This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection laws.
1. Introduction
CYGNUS DIGITAL PRIVATE LIMITED ("Culinary Kitchen," "we," "us," or "our") operates the website https://culinarykitchen.store. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
By using our website, you consent to the data practices described in this policy.
2. Data Fiduciary Information
As per the DPDP Act 2023, we are the "Data Fiduciary" for your personal data:
- Company Name: CYGNUS DIGITAL PRIVATE LIMITED
- Registered Address: Plot No.3-11-14/1, Shivaganga Colony, L B Nagar, Hyderabad, Rangareddy, Telangana 500074
- Data Protection Officer: M Jagadeesh Kumar Reddy
- Email: grievance@culinarykitchen.store
- Phone: +91 9652531306
3. Personal Data We Collect
| Category | Data Collected | Purpose |
|---|---|---|
| Identity Data | Name, Email Address | Account creation, Order processing |
| Contact Data | Phone Number, Delivery Address, PIN Code | Delivery, Communication |
| Transaction Data | Order history, Payment method (COD/UPI) | Order fulfillment, Customer service |
| Technical Data | IP Address, Browser type, Device info | Website functionality, Security |
| Usage Data | Pages visited, Click patterns | Website improvement, Analytics |
4. How We Collect Your Data
Direct Collection:
- When you create an account or place an order
- When you contact us via email, phone, or contact form
- When you subscribe to our newsletter
- When you participate in surveys or promotions
Automatic Collection:
- Cookies and similar tracking technologies
- Server logs recording website access
- Analytics tools (Google Analytics)
5. Purpose of Data Processing
We process your personal data for the following purposes:
- Order Processing: To fulfill and deliver your orders
- Communication: To send order updates, shipping notifications, and respond to inquiries
- Account Management: To manage your account and provide customer support
- Legal Compliance: To comply with applicable laws (GST, Consumer Protection Act)
- Marketing: To send promotional communications (with your consent)
- Website Improvement: To analyze usage patterns and improve user experience
- Fraud Prevention: To detect and prevent fraudulent activities
6. Legal Basis for Processing (DPDP Act)
Under the DPDP Act 2023, we process your data based on:
- Consent: For marketing communications and non-essential cookies
- Contractual Necessity: To fulfill orders and provide services
- Legal Obligation: To comply with tax laws and regulations
- Legitimate Interests: For fraud prevention and website security
7. Data Storage & Security
Storage:
- Your data is stored on secure servers located in India
- We use industry-standard encryption (SSL/TLS) for data transmission
- Access to personal data is restricted to authorized personnel only
Security Measures:
- HTTPS encryption for all website communications
- Regular security audits and vulnerability assessments
- Secure password hashing (bcrypt)
- No storage of complete payment card details (RBI Tokenisation compliant)
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Data | Until account deletion + 30 days |
| Order & Transaction Data | 7 years (as per GST/Tax requirements) |
| Communication Records | 3 years |
| Analytics Data | 26 months |
| Marketing Preferences | Until withdrawal of consent |
9. Your Rights Under DPDP Act 2023
As a Data Principal, you have the following rights:
- Right to Access: Request a summary of your personal data we hold
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time
- Right to Grievance Redressal: File complaints regarding data handling
- Right to Nominate: Nominate another person to exercise your rights
To exercise these rights, contact our Data Protection Officer at grievance@culinarykitchen.store
10. Data Sharing & Disclosure
We may share your data with:
- Logistics Partners: For order delivery (name, address, phone)
- Payment Processors: For processing payments securely
- Analytics Providers: For website improvement (anonymized data)
- Legal Authorities: When required by law or court order
We do NOT sell your personal data to third parties for marketing purposes.
11. Cookies Policy
We use cookies to enhance your browsing experience:
- Essential Cookies: Required for website functionality (cart, login)
- Analytics Cookies: To understand how visitors use our site (Google Analytics)
- Preference Cookies: To remember your settings and preferences
You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.
12. Children's Privacy
Our website is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.
14. Grievance Redressal
If you have concerns about how we handle your data:
- Contact our Data Protection Officer at grievance@culinarykitchen.store
- We will acknowledge your complaint within 48 hours
- We will resolve your complaint within 30 days
- If unsatisfied, you may approach the Data Protection Board of India
15. Contact Us
For privacy-related queries:
- Data Protection Officer: M Jagadeesh Kumar Reddy
- Email: grievance@culinarykitchen.store
- Phone: +91 9652531306
- Address: Plot No.3-11-14/1, Shivaganga Colony, L B Nagar, Hyderabad, Rangareddy, Telangana 500074
Last Updated: March 6, 2026