BNPL & Credit Facility - through our payment gateway
BNPL & Credit Facility - through our payment gateway
The Indus Craft Co. | Crafting Nature into Life.
Version 2.0 | Effective Date: 22 June 2026
The Indus Craft Co. ("TICC", "we", "our", "us") is an Indian export business selling handcrafted, natural, and sustainable products to international B2B buyers worldwide. We are committed to protecting your personal data and handling it with transparency, lawfulness, and respect.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what your rights are — under the laws of India, the European Union, the United Kingdom, the United States (California), Canada, and Australia.
The Indus Craft Co. ("TICC") is a proprietorship/partnership business registered in India, operating as an exporter and B2B wholesale platform for handcrafted Indian products.
| Detail | Information |
|---|---|
| Legal Name | The Indus Craft Co. |
| Registered Address | 20 Suren Tagore Road, Kolkata — 700019, West Bengal, India |
| GSTIN | 19AAXFT9159Q1ZK |
| IEC (Import Export Code) | AAXFT9159Q |
| Privacy Contact / Data Controller | hello@theinduscraftco.com |
| Website | www.theinduscraftco.com |
EU/UK Representative — Important for European and UK Buyers
TICC's products are offered to buyers in the European Union and the United Kingdom. Under Article 27 of the GDPR and equivalent UK GDPR provisions, TICC is in the process of appointing a formal EU/UK data protection representative. Until that appointment is complete, all privacy queries, data subject requests, and supervisory authority correspondence should be directed to hello@theinduscraftco.com. This notice will be updated promptly upon appointment of a representative.
This Policy applies to all personal data processed by TICC in connection with:
▸ Visitors to www.theinduscraftco.com ("the Website");
▸ Buyers who place sample orders through the Website ("Sample Buyers");
▸ Buyers who engage with TICC directly for bulk wholesale orders ("Bulk Buyers");
▸ Partners (artisan producers and suppliers) onboarded to supply TICC;
▸ Any person who contacts TICC by email, telephone, or WhatsApp.
This Policy does not apply to the personal data practices of third-party websites linked from our Website, or to our employees and contractors, which are governed by separate internal policies.
Section A
Sample Buyers (Website Purchasers)
Data we collect and process when you purchase samples on www.theinduscraftco.com
When you register an account or place a sample order on the TICC Website, we collect the following categories of personal data:
| Category | Specific Data Points | Source |
|---|---|---|
| Account & Identity | Full name, company or trading name, email address, telephone number, country of incorporation/residence. | Provided by you at registration. |
| Order & Transaction Data | Billing address, delivery/shipping address, order items (SKUs), order value (USD), payment confirmation reference, invoice number. | Generated at checkout; payment processed by PayPal/gateway — TICC does not store card numbers. |
| Shipping & Customs Data | Shipping address, contact name at destination, DHL Air Waybill number, customs entry reference, declared HS Code(s). | Generated by TICC; submitted to DHL. |
| Account Credentials | Email address (used as login), password (stored as a cryptographic hash only — TICC cannot read your password). | Provided at registration. |
| Communications | Emails, contact form submissions, WhatsApp messages related to your sample order or enquiry. | Provided by you. |
| Technical & Device Data | IP address, browser type and version, operating system, pages visited, time on site, referral URL, cookie identifiers. | Collected automatically via Website. |
| Processing Activity | Purpose | GDPR/UK GDPR Basis | Other Laws |
|---|---|---|---|
| Order fulfilment | Process your sample order, generate purchase order, arrange DHL pickup, generate export invoice. | Art. 6(1)(b) — Contract performance | DPDPA 2023 s.7(a); PIPEDA; APP 3 |
| Payment processing | Transmit order confirmation to PayPal/payment gateway; receive payment confirmation. | Art. 6(1)(b) — Contract performance | DPDPA 2023 s.7(a) |
| Delivery & customs | Provide shipping address and contact to DHL; submit export documentation to Indian customs. | Art. 6(1)(b) Contract; Art. 6(1)(c) Legal obligation | DPDPA 2023 s.7(b); legal obligation |
| Account management | Maintain your account, order history, invoices, claim submission tracking. | Art. 6(1)(b) — Contract performance | DPDPA 2023 s.7(a) |
| Customer support | Respond to queries, claims, and complaints related to your sample order. | Art. 6(1)(b) Contract; Art. 6(1)(f) Legitimate interests | Legitimate interest |
| Fraud prevention | Detect and prevent fraudulent orders, chargebacks, and security breaches. | Art. 6(1)(f) — Legitimate interests | DPDPA 2023 s.7(g); legitimate interest |
| Legal compliance | Maintain transaction records for Indian GST, export documentation, and LUT compliance for minimum 7 years. | Art. 6(1)(c) — Legal obligation (Indian GST Act, FEMA, IT Act) | DPDPA 2023 s.7(b); legal obligation |
Marketing Communications — Sample Buyers
We will only send you marketing emails or promotional communications if you have given your explicit, separate consent. You may withdraw consent at any time by clicking 'Unsubscribe' in any marketing email or by emailing hello@theinduscraftco.com. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
Section B
Bulk Buyers (Direct Wholesale Engagement)
Data we collect and process when you engage with TICC directly for a bulk wholesale order
| Category | Specific Data Points | Source |
|---|---|---|
| Business Identity | Company legal name, company registration number, VAT/GST/EIN/EORI number, registered business address, trading address. | Provided by you during inquiry/onboarding. |
| Contact Personnel | Name, title, email, phone of key contacts (buyer, accounts, logistics). | Provided by you. |
| Commercial Data | Proforma Invoice details, order quantities, agreed pricing, payment terms, bank wire reference, Letter of Credit details if applicable. | Generated from commercial negotiation; provided by you for payment. |
| Inspection & Compliance | SGS Pre-Shipment Inspection Certificate reference, product test reports, compliance certificates linked to your order. | Generated by SGS; associated with your order record. |
| Shipping & Customs | Bill of Lading or Air Waybill, consignee details, importer of record details, EORI/IEC/EIN numbers used for customs. | Provided by you; submitted to freight forwarder and customs. |
| Communications | All emails, WhatsApp, video call records, meeting notes related to your bulk order. | Provided by you. |
| Processing Activity | Purpose | GDPR/UK GDPR Basis | Other Laws |
|---|---|---|---|
| Bulk order & fulfilment | Prepare Proforma Invoice, coordinate production, manage quality inspection, arrange shipment. | Art. 6(1)(b) — Contract performance | DPDPA 2023 s.7(a) |
| SGS inspection coordination | Share order/product specs with SGS; receive and store SGS certificate. | Art. 6(1)(b) Contract; Art. 6(1)(f) Legitimate interests | Legitimate interest |
| Payment processing | Process wire transfers, LC arrangements; maintain payment records. | Art. 6(1)(b) Contract; Art. 6(1)(c) Legal obligation | DPDPA 2023 s.7(a)(b) |
| Export documentation | Submit Bill of Lading, commercial invoice, packing list, certificate of origin to customs and freight forwarder. | Art. 6(1)(b) Contract; Art. 6(1)(c) Legal obligation | Legal obligation |
| Claim handling | Assess and resolve warranty, damage, or shortfall claims against SGS records. | Art. 6(1)(b) Contract; Art. 6(1)(f) Legitimate interests | Legitimate interest |
| Compliance & records | Maintain export/import records, GST records, AML checks for 7+ years. | Art. 6(1)(c) — Legal obligation | DPDPA 2023 s.7(b); legal obligation |
| Relationship management | Maintain records of your sourcing history, preferences, and commercial terms for future orders. | Art. 6(1)(f) — Legitimate interests | Legitimate interest; DPDPA 2023 s.7(g) |
Section C
General Data Protection Provisions (All Buyers)
We share your personal data only where necessary, with the following categories of recipients:
| Recipient / Category | What We Share | Purpose & Safeguards |
|---|---|---|
| DHL Express | Shipping name, address, phone, order details, HS Code, declared value. | International delivery and customs clearance. DHL is GDPR-compliant and operates under SCCs for EU data transfers. |
| PayPal / Payment Gateway | Order reference and total amount; payment confirmation. TICC does not transmit or store card numbers. | Payment processing. PayPal is GDPR-compliant; data processed on their secure systems. |
| SGS (Bulk orders only) | Product specifications, order quantities, buyer destination country. | Pre-shipment inspection and certification. SGS is a global group with GDPR-compliant data practices. |
| TICC Production Partners | Product SKU, quantity, pickup address (TICC's location — not your address). | Production and dispatch coordination. Partners are contractually bound to confidentiality. |
| Indian Government Authorities | Export documentation, customs declarations, GST returns. | Legal obligation under Indian Customs Act, Foreign Trade Policy, GST Act. |
| Destination Country Customs | Consignee details, invoice value, HS Code, as submitted via DHL/freight forwarder. | Legal obligation — customs clearance in your country. |
| Professional Advisors | Data shared as strictly necessary with legal, tax, or audit advisors. | Confidentiality obligations apply; shared only under legal privilege or contractual duty of confidence. |
We Do Not Sell Your Personal Data
TICC does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This applies to all buyers — sample and bulk — and to all jurisdictions including California (CCPA/CPRA), Canada (PIPEDA), and the EU/UK (GDPR).
TICC is based in India. When we process your personal data, it may be transferred to and processed in countries outside your country of residence, including India, and countries where our service providers (DHL, PayPal, SGS) operate. We ensure appropriate safeguards are in place:
| Transfer Scenario | Destination | Safeguards Applied |
|---|---|---|
| EU/EEA buyer data transferred to India | India | Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914; supplementary measures as required. |
| UK buyer data transferred to India | India | International Data Transfer Agreement (IDTA) or UK Addendum to SCCs, as issued by the ICO. |
| Data transferred to DHL | Global | DHL maintains GDPR-compliant data transfer mechanisms including SCCs. |
| Data transferred to PayPal | USA / global | PayPal participates in the EU-US Data Privacy Framework; SCCs applied for residual transfers. |
| Data transferred to SGS (bulk only) | Global | SGS operates under GDPR-compliant transfer mechanisms. |
You may request a copy of the transfer safeguards we have in place by contacting hello@theinduscraftco.com.
We retain your personal data only for as long as necessary for the purposes set out in this Policy, or as required by applicable law:
| Data Category | Retention Period | Reason |
|---|---|---|
| Order & transaction records (all buyers) | 7 years from date of transaction | Indian GST Act, LUT/FEMA requirements, export record obligations; consistent with UK/EU limitation periods. |
| Account data (sample buyers) | Duration of account + 2 years after closure | Account management; potential claim resolution. |
| Bulk order commercial data | 7 years from completion of order | Legal obligation; commercial dispute limitation periods. |
| Customer support communications | 3 years from resolution | Legitimate interest — potential future disputes. |
| Technical/analytics data | 13 months (cookies); 90 days (server logs) | Industry standard; minimal retention for security analysis. |
Depending on where you are located, you have specific legal rights in relation to your personal data. We honour these rights regardless of your jurisdiction. Contact hello@theinduscraftco.com to exercise any of the rights below. We will respond within 30 days (or sooner where required by law).
Our Website uses cookies and similar tracking technologies. Please refer to our separate Cookie Policy for full details. The categories used are:
| Cookie Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Strictly Necessary | Session cookie, CSRF token, cart token | Enable core Website functions — login, checkout, cart. Cannot be disabled. | Art. 6(1)(b); exempt from consent under ePrivacy Directive. |
| Functional | Language, currency preference | Remember your preferences to improve your experience. | Consent or legitimate interest. |
| Analytics | _ga, _gid | Understand how visitors use the Website. IP addresses are anonymised. | Consent (GDPR Art. 6(1)(a)) — opt out via cookie banner. |
| Marketing | Meta Pixel, Google Ads | Serve relevant advertising. Only activated if you consent. | Consent (GDPR Art. 6(1)(a)). Withdraw at any time. |
You can manage cookie preferences through the cookie consent banner on the Website, or through your browser settings.
TICC implements appropriate technical and organisational security measures to protect your personal data. These measures include:
▸ SSL/TLS encryption for all data transmitted between your browser and the Website;
▸ Password hashing using industry-standard cryptographic algorithms (plaintext passwords are never stored);
▸ Access controls ensuring only authorised TICC personnel access personal data;
▸ Regular security reviews of our Website and third-party service providers;
▸ Secure export documentation handling to prevent interception of customs data.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, TICC will notify the relevant supervisory authority within 72 hours of becoming aware (as required by GDPR/UK GDPR), and will notify affected individuals without undue delay where required.
The TICC Website is a B2B platform intended for use by business buyers only. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, please do not use this Website or provide any personal data. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.
TICC may update this Privacy Policy from time to time. We will notify you of material changes by:
▸ Posting the updated Policy on the Website with a revised 'Effective Date';
▸ Sending an email notification to registered buyers where the change materially affects your rights.
Continued use of the Website or continued engagement with TICC after changes are posted constitutes acceptance of the updated Policy.
To exercise any of your data protection rights, submit a privacy query, or raise a complaint about our data processing, please contact us:
| Contact Method | Details |
|---|---|
| Privacy / Data Queries Email | hello@theinduscraftco.com — Subject: 'Privacy Request — [Your Name]' |
| Response Time | We aim to respond within 30 calendar days. For complex GDPR/UK GDPR requests, we may extend by a further 2 months and will notify you. |
| Grievance Officer (India DPDPA 2023) | hello@theinduscraftco.com — Subject: 'DPDPA Grievance' |
Supervisory Authorities — You Always Have the Right to Complain
EU buyers: Contact your national data protection authority (e.g., CNIL — France, BfDI — Germany, DPC — Ireland, AEPD — Spain). UK buyers: Contact the ICO (ico.org.uk). California buyers: Contact the California Privacy Protection Agency (cppa.ca.gov). Canadian buyers: Contact the OPC (priv.gc.ca). Australian buyers: Contact the OAIC (oaic.gov.au). We ask that you contact us first, but you are not required to do so.
The Indus Craft Co. | GSTIN: 19AAXFT9159Q1ZK | IEC: AAXFT9159Q
Crafting Nature into Life.
Privacy Policy v2.0 • Effective 22 June 2026 • hello@theinduscraftco.com • www.theinduscraftco.com
Sustainable Indian crafts, handmade with natural materials for conscious wholesaler, retailers and global buyers.
Contact 24 x 7
+91 94320 58888
