Legal
Privacy Policy
What we collect when you shop with us, why we hold it, and what you can make us do with it. Covers the website and the KoshurWaan app equally.
Last updated
Who we are
KoshurWaan is operated by Warisoft Technologies Private Limited, at 4th Floor, Nagoo Complex, NH1, Zainakote, Ummer Abad, Srinagar, Jammu and Kashmir 190012. Under the Digital Personal Data Protection Act 2023 we are the data fiduciary for the data described here.
What we collect
- Account
- Name, email, phone and password. Date of birth and gender if you choose to add them.
- Addresses
- Recipient name and phone, address lines, landmark, city, state and pincode, for addresses you save.
- Orders
- What you bought, the price, the delivery address as it stood when you ordered, and the parcel's status history.
- Payments
- A reference to the payment and the amount. Your card, UPI and netbanking credentials are never sent to us.
- Cart, wishlist, reviews
- Items you saved, and any review you post — published with the first name on your account.
- Technical
- Your IP address and security logs, which are what let us detect and block attempts to break into accounts.
- Notifications
- If you allow them in the app, the push token your device issues and a device identifier.
We collect nothing else. There is no advertising identifier, no analytics or tracking SDK, no location data, and no access to your contacts, photos, camera or files.
Why we hold it
- To take, charge for, ship and support an order — the contract you entered into with us.
- To keep your account working, and to meet legal obligations such as retaining invoices.
- To keep the store secure, and to detect fraud and abuse.
- To send marketing, only if you opted in, and only until you opt out.
How long we keep it, and deleting your account
Your account is kept until you delete it. You can do that yourself, on the website or in the app, at /account/delete. It takes effect immediately and cannot be undone.
Deleting removes your name, email, phone, saved addresses, wishlist, cart and password, and signs out every device. Completed orders are kept for as long as tax law requires the invoice, but are detached from your profile. An order placed before deletion still shows the delivery details that were on the invoice — that is a legal record of a transaction. Push tokens are removed on sign-out or deletion.
Your rights
Under the DPDP Act 2023 you may ask us what we hold about you, correct it, erase it (subject to records we must keep), withdraw marketing consent, or nominate someone to exercise these rights for you. Write to support@koshurwaan.com. If you are not satisfied, our Grievance Officer Waris Shah can be reached at support@koshurwaan.com and must acknowledge within 48 hours and resolve within 30 days. After that, you may complain to the Data Protection Board of India.
Security
Every connection to the site and the app is encrypted. Passwords are stored scrambled in a form that cannot be turned back into your password, by us or by anyone else. Changing your password or deleting your account signs out every device at once. Card details never reach our servers, so they cannot be stolen from them. If we discover a breach affecting your data we will notify you and the Data Protection Board.
Children, and changes to this policy
KoshurWaan is not intended for anyone under 18 and we do not knowingly collect data from children. When this policy changes materially we update the date at the top of this page.