Privacy Policy

Who we are

Krriva (“Krriva”, “we”, “us”) is an India-based skincare and wellness brand operating the website krriva.com and the Krriva mobile app. We are responsible for the personal information described in this policy.

Questions, requests or complaints: [email protected].

1. What we collect

Account details

Name, email address, phone number and a password (stored only as a secure hash). A profile photo is optional.

Order & delivery

Shipping and billing addresses, pincode, items ordered, order value, delivery status and returns.

Shopping activity

Cart, wishlist, reviews you write, support messages, newsletter and offer preferences.

Device & usage

Browser or device type, app version, IP address, pages viewed and basic error logs needed to run the service.

Cookies and local storage

We use a small amount of browser storage to keep you signed in, remember your cart, language and layout preferences, and, if you allow it, to send order updates as notifications. You can clear this at any time in your browser settings.

We do not collect or store full card numbers, CVV codes or UPI PINs. Card fields shown in our checkout are a demonstration and are not transmitted to us.

2. How we use your information

To create and secure your account and sign you in.
To process, pack, ship and deliver your orders, and to handle returns or refunds.
To send order confirmations, delivery updates and service messages by email, SMS or WhatsApp.
To answer your questions and provide customer support.
To prevent fraud, abuse and misuse of our store and app.
To improve our products, pages and app experience using aggregated, non-identifying information.
To send offers and newsletters only when you have opted in. You can unsubscribe at any time.
To meet legal, tax and accounting obligations.

We rely on your consent (for marketing and optional features), the performance of our contract with you (orders and delivery), and our legal obligations (tax records).

3. Who we share it with

We do not sell your personal information. We share only what is necessary with:

Partner type	What is shared	Why
Hosting & security (Cloudflare and our server host)	Technical request data, IP address	To serve the website and app securely
Delivery partners	Name, phone, address, order contents	To deliver your order
Email, SMS & WhatsApp providers	Name, email, phone	Order updates and, with consent, offers
Payment and UPI partners	Order total, payment reference	To collect and reconcile payment
Professional advisers & authorities	Only when legally required	Tax, audit or lawful requests

Some providers may process data outside India. Where that happens, we use providers that apply appropriate safeguards for personal data.

4. Payments

We currently accept Cash on Delivery and UPI collection. If a payment partner is enabled, your payment is processed by that partner under its own privacy policy, and we receive only a confirmation and reference number.

To prevent fraud we may keep a record of the payment method used and the last four digits of a card where a partner supplies them. We never store your CVV or UPI PIN.

5. How long we keep it

Account data: until you delete your account, then removed within 30 days of processing your request.
Order and invoice records: kept for up to 8 years where tax and accounting law requires it. These records are detached from your account wherever possible.
Support messages: up to 24 months so we can resolve follow-ups.
Newsletter and marketing: until you unsubscribe or withdraw consent.
Server and error logs: up to 90 days.

6. Your rights

You can ask us to:

show you the personal information we hold about you;
correct information that is wrong or incomplete;
delete your account and personal information (see below);
withdraw consent for marketing or optional features;
restrict or object to certain processing.

Write to [email protected] and we will respond within 30 days. You may also complain to us first; if unresolved, you can contact your local data protection authority.

7. Deleting your account

You can request deletion from inside the app (Account → Delete account) or by using our public request page at krriva.com/account-delete. No sign-in is required to submit a request.

We delete your profile, saved addresses, cart, wishlist, reviews and marketing preferences. Order and invoice records that we must keep for tax purposes are retained and detached from your profile. Deletion is completed within 30 days.

8. Children

Our store and app are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has shared information with us, contact us and we will remove it.

9. Security

We use encrypted connections (HTTPS), hashed passwords, restricted admin access and routine backups. No system is completely secure, but we work to protect your information and will notify affected users and authorities if a breach affects their data, as required by law.

10. Changes to this policy

We may update this policy as our services change. The “Last updated” date at the top will change, and material changes will be announced on the store or by email before they take effect.

11. Contact & grievance officer

Grievance Officer — Krriva
Email: [email protected]
Website: krriva.com

We aim to acknowledge every privacy request within 7 days and resolve it within 30 days.