Privacy Policy

1. Who we are

This Privacy Policy applies to Curio Cove (the "Website"), operated by Curio Cove, a sole-proprietorship registered in Maharashtra (GSTIN: 36AAVFC7730N1ZO). For the purposes of the Digital Personal Data Protection Act, 2023, Curio Cove is the Data Fiduciary.

Registered office: PLOT NO 15, 1-8-303/15, Sardar Patel Road, Sardar Patel Road, Secunderabad, Hyderabad, Telangana, 500003..

2. What personal data we collect

We collect personal data that you provide directly to us, and certain technical data that is automatically collected when you use the Website.

2.1 Data you provide

• Account & checkout data: full name, email address, mobile number, shipping and billing address, PIN code, state.
• Order data: products selected, order amount, payment method, transaction reference numbers.
• Communication data: any information you send to us via the contact form, email, phone or messaging.

2.2 Data collected automatically

• Device & usage: IP address, browser type, operating system, referring URLs, pages visited, timestamps.
• Cookies & analytics: Google Analytics 4 sets cookies to measure aggregate site usage. No personally-identifying information is shared with Google.

2.3 Payment data

UPI payments are processed by our payment gateway partner (MMADPay). We do not store any card details, UPI PIN, OTP or banking credentials on our systems. We retain only the transaction reference number issued by the gateway for reconciliation.

3. How we use your data

Your personal data is used strictly for the following purposes:

• To process and fulfil orders placed with us, including communication of order status by email and SMS.
• To verify identity and prevent fraudulent transactions.
• To respond to enquiries, requests for assistance, and complaints.
• To comply with applicable Indian tax, accounting and consumer-protection laws.
• To improve the Website, analyse usage trends, and personalise your shopping experience.

We will only use your personal data for purposes for which we have your consent or another lawful basis under the DPDP Act, 2023.

4. Sharing of personal data

We do not sell your personal data. We share limited personal data only with the following categories of recipients, and only to the extent necessary:

• Logistics partners (Delhivery, BlueDart, India Post, XpressBees and similar) — to deliver your order.
• Payment gateway (MMADPay) — to process UPI payments.
• Hosting and analytics providers (Hostinger, Google Analytics 4) — to host the Website and measure aggregate traffic.
• Government authorities and law-enforcement — only where we are legally required to disclose data.

5. Data retention

We retain order, invoice and customer-care records for the period required by applicable tax, accounting and consumer-protection laws (typically eight years for tax records). Marketing-consent data is retained until you withdraw consent.

6. Your rights as a data principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Request correction or completion of inaccurate or incomplete data.
• Request erasure of your personal data, subject to applicable retention obligations.
• Withdraw consent for processing, where consent was the basis of processing.
• Nominate another individual to exercise these rights on your behalf in case of incapacity or death.
• File a grievance with our Grievance Officer (details below) and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, write to grievance@curiocovehub.com.

7. Security

The Website uses HTTPS/TLS encryption end-to-end. Personal data is stored on secured servers with restricted access. We follow reasonable security practices and procedures as prescribed under Rule 8 of the IT (Reasonable Security Practices) Rules, 2011.

No method of transmission over the Internet is fully secure, however, and we cannot guarantee absolute security. In the event of a personal-data breach affecting you, we will notify you and the Data Protection Board as required by law.

8. Cookies

We use a small number of cookies to maintain your shopping cart, to remember your session, and to measure aggregate site traffic via Google Analytics 4. You can disable cookies in your browser, but parts of the Website (including checkout) may not function correctly without them.

9. Children

The Website is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please write to us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version, together with the date of last update, will always be available on this page.

11. Grievance Officer

In accordance with the Information Technology Rules, 2011 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

• Name: Gundala Naveen Kumar and Gangadhar Ankallagari
• Email: grievance@curiocovehub.com
• Phone: 9959611099
• Address: PLOT NO 15, 1-8-303/15, Sardar Patel Road, Sardar Patel Road, Secunderabad, Hyderabad, Telangana, 500003.

The Grievance Officer will acknowledge complaints within 24 hours and resolve them within 15 days from the date of receipt.

12. Governing law

This Privacy Policy is governed by the laws of India. Any dispute arising in connection with it shall be subject to the exclusive jurisdiction of the courts at Maharashtra.