Privacy Policy

1. Who this policy covers

This policy applies to information collected through the Ritkalp website, any Ritkalp mobile application introduced in future, your Ritkalp account, guest checkout, orders and enquiries, ritual recommendation and discovery journeys, customer-support interactions, and other digital services operated by Ritkalp.

This policy should be read together with our Terms & Conditions, Refund, Return & Cancellation Policy and Shipping Policy.

2. Who we are

Ritkalp Consumer Pvt Ltd., Shop #007, HVP Society, Techzone-4, Greater Noida, UP-201306
Email: atul.viet@gmail.com
Phone / WhatsApp: +91 92609 61388

3. What information we collect

We follow a data-minimisation approach: we collect information when we need it to provide a particular service, not in case it is useful later.

Account information. When you create an account: name, email address, phone number where provided, login credentials, account preferences, and information needed to keep the account secure. Passwords are stored using a one-way hash, never as plain text.

Order and delivery information. When you buy: name, mobile number, email address, delivery address, PIN code, products or kits ordered, quantity, order value, delivery preferences, order status, and information needed to tell you about your order. We need this to process, deliver and support your order.

4. Ritual and preference information

To provide guided ritual discovery, recommendations and kits, we may ask for the occasion or ritual, a preferred date and time slot, household size where relevant, a tradition or regional preference where relevant, language preference, product or kit preferences, and a list provided by your priest or pandit. We do not need your entire personal or family history to help you prepare for a ritual.

We do not currently ask for, and do not intend to collect without a clear and specific reason: gotra, caste, family lineage, religion, gender, date of birth, details of family members, or other highly personal information unrelated to the service you request. If a future feature genuinely needs more, we will explain why before we collect it.

5. Information from a priest or pandit, and uploaded lists

If you use a feature that lets you provide a ritual list or connect with a priest or pandit, we may process what you voluntarily give us: the list, the occasion, the date, the location, your language preference, the items required, and anything else needed to fulfil the request.

When you upload a photo of a pandit ji's list, it is read by an automated text-reading service (Google Gemini) so that we can match the items to our catalogue. We do not keep that list photo after it has been read. Photos you attach to a custom request, a return or your profile are stored until you delete them or erase your account.

We share with a practitioner only what is reasonably needed for the service. We do not give a practitioner your full account history. Where information will go to a practitioner for a specific service, we aim to make that clear before it happens.

6. Browsing and cart information

We may process the pages you visit, the products you view, the rituals you explore, items added to your cart, search and discovery activity, device and browser information, approximate location, and the technical information needed to run and secure the site. If you are not signed in, your cart may be kept in your browser’s local storage rather than on our servers.

7. Payment information

We do not store your full card, bank-account or UPI credentials on our servers. Online payments are processed by a third-party provider, Razorpay, which may process the payment details directly. We receive the transaction information needed to confirm payment, match it to an order, process refunds, detect duplicate or failed transactions, resolve disputes and keep transaction records. We do not collect your card PIN, UPI PIN, CVV or banking authentication details.

8. Customer support and communications

If you contact us by email, phone, WhatsApp, chat or another channel, we may collect your name, contact details, order information, the content of your enquiry, any photographs or documents you send, the communication history, and what is needed to resolve the issue. We use this to respond, support you, investigate complaints and improve our service.

9. Why we use your information

We use personal information only for purposes connected with running Ritkalp and providing the services you ask for: recommending products or ritual solutions, processing and fulfilling orders, arranging delivery, customer support, practitioner-related services, cancellations and refunds, and important order messages. We also use it to run and improve the site, diagnose problems, develop features, keep the platform secure, and comply with legal obligations such as tax and accounting records, fraud prevention and dispute resolution.

10. Ritual information is not an advertising profile

A ritual search or purchase can reveal something about a person’s circumstances, such as a health, family, marriage, grief or new-home event. We do not turn that into an advertising profile about you. We do not sell your ritual preferences to advertisers or data brokers, and we do not use sensitive-sounding ritual information as an advertising segment by default. Where personalisation or marketing needs your consent, we will ask for it.

11. Marketing communications

Buying a product is not blanket permission for unlimited marketing. Where marketing needs consent, we will ask for it. You can opt out of promotional messages at any time using the unsubscribe link, by contacting us, or through the preference controls in your account. Even if you opt out, we still send essential messages about your order, delivery, refunds, security and account.

12. Who we share information with

We do not sell your personal information. We share limited information with service providers only where it is needed to run Ritkalp:

• Delivery partners — name, phone number, delivery address, PIN code and shipment details. We do not send them your ritual preferences.
• Payment providers — Razorpay, which processes payment credentials under its own privacy policy.
• Communication providers — email, SMS and WhatsApp services used for order and support messages.
• Technology and infrastructure providers — hosting, database, security, error monitoring and authentication services, which may process information only to provide their service to us.
• Practitioners — only when you ask for a service involving a priest or pandit, and only the information that service needs.
• Legal and regulatory disclosure — where required by law, a valid government or court request, to prevent fraud or abuse, to protect someone’s safety, or to establish or defend legal claims.

13. How long we keep information

We do not keep personal information indefinitely. We keep it as long as reasonably necessary for its purpose and for legitimate business, legal, accounting, security or dispute-resolution needs, so different information is kept for different periods. Order and transaction records are kept as required for accounting, tax, legal, fraud-prevention and dispute purposes. Where the law requires us to keep something, we keep it for the required period even after an account is deleted.

14. Your rights

You have privacy rights, including seeing, correcting and erasing your data, withdrawing consent, managing marketing, nominating someone to act for you where the law allows it, and raising a grievance. Some requests need reasonable verification, and we may keep some information where the law requires it or where it is needed to defend a legal claim.

How to use your rights explains each right and how to exercise it, and the Privacy Centre in your account lets you do most of it yourself.

15. Cookies and similar technologies

We use cookies, local storage and similar technologies to keep you signed in, keep your cart, remember preferences, keep the site secure, and understand how the site is used. If you are not signed in, cart information may be stored in your browser. You can manage cookies in your browser settings, but turning off essential ones may affect parts of the site.

16. Analytics

We may use analytics to see which pages and products are visited, which features are useful, how people move around the site, technical performance and general geographic patterns. Where analytics data is anonymous or aggregated, we keep it separate from account information. We do not sell analytics data.

17. Children

Ritkalp is not directed at children. We do not knowingly collect personal information from children where the law does not permit it. A parent or guardian who believes a child has given us information improperly can contact us, and we will review it.

18. Security and data breaches

We use reasonable technical and organisational safeguards, including encrypted connections, access controls, authentication, password hashing, database security, restricted internal access, service-provider security controls, and monitoring and logging. No system can be guaranteed completely secure. If we become aware of a personal-data breach, we will assess it and take the steps the law requires, including notifying the people and authorities concerned within the required timelines.

19. Third-party websites and services

Ritkalp may link to third-party sites or services, such as payment providers, delivery partners, social-media platforms, practitioner platforms and external learning resources. Those services have their own privacy practices, which apply when you use them. We are not responsible for the privacy practices of sites we do not control.

20. International processing

Some of our technology and service providers process information outside India. Where that happens, we do so subject to applicable law and appropriate contractual, technical or organisational safeguards where required. Our database is hosted by Neon and our site by Vercel, both in the United States.

21. Changes to this policy

We may update this policy as our products, services, technology or the law change. When we make a material change, we will update the date above and, where appropriate, tell you. We encourage you to check this page from time to time.

22. Grievances

If you have a concern about how your personal information is collected, used, shared, secured or handled, please contact us first, using the details under “Who we are”. Make a grievance. We aim to reply within 7 days.

To complain to the Data Protection Board of India, use the means the Board publishes. We will link the Board’s complaint page here once it is available.

23. Governing law

This policy is governed by the laws of India. Subject to any mandatory rights available to you under applicable law, disputes about this policy are subject to the jurisdiction of the competent courts for Greater Noida, Uttar Pradesh, India.

This policy refers to the Digital Personal Data Protection Act, 2023 and its rules, the Information Technology Act, 2000 and its rules, and other applicable consumer and e-commerce requirements. Where the law gives you a right or protection more favourable than this policy, that right applies.

Our privacy promise

Nothing extra. Nothing hidden. We collect information because it helps us do something for you: recommend, prepare, deliver, support or improve your Ritkalp experience. Your tradition belongs to you, and so does your information.

The notice you agree to, itemised

Notice version privacy_notice_v2 · English

This notice stands on its own. It lists the personal data Ritkalp processes, the exact purpose for each, and how to withdraw consent, use your rights or complain.

Sign in → Account → Privacy Centre → switch the purpose off. It takes one click, the same as switching it on. Open Privacy Centre.