Privacy Policy

This policy explains how Jalkit.in ("we", "us"), which runs Jalkit.in, handles your personal data. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary and you are the Data Principal. We only collect what we need to sell and deliver school books and supplies to you.

What we collect

• Account details: your first and last name, email address and password. We store the password only as a one-way hash, never in readable form.
• Order details: the recipient's name and phone number, the delivery address (and any addresses you choose to save), the school and class you ordered for, the items ordered and the order's status and history.
• Student's name: for each book set, you give us the name of the student it is for. See Children's data below.
• Messages you send us: the content of emails you send to support, and your email address.
• Technical data: like most websites, our servers automatically log your IP address, browser type and the pages you request. We use these logs for security and to fix problems.

We do not collect or store card, UPI or bank account details on our servers. We do not use analytics, advertising or social-media tracking tools, and we do not sell or rent your personal data.

Why we use it

• To create and secure your account and let you sign in.
• To take, pack, label and deliver your order. We use the student's name to keep each child's set separate.
• To email you about your order, such as confirmation, shipping, delivery, cancellation and refund.
• To answer your questions and complaints.
• To keep the invoices and accounting records the law requires, including under GST law.
• To keep the site secure and prevent fraud or misuse.

We process this data on the basis of the consent you give when you create an account, and for the specific purposes for which you voluntarily provide it (section 7(a) of the DPDP Act). We will not use it for any unrelated purpose without asking you first. We do not send marketing emails.

Children's data

Accounts are for adults only. You must be 18 or older, and you confirm this when you sign up. Parents and guardians order on behalf of students. The student's name is used only to identify and label their order. We do not track, profile or monitor children's behaviour, and we never target advertising at children. If you believe a child has created an account, contact us and we will delete it.

Who we share it with

We share personal data only as far as needed to run the service:

• Delivery partners: the recipient's name, phone number and address, so they can deliver your order.
• Service providers who process data on our behalf under contract, such as our hosting and email providers.
• Payment providers, once online payment is enabled. They process your payment directly under their own terms.
• Authorities, when the law requires us to.

How long we keep it

We keep your account data until you ask us to delete your account. We keep order and invoice records for as long as tax and accounting laws require. We keep server logs for as long as the law requires, and for at least one year. After that we delete or anonymise the data.

Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• ask us to correct, complete or update it (you can edit saved addresses yourself in your account);
• ask us to erase it, except records we must keep by law;
• withdraw your consent at any time, which is as easy as giving it. Withdrawing consent means we close your account, but it does not affect processing that has already happened;
• nominate someone to exercise these rights for you if you die or become incapacitated; and
• raise a grievance with us.

To use any of these rights, email support@jalkit.in from your account's email address. We will acknowledge your request within 48 hours and resolve it within one month at the latest. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Grievance Officer

Designation

Grievance Officer

Email

support@jalkit.in

Security

Only authorised staff can see personal data, and only when their work requires it. Passwords are hashed. No system is perfectly secure. If a breach affects your personal data, we will inform you and the Data Protection Board as the law requires.

Cookies and browser storage

We don't use tracking cookies. See our Cookie Policy for what we store in your browser and why.

Changes to this policy

If we change this policy in a way that affects how we use your data, we will update the date above and let you know by email or on the site before the change applies. Where the law requires, we will ask for your consent again.