Privacy Policy

Effective Date: Nov, 2024

At PashmCraft, we are committed to protecting your privacy and ensuring transparency about how your personal data is collected, used, and processed. This privacy policy applies to UNMIR INC., the owner of PashmCraft, and outlines the practices we follow in relation to personal data provided by our customers.

This policy covers data collection through our website, www.pashmcraft.com (the “Site”), and our interactions with users based in the European Union (EU) and other regions governed by applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using our Site and services, you agree to the collection and use of your personal data as described in this policy. If you do not agree with this policy, please do not use our Site.

1. Information We Collect

We collect the following types of personal data when you interact with our website or make a purchase:

• Personal Identification Information: Name, email address, phone number, and shipping address.
• Payment Information: We do not directly collect payment details (e.g., credit card numbers). Payments are processed securely by third-party payment processors, such as Razorpay, Stripe, PayPal, or through direct bank transfers.

We do not collect any additional personal data, such as browsing behavior, IP addresses, or location data. However, please be aware that our website may set cookies to enhance your browsing experience. We encourage you to review our cookie policy (point 10 of this policy) for more details on how we use cookies and how you can manage them.

2. How We Collect Your Data

We collect personal information directly from you through the following methods:

• Order and Contact Forms: When you place an order or contact us via our website forms, we collect the personal data you provide.
• Marketing Consent: If you opt-in to receive marketing communications, we collect your email address.

Additionally, we may receive limited data from third-party services, including payment processors (Razorpay, PayPal, etc.) and analytics platforms.

Cookies and Tracking Technologies:
While we do not set cookies directly for analytics or advertising, our Site, being based on third-party platforms, may set cookies. These cookies may track browsing behavior, preferences, and interactions with the Site. You can manage your cookie preferences through a cookie consent banner when you visit our website.

3. Legal Basis for Processing Data (GDPR Compliance)

Under the GDPR, we must have a legal basis for processing your personal data. We process personal data based on the following legal grounds:

• Contractual Necessity: We process your data to fulfill our contractual obligations, such as processing and delivering your order.
• Consent: We process your data for marketing purposes, such as sending promotional emails, only when you have explicitly consented to receive such communications. You can withdraw your consent at any time.
• Legitimate Interests: We may process personal data based on our legitimate business interests, such as improving our website, customer support, and marketing activities.

4. Your Rights Under GDPR

As a customer located in the EU, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to correct any inaccurate or incomplete data we hold.
• Right to Erasure: You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You can request that we limit the processing of your personal data under certain circumstances.
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.
• Right to Object: You have the right to object to the processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If we rely on consent to process your personal data (e.g., for marketing), you can withdraw consent at any time, and we will stop processing your data for that purpose.

To exercise any of these rights, please contact us at contact@pashmcraft.com. We will respond to your request within 30 days in accordance with GDPR requirements.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• Order Processing: To process and fulfill your orders, including payment and delivery.
• Customer Support: To respond to inquiries, issues, or requests regarding your orders or our products.
• Marketing: To send you promotional emails and newsletters (if you have opted in). You can unsubscribe at any time.
• Website Improvement: To enhance and optimize our website and services.

We will never sell your personal data to third parties. However, we may share your data with third-party service providers (e.g., shipping companies, payment processors) to facilitate order fulfillment and resolve any payment-related issues.

6. Sharing Your Data

We may share your personal data with the following third parties in order to facilitate the services you request:

• Shipping Companies: To deliver your orders and provide you with tracking information.
• Payment Processors: To process payments and transactions (e.g., Razorpay, PayPal, Stripe, or direct bank transfers).
• Email Marketing Services: If you have opted in to receive marketing communications, we may send you promotional emails and newsletters.

We ensure that any third parties with whom we share your personal data are contractually obligated to process it in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). We ensure that they safeguard your personal data and limit its use to the purpose for which it was shared.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order Processing and Customer Support: Personal data related to your orders will be stored for a period of 6 months to 1 year.
• Marketing Communications: We will retain your email address for marketing purposes as long as you remain subscribed. You can unsubscribe at any time.

After the retention period, we will securely delete or anonymize your data.

8. Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. However, please note that no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.

We use industry-standard security measures, such as encryption, secure payment gateways, and other safeguards to protect data stored on our website. Our payment processors also comply with PCI-DSS standards to ensure secure transactions.

9. International Data Transfers

If you are located in the EU or other regions with data protection laws, your personal data may be transferred outside the European Economic Area (EEA). We ensure that any international data transfers are compliant with GDPR by using standard contractual clauses or other appropriate safeguards.

10. Cookie Policy and Consent

When you visit our Site, we may use cookies to enhance your experience. You will be prompted with a cookie consent banner that allows you to accept or decline cookies.

If you accept cookies, we may use them for functionality, analytics, and marketing purposes. If you decline, we will only use strictly necessary cookies required for the basic functioning of the website.

You can manage your cookie preferences at any time through your browser settings.

11. Updates to the Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we update the policy, we will notify you by posting a prominent notice on our website or via email.

12. User Accounts

If you choose to create an account on our website, the following applies to the personal data you provide:

A. Information Collected During Registration

When you register an account with PashmCraft, we collect the following personal data:

• Account Information: Your name, email address, and password.
• Shipping Information: Your shipping address (this may be required to streamline future purchases).

You may also choose to provide additional information to enhance your account profile, such as a phone number, but this is not mandatory.

B. How We Use Your Account Data

The data you provide during registration is used to:

• Create and manage your account on the PashmCraft website.
• Process orders and facilitate faster checkout for future purchases.
• Provide customer support and resolve any issues related to your account or orders.
• Send important account-related notifications, such as order updates, shipping status, or changes to our terms and policies.
• Offer personalized recommendations or product information based on your past interactions (with your consent).

C. Managing Your Account Data

As a registered user, you have control over your personal data through your account panel. You can:

• Update your personal details: You can edit your name, email, shipping address, and other personal information at any time.
• Change your password: You can change your account password whenever you feel necessary.
• Delete your account: If you no longer wish to use your account, you can request to have your account deleted. To do this, please contact us at contact@pashmcraft.com, or you may be able to delete your account directly through your account settings.

Upon deleting your account, we will remove your personal data, unless retention is necessary for compliance with legal obligations or resolving disputes (as per our data retention policy).

D. Security of Your Account Data

Your account is protected by a password, and we recommend using a strong, unique password. Please ensure that you keep your login credentials confidential. If you suspect any unauthorized access to your account, please contact us immediately.

We implement security measures to protect your data, including using SSL encryption for transactions and storing your password in an encrypted format. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.

E. Rights of Registered Users under GDPR

As a registered user, you have all the GDPR rights regarding your personal data, as outlined in Section 4. This includes the right to access, rectify, erase, restrict processing, and withdraw consent.

If you wish to update your information, delete your account, or exercise any other rights, please refer to the instructions in Section 4: Your Rights Under GDPR or contact us directly at contact@pashmcraft.com.

13. Contact Information

If you have any questions or concerns about this privacy policy or how we process your personal data, or if you wish to exercise your rights under GDPR, please contact us at:

PashmCraft (UnMir Inc.)
Email: contact@pashmcraft.com
Address: Contact Page

14. Data Protection Officer (DPO)

If you require further assistance or have specific queries related to GDPR compliance, you can contact our Data Protection Officer (DPO) at contact@pashmcraft.com or by contacting the email address above.

15. Children’s Privacy

Our products and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected personal data from a child, we will take steps to delete that data.