Privacy Policy

Who is responsible for your information?

Keramrutham is the trade name of a sole proprietorship owned and operated by Keramrutham, whose principal place of business is at Mangudiyan, Thirumudikkunnu P.O., Koratty East, Thrissur 680308, Keralam, India.. In this policy, “we”, “us” and “our” refer to the proprietor, who is responsible for the personal information described here.

Information we collect

• Account information: your name and email address, password verification data, and email-verification status. We store password hashes rather than readable passwords. If you choose Google sign-in, we receive the account details Google shares for that sign-in, such as your name, email address, and Google account identifier.
• Address and phone information: recipient name, phone number, address lines, city, state or region, postal code, and country. We use a verification code to confirm the phone number associated with an address when required for billing or delivery.
• Cart and order information: products and variants selected, quantities, prices, taxes, shipping charges, order and invoice details, delivery status, and cancellation, return, or refund records.
• Payment information: payment status and payment-provider references. Payments are processed by Razorpay. We do not store full card numbers, card security codes, UPI PINs, or net-banking passwords on our systems.
• Messages and service communications: information you provide when you contact us, along with transactional emails such as email verification codes, password-reset messages, and order updates, and WhatsApp messages used to verify a delivery phone number.
• Technical and security information: essential session-cookie data and technical request information, such as IP address, browser details, and timestamps, which may be processed to run the site, protect accounts, limit abuse, and troubleshoot errors.

How we use information

We use personal information to create and secure accounts; verify email addresses and delivery phone numbers; save carts and addresses; accept and fulfil orders; arrange payment, shipping, invoices, returns, and refunds; send service messages; respond to requests; prevent fraud and abuse; maintain our records; and meet applicable legal requirements.

We currently send service-related messages. We do not use account or order information to send promotional marketing emails.

When information is shared

We share only the information needed for a service or legal requirement, including with:

• Google: when you choose Google sign-in, and for delivery of transactional email through our configured email service. Google Fonts is also used to load some website fonts; your browser may send standard connection information to Google when requesting those files.
• Razorpay: to present payment methods and process payments, refunds, and payment-status updates.
• Delhivery: when arranging a shipment, to provide the recipient, phone, address, parcel, and shipment information required for delivery and tracking.
• Our hosting and technical providers: to host the website, database, and related services securely.
• Authorities or other parties: when disclosure is required by law or is necessary to protect the Store, customers, or the public.

These providers may process information under their own terms and privacy policies. Some providers may process information in locations outside India, subject to applicable law.

Cookies and similar technology

We use an essential session cookie to keep you signed in and protect requests made through the site. The session is stored on our server. The storefront does not currently use advertising cookies or analytics trackers.

How long we keep information

We keep information for as long as needed to provide the service, maintain your account, complete transactions, handle support or disputes, protect the site, and meet applicable accounting and legal requirements. Some order and invoice records may need to be kept after an account is closed. When information is no longer needed, we will delete it or securely de-identify it in line with our retention practices and applicable law.

How we protect information

We use safeguards designed to protect personal information, including password hashing, access controls, and secure session handling. No website or transmission method can be guaranteed completely secure. Please keep your sign-in details private and contact us if you believe your account has been accessed without permission.

Your choices and requests

You can review and manage saved delivery addresses in your account. You may also contact us to request access to, correction of, or deletion of personal information, raise a privacy concern, or withdraw consent where consent is the basis for processing. We may need to keep certain information to complete an order or meet a legal obligation.

To make a request, contact support@keramrutham.com. If your account is accessible, include the email address associated with it so we can verify and respond to your request.

Children’s information

Our online store is intended for people who can make purchases under applicable law. We do not knowingly ask children to create accounts. A parent or guardian who believes a child has provided personal information may contact us using the details below.

Changes to this policy

We may update this policy when our services or legal requirements change. We will publish the current version on this page and update the date above. If a change materially affects how information is used, we will provide notice through the site or another appropriate channel.

Privacy contact and grievance officer

We will acknowledge consumer grievances within 48 hours and work to resolve them within one month of receipt, in accordance with applicable consumer e-commerce requirements.