BNPL & Credit Facility - through our payment gateway
BNPL & Credit Facility - through our payment gateway
Sustainable Indian crafts, handmade with natural materials for conscious wholesaler, retailers and global buyers.
Contact 24 x 7
+91 94320 58888
The Indus Craft Co. | Crafting Nature into Life.
Version 1.0 | Effective Date: 22 June 2026
Cookies are small text files that are placed on your device (computer, tablet, or smartphone) when you visit a website. Similar technologies include pixels, web beacons, local storage objects, and scripts. In this Policy, we use the term 'cookies' to refer to all of these technologies.
Cookies serve important functions: they keep you logged in during a session, remember your preferences, help us understand how visitors use our website, and enable us to show relevant content. As an international B2B platform, cookies also support the checkout process (PayPal, currency), shipping estimation (DHL API), and security functions.
We categorise our cookies into four types based on their purpose and the legal basis for their use:
| Category | Purpose | Consent Required? | Legal Basis |
|---|---|---|---|
| Strictly Necessary | Core site functions — login, checkout, session security, cart, consent-banner memory. | No — active at all times. | Necessary for service delivery (GDPR Art. 6(1)(b); ePrivacy Directive Art. 5(3) exemption). |
| Analytics | Understand visitor behaviour — pages visited, session duration, traffic source, bounce rate. | Yes — in EU, UK, and most other markets. | Consent (GDPR Art. 6(1)(a)); UK PECR Reg. 6; CCPA opt-out right. |
| Functional | Remember preferences — currency, language, saved address. | Yes — in EU and UK. | Consent or Legitimate interests depending on jurisdiction. |
| Marketing | Measure campaign performance; retargeting ads to B2B buyers. | Yes — required in EU, UK, and most markets. | Consent (GDPR Art. 6(1)(a); UK PECR Reg. 6; CCPA opt-out). |
The table below lists the specific cookies and technologies currently used on the TICC website, organised by category. This inventory is reviewed and updated periodically.
A — Strictly Necessary Cookies
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _session_id / session | TICC Website | Maintains your login session and cart state across pages. | Session |
| XSRF-TOKEN / csrf_token | TICC Website | Cross-site request forgery protection for form submissions. | Session |
| cookieconsent_status | TICC / Consent Banner | Stores your cookie consent preference so the banner is not shown on every visit. | 12 months |
| cart / checkout_token | TICC Website | Preserves your shopping cart and checkout progress between page views. | Up to 14 days |
| secure_customer_sig | TICC Website | Securely identifies a logged-in customer to protect account access. | 20 years (persistent, renewed on activity) |
| __cfduid / cf_clearance | Cloudflare | Security and bot-protection — distinguishes genuine visitors from automated bots. | 30 days |
| PYPF, x-pp-s, LANG | PayPal | Session management and fraud-prevention during the PayPal checkout flow. | Session / PayPal-defined |
B — Analytics & Performance Cookies (Consent Required)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes users — assigns a unique identifier to count unique visitors. IP addresses are anonymised. | 2 years |
| _gid | Google Analytics | Distinguishes users — short-term identifier for session-level analytics. | 24 hours |
| _gat_UA-XXXXXXX-X | Google Analytics | Used to throttle request rate to Google's servers. | 1 minute |
| _ga_XXXXXXXXXX | Google Analytics (GA4) | Stores session state and counts page views/events in Google Analytics 4. | 2 years |
Google Analytics IP Anonymisation: TICC has enabled IP anonymisation. The final octet of your IP address is masked before being stored by Google. We also have a Data Processing Agreement (DPA) with Google as required by GDPR. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
C — Functional Cookies (Consent Recommended)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| currency | TICC Website | Remembers your selected display currency (USD, EUR, GBP) between visits. | 30 days |
| locale / lang | TICC Website | Remembers your language preference if you select a language other than the default. | 1 year |
| recently_viewed | TICC Website | Stores a list of recently viewed products to improve browsing experience. | 90 days |
D — Marketing & Remarketing Cookies (Consent Required)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook Pixel) | Identifies browser for advertising measurement and remarketing on Facebook/Instagram. Only activated if you consent. | 90 days |
| _fbc | Meta (Facebook) | Stores the Facebook click ID from an ad click, used for conversion tracking. | 90 days |
| _gcl_au | Google Ads | Stores ad-click identifiers for conversion measurement on Google Ads campaigns. | 90 days |
| IDE | Google DoubleClick | Used by Google Display Network to build a user profile for targeted advertising. Only active with consent. | 13 months |
Marketing Cookies — Inactive by Default. Marketing and remarketing cookies (Category D) are NOT activated by default. They are only loaded after you explicitly consent via our cookie preference banner. You may withdraw consent at any time by clicking 'Cookie Settings' in the website footer or by clearing your browser cookies.
In addition to the cookies listed above, the TICC website may use the following third-party services that may set their own cookies or similar technologies:
| Service / Provider | Purpose | Privacy Policy |
|---|---|---|
| DHL Express | Calculates real-time shipping rates and estimated duties at checkout. | dhl.com/privacy |
| PayPal | Processes payments. Sets its own session and fraud-prevention cookies during checkout. | paypal.com/privacy |
| Google Analytics | Website traffic and behaviour analytics. | policies.google.com/privacy |
| Google Ads / Meta Pixel | Marketing and remarketing — only with your consent. | policies.google.com | facebook.com/policy |
| Cloudflare | CDN, security, and DDoS protection. May set a security cookie. | cloudflare.com/privacypolicy |
Cookie laws differ by country. The table below summarises the consent rules that apply to TICC's key markets:
| Jurisdiction | Applicable Law | Consent Requirement |
|---|---|---|
| European Union | GDPR (Reg. (EU) 2016/679) + ePrivacy Directive (2002/58/EC) | Consent required for all non-essential cookies before placement. Must be freely given, specific, informed, and unambiguous. Pre-ticked boxes are invalid (Planet49 ruling, CJEU C-673/17). |
| United Kingdom | UK GDPR + Data Protection Act 2018 + PECR (SI 2003/2426) | Same consent standard as EU post-Brexit. PECR requires opt-in consent for non-essential cookies. |
| France | GDPR + CNIL Guidelines (July 2021) | CNIL requires a clear 'Accept All / Refuse All' button at the same level. Continued browsing does not constitute consent. |
| Germany | GDPR + TTDSG (Telekommunikation-Telemedien-Datenschutzgesetz) | TTDSG §25 requires consent for storage/access to device information. BGH 'Cookie II' ruling confirmed strict consent requirements. |
| California, USA | CCPA / CPRA (Cal. Civ. Code §1798.120) | Right to opt out of 'sale or sharing' of personal information. Do Not Sell/Share link should be available. |
| Australia / Canada | Privacy Act 1988 (Aus) / PIPEDA (Canada) | Cookie consent best practices apply. Cookies collecting personal data must comply with the broader privacy framework. |
You have several ways to control cookies:
When you first visit the TICC website, a cookie preference banner will appear. You can choose to:
▸ Accept All Cookies — including analytics, functional, and marketing cookies;
▸ Reject Non-Essential Cookies — only strictly necessary cookies will be active;
▸ Customise Preferences — choose which categories to accept.
You can also manage cookies through your browser settings:
| Browser | Cookie Settings Location |
|---|---|
| Google Chrome | Settings → Privacy and Security → Cookies and other site data |
| Mozilla Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Safari (macOS/iOS) | Preferences → Privacy → Manage Website Data / Block All Cookies |
| Microsoft Edge | Settings → Cookies and Site Permissions → Cookies and Site Data |
Important — Blocking Cookies May Affect Website Function. Blocking strictly necessary cookies may prevent you from logging in, completing checkout, or using the shopping cart. We recommend keeping strictly necessary cookies active for the best experience.
▸ Google Analytics: tools.google.com/dlpage/gaoptout
▸ Google Ads personalisation: adssettings.google.com
▸ Meta/Facebook ads: facebook.com/adpreferences
▸ EU/UK residents: youronlinechoices.eu
▸ US residents: optout.networkadvertising.org or optout.aboutads.info
| Cookie Category | Typical Duration | Notes |
|---|---|---|
| Strictly Necessary | Session to up to 20 years | Session cookies expire on browser close. Persistent login tokens are renewed and validated on each use. |
| Analytics | 1 minute to 2 years | _gat: 1 min | _gid: 24 hrs | _ga / _ga_*: up to 2 years. Industry-standard durations. |
| Functional | 30 days to 1 year | Currency and language preferences typically last 30–365 days. |
| Marketing | Up to 13 months | Per CNIL and ICO guidance, marketing cookies should not exceed 13 months. TICC complies with this limit. |
Cookie data (such as IP addresses, session identifiers, and analytics data) may be processed by our service providers in countries outside your country of residence, including the United States (Google, Meta) and India (TICC). Where such transfers involve personal data, TICC ensures appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) for EU/UK transfers — in accordance with our Privacy Policy.
Some browsers offer a 'Do Not Track' (DNT) setting that transmits a signal to websites requesting that your browsing is not tracked. There is currently no universally accepted standard for how websites should respond to DNT signals. TICC's website does not currently alter its data collection practices in response to DNT signals. You can use our cookie preference banner or opt-out tools (Section 6.3) to manage your tracking preferences more precisely.
We may update this Cookie Policy from time to time to reflect changes in applicable law, our website features, or the technologies and providers we use. When we make material changes, we will update the 'Effective Date' at the top of this Policy and, where appropriate, display a notification on the website. We encourage you to review this Policy periodically.
If you have any questions about this Cookie Policy, our use of cookies, or wish to exercise any rights related to cookie data, please contact us:
| Contact Method | Details |
|---|---|
| Privacy & Cookie Queries | hello@theinduscraftco.com — Subject: 'Cookie Policy Query' |
| Response Time | We aim to respond within 15 business days. |
| Address | The Indus Craft Co., 20 Suren Tagore Road, Kolkata — 700019, West Bengal, India |
