1. Introduction
Karpasa World (“we”, “us”, “our”) operates the website karpasaworld.com, an online store offering clothing and related products for babies and children. We are a small business based in Karnataka, India. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have. By using this website or placing an order with us, you consent to the practices described here.
Last updated: 27 July 2026
2. Data We Collect
Information you provide
When you place an order or write to us we collect your name, billing and shipping address, email address, phone number, the contents of your order, and anything you write to us through our contact form or by email. If you create an account we also hold your username, a securely hashed password, saved addresses, order history and wishlist items.
Payment information
Card, UPI and netbanking details are entered directly with our payment gateway. We never see or store your full card details on our own servers.
Information collected automatically
Our servers and our security provider record technical information such as your IP address, browser and device type, the pages you view and the page that referred you. This is used for security, fraud prevention and site performance, not for advertising.
Where your data is stored
Our website runs on servers provided by Hostinger, and traffic is routed through the Cloudflare network. This means your data may be processed on servers located outside India. We use only providers that apply appropriate technical and organisational safeguards.
Children
Although our products are made for children, our services are directed to adults. We do not knowingly collect personal information from anyone under the age of 18.
3. Embedded Content and Third-Party Sign-In
Embedded content
Pages on this site may include embedded content from other websites, such as Instagram posts or videos. Embedded content behaves exactly as if you had visited that other website, and those websites may collect data about you, set their own cookies and monitor your interaction with the embedded content. We have no control over their practices.
Signing in with Google
If you choose to sign in or register using your Google account, Google shares your name, email address and profile picture with us so that we can create or match your customer account. We never receive your Google password, and you can withdraw this access at any time from your Google account settings.
4. Cookies
This site uses cookies, which are small text files stored on your device. We use them only for functional purposes:
- keeping you signed in to your account;
- remembering the contents of your cart and your checkout details;
- storing the items you add to your wishlist;
- serving cached pages quickly;
- confirming that a form submission comes from a person rather than an automated bot.
We do not currently use advertising, retargeting or analytics cookies. You can block or delete cookies through your browser settings, but please note that parts of the store, including checkout, may not work correctly if you do.
5. Who Has Access To Your Data
Access to your personal information is limited to authorised Karpasa World personnel who need it in order to:
- process, pack and dispatch your order;
- answer your enquiries and handle returns or exchanges;
- maintain our accounts and records.
We do not sell, rent or trade your personal information to anyone.
6. Third Parties Who Process Data For Us
We share the minimum information necessary with the service providers who help us run the store. Each of them processes your data only for the purpose for which we engage them.
Payments
Razorpay processes your payment. Razorpay is PCI-DSS compliant and handles your payment details directly.
Hosting, delivery and security
Hostinger hosts our website. Cloudflare provides content delivery, security and bot protection. Our email service sends order confirmations and replies to your enquiries.
Shipping
Our courier and logistics partners receive your name, delivery address and phone number so that your order can be delivered to you.
7. How Long We Retain Your Data
Order and invoice records are kept for as long as we are required to keep books of account under applicable Indian income tax law, currently up to six years. Karpasa World is not registered under GST, so we do not issue GST tax invoices or maintain GST records.
Account information is kept until you ask us to close your account. Contact form enquiries are kept for up to twenty-four months so that we can follow up on any related order or question. Server and security logs are typically retained for around thirty days.
8. Security Measures
The entire site is served over HTTPS using TLS encryption. Passwords are stored as one-way hashes and are never readable by us. Administrative access is restricted and protected, form submissions are screened for automated abuse, and payment card data never touches our servers.
No method of transmitting or storing information over the internet is completely secure. While we take these precautions seriously, we cannot guarantee absolute security.
9. Your Data Rights
Under India’s Digital Personal Data Protection Act, 2023 you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request that your data be erased, to withdraw consent you previously gave, and to raise a grievance about how we handle your information.
If you have an account you can view and update most of your details yourself under My Account. For anything else, write to [email protected] and we will respond within thirty days.
If you are in the European Union or the United Kingdom, you also have the corresponding rights available to you under the GDPR, including the right to receive a copy of your data in a portable format.
10. Third Party Websites
We may link to other websites, for example our social media profiles or those of our partners. Once you leave karpasaworld.com we have no control over the content or the privacy practices of those websites and we are not responsible for them.
Please review the privacy policy of any third party website before providing it with your personal information.
11. Legal Disclosure, Changes and Contact
We may disclose personal information where we are required to do so by law, by a court order or by a competent authority, or where disclosure is necessary to protect our rights, prevent fraud or ensure the safety of others.
We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new “last updated” date, and where practical we will draw your attention to material changes.
For any question, request or grievance about this policy or your personal data, contact us at [email protected], or by phone on 8971917376 or 9620664618. Karpasa World, Karnataka, India.