PRIVACY POLICY
Effective Date: 5 January 2025
Last Updated: 10 January 2026
Version: 2.0
1. INTRODUCTION
This Privacy Policy explains how your personal data is collected, used, stored, and protected when you use our websites and services:
We are committed to protecting your privacy and complying with all applicable data protection laws, including:
Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood how we process your personal data.
2. WHO WE ARE – DATA CONTROLLERS
2.1 For Customers in the United Kingdom, European Union, and Rest of World
Data Controller:
Taro Designs UK Ltd (trading as "Karee Clothing")
Registered in England & Wales
Company Number: 13894733
Registered Address: 3 Maes Y Rhedyn, Bridgend, CF31 4FD, United Kingdom
Contact for Privacy Matters:
Email: privacy@karee.co.uk
General Inquiries: hello@kareeclothing.com
2.2 For Customers in India
Data Fiduciary (Data Controller):
Karee Clothing Private Limited
Registered Address: Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala, India – 685509
Contact for Privacy Matters:
Email: privacy.india@kareeclothing.com
General Inquiries: hello@kareeclothing.com
Indian Data Protection Officer (DPO):
Email: dpo.india@kareeclothing.com
Address: Karee Clothing Private Limited, Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala – 685509, India
Indian Grievance Officer (DPDP Act Compliance):
Name: Shijo K Jose
Email: grievance.india@kareeclothing.com
Address: Karee Clothing Private Limited, Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala – 685509, India
Response Time: Within 72 hours of receipt of complaint
3. SCOPE AND APPLICABILITY
3.1 Who This Policy Applies To
This Privacy Policy applies to:
3.2 Age Restrictions
United Kingdom and Rest of World:
Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from children under 16.
India:
Our services are not intended for individuals under 18 years of age. Per the India DPDP Act, individuals under 18 require verifiable parental consent. We do not knowingly process data of children without such consent.
Age Verification:
We implement age verification through:
If you are a parent/guardian and believe your child has provided personal data without consent, please contact us immediately at privacy@karee.co.uk (UK/EU) or privacy.india@kareeclothing.com (India) for immediate deletion.
4. PERSONAL DATA WE COLLECT
4.1 Information You Provide Directly
When you place an order, create an account, or contact us, we collect:
4.2 Payment Information
We do NOT store your complete credit/debit card details.
Payments are processed securely by third-party payment processors:
These processors may store tokenized payment information for future transactions (with your consent).
4.3 Automatically Collected Data
When you visit our website, we automatically collect:
4.4 Marketing and Communication Preferences
4.5 Customer Support and Return Data
4.6 User-Generated Content
If you submit:
4.7 Data We Do NOT Collect
We do NOT collect:
5. WHY WE COLLECT YOUR DATA – LEGAL BASIS
5.1 UK GDPR and EU GDPR Legal Bases
We process personal data under the following legal grounds:
A. Contractual Necessity (Article 6(1)(b) GDPR)
To fulfill our contract with you:
B. Legitimate Interests (Article 6(1)(f) GDPR)
For our legitimate business interests, balanced against your rights:
C. Consent (Article 6(1)(a) GDPR)
When you explicitly agree to:
You may withdraw consent at any time by:
D. Legal Obligation (Article 6(1)(c) GDPR)
To comply with laws and regulations:
5.2 India DPDP Act Legal Bases
For Indian customers, we process data under:
A. Consent
We obtain your explicit, informed, and freely given consent for:
Consent Mechanism:
B. Performance of Contract
To fulfill our obligations under your purchase agreement.
C. Compliance with Law
To meet legal obligations under Indian tax, customs, and consumer protection laws.
D. Legitimate Uses (as permitted under DPDP Act)
For fraud prevention, security, and debt recovery.
6. HOW WE USE YOUR PERSONAL DATA
We use your data for the following purposes:
6.1 Order Processing and Fulfillment
6.2 Customer Service
6.3 Marketing and Communications (With Consent Only)
Marketing Frequency: Maximum 4 emails per week; 2 SMS per week (India)
Unsubscribe: Every marketing communication includes an easy one-click unsubscribe link. You may also email privacy@karee.co.uk or privacy.india@kareeclothing.com to opt out.
6.4 Website Improvement and Analytics
6.5 Fraud Prevention and Security
6.6 Legal Compliance
6.7 Automated Decision-Making
We use automated systems for:
Your rights regarding automated decisions:
7. SHARING YOUR PERSONAL DATA
We do NOT sell, rent, or trade your personal data to third parties for their marketing purposes.
We share your data only with trusted partners who help us operate our business:
7.1 Logistics and Delivery Partners
To deliver your order:
UK/International Shipping:
India Shipping:
Data shared: Name, address, phone number, order ID, product details
7.2 Karee Clothing Private Limited (India) – Data Processor Relationship
For UK/EU/ROW customers whose orders are fulfilled from India:
Karee Clothing Private Limited acts as a Data Processor on behalf of Taro Designs UK Ltd under a strict Data Processing Agreement (DPA) that includes:
Services provided:
For Indian customers:
Karee Clothing Private Limited is the Data Fiduciary (data controller) and processes your data directly.
7.3 Payment Processors
We share transaction data with:
Data shared: Transaction amount, currency, order ID, billing address, email (NO full card details are shared with us or stored by us)
7.4 Technology and Marketing Service Providers
Analytics:
Email Marketing:
Advertising:
Customer Relationship Management (CRM):
Customer Support:
SMS Marketing (India only):
7.5 Customs and Government Authorities
When legally required:
7.6 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner, subject to this Privacy Policy and applicable law.
7.7 Legal Disclosures
We may disclose your data if required by law or to:
8. INTERNATIONAL DATA TRANSFERS
8.1 Transfers from UK/EU to India
Legal Mechanism:
When personal data is transferred from the UK or EU to India (e.g., for order fulfillment at our India warehouse), we rely on:
Safeguards in place:
8.2 Transfers to USA and Other Countries
For service providers located in the USA:
We ensure adequate protection through:
Countries where data may be processed:
8.3 India DPDP Act Compliance for Cross-Border Transfers
Under the India DPDP Act, Karee Clothing Private Limited may transfer data outside India only to countries or entities that ensure the same level of protection as India, as notified by the Indian government.
We commit to obtaining necessary approvals and implementing safeguards for any such transfers.
9. DATA RETENTION – HOW LONG WE KEEP YOUR DATA
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
|
Data Category |
Retention Period |
Legal Basis |
|
Order and transaction records |
6 years from date of transaction |
UK/India tax and accounting laws |
|
Customer account data |
Until account deletion requested, or 2 years of inactivity |
Legitimate interest |
|
Marketing consent records |
Until consent is withdrawn + 1 year for audit |
Consent documentation |
|
Customer service communications |
2 years from last contact |
Legitimate interest (quality assurance) |
|
Product review data |
Until deletion requested or 3 years |
Consent and legitimate interest |
|
Payment transaction logs |
6 years |
Financial regulations |
|
Website analytics (Google) |
26 months (anonymised after 14 months) |
Google Analytics default |
|
CCTV footage (India warehouse) |
30 days |
Security and loss prevention |
|
Return/exchange records |
2 years |
Consumer protection compliance |
|
Cookie data |
12 months (or as specified in cookie notice) |
Varies by cookie type |
After retention periods expire:
India DPDP Act Compliance: Upon request from Indian users, we will delete data unless retention is required by law. Deletion requests are processed within 30 days.
10. YOUR RIGHTS
10.1 Rights for UK/EU/EEA Users (Under UK/EU GDPR)
You have the following rights:
A. Right of Access (Article 15)
Request a copy of your personal data we hold.
B. Right to Rectification (Article 16)
Correct inaccurate or incomplete data.
C. Right to Erasure / "Right to be Forgotten" (Article 17)
Request deletion of your data (subject to legal retention requirements).
D. Right to Restriction of Processing (Article 18)
Limit how we use your data in certain circumstances.
E. Right to Data Portability (Article 20)
Receive your data in a structured, machine-readable format (e.g., CSV, JSON).
F. Right to Object (Article 21)
Object to processing based on legitimate interests or direct marketing.
G. Right to Withdraw Consent (Article 7)
Withdraw consent at any time for consent-based processing (does not affect prior processing).
H. Right Not to Be Subject to Automated Decision-Making (Article 22)
Request human review of automated decisions that significantly affect you.
How to exercise your rights:
Email: privacy@karee.co.uk
Subject line: "GDPR Rights Request – [Your Name]"
Include: Full name, email address, order number (if applicable), specific request
Response time: Within 30 days (may be extended by 60 days for complex requests with notification)
10.2 Rights for Indian Users (Under India DPDP Act, 2023)
You have the following rights:
A. Right to Access (Section 11)
Obtain information about personal data being processed and a summary of processing activities.
B. Right to Correction (Section 11)
Request correction of inaccurate, misleading, or incomplete data.
C. Right to Erasure (Section 11)
Request deletion of personal data (subject to legal retention obligations).
D. Right to Grievance Redressal (Section 11)
File a complaint with our Grievance Officer.
E. Right to Nominate (Section 11)
Nominate another individual (in case of death or incapacity) to exercise your rights on your behalf.
F. Right to Withdraw Consent (Section 6)
Withdraw consent as easily as it was given (e.g., via one-click unsubscribe).
How to exercise your rights:
Email: privacy.india@kareeclothing.com
Grievance Officer Email: grievance.india@kareeclothing.com
Subject line: "DPDP Rights Request – [Your Name]"
Include: Full name, phone number, email address, specific request
Response time:
Grievance Redressal Process:
11. COOKIES AND TRACKING TECHNOLOGIES
11.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.
11.2 Types of Cookies We Use
A. Strictly Necessary Cookies (No consent required)
B. Performance/Analytics Cookies (Consent required in UK/EU)
C. Functional Cookies (Consent required)
D. Advertising/Targeting Cookies (Consent required)
11.3 Managing Cookies
You can control cookies through:
Note: Disabling necessary cookies may affect website functionality.
11.4 Third-Party Cookies
We do not control third-party cookies set by:
Please refer to their privacy policies for more information.
12. DATA SECURITY MEASURES
We implement industry-standard security measures to protect your personal data:
12.1 Technical Safeguards
12.2 Organizational Safeguards
12.3 India Warehouse Security (Karee Clothing Private Limited)
12.4 Data Breach Response
In the event of a data breach:
UK/EU Users:
India Users:
Report a suspected breach: security@kareeclothing.com
13. THIRD-PARTY LINKS
Our website may contain links to third-party websites, including:
We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing personal data.
14. USER-GENERATED CONTENT AND REVIEWS
14.1 Product Reviews
If you submit a product review:
You retain ownership of your review content but grant us a non-exclusive, royalty-free license to use, display, and promote it.
14.2 Social Media
If you tag us or use our branded hashtags on social media:
15. MARKETING COMMUNICATIONS
15.1 Email Marketing
Consent: We send promotional emails only with your explicit consent (opt-in checkbox at checkout or newsletter signup).
Content: New arrivals, sales, exclusive offers, style tips
Frequency: Maximum 4 emails per week
Unsubscribe: Every email includes a one-click unsubscribe link, or email privacy@karee.co.uk
15.2 SMS Marketing (India Only)
Consent: Required under India TRAI DND regulations
Opt-In: Clear checkbox with wording: "I agree to receive promotional SMS from Karee Clothing"
Frequency: Maximum 2 SMS per week
Opt-Out: Reply STOP to any SMS, or contact privacy.india@kareeclothing.com
DND Compliance: We honor India's National Do Not Call Registry
15.3 WhatsApp Marketing (If Applicable)
Consent: Separate opt-in required
Platform: WhatsApp Business API only (no personal numbers)
Content: Order updates, exclusive offers, customer service
Opt-Out: Reply STOP or block the number
16. CCTV AND WAREHOUSE SURVEILLANCE (India)
Karee Clothing Private Limited's warehouse in Kerala, India, has CCTV surveillance for security purposes.
Data collected: Video footage of warehouse premises
Purpose: Theft prevention, safety, inventory protection
Retention: 30 days, then automatically deleted
Access: Restricted to authorized security personnel and management
Your rights: You may request access to footage showing you (subject to verification) by contacting privacy.india@kareeclothing.com
Signage: Clear notices are displayed at warehouse entrances
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
When we make changes:
Your continued use of our services after changes constitutes acceptance of the updated policy.
Version history: Available upon request at privacy@karee.co.uk
18. COMPLAINTS AND REGULATORY AUTHORITIES
18.1 UK/EU/EEA Users
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority:
United Kingdom:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
European Union:
Contact your national data protection authority: https://edpb.europa.eu/about-edpb/board/members_en
18.2 India Users
First step: Contact our Grievance Officer:
Email: grievance.india@kareeclothing.com
Response time: 72 hours acknowledgment, 30 days resolution
If unsatisfied:
Data Protection Board of India (once established under DPDP Act)
Website: [To be updated when board is operational]
19. LEGAL JURISDICTION AND GOVERNING LAW
19.1 For UK/EU/EEA Users
This Privacy Policy and any disputes arising from it shall be governed by the laws of England and Wales.
Disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.
19.2 For Indian Users
This Privacy Policy and any disputes arising from it shall be governed by the laws of India.
Disputes shall be subject to the exclusive jurisdiction of the courts of Idukki, Kerala, India.
20. CONTACT US
20.1 General Privacy Inquiries
Global (UK/EU/ROW):
Email: privacy@karee.co.uk
General: hello@kareeclothing.com
Phone: +447597033000
India:
Email: privacy.india@kareeclothing.com
General: hello@kareeclothing.com
Phone: +919447208346
20.2 Data Protection Officer (India)
Email: dpo.india@kareeclothing.com
Address: Karee Clothing Private Limited, Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala – 685509, India
20.3 Grievance Officer (India – DPDP Act)
Name: Marykutty Jose
Email: grievance.india@kareeclothing.com
Address: Karee Clothing Private Limited, Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala – 685509, India
20.4 UK Registered Office
Taro Designs UK Ltd
3 Maes Y Rhedyn, Bridgend, CF31 4FD, United Kingdom
Company Number: 13894733
20.5 India Registered Office
Karee Clothing Private Limited
Door No. 560, Ground Floor, Attapallam P.O., Kumily, Idukki, Kerala – 685509, India
21. ACKNOWLEDGMENT AND CONSENT
By using our website or services, you acknowledge that:
For explicit consent activities (marketing, cookies), you will be asked to opt-in separately via clear checkboxes or consent banners.
END OF PRIVACY POLICY
Document Control:
For the latest version of this Privacy Policy, please visit:
https://kareeclothing.com/privacy-policy
https://karee.co.uk/privacy-policy