Privacy Policy

Effective Date: September 13, 2026
Last Updated: September 13, 2026

Welcome to GlowKnot ("we", "our", or "us"), operated by GlowKnot, accessible at glowknot.in. We are committed to protecting your personal data and respecting your privacy in accordance with India's Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

Please read this Privacy Policy carefully before using our website or services.

1. Information We Collect

We collect the following categories of personal data when you visit, register, or make a purchase on our platform:

a) Information You Provide Directly

Full name
Email address
Mobile number
Shipping and billing address
Payment information (processed securely via Razorpay; we do not store card details)
Communications you send us (via chat, email, WhatsApp)

b) Information Collected Automatically

IP address and device identifiers
Browser type and version
Pages visited, time spent, and clickstream data
Cookies and similar tracking technologies

c) Information from Third Parties

Social login data (Google, Apple) — name and email only, with your consent
Shipping partners (Shiprocket) for delivery fulfilment

2. Purpose of Data Collection

We collect and process your personal data for the following purposes:

Processing and fulfilling your orders
Sending order confirmations, shipping updates, and invoices
Customer support and grievance redressal
Personalising your shopping experience
Sending marketing communications (only with your consent)
Fraud prevention, security, and legal compliance
Improving our website and services through analytics
Meeting statutory obligations under Indian law

3. Legal Basis for Processing (DPDP Act 2023)

Under the DPDP Act, 2023, we process your data based on:

Consent — freely given, specific, and informed consent for marketing and non-essential processing
Contractual necessity — to fulfil your orders and provide services
Legal obligation — to comply with applicable Indian laws including GST, IT Act, and Consumer Protection Act
Legitimate interest — for fraud detection and platform security

4. Sharing of Personal Data

We do not sell your personal data. We may share your information with:

Payment processors (Razorpay) — for secure payment handling
Logistics partners (Shiprocket and associated carriers) — for order delivery
Technology providers (Shopify, Zoho, Google) — for platform operations and CRM
Legal authorities — when required by law, court order, or government direction

All third-party partners are contractually bound to maintain data confidentiality and implement adequate security measures.

5. Cookies and Tracking

We use cookies to enhance your browsing experience. These include:

Essential cookies — necessary for the website to function
Analytics cookies — to understand usage patterns (e.g., Google Analytics)
Marketing cookies — for retargeting and personalised ads (with consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order and transaction records are retained for a minimum of 7 years in compliance with Indian GST and accounting regulations. You may request deletion of your account and associated data at any time (subject to legal retention obligations).

7. Your Rights Under the DPDP Act, 2023

As a Data Principal under the DPDP Act, you have the right to:

Access — Request a summary of personal data we hold about you
Correction — Request correction of inaccurate or incomplete data
Erasure — Request deletion of your personal data (subject to legal obligations)
Grievance redressal — Raise complaints with our Grievance Officer
Withdraw consent — Withdraw consent for marketing communications at any time
Nominate — Nominate an individual to exercise rights on your behalf in case of death or incapacity

To exercise your rights, contact us at: privacy@glowknot.in

8. Data Security

We implement reasonable technical and organisational security measures in line with ISO 27001 principles and the IT (SPDI) Rules, 2011, including:

SSL/TLS encryption for data in transit
Secure payment processing via PCI-DSS compliant Razorpay
Access controls and role-based permissions
Regular security reviews and vulnerability assessments

However, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

9. Children's Privacy

Our services are not directed at individuals under the age of 18 years. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us immediately.

10. Cross-Border Data Transfers

Some of our service providers (such as Shopify and Google) may process data outside India. Where such transfers occur, we ensure appropriate safeguards are in place consistent with applicable Indian law.

11. Grievance Officer

In accordance with the DPDP Act, 2023 and IT Act, 2000, we have appointed a Grievance Officer:

Name: Koteswara Rao P
Email: grievance@glowknot.in
Address: GlowKnot, India
Response time: Within 48 hours of receipt of complaint

12. Changes to This Policy

We may update this Privacy Policy periodically. Any material changes will be notified via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.