Who we are
Kyuto Retail (“Kyuto”, “we”, “us”) is the trading name of Kyuto, Hyderabad, Telangana, India.
What data we collect
Identity & Contact – name, billing & shipping address, e-mail, phone.
Transaction – order details, payment method (no card numbers stored).
Technical – IP, browser, device, cookies, log files.
Marketing – preferences, survey responses.
Legal basis for processing
Contract – to fulfil your order (Art. 6 (1)(b) GDPR).
Consent – newsletter, WhatsApp updates.
Legitimate Interest – fraud prevention, analytics.
Statutory – GST invoicing (Rule 56 CGST Rules 2017).
As required by India’s SPDI Rules 2011 and DPDP Act 2023, we store personal data inside India or with processors offering equal protection.
Sharing with third parties
We share data only with: payment gateway (Razorpay), logistics partners (Delhivery, XpressBees, India Post), web-hosting (Hostinger), email/SMS gateways and analytics providers (Google Analytics). All are bound by confidentiality and meet Section 43A “reasonable security practices”.
Cookies & analytics
A cookie banner seeks consent for non-essential cookies in line with E-commerce Rules 2020 transparency requirements.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
Data retention
Order records: 8 years (Commerce Tax compliance).
Marketing contact: until you unsubscribe.
Log files: 12 months.
Your rights
You may access, correct, delete or port your data; withdraw consent; or object to processing. EU/UK users have GDPR rights; Indian users have DPDP rights once notified into force.
Updates
Policy last updated: 17 May 2025. Future changes will be posted here and, where appropriate, notified by e-mail.
