1. Introduction

We operate klevay.in, an e-commerce platform selling fast-moving consumer goods (FMCG). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our Site, create an account, or make a purchase.

By using our Site, you agree to the practices described in this policy. If you do not agree, please do not use our Site.

2. Information We Collect

a) Information You Provide

•       Name, email address, phone number, and date of birth

•       Shipping and billing addresses

•       Payment information (processed securely via third-party payment gateways; we do not store full card details)

•       Account login credentials

•       Order history, preferences, and wishlists

•       Communications with customer support, reviews, and feedback

b) Information Collected Automatically

•       IP address, device identifiers, browser type and version

•       Operating system and device information

•       Pages viewed, time spent, clicks, and browsing behavior

•       Referring URLs and exit pages

•       Location data (approximate, based on IP)

•       Cookies and similar tracking technologies

c) Information from Third Parties

•       Social media platforms if you log in using social accounts

•       Analytics providers (e.g., Google Analytics)

•       Marketing and advertising partners

•       Delivery and logistics partners

3. How We Use Your Information

We use the information we collect to:

•       Process and fulfill your orders, including shipping and delivery

•       Manage your account and provide customer support

•       Send order confirmations, invoices, and transactional updates

•       Send marketing communications and promotional offers (with your consent, where required)

•       Personalize your shopping experience and recommend products

•       Improve our website, products, and services

•       Detect, prevent, and address fraud and security issues

•       Comply with legal obligations and enforce our terms

4. Legal Basis for Processing

Where applicable (e.g., under GDPR or India's DPDP Act), we process your personal data based on:

Consent: For marketing communications and non-essential cookies.

Contract: To fulfill orders and provide services you request.

Legitimate interests: To improve our services, prevent fraud, and run our business.

Legal obligation: To comply with tax, accounting, and consumer protection laws.

5. Sharing and Disclosure

We do not sell your personal data. We share information only with:

Service providers: Payment processors, logistics and courier partners, cloud hosting providers, email services, and customer support platforms.

Analytics and marketing partners: To measure and improve the effectiveness of our Site and campaigns.

Legal authorities: When required by law, court order, or to protect our rights and safety.

Business transfers: In case of a merger, acquisition, or sale of assets.

6. Cookies and Tracking Technologies

We use cookies to operate the Site, analyze usage, remember preferences, and deliver personalized advertising. Types of cookies used:

•       Essential cookies (required for site functionality, e.g., cart, login)

•       Analytics cookies (to understand how users interact with the Site)

•       Marketing cookies (for personalized ads and retargeting)

You can manage cookie preferences through your browser settings or our cookie consent banner.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Order and transaction records are typically retained for [X years] to comply with tax and accounting obligations. Account data is retained while your account is active; you may request deletion at any time.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including encryption (SSL/TLS), access controls, and secure payment gateways. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you have the right to:

•       Access the personal data we hold about you

•       Correct inaccurate or incomplete information

•       Request deletion of your personal data

•       Withdraw consent for marketing communications at any time

•       Object to or restrict certain processing activities

•       Request data portability

•       Lodge a complaint with the relevant data protection authority

To exercise these rights, contact us at [privacy@yourdomain.com].

10. International Data Transfers

If we transfer your data outside your country of residence, we ensure appropriate safeguards are in place, such as standard contractual clauses or other legally recognized mechanisms.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify you via email or a prominent notice on the Site.