Stovekraft Limited, (hereinafter Stovekraft/ we) are committed to respecting the privacy of every person who shares personal information with us including their name, address, phone number, banking information and information related to transaction that you may provide about yourself or of any other person that you may provide to identify such individual (personal information) through ______________________________ (Website) provided if such personal information is shared with Stovekraft directly. The Privacy of the personally identified information shared by you is important to us and we strive to take reasonable care in protecting the personal information we receive from you.
The purpose of this Privacy Notice ("Policy") as amended from time to time is to give you an understanding on how we intend to collect, use, store, share restrictively and protect your personal information.
Information We Collect
We collect various types of information in connection with the business we do.
Information you provide directly to us
Information we collect when we provide you services
Information we obtain from third party sources, through cookies and similar tracking technologies when you visit our website/app, including IP address, browsing behaviour, and device information.
The information we collect is either through implicit or explicit consent, we obtain from you.
If you do any or all of the following below, you indicate that you have read, understood and agree to this Policy:
(a) explicitly accept the Policy by ticking a checkbox or clicking on I accept,
(b) accessing the website,
(c) when any of our applications are downloaded,
(d) placing an order or making payment,
(e) contacting us,
(f) undertaking any action that involves interacting with the service team either in person or through phone or electronic mail.
By accepting this Policy, you authorise Stovekraft or anyone acting on behalf of Stovekraft to collect, store, use, disclose, retain and transfer your personal information in accordance with this Policy.
Purpose of Processing Personal Data
We process your personal data strictly for specified, lawful purposes, including:
Fulfilling our business obligations: We may need to process your personal data to allow us to carry out order management, payment processing, contract management, financial management and website and service administration;
Processing and fulfilling orders placed through our e-commerce platforms;
Facilitating in-store billing, exchanges, and returns at our EBOs;
Registering and honouring product warranties, and providing after-sales service and support, regardless of whether the product was purchased via e-commerce, retail stores or modern trade;
Publish your reviews, comments, and content: Where you have uploaded product reviews, comments, testimonials or content to our websites or application and made them publicly visible, we may link, publish or publicize these materials elsewhere including our own advertisements.
Managing loyalty programmes and providing personalised offers and rewards;
Communicating with you regarding your orders, service requests, and account;
Sending promotional and marketing communications, where you have provided consent for the same;
Improving our products, services, website, and app based on your usage patterns and feedback;
Ensuring the security of our retail outlets, warehouses, and digital platforms through CCTVs
Complying with applicable legal, tax, and regulatory obligations, including those under consumer protection and warranty laws; and
Responding to grievances, complaints, and exercising or defending legal claims.
Lawful Basis for Processing
Your personal data can be processed on the following lawful basis:
Consent
Based on the explicit consent provided by you.
Legal Basis
To comply with legal obligation i.e. required by laws and regulations.
Contractual Obligation
To fulfil a contract to which you are a party, such as a contract with you, or as needed to fulfil a contract or agreement between you and Stovekraft.
Legitimate Interest
Personal data may be processed based on legitimate interest, as permitted by applicable laws.
Disclosure of Your Personal Data and Categories of Third Parties
We may disclose your personal data to:
Our cloud service providers for the purpose of data storage and data processing.
Our service providers and vendors who may make available to you services, products, or applications for use on or through our website or mobile application. If you choose to use such services, products or applications, data related to these uses may be shared with such service providers and vendors.
Our service providers who may, in the course of providing their respective services, receive and process data which includes storing and analyzing data, protecting and securing our systems, providing search results and links, providing customer service, credit analysis, processing your data for profiling, user analysis and financial institutions, merchants, and payment processors for the purpose of enabling your payments.
These service providers will be required to only process data in accordance with our instructions. The service providers will also be required to safeguard the security and confidentiality of the data they process by implementing appropriate technical and organizational security measures.
Our delivery and logistics providers for the purpose of managing shipments and deliveries.
Our advertisers and our advertising Service providers. We will not disclose or share your information with unaffiliated third parties for their own marketing, unless so authorized by you.
Authorised service centres and technicians, for after-sales service and warranty support;
Payment gateways and payment aggregators, for processing payments on our E-Commerce platforms;
Business transfers: as we continue to develop our business, we might sell or buy subsidiaries or business units. Your data may be transferred as part of such transactions.
Professional advisors (legal, audit, tax), regulators, and law enforcement/government agencies, where required by applicable law or in response to a valid legal process; and
A prospective acquirer or successor entity, in the event of a merger, acquisition, restructuring, or sale of business or assets, subject to appropriate confidentiality safeguards.
We do not sell your personal data to any third party for their independent commercial use.
Third parties: We may also share your data with other third parties where:
You request or authorize us to do so
We need to comply with applicable law or respond to valid legal process; or
We need to operate and maintain the security of our website or mobile application, including to prevent or stop an attack on our computer systems or networks. The sharing of your data will be in line with the processes set out in this Privacy Notice.
We may also disclose personal data when required by law, to law enforcement agencies, regulators or courts, or as permitted by law or as needed for audit, compliance and corporate governance.
We do not sell your Personal Data to any third party for their independent commercial use.
How to Exercise Your Rights
If you wish to make a request for exercising your grievanceofficer-dpdp@stovekraft.com rights, you can submit your online requests at
To help us confirm your identity and to ensure that the personal data is only disclosed to authorized individuals, please provide your full name, email ID and phone number registered with us while sending the request.
Please note, where required we may also request for additional information before taking any actions on the requests raised by you. If you are raising a request on behalf of another individual, such requests shall be accompanied by appropriate proof of identity of the requester, details of relationship with the person on whose behalf the request is being made and proof of authority for making the request.
Cross-Border Transfer of Personal Data
We may transfer your personal data outside India for processing (for instance, to cloud service providers with servers located outside India), except to countries or territories that may be restricted by the Central Government by notification. Any such transfer shall be subject to appropriate contractual and technical safeguards consistent with the standards prescribed under the Act and the Rules.
Data Retention and Erasure
We retain your personal data only for as long as is necessary to fulfil the purpose(s) for which it was collected, including for satisfying any legal, accounting, warranty, or reporting requirements. We shall erase your personal data upon:
Withdrawal of consent by you, where processing is based on consent; or
The specified purpose no longer being served,
unless retention is necessary for compliance with any law for the time being in force. Where you have not initiated contact with us or exercised your rights for a period specified under the Rules (currently three years from such date, unless a longer/shorter period is separately specified for a class of Data Fiduciaries), we may erase your personal data after providing prior intimation, except where retention is required by law.
Rights of Data Principals
In accordance with Chapter III of the DPDPA, you have the following rights in relation to your personal data:
Right to Access Information
to obtain a summary of the personal data we hold about you and the processing activities undertaken with respect to such data;
Right to Correction and Erasure
to request correction of inaccurate or misleading personal data, completion of incomplete personal data, updating of personal data, and erasure of personal data that is no longer necessary for the purpose for which it was processed;
Right to Grievance Redressal
to have a readily available means of registering a grievance with us in relation to the exercise of your rights;
Right to Nominate
to nominate another individual to exercise your rights under the Act in the event of your death or incapacity;
Right to Withdraw Consent
to withdraw previously given Consent at any time, with the same ease with which it was given.
To exercise any of the above rights, please write grievanceofficer-dpdp@stovekraft.com to our Grievance Officer at using the contact details in Section 15 below. We will respond to your request within the timelines prescribed under the DPDPA and the Rules.
Processing of Children's Personal Data
Where you disclose that personal data shared by you pertains to a child, we shall process such personal data only after obtaining verifiable consent from the parent or lawful guardian of the child. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and we do not process children's personal data in a manner likely to cause any detrimental effect on their wellbeing. Our services are not intended for use by individuals below the age of 18 years without the involvement of a parent or guardian.
Data Security Measures
We recognize the critical importance of safeguarding personal data and maintaining the trust of stakeholders and have increasingly embraced comprehensive strategies and newer technologies that encompass both due diligence and due care principles. We have implemented rigorous measures to assess risks, proactively address vulnerabilities, and continuously improve data security practices to protect our digital assets.
We restrict access to your personal data to employees of ours, our affiliates, and third-party service providers who reasonably need it to support the websites or provide our products or services. We have implemented security policies, risk management programs, physical, administrative, and technical safeguards to protect your personal data from unauthorized access.
We use security measures to help protect your personal data against unauthorized disclosure, misuse, alteration and other incidents, with disciplinary actions against the offender. We are committed to maintaining reasonable security measures to protect your personal data.
Grievance Redressal and Data Protection Officer
In accordance with Section 8(9) and Section 13 of the DPDPA, we have designated the following contact for grievances relating to the processing of your Personal Data:
Grievance Officer
Grievance Officer:
Address
Stovekraft Limited
We shall endeavour to resolve your grievance within the timeline prescribed under the Rules. If you are not satisfied with our resolution, you have the right to file a complaint with the Data Protection Board of India.
Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, business verticals, or applicable law, including any subordinate legislation or clarifications issued under the DPDPA and the Rules. The updated Policy will be posted on our website/app with a revised "Last Updated" date, and, where required, we will notify you of material changes through appropriate means.
Governing Law and Jurisdiction
This Policy shall be governed by the laws of India, including the DPDPA and the Rules. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Bangalore, Karnataka
Contact Us
If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact us at:
Postal Address
No.30, 2nd Cross, CSI Compound, Mission Road, Bengaluru – 560027
This Privacy Policy is provided by Stovekraft Limited.
