Privacy Policy

KalaCraftWorks is an online art and creative-products platform operated by Softwiz Circle.

The Platform may facilitate the discovery, display, promotion and purchase of products including:

• Paintings;
• Artwork;
• Art prints;
• Handcrafted products;
• Decorative art;
• Sculptures;
• Artist-created products;
• Other artistic and creative products.

Depending on the particular product or transaction, Softwiz Circle may sell products directly or may facilitate transactions between customers and independent artists, creators or sellers.

For privacy purposes, Softwiz Circle may act as the entity determining the purposes and means of processing personal data in relation to the Website and services it provides.

We collect only information that is reasonably necessary for operating KalaCraftWorks, providing services, completing transactions, complying with legal obligations and improving the Platform.

The information we collect may include the following.

2.1 Information You Provide

When you create an account, place an order, contact us, register as an artist or otherwise interact with KalaCraftWorks, we may collect:

Personal identification information

• Full name;
• Username;
• Profile name;
• Artist/creator name;
• Business or studio name;
• Information included in your profile;
• Other information voluntarily provided by you.

Contact information

• Email address;
• Mobile number;
• Telephone number;
• Billing address;
• Shipping/delivery address;
• Communication preferences.

Account information

• Username;
• Login credentials;
• Account preferences;
• Wishlist;
• Saved products;
• Order history;
• Account-related information.

If you register as an artist, creator or seller on KalaCraftWorks, we may collect additional information required to operate the Platform.

This may include:

• Artist/creator name;
• Business name;
• Email address;
• Mobile number;
• Address;
• PAN, where legally required;
• GST information, where applicable;
• Bank/payment settlement information;
• Tax-related information;
• Artwork information;
• Portfolio information;
• Artist biography;
• Photographs;
• Product photographs;
• Artwork descriptions;
• Shipping information;
• Information required for verification and fraud prevention.

Some artist information may be displayed publicly if you choose to publish it through your KalaCraftWorks profile.

Artists and sellers should not submit confidential or sensitive personal information for public display.

When you purchase an artwork or other product through KalaCraftWorks, we may collect and process:

• Order number;
• Products purchased;
• Product price;
• Quantity;
• Billing information;
• Shipping information;
• Delivery information;
• Payment status;
• Transaction/reference number;
• Refund information;
• Return information;
• Customer communications relating to the transaction.

This information is required to process and administer your purchase.

Payments may be processed through third-party payment gateways or financial service providers.

Depending on the payment method, we may receive information such as:

• Transaction ID;
• Payment reference;
• Payment status;
• Amount;
• Payment method;
• Refund status;
• Date and time of transaction.

Unless specifically required and legally permitted, we do not intend to store complete debit-card or credit-card numbers, CVV numbers, PINs or online banking credentials on our own servers.

Payment information may be processed directly by the applicable payment service provider in accordance with its own privacy policy and security practices.

You should review the privacy policy of the applicable payment provider before completing a transaction.

When you visit or use KalaCraftWorks, certain technical information may be collected automatically.

This may include:

• IP address;
• Browser type;
• Browser version;
• Operating system;
• Device type;
• Device identifiers;
• Approximate location;
• Referring website;
• Pages visited;
• Products viewed;
• Date and time of access;
• Session information;
• Website interactions;
• Error information;
• Performance information;
• Security logs.

We may use this information to operate, secure, analyse and improve the Website.

KalaCraftWorks may use cookies, web beacons, pixels, tags, local storage and similar technologies.

These technologies may be used for:

• Authentication;
• Shopping-cart functionality;
• Account functionality;
• Security;
• Website performance;
• Analytics;
• Remembering preferences;
• Personalisation;
• Marketing, where legally permitted.

Essential cookies

Certain cookies may be necessary for the Website to function properly.

For example:

• Login sessions;
• Shopping cart;
• Security;
• Checkout;
• Authentication.

Analytics and optional cookies

We may use analytics or other optional technologies to understand how visitors use the Website.

Where consent is required under applicable law, we will provide an appropriate consent mechanism.

You may also control cookies through your browser settings.

Disabling certain cookies may affect Website functionality.

We may use personal data for the following purposes.

8.1 Providing our services

We use personal data to:

• Create and maintain accounts;
• Process orders;
• Process payments;
• Arrange shipping;
• Deliver products;
• Process returns and refunds;
• Provide customer support;
• Manage artist/seller accounts;
• Display artist/product information;
• Maintain wishlists and preferences.

8.2 Communication

We may use your contact information to send:

• Order confirmations;
• Payment confirmations;
• Shipping updates;
• Delivery notifications;
• Return/refund updates;
• Account notifications;
• Security notifications;
• Service-related communications.

8.3 Marketing

Where permitted by applicable law and, where required, based on your consent, we may send:

• Promotional offers;
• New-product announcements;
• Artist updates;
• Newsletters;
• Special events;
• Discounts;
• Recommendations.

You may unsubscribe from promotional communications at any time using the unsubscribe mechanism provided.

You may continue to receive essential transactional or service communications after opting out of marketing communications.

We may process personal information to:

• Detect fraudulent transactions;
• Prevent payment abuse;
• Detect suspicious activity;
• Protect customer accounts;
• Protect artists and sellers;
• Prevent unauthorised access;
• Investigate security incidents;
• Protect the Website and infrastructure;
• Prevent misuse of the Platform.

We may process or disclose information where reasonably necessary to:

• Comply with applicable Indian law;
• Comply with tax and accounting obligations;
• Respond to lawful government requests;
• Comply with court orders;
• Respond to law-enforcement requests;
• Establish or defend legal claims;
• Investigate fraud;
• Protect our legal rights;
• Comply with regulatory requirements.

The Digital Personal Data Protection Act, 2023 defines personal data and processing broadly and establishes obligations concerning lawful processing of digital personal data.

Depending on the circumstances and applicable law, we may process personal data where:

1. You have provided consent;
2. Processing is necessary to provide goods or services requested by you;
3. Processing is necessary for a purpose permitted by applicable law;
4. Processing is necessary to comply with a legal obligation;
5. Processing is necessary for security, fraud prevention or protection of our rights; or
6. Another lawful basis under applicable law permits such processing.

As provisions of the DPDP Act and Rules become applicable according to their notified commencement schedule, our processing practices, notices and consent mechanisms will be updated as necessary. The notified Rules specifically require notices to be understandable independently and to provide an itemised description of personal data and the specified purposes of processing.

Where processing requires consent, we will seek consent through an appropriate mechanism.

Consent requests will be presented in a clear and understandable manner.

Where applicable, you may withdraw consent using the mechanism provided by us.

Withdrawal of consent will not affect processing that was lawfully carried out before withdrawal.

Where processing is necessary for providing a service or fulfilling a transaction, withdrawing consent may affect our ability to provide that service.

We do not sell personal data as a standalone business activity.

We may share personal data where reasonably necessary with the following categories of recipients.

13.1 Payment service providers

For:

• Payment processing;
• Refunds;
• Transaction verification;
• Fraud prevention.

13.2 Shipping and logistics providers

For:

• Order fulfilment;
• Shipping;
• Delivery;
• Return collection.

Such providers may receive information such as:

• Customer name;
• Delivery address;
• Mobile number;
• Order details.

13.3 Artists and sellers

Where KalaCraftWorks facilitates a transaction with an independent artist or seller, we may provide information reasonably necessary to fulfil the order.

This may include:

• Customer name;
• Shipping address;
• Contact number where required for delivery;
• Order details.

Artists and sellers must use customer information only for legitimate transaction-related purposes and must not use it for unauthorised marketing or unrelated purposes.

13.4 Technology service providers

We may use third-party providers for:

• Cloud hosting;
• Website infrastructure;
• Database services;
• Email;
• SMS;
• Analytics;
• Customer support;
• Security;
• Fraud prevention;
• Backup;
• Monitoring.

13.5 Professional advisers

Information may be shared with:

• Lawyers;
• Accountants;
• Auditors;
• Tax advisers;
• Consultants;
• Insurers;
• Other professional advisers.

13.6 Government and law enforcement

We may disclose information where required or permitted by law.

We may appoint third-party service providers to process personal data on our behalf.

Such providers may include:

• Hosting providers;
• Payment processors;
• Shipping providers;
• Cloud service providers;
• Email providers;
• Analytics providers;
• Security providers;
• Customer-support providers.

Where appropriate, we will seek to impose contractual and security obligations on such service providers consistent with applicable law.

Some service providers may process or store personal data outside India.

Where personal data is transferred outside India, we will take reasonable steps to ensure that such processing is carried out in accordance with applicable Indian law and relevant contractual and security requirements.

Where Indian law imposes restrictions or conditions on cross-border processing or transfer, we will comply with those requirements.

We take reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Unauthorised disclosure;
• Loss;
• Destruction;
• Alteration;
• Misuse;
• Unlawful processing.

Depending on the nature and risk of processing, measures may include:

• HTTPS/TLS encryption;
• Access controls;
• Authentication;
• Role-based access;
• Password protection;
• Logging and monitoring;
• Backup controls;
• Vulnerability management;
• Security testing;
• Malware protection;
• Infrastructure security;
• Employee confidentiality obligations.

However, no electronic transmission, storage system or internet service can be guaranteed to be completely secure.

If we become aware of a personal data breach affecting personal data processed by us, we will take reasonable steps to:

1. Identify and investigate the incident;
2. Contain the incident;
3. Assess its impact;
4. Take appropriate remedial measures;
5. Notify affected individuals where required;
6. Notify relevant authorities where required; and
7. Take measures to reduce the likelihood of recurrence.

The DPDP Rules, 2025 prescribe security-safeguard and personal-data-breach-related requirements that apply according to their notified commencement timeline. (MeitY)

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required/permitted by applicable law.

Retention periods may depend on:

• The purpose for which information was collected;
• Whether you maintain an account;
• Transaction history;
• Legal requirements;
• Tax/accounting requirements;
• Dispute resolution;
• Fraud prevention;
• Security requirements.

For example, transaction and financial records may need to be retained longer than ordinary website analytics data.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal requirements.

Subject to applicable law and its commencement, you may have rights relating to your personal data, including the right to:

• Request information regarding processing;
• Request access to personal data;
• Request correction of inaccurate information;
• Request updating of information;
• Request erasure/deletion where applicable;
• Withdraw consent where processing is based on consent;
• Raise a privacy grievance;
• Exercise other rights available under applicable Indian law.

The DPDP Act establishes rights for Data Principals including access to information, correction/erasure and grievance redressal, subject to the Act and applicable conditions.

You may submit a privacy request using the contact details provided below.

Please provide:

• Full name;
• Registered email address;
• Registered mobile number, if applicable;
• Nature of the request;
• Order/account reference, where relevant;
• Information reasonably necessary to verify your identity.

We may request additional information to verify your identity before processing a request.

This is intended to prevent unauthorised access, disclosure or modification of personal information.

KalaCraftWorks is not specifically intended for children.

Under the DPDP Act, a child is an individual who has not completed 18 years of age.

We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.

Where applicable law requires verifiable parental or guardian consent, we will implement appropriate mechanisms.

If you believe that personal data relating to a child has been provided to us improperly, please contact us using the details below.

Artists may voluntarily provide information for publication on KalaCraftWorks.

Such information may include:

• Artist name;
• Artist biography;
• Portfolio;
• Artwork images;
• Artwork descriptions;
• Studio/business information;
• Public contact information voluntarily provided for display.

Information intentionally submitted for public display may be visible to visitors and may potentially be copied or redistributed by third parties.

Artists should not submit confidential information for public display.

Users may have the opportunity to submit:

• Reviews;
• Ratings;
• Comments;
• Photographs;
• Testimonials;
• Other content.

Information submitted for public display may be visible to other users.

You should not include in public submissions:

• Passwords;
• Credit/debit card information;
• Bank account details;
• PAN;
• Aadhaar;
• Government identification numbers;
• Confidential information;
• Sensitive personal information relating to yourself or another person.

KalaCraftWorks may contain links to third-party websites or services.

These may include:

• Payment providers;
• Shipping providers;
• Social media platforms;
• Artist websites;
• External marketplaces;
• Other service providers.

We are not responsible for the privacy practices or security of third-party websites.

You should review the privacy policy of any third-party website before providing personal information.

KalaCraftWorks may maintain social-media accounts or integrate social-media functionality into the Website.

If you interact with us through a social-media platform, that platform may independently process your information under its own privacy policy.

We encourage you to review the privacy policies of the applicable social-media platforms.

We may use analytics and performance-monitoring services to understand:

• Website traffic;
• User interactions;
• Product views;
• Search behaviour;
• Conversion;
• Website performance;
• Technical errors;
• User experience.

Where required by law, appropriate consent mechanisms will be used.

Where permitted by applicable law, you may receive promotional communications from us if you have opted in or where another lawful basis permits such communication.

You may unsubscribe from marketing communications using the unsubscribe option provided in the relevant communication.

Unsubscribing from marketing communications will not normally stop essential communications concerning:

• Orders;
• Payments;
• Delivery;
• Refunds;
• Returns;
• Security;
• Account activity;
• Important changes to services or policies.

You are responsible for maintaining the confidentiality of your account credentials.

You should:

• Use a strong password;
• Avoid sharing your password;
• Log out from shared devices;
• Notify us immediately if you suspect unauthorised access.

We will never knowingly ask you to provide your complete password through an unsolicited email or message.

We will not ordinarily ask you to provide confidential payment credentials such as:

• CVV;
• ATM PIN;
• Internet banking password;
• OTP;
• Complete card credentials

through unsolicited communications.

If you receive a suspicious message claiming to be from KalaCraftWorks, please contact us through the official contact information published on our Website.

We seek to collect personal data that is reasonably necessary for the purposes described in this Privacy Policy.

We do not intend to collect personal data merely because it may be convenient or potentially useful in the future.

Where information is optional, we will endeavour to identify it as optional where appropriate.

We may update this Privacy Policy from time to time.

Changes may be made because of:

• Changes in our business;
• New services;
• Changes in technology;
• Changes in legal requirements;
• Regulatory developments;
• Changes in our data-processing practices.

The updated version will be published at: www.kalacraftworks.com

The “Last Updated” date will be changed when this Privacy Policy is materially updated.

Where applicable law requires additional notice or consent, we will provide such notice or obtain such consent.

If you have a privacy concern, personal-data request, complaint or question, you may contact our Grievance Officer/Privacy Contact.

Grievance Officer

Name: Amit Kumar
Designation: Grievance Officer / Privacy Officer
Company: Softwiz Circle
Website: www.kalacraftworks.com
Email: softwizadmin@softwizcircle.com
Telephone: +91-7057881848 / +91-9987367484

Registered Office Address:
Balewadi, Pune, Maharashtra, India.

Working Hours:
9 am to 6 pm

For e-commerce entities, the Consumer Protection (E-Commerce) Rules require an appropriate grievance-redressal mechanism and the appointment/display of a grievance officer’s details. The rules also provide for acknowledgement of consumer complaints within 48 hours and redressal within one month. (Consumer Affairs)

For order-related or general customer-support queries:

Email: softwizadmin@softwizcircle.com
Phone: +91-7057881848 / +91-9987367484
Business Hours: 9 am to 6 pm
Website: www.kalacraftworks.com

Legal Entity Name: Softwiz Circle
Brand/Platform: KalaCraftWorks
Website: www.kalacraftworks.com
Entity Type: LLP
Registered Office: Balewadi, Pune, Maharashtra, India
Customer Support Email: softwizadmin@softwizcircle.com
Customer Support Phone: +91-7057881848 / +91-9987367484
Grievance Officer: Amit Kumar
Grievance Officer Phone: +91-7057881848 / +91-9987367484

The Consumer Protection (E-Commerce) Rules require e-commerce entities to prominently provide information including the legal name, principal geographic address, website details and customer-care/grievance contact information. (Consumer Affairs)

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, subject to applicable mandatory provisions of law.

Nothing in this Privacy Policy is intended to exclude or limit any right or remedy that cannot legally be excluded or limited under applicable law.

For any question relating to this Privacy Policy or the processing of your personal information:

Softwiz Circle
KalaCraftWorks
Website: www.kalacraftworks.com
Privacy Email: softwizadmin@softwizcircle.com
Grievance Email: softwizadmin@softwizcircle.com
Customer Support: +91-7057881848 / +91-9987367484

Registered Office:
Balewadi, Pune, Maharashtra, India

Your use of the Platform is also governed by our Terms of Service, Shipping & Delivery Policy and Return & Refund Policy.