or for legitimate business interests.
• Your Rights: EU residents have the right to access, rectify, delete, restrict, or object to the processing of their data. You can also request data portability and withdraw consent at any time.
• International Transfers: When transferring data outside the EU, we use legally-approved mechanisms such as Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
• How to Exercise Your Rights: Contact us at privacy@itokri.com to exercise your rights under GDPR.
If you are a resident of California, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal data:
• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
• Right to Delete: You can request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note that iTokri does not sell personal information.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights under CCPA.
• How to Exercise Your Rights: To make a request under CCPA, contact us at privacy@itokri.com or use the web form available on our website.
If you are a resident of another jurisdiction with specific privacy laws, please contact us to understand on privacy@itokri.com for your rights and our obligations regarding your personal data. We strive to comply with all applicable data protection laws and provide you with the necessary transparency and control over your information.
Thank you for taking the time to read our Privacy Policy. At iTokri, we value your trust and are committed to protecting your personal information. We continuously work to improve our privacy practices and ensure that your data is handled with the utmost care and respect.