Privacy Policy - Trishtara Kashi

Last updated: 28 July 2026

Trishtara Kashi respects your privacy and is committed to handling your personal data transparently, responsibly and securely.

This Privacy Policy explains what personal data we collect, how and why we collect it, how we use, disclose, retain and protect it, and the rights and choices available to you.

This Privacy Policy applies to the Trishtara Kashi website and online store available at trishtarakashi.com, including its webpages and subdomains, and to communications and services connected with our business.

By using our website or voluntarily providing personal data to us, you acknowledge that you have read this Privacy Policy. Where consent is required under applicable law, we will seek it through an appropriate affirmative action.

1. WHO WE ARE

Trishtara Kashi is a sole proprietorship owned and operated by Yogendra Gujrati.

Trishtara Kashi is a Varanasi-based saree business offering premium handloom Banarasi sarees, online shopping, personalised saree-selection assistance, WhatsApp support and video-shopping assistance.

Business details

Business/Brand Name: Trishtara Kashi Proprietor: Yogendra Gujrati Business Constitution: Sole Proprietorship Website: trishtarakashi.com Email: trishtarakashi@gmail.com Customer-Care Number: +91 73988 28167

Business Address:

K-28/43-K, Govind Ji Nayak Lane Near Jagdamba Nepali Dharamshala, Doodh Vinayak Varanasi, Uttar Pradesh – 221001 India

For the purposes of applicable data-protection law, Trishtara Kashi determines the purposes and means for which personal data collected through our website and services is processed.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data collected through:

Our website and online store;
Product, cart and checkout pages;
Customer accounts;
Email and telephone communications;
WhatsApp, Instagram, Facebook and other communication platforms;
Personalised shopping and video-shopping requests;
Orders, payments and deliveries;
Returns, refunds, exchanges and complaints;
Promotional subscriptions and marketing preferences; and
Other online or offline interactions connected with our products and services.

Third-party websites, payment gateways, courier providers, social-media platforms and communication services may process information under their own privacy policies and terms.

3. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of personal data.

3.1 Identity and contact information

We may collect:

Your name;
Email address;
Telephone or mobile number;
WhatsApp number;
Billing address;
Shipping or delivery address;
City, state, country and postal code; and
Alternative contact or delivery details provided by you.

3.2 Customer-account information

Where customer accounts are available, we may collect or process:

Username;
Account identifier;
Login and authentication information;
Saved addresses;
Account preferences;
Order history; and
Password-reset requests.

Passwords are managed through the website’s authentication system and are not intended to be stored by us in readable plain-text form.

You are responsible for keeping your password, device and account credentials secure.

3.3 Shopping and product-preference information

We may collect information about:

Products viewed or searched for;
Products shortlisted or saved;
Products added to the cart;
Products purchased;
Preferred colours, fabrics, designs and price ranges;
Occasion or intended use;
Sarees discussed during personalised assistance;
Product-availability enquiries; and
Shopping-assistance notes reasonably required to serve you.

3.4 Order and transaction information

We may collect:

Order number;
Products and quantities ordered;
Order value;
Billing details;
Delivery details;
Transaction reference;
Payment method;
Payment status;
Order status;
Dispatch and delivery status;
Cancellation details;
Refund status; and
Return or exchange information.

3.5 Payment information

Where online payment facilities are available, confidential payment credentials are processed by the applicable payment gateway, bank or payment-service provider.

We do not intend to collect or store your:

Complete credit or debit card number;
Card verification value or CVV;
UPI PIN;
ATM PIN;
Internet-banking password;
Banking OTP; or
Similar confidential payment-authentication credentials.

We may receive limited payment-related information such as:

Payment method;
Transaction reference number;
Payment date;
Payment success or failure status;
Payment-gateway response;
Refund amount; and
Refund status.

You should enter confidential banking or payment credentials only on the secure page of an authorised payment gateway or bank.

3.6 Communications and customer-support information

We may collect:

Emails;
WhatsApp messages;
Telephone enquiries;
Social-media messages;
Product and price enquiries;
Customer-support requests;
Feedback;
Complaints;
Return, refund and exchange requests;
Images or screenshots voluntarily shared by you; and
Records of our responses and communications.

When you contact us through WhatsApp, Instagram, Facebook or another third-party platform, we may receive your profile name, mobile number, account identifier, message content and other information that you choose to share through that platform.

3.7 Video-shopping information

When you request a video-shopping session, we may collect:

Your name and contact details;
Your preferred date and time;
Saree preferences;
Preferred colours or fabrics;
Approximate price range;
Occasion or intended use;
Products shown or shortlisted; and
Follow-up information required to assist you.

We do not ordinarily record video-shopping sessions.

Where a session is proposed to be recorded, photographed or retained beyond ordinary communication records, we will provide appropriate information and seek consent where required.

3.8 Technical and website-usage information

When you access our website, we or our authorised technical providers may automatically collect:

IP address;
Browser type and version;
Device type;
Operating system;
Approximate location derived from technical information;
Date and time of access;
Referring website or source;
Pages and products viewed;
Website interactions;
Cart and checkout activity;
Session duration;
Error logs;
Security logs; and
Diagnostic or website-performance information.

3.9 Cookie and session information

We may use cookies and similar technologies to process information relating to:

Website sessions;
Cart contents;
Login status;
Account security;
Checkout functionality;
Website preferences;
Fraud prevention;
Website performance; and
Analytics or marketing preferences, where such technologies are enabled.

3.10 Marketing and consent information

We may maintain records of:

Whether you requested promotional communication;
The communication channel selected by you;
The date and method of consent;
Your marketing preferences;
Unsubscribe requests;
Opt-out requests; and
Withdrawal of consent.

3.11 Information voluntarily provided by you

We may process other information that you voluntarily provide while:

Making an enquiry;
Placing an order;
Requesting personalised assistance;
Giving feedback;
Submitting a complaint;
Requesting a return, refund or exchange; or
Communicating with us for another legitimate purpose.

Please do not send Aadhaar details, PAN details, banking passwords, payment PINs, medical information or other sensitive information unless we have specifically requested information that is reasonably necessary and lawful for a stated purpose.

4. HOW WE COLLECT PERSONAL DATA

We may collect personal data in the following ways.

4.1 Directly from you

We may collect information when you:

Browse our website;
Create an account;
Add a product to your cart;
Place or attempt to place an order;
Make a payment;
Request product details;
Contact us through email, WhatsApp, telephone or social media;
Book a video-shopping session;
Request customer support;
Request a cancellation, return, refund or exchange;
Submit a complaint;
Subscribe to promotional communication; or
Otherwise voluntarily provide information to us.

4.2 Automatically through the website

Technical, security, cookie, session and website-usage information may be collected automatically when you access or use the website.

4.3 From service providers

We may receive limited information from:

Payment gateways;
Banks and payment-service providers;
Courier and logistics providers;
Website-hosting providers;
Transactional-email providers;
Website-security providers;
Fraud-prevention providers; and
Other service providers involved in completing your transaction or providing a requested service.

4.4 From third-party communication platforms

If you contact us through WhatsApp, Instagram, Facebook or another third-party platform, we may receive information made available through that platform or voluntarily shared by you.

5. PURPOSES FOR WHICH WE USE PERSONAL DATA

We may process personal data for lawful purposes connected with operating our business and providing products and services.

5.1 Processing and fulfilling orders

We may use personal data to:

Receive and confirm orders;
Verify product availability;
Confirm prices and quantities;
Process order-related payments;
Package products;
Arrange shipping and delivery;
Provide order-status updates;
Issue invoices;
Process cancellations;
Process returns, exchanges or refunds; and
Maintain transaction records.

5.2 Providing customer support

We may use personal data to:

Respond to enquiries;
Answer product-related questions;
Confirm availability;
Address complaints;
Provide after-sales support;
Resolve payment or delivery issues; and
Manage return, refund or exchange requests.

5.3 Providing personalised shopping assistance

Where requested by you, we may use your preferences, approximate budget, occasion, colour choice, fabric choice and previously discussed products to provide personalised saree-selection or video-shopping assistance.

5.4 Communicating with you

We may use your contact information to send:

Order confirmations;
Payment-status updates;
Availability confirmations;
Dispatch notifications;
Delivery updates;
Return or refund updates;
Account-security information;
Customer-support responses; and
Other communications reasonably necessary to provide a requested service.

5.5 Operating and improving our website

We may use appropriate technical and usage information to:

Maintain website functionality;
Manage customer accounts;
Operate the cart and checkout;
Diagnose technical problems;
Improve website navigation;
Improve customer experience;
Understand product interest;
Maintain compatibility across devices;
Monitor website performance; and
Improve our products and services.

5.6 Security and fraud prevention

We may process information to:

Protect customer accounts;
Prevent unauthorised transactions;
Identify suspicious orders;
Detect fraud or misuse;
Maintain website security;
Investigate security incidents;
Protect our legal rights; and
Enforce our terms and policies.

5.7 Legal, tax and regulatory compliance

We may process and retain information to:

Maintain tax and accounting records;
Issue invoices;
Comply with consumer-protection requirements;
Respond to valid legal or regulatory requests;
Resolve disputes;
Prevent or investigate unlawful activity; and
Establish, exercise or defend legal claims.

5.8 Marketing communication

We may send promotional messages, product updates, new-collection announcements, exhibition information or offers where:

You have requested such communication;
You have expressed interest in receiving it;
You have provided consent where required; or
The communication is otherwise permitted under applicable law.

Marketing consent is voluntary and is not a condition for placing an order.

We will not use personal data for a materially incompatible new purpose without providing appropriate information and obtaining consent where required.

6. TRANSACTIONAL AND MARKETING COMMUNICATIONS

6.1 Transactional communications

We may send communications necessary to provide a requested service, including:

Order confirmations;
Payment confirmations or failure notifications;
Availability updates;
Dispatch and delivery updates;
Cancellation updates;
Return, exchange and refund updates;
Account-security notifications;
Password-reset messages; and
Responses to customer-support requests.

These communications are necessary to complete a transaction, maintain account security or respond to your request.

6.2 Marketing communications

Promotional communications may include:

New saree collection updates;
Product recommendations;
Availability updates;
Offers;
Exhibition information;
WhatsApp catalogue updates; and
Other brand or promotional announcements.

You may opt out of promotional communication at any time by:

Using an unsubscribe option, where available;
Replying with an opt-out request;
Requesting removal through WhatsApp;
Changing available account preferences; or
Emailing trishtarakashi@gmail.com.

Opting out of marketing communication will not prevent us from sending necessary transactional, security or customer-service messages.

We may retain limited information about an opt-out request to ensure that your preference continues to be respected.

7. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small files or identifiers placed on or accessed from your device when you use a website.

7.1 Essential cookies

Our website may use essential cookies and similar technologies for:

Cart functionality;
Checkout functionality;
Login and account security;
Session management;
Fraud prevention;
Website navigation;
Remembering limited user choices; and
Technical operation of the online store.

Essential cookies may be necessary for the website to function correctly.

Blocking or disabling essential cookies may prevent the cart, checkout, customer account or other website features from operating properly.

7.2 Analytics and non-essential cookies

We may use analytics, performance, advertising or other non-essential technologies where they have been enabled.

Where consent is required:

Non-essential cookies will be subject to the choices made through our cookie notice or consent-management mechanism;
You may be offered options to accept, reject or manage non-essential cookies; and
You may be able to change your cookie preferences later.

7.3 Browser settings

You may control or delete cookies through your browser settings.

Browser controls may affect website functionality and may not remove information already processed or maintained outside your device.

Further details about cookies currently in use may be provided through a separate Cookie Notice or cookie-preference tool.

8. HOW WE SHARE PERSONAL DATA

We do not sell or rent your personal data.

We may share limited personal data only where reasonably necessary for a legitimate business, contractual, security or legal purpose.

8.1 Website and technical-service providers

We may share information with, or permit limited access to, providers involved in:

Website hosting;
Domain services;
Website maintenance;
Cloud storage;
Website backups;
Cybersecurity;
Technical support; and
Website-performance management.

Our website may use systems and services associated with Hostinger, WordPress and WooCommerce, depending on the services currently enabled.

8.2 Email and communication-service providers

We may use providers such as:

Brevo;
WP Mail SMTP;
Email-hosting services; and
Other transactional-email or communication providers.

These providers may process limited contact, order and communication information needed to deliver messages.

8.3 Payment gateways and banking partners

Where online payments are enabled, relevant transaction information may be processed by:

Payment gateways;
Banks;
UPI service providers;
Card networks;
Fraud-prevention providers; and
Refund-processing partners.

Payment providers process confidential payment credentials under their own security standards, privacy policies and terms.

8.4 Courier and logistics providers

To fulfil and deliver an order, we may share:

Customer name;
Shipping address;
Mobile number;
Shipment or order reference;
Package information; and
Delivery instructions.

Courier and logistics providers may use this information for shipping, tracking, delivery, delivery support and related operational purposes.

8.5 Professional advisers and service providers

We may share information where reasonably necessary with:

Accountants;
Tax advisers;
Auditors;
Lawyers;
Security professionals;
Fraud-prevention providers;
Insurance providers; and
Other professional advisers or contractors.

Such persons may be subject to professional, contractual, confidentiality or data-protection obligations.

8.6 Government and legal authorities

We may disclose information where reasonably necessary:

To comply with applicable law;
To respond to a valid court order;
To respond to a lawful request from a government or regulatory authority;
To investigate suspected fraud or unlawful activity;
To prevent or investigate cyber incidents;
To protect the rights, safety or property of customers or others; or
To establish, exercise or defend legal claims.

8.7 Business restructuring

If the ownership or operation of Trishtara Kashi changes through a lawful transfer, sale, succession, restructuring, merger or similar transaction, relevant personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

8.8 Third-party communication platforms

When you communicate with us through WhatsApp, Instagram, Facebook or another third-party service, that platform may independently process your personal data under its own privacy policy and terms.

We do not control the independent data-processing practices of third-party platforms.

8.9 Data minimisation when sharing

We seek to share only the personal data reasonably necessary for the relevant service or purpose.

Where appropriate, service providers are expected to process personal data subject to reasonable confidentiality, security, contractual or data-protection obligations.

9. INTERNATIONAL DATA PROCESSING AND TRANSFERS

Some hosting, email, cloud, payment, communication, social-media or technical-service providers may operate servers or process information outside India.

Where personal data is processed or transferred outside India, we will take reasonable steps to:

Use reputable service providers;
Limit the information shared to what is reasonably necessary;
Require appropriate security or confidentiality measures where applicable;
Ensure protection consistent with applicable Indian law; and
Comply with restrictions or conditions notified by the Government of India.

Where sensitive personal data or information is transferred outside India, we will seek to ensure that the recipient maintains an appropriate level of protection and that the transfer is connected with providing a requested service, performing a lawful contract, complying with law or is otherwise permitted with appropriate consent.

International transfers will also remain subject to restrictions or requirements that may be notified under applicable Indian data-protection law.

10. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

The retention period may depend on:

Whether an order has been completed;
Whether a customer account remains active;
Whether customer support is still being provided;
Whether a return, exchange or refund remains pending;
Tax, invoicing and accounting requirements;
Fraud-prevention requirements;
Website-security requirements;
Legal limitation periods;
The existence of a dispute, complaint or legal claim; and
Marketing or consent preferences.

Information that may need to be retained includes:

Order and invoice records;
Payment-status and refund records;
Shipping and delivery records;
Tax and accounting records;
Customer complaints;
Return and exchange records;
Security logs; and
Records of consent withdrawal or marketing opt-out.

A deletion request may not require us to delete information that must be retained for:

Taxation;
Accounting;
Fraud prevention;
Consumer grievance resolution;
Dispute resolution;
Enforcement of contractual rights;
Legal proceedings; or
Compliance with another legal obligation.

When personal data is no longer reasonably required, we may securely delete, de-identify or anonymise it, subject to legal, security, backup and operational requirements.

Backup copies may remain for a limited period until overwritten or securely removed through the normal backup cycle.

11. DATA SECURITY

We take reasonable technical and organisational measures intended to protect personal data against:

Unauthorised access;
Unlawful processing;
Accidental loss;
Misuse;
Alteration;
Unauthorised disclosure;
Damage; and
Accidental destruction.

Depending on the nature of the data and systems involved, these measures may include:

Restricted administrative access;
Strong authentication;
Access controls;
Secure hosting;
Website, theme and plugin updates;
Security monitoring;
Access and error logs;
Secure email-delivery methods;
Malware protection;
Backup procedures;
Fraud-detection measures;
Confidentiality requirements; and
Reasonable internal access restrictions.

Access to personal data should be limited to persons who reasonably require it for business operations, customer support, website administration, accounting, security or legal purposes.

No method of internet transmission, website operation or electronic storage can be guaranteed to be completely secure.

Customers should also:

Protect their passwords and devices;
Avoid sharing OTPs or payment PINs;
Log out when using a shared device;
Avoid responding to suspicious payment requests; and
Contact us if they suspect unauthorised use of their account or order information.

Personal-data and security incidents

If we become aware of a personal-data or information-security incident, we will take reasonable steps to:

Investigate the incident;
Contain it;
Mitigate potential harm;
Restore security;
Maintain relevant records; and
Notify affected individuals or competent authorities where notification is required under applicable law.

12. YOUR RIGHTS AND CHOICES

Subject to applicable law and reasonable identity verification, you may exercise the following rights.

12.1 Right to information and access

You may request information about the personal data we process about you and the purposes for which it is being processed, subject to applicable legal restrictions.

12.2 Right to correction and updating

You may request correction, completion or updating of personal data that is inaccurate, incomplete, misleading or outdated.

12.3 Right to erasure

You may request deletion or erasure of personal data that is no longer required for the purpose for which it was collected.

Deletion may be restricted where retention is necessary for:

Compliance with law;
Tax or accounting records;
Prevention of fraud;
Consumer grievance resolution;
Dispute resolution;
Security purposes; or
Establishing, exercising or defending legal claims.

12.4 Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent through an available mechanism or by contacting us.

Withdrawal of consent:

Will not affect processing lawfully completed before withdrawal;
May limit our ability to provide a service that depends on the relevant information; and
Will not require us to stop processing information where processing is required or permitted under another applicable legal basis.

12.5 Right to opt out of marketing

You may ask us to stop sending promotional emails, WhatsApp updates or other marketing communications at any time.

12.6 Customer-account requests

Where customer accounts are available, you may request:

Correction of account information;
Assistance with account access; or
Closure of an account.

Closing an account does not necessarily require deletion of transaction, tax, security, fraud-prevention or legal records that must be retained.

12.7 Right to grievance redressal

You may raise a grievance regarding:

Collection of personal data;
Use or disclosure of personal data;
Correction or deletion requests;
Withdrawal of consent;
Marketing communications;
Security concerns; or
Our handling of a previous privacy request.

12.8 Right to nominate

Where the relevant provisions of applicable data-protection law are in force, you may have the right to nominate another individual to exercise applicable rights in the event of your death or incapacity.

12.9 Complaint to a competent authority

Where available under applicable law and after using our grievance-redressal mechanism, you may have the right to approach the Data Protection Board of India or another competent authority.

12.10 How to exercise your rights

To submit a privacy request, contact:

Email: trishtarakashi@gmail.com Mobile: +91 73988 28167

Please provide:

Your full name;
Your registered email address or mobile number;
Your order number, where relevant;
A clear description of your request; and
Information reasonably necessary to locate the relevant records.

We may request reasonable information to verify your identity and prevent unauthorised access, alteration or deletion of personal data.

We will review and respond to requests within the period required by applicable law.

13. CHILDREN’S PRIVACY

Our website, products and shopping services are primarily intended for adults.

We do not knowingly seek to collect personal data directly from a person under 18 years of age without appropriate involvement or consent of a parent or lawful guardian where required.

A person under 18 should:

Use the website only with the involvement of a parent or lawful guardian;
Place an order only with the consent and supervision of a parent or lawful guardian; and
Avoid independently submitting personal or payment information.

Where we become aware that personal data of a child has been collected without appropriate parental or guardian involvement, we may take reasonable steps to delete or restrict that information, subject to legal requirements.

We do not intend to use children’s personal data for behavioural monitoring, tracking or targeted advertising.

14. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to or integrations with:

WhatsApp;
Instagram;
Facebook;
Payment gateways;
Banks;
Courier-tracking websites;
Social-media platforms; and
Other third-party websites or services.

We are not responsible for the independent privacy practices, terms, content, availability or security of third-party platforms.

When you open or use a third-party link or service, that third party may collect and process information according to its own privacy policy and terms.

You should review the applicable third-party privacy policy before providing personal data.

15. PAYMENT AND FRAUD WARNING

Trishtara Kashi will not ask you to disclose your:

UPI PIN;
ATM PIN;
Card CVV;
Internet-banking password;
Email password;
Device password; or
OTP intended to authorise a banking transaction.

Customers should verify payment instructions before transferring money.

If you receive a suspicious message claiming to represent Trishtara Kashi, contact us using the official contact details displayed on trishtarakashi.com.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when:

Our website or services change;
New payment, shipping, analytics, security or marketing tools are introduced;
Our business operations change;
Our service providers change;
Legal or regulatory requirements change; or
Our data-handling practices change.

The revised Privacy Policy will be posted on this page with an updated “Last updated” date.

Where required by law, we may provide additional notice or seek fresh consent before making a material change affecting consent-based processing.

We encourage customers to review this Privacy Policy periodically.

17. CONTACT AND GRIEVANCE REDRESSAL

For privacy questions, correction requests, deletion requests, consent withdrawal, account-related requests, consumer complaints or grievances, please contact:

Business/Brand: Trishtara Kashi Proprietor: Yogendra Gujrati Business Constitution: Sole Proprietorship

Grievance Officer: Yogendra Gujrati Designation: Proprietor and Grievance Officer Email: trishtarakashi@gmail.com Customer-Care and Grievance Number: +91 73988 28167

Postal Address:

K-28/43-K, Govind Ji Nayak Lane Near Jagdamba Nepali Dharamshala, Doodh Vinayak Varanasi, Uttar Pradesh – 221001 India

When submitting a complaint or privacy request, please provide:

Your name;
Your contact information;
Your order number, where applicable;
A clear description of the complaint or request; and
The resolution requested.

Consumer complaints will ordinarily be acknowledged within 48 hours of receipt.

We will seek to resolve complaints as expeditiously as possible and ordinarily within one month from the date of receipt, subject to:

The nature and complexity of the matter;
Identity verification;
Information required from the customer;
Involvement of payment, shipping or technical-service providers; and
Applicable legal requirements.

Privacy requests will be reviewed and addressed within the period prescribed under applicable law.

18. APPLICABLE LAW

This Privacy Policy is intended to be interpreted in accordance with applicable Indian law, including, to the extent applicable and in force:

The Information Technology Act, 2000;
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
The Consumer Protection Act, 2019;
The Consumer Protection (E-Commerce) Rules, 2020, as amended;
The Digital Personal Data Protection Act, 2023;
The Digital Personal Data Protection Rules, 2025; and
Other applicable legal and regulatory requirements.

If any provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the mandatory legal requirement will apply to the extent of that conflict.