Privacy policy

 

Last updated: 30 July 2026

 

KROSSO operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). KROSSO is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

This Privacy Policy is governed by the Information Technology Act, 2000 (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) and the Digital Personal Data Protection Act, 2023 ("DPDPA"). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

 

Personal Information We Collect or Process

"Personal information" (referred to as "personal data" under the DPDPA) means any information that identifies or can reasonably be linked to you. We may collect or process the following categories, depending on how you interact with the Services:

  • Contact details: name, address, billing address, shipping address, phone number, and email address.
  • Financial information: payment card details, UPI/payment confirmation, transaction details, and form of payment (processed via our payment partners; we do not store full card numbers).
  • Account information: username, password, preferences and settings.
  • Transaction information: items you view, add to cart or wishlist, purchase, return, exchange, or cancel, and your order history.
  • Communications with us: information included in customer support enquiries or other messages you send us.
  • Device information: device, browser, or network details, IP address, and other identifiers.
  • Usage information: how you interact with and navigate the Services.

 

Personal Information Sources

We collect personal information:

  • Directly from you, when you create an account, place an order, or contact us;
  • Automatically, through your use of the Services and via cookies and similar technologies;
  • From our service providers who process personal information on our behalf (for example, payment processing, shipping, and analytics);
  • From our business partners, where applicable.

 

How We Use Your Personal Information

We use your personal information, with your consent where required, to:

  • Provide and improve the Services — process payments, fulfil and ship orders, manage your account, handle returns and exchanges, and personalise your shopping experience.
  • Marketing — send promotional emails or messages about products and offers, where you have consented to receive them. You can withdraw this consent at any time (see "Your Rights and Choices" below).
  • Security and fraud prevention — authenticate your account, secure payments, and detect or prevent fraudulent or unsafe activity. You are responsible for keeping your account credentials confidential.
  • Customer support — respond to your questions and provide assistance.
  • Legal compliance — comply with applicable law, respond to valid legal requests, and enforce our terms and policies.

 

How We Disclose Personal Information

We may share your personal information with:

  • Shopify and other service providers who support our operations (payment processing, shipping and fulfilment, data analytics, customer support, cloud storage).
  • Business partners, for marketing purposes, only where you have consented to such use.
  • Third parties you direct us to share information with, such as for delivery of your order.
  • Our affiliates, within our corporate group.
  • Government authorities or law enforcement, where required by applicable Indian law, or to protect our rights, users, or the Services.
  • A successor entity, in connection with a business transaction such as a merger, acquisition, or sale of assets.

 

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit will be shared with Shopify and its service providers, which may be located outside India, in order to provide the Services to you. To learn more about how Shopify processes personal information, you can visit the Shopify Consumer Privacy Policy (shopify.com/legal/privacy).

 

Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of such third parties. Please review their privacy policies before sharing any information with them. Inclusion of a link does not imply our endorsement of that website or its operator.

 

Children's Data

Under the DPDPA, anyone under 18 years of age is considered a child. The Services are not intended for use by children, and we do not knowingly collect personal information from anyone under 18 without verifiable consent from a parent or legal guardian. We do not use children's personal information for targeted advertising or behavioural tracking. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us using the details below and we will delete it.

 

Security and Retention of Your Information

We use reasonable security practices and procedures, as required under the Information Technology Act, 2000, to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Once these purposes are fulfilled, we will delete or anonymise your personal information, unless a longer retention period is required by law.

 

Your Rights and Choices

Under the DPDPA, you have the following rights in relation to your personal information:

  • Right to Access — request a summary of the personal information we hold about you and how it is processed.
  • Right to Correction and Erasure — request that we correct inaccurate or incomplete personal information, or delete it where it is no longer necessary for the purpose it was collected.
  • Right to Withdraw Consent — withdraw consent you previously gave for any processing activity, at any time, as easily as you gave it. This does not affect processing carried out before withdrawal.
  • Right to Grievance Redressal — raise a complaint with us regarding our handling of your personal information (see "Grievance Officer" below).
  • Right to Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

You may opt out of marketing emails at any time using the unsubscribe link in those emails. You may still receive non-promotional emails related to your account or orders.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before processing your request, and will respond within the timelines required under applicable law.

 

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for KROSSO can be reached at:

Krosso

Email: help@krosso.in

Phone: +91-9820075575

Address: Shop No. 208, Shepherd Royal, Laxmi Nagar, Link Road, Goregaon West, Mumbai – 400104

Complaints will be acknowledged within 48 hours and resolved within one month of receipt. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India.

 

International Transfers

We may store or process your personal information outside India through our service providers, including Shopify. Where we do so, we ensure such transfers are carried out in accordance with the DPDPA and are not made to any country restricted by the Government of India.

 

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the revised policy on this page and update the "Last updated" date. Material changes will be notified to you where required by law.

 

Contact

For questions about our privacy practices or this Privacy Policy, or to exercise any of your rights, contact us at:

Krosso

Email: help@krosso.in

Phone: +91-9820075575

Address: Shop No. 208, Shepherd Royal, Laxmi Nagar, Link Road, Goregaon West, Mumbai – 400104