Privacy Policy of KALASH IMPEX PRIVATE LIMITED

Effective Date: 22 April 2026

1. Introduction and Company Information

This Privacy Policy explains how KALASH IMPEX PRIVATE LIMITED (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you visit or use our website nilpimstimpax.pro, contact us, or otherwise interact with us in connection with our art-studio business activities.

KALASH IMPEX PRIVATE LIMITED is the data controller for the processing of personal data described in this Privacy Policy.

• Legal name: KALASH IMPEX PRIVATE LIMITED
• Company registration / CIN: U51101RJ1996PTC011708
• Registered address: 11, KRISHNA STREET, NEAR AMLI-ON KI BARI, BHILWARA, Rajasthan, India - 000000
• Email: [email protected]
• Phone: +91 22 5678 4321
• Website: nilpimstimpax.pro

This Privacy Policy is intended to be read together with any other notices we may provide from time to time. By using our website or communicating with us, you acknowledge that you have read and understood this Privacy Policy.

2. Data Collection and Processing

We may collect and process the following categories of personal data, depending on how you interact with us:

• Identity data: name, surname, username, title, and similar identifiers.
• Contact data: email address, phone number, postal address, and communication preferences.
• Inquiry and correspondence data: messages, feedback, requests, complaints, and other communications you send to us.
• Transaction and commercial data: details relating to purchases, commissions, bookings, invoices, payments, and order history, where applicable.
• Technical data: IP address, browser type, device information, operating system, language settings, and log data.
• Usage data: pages visited, time spent on the website, referring URLs, clickstream data, and interaction patterns.
• Marketing and preference data: preferences for receiving promotional communications and information about your interests.
• Content data: images, files, artwork references, briefs, and other materials you voluntarily submit in connection with our art-studio services.

We generally collect personal data directly from you, including when you submit forms, contact us by email or phone, request services, subscribe to updates, or otherwise interact with our website. We may also collect data automatically through cookies and similar technologies, subject to applicable law and your preferences where required.

We do not intentionally collect sensitive personal data unless you choose to provide it to us or it is necessary for a specific service and permitted by law. Where required, we will seek appropriate consent or rely on another lawful basis.

3. Purpose of Data Processing

We process personal data for the following purposes:

• To respond to enquiries, requests, and communications.
• To provide, manage, and improve our art-studio services, including creative consultations, commissions, and related offerings.
• To process transactions, issue invoices, and maintain business records.
• To manage customer relationships and provide support.
• To personalize website content and user experience.
• To send administrative messages, service updates, and important notices.
• To send marketing communications where permitted and, where necessary, with your consent.
• To monitor, secure, and maintain the performance of our website and systems.
• To detect, prevent, and investigate fraud, misuse, security incidents, or unlawful activity.
• To comply with legal obligations, regulatory requirements, and lawful requests.
• To establish, exercise, or defend legal claims.

4. Legal Basis for Processing

Where applicable privacy laws require a legal basis for processing, we rely on one or more of the following:

• Consent: where you have given clear permission for specific processing activities, such as receiving marketing communications or using certain cookies.
• Contractual necessity: where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms, such as improving services, securing systems, and managing communications.
• Legal obligation: where processing is necessary to comply with applicable laws, regulations, tax, accounting, or record-keeping obligations.
• Vital interests: where processing is necessary to protect someone’s life or physical safety in exceptional circumstances.
• Public interest or official authority: where applicable under relevant law.

5. Data Sharing and Third Parties

We may share personal data with trusted third parties only where necessary and in accordance with applicable law. These third parties may include:

• Service providers: hosting providers, website maintenance providers, email service providers, analytics providers, payment processors, and IT support vendors.
• Professional advisers: lawyers, auditors, accountants, consultants, and insurers.
• Business partners: collaborators, delivery partners, or contractors involved in fulfilling a request or service.
• Authorities and regulators: courts, law enforcement agencies, tax authorities, or other public bodies where disclosure is required or permitted by law.
• Successors in interest: in connection with a merger, acquisition, restructuring, sale of assets, or similar corporate transaction.

We require third parties to handle personal data in a manner consistent with applicable privacy obligations and, where appropriate, to implement adequate safeguards.

6. Data Transfer to Third Countries

Depending on the location of our service providers, personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, we will take appropriate measures to protect personal data in accordance with applicable law. These measures may include contractual safeguards, data transfer agreements, standard contractual clauses, or other legally recognized transfer mechanisms.

7. Storage Duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and dispute-resolution requirements.

• Inquiry and correspondence data are generally retained for as long as needed to handle the request and for a reasonable period thereafter.
• Transaction and financial records are retained for periods required by applicable law and business record-keeping obligations.
• Marketing data is retained until you withdraw consent or object, subject to lawful retention requirements.
• Technical and security logs are retained for a limited period unless needed for investigation, security, or legal purposes.

When personal data is no longer required, we will delete, anonymize, or securely archive it in accordance with our retention practices and applicable law.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: to request confirmation of whether we process your personal data and obtain a copy of it.
• Rectification: to request correction of inaccurate or incomplete personal data.
• Erasure: to request deletion of your personal data where legally permitted.
• Restriction: to request limitation of processing in certain circumstances.
• Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to request transfer to another controller.
• Objection: to object to processing based on legitimate interests or to direct marketing, where applicable.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.

9. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

If you withdraw consent, we may no longer be able to provide certain services or communications that depend on that consent. To withdraw consent, please contact us at [email protected].

10. Right to Complain

If you believe that our processing of your personal data violates applicable privacy laws, you may have the right to lodge a complaint with the relevant supervisory authority, data protection authority, or other competent regulator in your jurisdiction.

We encourage you to contact us first so that we can try to resolve your concern directly and promptly.

11. Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction. These measures may include:

• access controls and role-based permissions;
• password protection and authentication measures;
• secure hosting and network protections;
• data minimization and need-to-know access principles;
• monitoring for suspicious activity and security incidents;
• staff awareness and confidentiality obligations.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

• Company: KALASH IMPEX PRIVATE LIMITED
• Address: 11, KRISHNA STREET, NEAR AMLI-ON KI BARI, BHILWARA, Rajasthan, India - 000000
• Email: [email protected]
• Phone: +91 22 5678 4321
• CIN: U51101RJ1996PTC011708

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date.

Your continued use of our website or services after any changes become effective constitutes your acknowledgment of the updated Privacy Policy, to the extent permitted by applicable law.

If you have any questions about this Privacy Policy, please contact KALASH IMPEX PRIVATE LIMITED at [email protected].