Privacy Policy
Last Updated: May 1, 2026
Introduction
1. Our Commitment to Privacy
Welcome to Kassaro ("we," "our," "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.onekassaro.com (the "Site"), use our services, or interact with us.
We operate from Jaipur, Rajasthan, India, and serve clients worldwide, including the European Economic Area (EEA). This policy complies with the Indian Information Technology Act, 2000, and we voluntarily adhere to the principles of the General Data Protection Regulation (GDPR) for our clients in the European Union and European Economic Area.
2. Information We Collect
We may collect information you voluntarily provide when you:
- Fill out inquiry forms – Name, email address, phone number, company name, country, and project details
- Contact us via email, WhatsApp, or Google Meet – Any information you share during communication
- Request quotes or samples – Business address, shipping details, product preferences
- Subscribe to communications – Email address
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Respond to your inquiries and quotes | Legitimate business interest |
| Process orders and manage accounts | Contract performance |
| Improve our website and services | Legitimate interest |
We DO NOT: Sell your personal data to third parties, share your data for unrelated marketing without consent, or collect sensitive personal data without explicit permission.
4. Your Rights as a Data Subject (EEA & Global)
The European Economic Area (EEA) provides certain rights to data subjects including:
- Access – Request a copy of your personal data
- Rectification – Correct inaccurate or incomplete data
- Erasure (Right to be Forgotten) – Request deletion of your data
- Restriction of Processing – Limit how we use your data
- Data Portability – Receive your data in a structured format
- Right to Object – Object to certain processing activities
- Right to Complain – Lodge a complaint with a supervisory authority
Kassaro undertakes to provide you with the same rights no matter where you choose to live.
Whether you are in India, the European Economic Area, the United Kingdom, Switzerland, or anywhere else in the world, you have the right to access, correct, and request deletion of your personal data.
5. Data Retention
We keep your personal information for as long as it is required for the purposes stated in this Privacy Policy. When we no longer have a legitimate need to process your information, we will delete, anonymize, or isolate your information, whichever is appropriate.
| Data Type | Retention Period | Reason |
|---|---|---|
| Inquiry data | 3 years | Client follow-up and legitimate business interest (unless deletion is requested earlier) |
| Order records | 7 years | Compliance with applicable tax, accounting, and legal obligations under Indian law |
| Service data (after termination) | 6 months (active database) 3 months (backups) | Post-termination data deletion and compliance with data minimization principles |
| Analytics data | 14 months (GA4 default) | Performance analysis (subject to user consent for analytics cookies) |
| Marketing communication data | Until consent is withdrawn | User consent (email/communication preferences) |
Information That Kassaro Processes on Your Behalf
6. Service Data Ownership and Processing
If you handle other people's data, such as information about your customers or employees, you are entrusting that data to us for processing. The data you entrust to us for processing is called service data.
You own your service data. We protect it, limit access to it, and only process it according to your instructions.
We hold the data in our database as long as you choose to manufacture clothes with Kassaro. After you terminate our business relationship, we will delete your data from our active database within 6 months and from our backups within 3 months after that.
7. EEA Data Subjects – Third-Party Data
If you are in the European Economic Area (EEA) and you believe that someone has entrusted your information to us for processing (for instance, your employer or a company whose services you use), you can request certain actions from us regarding your data. To exercise those data rights, please contact the person or company that entrusted the data to us, and we will work with them on your request.
Part III – General Provisions
8. Limitations to Privacy
There are some limitations to the privacy we can promise you. We will disclose personal information if it's necessary to:
- Comply with a legal obligation
- Prevent fraud or illegal activity
- Enforce an agreement
- Protect our customers' safety or the safety of others
9. Do Not Track Signals
We do not currently honour Do Not Track signals from internet browsers. When a universal standard for processing them emerges, we will follow it.
10. Third-Party Websites and Social Media
Third-party websites and social media widgets have separate privacy policies. Always check the relevant privacy policy before sharing personal information with third parties. We are not responsible for the privacy practices of external websites.
11. Cookies and Tracking Technologies
We use limited tracking technologies for analytics purposes, including Google Analytics, to understand how visitors interact with our website and to improve our services. These technologies may use cookies or similar identifiers. You can control or disable cookies through your browser settings; however, doing so may affect certain functionalities of the site.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Site operation | Session |
| Analytics (GA4) | Performance tracking | Up to 2 years |
| Preference | Remember settings | 6 months |
12. Third-Party Services We Use
- Google Analytics 4 – Website analytics – Google Privacy Policy
- Google Tag Manager – Tag management – Google Privacy Policy
- WhatsApp (Meta) – Client communication – WhatsApp Privacy Policy
- Google Meet – Video consultations – Google Privacy Policy
13. Data Security
We implement reasonable security measures including SSL/TLS encryption, access controls, regular security reviews, and secure servers. However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
14. International Data Transfers
We operate from India but serve clients worldwide. Your information may be transferred to and processed in India, the United States (Google servers, Vercel), and the European Union (if using EU-based services). When transferring data internationally, we ensure adequate safeguards are in place and transfers comply with applicable laws.
Part IV – Contact Us & Policy Changes
15. How to Contact Us
You can always contact us to:
- Ask questions about our privacy practices
- Request a GDPR-compliant Data Processing Addendum (DPA)
- Alert us if you believe we have collected personal data from a minor
- Ask to have your personal information removed from our blogs or forums
- Request access, correction, or deletion of your data
Email: team@onekassaro.com
Phone: +91 (637) 839-29964
Address: Plot No 28, 3rd Floor, Ratnapuri, Sodala, Jaipur, Rajasthan - 302006, India
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any changes will be posted on this page, and the "Last Updated" date will be revised accordingly. We encourage you to review this policy periodically.
17. Grievance Officer (as required by Indian law)
Name: Mr. Karan Singh
Position: Compliance Officer / Grievance Officer
Email: team@onekassaro.com
Phone: +91 (637) 839-29964
Address: Plot No 28, 3rd Floor, Ratnapuri, Sodala, Jaipur, Rajasthan - 302006, India