Privacy Policy

1Who We Are

Target Exports Handicrafts Private Limited ("Target Exports", "we", "us", "our") is a company incorporated under the Companies Act 2013, with its registered office at:

Kishorpura, Bindayaka, Near Manglam Park
Jaipur, Rajasthan, India
Email: indiacraft86@gmail.com
Phone: +91 8104000022

Target Exports is the data controller for personal data collected via our website and B2B trade channels. We are responsible for deciding how and why personal data is processed.

2Data We Collect

We do not collect or store full payment card numbers. Payment processing is handled by PCI-DSS-compliant third-party gateways (Razorpay, Stripe, PayPal). We receive only a masked card reference and transaction confirmation.

3How We Use Your Data

• Order fulfilment: Processing, packing, shipping, and tracking your orders; issuing GST invoices and export documentation.
• Account management: Creating and maintaining your customer or wholesale account, authenticating logins, and managing preferences.
• Customer support: Responding to queries, complaints, and return requests.
• Marketing & communications: Sending order confirmations, dispatch alerts, and — with your consent — newsletters, promotions, and new collection announcements.
• B2B trade: Performing KYB (Know Your Business) checks, credit assessment, issuing commercial invoices, and facilitating export/import documentation.
• Analytics & improvement: Understanding how visitors use our website so we can improve products and the shopping experience.
• Legal compliance: Meeting obligations under GST law, customs regulations, anti-money laundering rules, and other applicable legislation.
• Fraud prevention & security: Detecting and preventing fraudulent transactions or unauthorised access.

4Legal Basis for Processing (GDPR)

For customers in the European Economic Area (EEA), United Kingdom, and other jurisdictions with equivalent data-protection laws, we rely on the following legal bases:

5Data Sharing

We do not sell your personal data. We share it only with the following categories of recipients, strictly on a need-to-know basis:

• Logistics & courier partners (e.g., Blue Dart, DHL, FedEx, India Post) — to ship your order.
• Payment processors (Razorpay, Stripe, PayPal) — to process payments securely.
• Cloud & hosting providers — to operate our website and store data securely.
• Email service providers — to send transactional and marketing emails.
• Analytics tools — aggregated, anonymised data to measure website performance.
• Legal & regulatory authorities — when required by law, court order, or customs regulation (e.g., DGFT, Customs, GST authorities).
• Professional advisors — lawyers, auditors, and insurers under confidentiality obligations.
• Business transfers — if Target Exports is acquired or merges, your data may transfer as a business asset; you will be notified in advance.

All third-party processors are bound by data processing agreements that prohibit them from using your data for any purpose other than providing services to us.

6International Data Transfers

As an international business, your data may be processed in countries outside India, including the EEA, USA, UAE, and Singapore. Where we transfer personal data outside India or the EEA, we ensure adequate protections are in place through one or more of the following:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions recognised by the relevant supervisory authority.
• Binding Corporate Rules or equivalent approved frameworks.
• The data-transfer provisions of India's DPDP Act 2023 (see §12).

7Data Retention

We retain personal data for as long as necessary for the purposes set out in this policy, subject to legal minimums:

8Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

To exercise any right, contact our Data Protection Officer (see §14). We will respond within 30 days (extendable to 90 days for complex requests, with notice).

9Cookies & Tracking

We use the following categories of cookies:

• Essential cookies: Required for login sessions, shopping cart, and site security. Cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics with IP anonymisation enabled). Require your consent.
• Marketing cookies: Used to show relevant advertisements across platforms. Require your consent.
• Preference cookies: Remember your language, currency, and display preferences.

You can manage your cookie preferences via the cookie banner on your first visit, or at any time through your browser settings. Note that disabling essential cookies may affect site functionality.

10Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit.
• At-rest encryption for sensitive stored data.
• Hashed and salted passwords (bcrypt).
• Role-based access controls — only authorised staff access personal data.
• Regular security audits and vulnerability assessments.
• Incident response and breach notification procedures (we will notify affected individuals within 72 hours of becoming aware of a reportable breach).

11Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe a child has submitted personal data to us should contact us at indiacraft86@gmail.com.

12India — Digital Personal Data Protection Act 2023

As an Indian data fiduciary, Target Exports complies with the Digital Personal Data Protection (DPDP) Act 2023 and applicable rules. Indian residents ("data principals") have the following rights under the Act:

• Right to access information about personal data processed and the entities with whom it has been shared.
• Right to correction and erasure of inaccurate or outdated personal data.
• Right to grievance redressal — you may raise a complaint with us within the timelines set by applicable rules.
• Right to nominate another individual to exercise your rights in the event of your death or incapacity.

We process personal data of Indian residents on the basis of consent or for legitimate uses as defined under the DPDP Act. Cross-border transfer of Indian personal data is conducted only to countries notified as permitted under the Act.

To exercise your rights under the DPDP Act, contact our Grievance Officer (see §14).

13Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered customers by email for significant changes.
• Display a prominent notice on our homepage for 30 days following the update.

Continued use of our website or services after the effective date constitutes acceptance of the revised policy.

14Contact & Data Protection Officer

For privacy-related queries, data-subject requests, or complaints:

If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany).