1. Lawful Basis for Processing Data

We process personal data only when there is a lawful basis under GDPR, including:

• Contractual Necessity : To fulfill a contract or provide requested services.
• Legitimate Interests : Compliance with applicable legal and regulatory requirements.
• Legal Obligation :
• Consent : When explicit consent is provided for marketing and cookies.

2. Information We Collect

We may collect and process the following types of personal data:

• Identity Data : Name, email address, phone number, billing/shipping address.
• Financial Data : Payment information (processed securely via third-party gateways; we do not store payment details).
• Technical Data : IP address, browser type, device identifiers, and website usage.
• Marketing & Communication Data : Subscription to newsletters, promotional messages, and preferences.

3. Data Processing & Purpose

We process personal data for the following purposes:

• To process orders, payments, and deliveries.
• To provide customer support and respond to inquiries.
• To comply with legal, tax, and regulatory obligations.
• To analyze and improve website performance and security.
• To send marketing communications (only with explicit consent).

4. Data Subject Rights

Under GDPR, you have the following rights:

• Right to Access : Request a copy of your personal data.
• Right to Rectification : Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten) : Request deletion of personal data when no longer necessary.
• Right to Restrict Processing : Limit the way we process your data.
• Right to Data Portability : Receive your data in a structured format.
• Right to Object : Object to processing for direct marketing or legitimate interests.
• Right to Withdraw Consent : Withdraw consent at any time for data processing based on consent.

To exercise these rights, contact us at care@kohira.com

5. Data Transfers Outside the EEA

As we operate globally, your data may be transferred outside the EEA, including to India. We implement appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements (DPAs) with service providers ensuring compliance.

6. Data Retention

We retain personal data only as long as necessary to fulfill our services, comply with legal obligations, resolve disputes, and enforce agreements. After this period, we securely delete or anonymize data.

7. Security Measures

We implement strict security measures to protect your personal data, including:

• Encryption of sensitive data.
• Secure access controls and authentication.
• Regular security audits and monitoring.

Despite these measures, no transmission over the internet is entirely secure. Users should also take precautions to safeguard their data.

8. Data Breach Notification

In the event of a data breach that may affect your rights, we will notify the relevant authorities within 72 hours and inform affected users when required under GDPR.

9. Cookies & Tracking Technologies

We use cookies and tracking technologies to enhance user experience and analyze website traffic. Users can manage cookie preferences through browser settings or opt-out via our cookie consent tool.

10. Contact Information

For any GDPR-related queries, requests, or complaints, please contact our Data Protection Officer (DPO):

• 1st & 2nd Floor, Plot No. M - 22/23, GHB Gems & Jewellery Park, Opp Ichhapore Bus Stop, No.2, Surat – 394510

• 502, Jai Mahal opp Metro Shoes,Bandra, Linking Rd, Khar, Khar West, Mumbai, Maharashtra 400052.
• Email : care@kohira.com
• Phone : +91 7851005200