Privacy Policy

1. Introduction

Kisaan ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Kisaan Limited
Registered Address: [Your registered office address]
ICO Registration Number: [Your ICO registration number]
Contact Email: privacy@kisaan.com

2. Information We Collect

2.1 Personal Data You Provide

We collect personal data that you voluntarily provide when you:

• Register for an account
• Make a purchase
• Subscribe to our newsletter
• Contact customer support
• Participate in surveys or promotions

This may include: name, email address, postal address, phone number, payment information, and delivery preferences.

2.2 Automatically Collected Data

When you use our website, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, links clicked)
• Location data (approximate location based on IP address)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under UK GDPR:

• Contract Performance: To fulfill our contract with you (processing orders, delivery)
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligation: To comply with legal requirements (tax, accounting)
• Consent: For marketing communications (you can withdraw consent at any time)

4. How We Use Your Information

We use your personal data to:

• Process and fulfill your orders
• Provide customer support and respond to inquiries
• Send transactional emails (order confirmations, shipping updates)
• Improve our website and services
• Personalize your shopping experience
• Prevent fraud and ensure security
• Send marketing communications (with your consent)
• Comply with legal obligations

5. Information Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

• Payment processors (Stripe, PayPal)
• Delivery companies (Royal Mail, DPD, Hermes)
• Email service providers
• Cloud hosting providers
• Analytics providers (Google Analytics)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety or that of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK. When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities or adequacy decisions recognizing equivalent data protection standards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically:

• Account information: Until account deletion + 6 years (for legal obligations)
• Order information: 6 years (for tax and accounting purposes)
• Marketing consent: Until you withdraw consent or 2 years of inactivity

8. Your Rights Under UK GDPR

You have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with the ICO (Information Commissioner's Office)

To exercise these rights, contact us at privacy@kisaan.com. We will respond within one month.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure servers with firewall protection
• Access controls and authentication
• Regular security assessments and updates
• Staff training on data protection

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. The "Last updated" date at the top indicates when changes were last made.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with the UK supervisory authority: