PRIVACY POLICY

Brand: Nikloop
Website: www.nikloop.com
Effective Date: 15 October 2026
Last Updated: 15 October 2026

1. Introduction

Welcome to Nikloop (“Nikloop”, “we”, “our”, or “us”).

Nikloop is a brand offering handmade crochet products, crafted accessories, gifts, and related lifestyle products through its website and other authorised sales channels.

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you visit our website, create an account, browse our products, place an order, contact us, subscribe to our communications, or otherwise interact with Nikloop.

This Privacy Policy is intended to be read alongside our Terms and Conditions, Shipping Policy, Cancellation and Refund Policy, and any other applicable policies published on our website.

By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required by applicable law, we will seek it through an appropriate mechanism. Using our website does not, by itself, constitute consent to optional marketing or non-essential tracking where separate consent is required.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

• Our website and online store.
• Customer registration and account management.
• Product browsing, shopping carts, wishlists, and checkout.
• Purchases, payments, shipping, deliveries, and returns.
• Custom orders, personalised products, and gifting requests.
• Customer support, feedback, reviews, and complaints.
• Email newsletters, promotional messages, and marketing activities.
• Social media interactions and other authorised customer communication channels.

This policy also describes certain information-processing activities carried out by service providers acting on our behalf.

Third-party websites, payment providers, social media platforms, and other external services may have their own privacy policies. Their independent practices are not controlled entirely by Nikloop.

3. Information We Collect

Depending on how you interact with Nikloop, we may collect the following categories of information.

3.1 Personal and Contact Information

When you register, place an order, submit a form, or contact us, we may collect:

• Full name.
• Email address.
• Mobile or telephone number.
• Billing address.
• Shipping and delivery address.
• City, state, postal code, and country.
• Account username and authentication-related information.
• Contact preferences and communication history.

3.2 Account Information

If customer accounts are available on our website, we may process:

• Account registration details.
• Login and authentication records.
• Saved addresses and preferences.
• Order history and account activity.
• Wishlist and saved-cart information.
• Account settings and customer support records.

We do not intend to collect passwords in readable form. Passwords should be protected using appropriate security measures.

3.3 Order and Transaction Information

When you purchase our products, we may collect and maintain:

• Products purchased and quantities.
• Product variations, colours, sizes, and customisation instructions.
• Order numbers and order dates.
• Order value, discounts, applicable taxes, and shipping charges.
• Coupon codes and promotional offers used.
• Billing and delivery details.
• Payment status and transaction reference numbers.
• Invoice and refund records.
• Cancellation, return, exchange, and replacement requests.
• Delivery status and tracking information.

We use this information to process purchases, fulfil orders, provide customer service, and maintain appropriate business records.

3.4 Payment Information

Payments may be processed through third-party payment gateways, banks, or other authorised payment service providers.

Depending on the payment method, these providers may process payment-related information such as transaction identifiers, payment status, billing details, and other information required to complete a transaction.

Nikloop does not intend to store complete card numbers, card security codes, UPI PINs, banking passwords, or other confidential payment authentication credentials on its own systems.

Payment information collected directly by a payment provider is subject to that provider’s applicable terms, security practices, and privacy policy.

3.5 Customisation and Personalised Order Information

For customised crochet products, gifts, or other personalised orders, we may collect information you voluntarily provide, including:

• Preferred colours, patterns, sizes, and designs.
• Names, initials, messages, or personalisation instructions.
• Gift notes and delivery preferences.
• Reference images or files you upload.
• Special requests relating to the product.

Please avoid submitting unnecessary personal information about yourself or other individuals. If you provide information or images relating to another person, you should have an appropriate basis or permission to share them.

We use customisation information only for the relevant order, customer communication, and associated business purposes, subject to applicable law.

3.6 Customer Support and Communications

When you contact us through email, forms, telephone, social media, messaging applications, or other available channels, we may collect:

• Your contact details.
• The content of your enquiry or complaint.
• Order references and supporting documents.
• Photographs or attachments you voluntarily submit.
• Our correspondence with you.
• Records of complaint handling and resolution.

We use these records to respond to enquiries, investigate issues, resolve disputes, and improve customer service.

3.7 Reviews, Testimonials, and Feedback

If you submit a review, rating, testimonial, survey response, or other feedback, we may collect the content you provide and associated details such as your name, display name, purchase reference, and submission date.

Where reviews or testimonials are published publicly, we will handle associated personal information in accordance with the permissions obtained, the relevant platform settings, and applicable law.

We will not assume that submitting private feedback automatically grants permission to use it in public advertisements.

3.8 Technical, Device, and Usage Information

When you visit our website, certain information may be collected automatically, depending on the technologies enabled and your applicable privacy choices:

• IP address.
• Browser type and version.
• Device type and operating system.
• Language and regional settings.
• Pages visited and products viewed.
• Referring website or campaign source.
• Date, time, and duration of visits.
• Clicks, navigation events, and interactions.
• Website performance and diagnostic information.
• Security logs and suspected fraudulent activity.

This information helps us operate, secure, troubleshoot, and improve our website.

3.9 Location Information

We may infer an approximate location from your IP address or process the address you provide for billing, taxation, shipping, and delivery purposes.

We do not require precise device-location access merely to browse our products. If any feature requests precise location information in the future, we will explain the relevant purpose and seek permission where required.

3.10 Marketing and Preference Information

If you subscribe to marketing communications or interact with our promotional campaigns, we may process:

• Newsletter subscription status.
• Marketing preferences.
• Campaign engagement information, where lawfully collected.
• Promotional offers redeemed.
• Communication history and opt-out requests.

You can opt out of promotional communications at any time using the unsubscribe option, where available, or by contacting us.

3.11 Information From Third Parties

Where lawful and necessary, we may receive information from:

• Payment service providers.
• Shipping and logistics companies.
• E-commerce and website service providers.
• Fraud-prevention and security services.
• Advertising and analytics providers.
• Social media platforms.
• Customer support or communication service providers.

We use such information for the purposes described in this policy and subject to the applicable legal requirements.

4. How We Use Your Information

Nikloop may process personal information for the following purposes:

4.1 Order Processing and Fulfilment

• Confirming and processing purchases.
• Generating invoices and order confirmations.
• Coordinating shipping and delivery.
• Managing customised products.
• Processing cancellations, returns, exchanges, and refunds.
• Communicating order status and delivery updates.

4.2 Customer Accounts

• Creating and managing accounts.
• Authenticating users.
• Saving preferences and addresses.
• Displaying order history.
• Providing account-related support.
• Protecting accounts against unauthorised access.

4.3 Customer Service

• Responding to questions and requests.
• Investigating damaged, defective, incorrect, or delayed orders.
• Handling complaints and disputes.
• Providing product and care information.
• Maintaining service records.

4.4 Website Operation and Improvement

• Maintaining website functionality.
• Improving navigation and shopping experiences.
• Understanding product and website performance.
• Identifying technical errors.
• Testing new features.
• Improving accessibility and usability.

4.5 Security and Fraud Prevention

• Detecting suspicious transactions.
• Preventing unauthorised account access.
• Protecting our website, customers, and business.
• Investigating suspected misuse or fraudulent activity.
• Maintaining security logs and enforcing our terms.

4.6 Marketing and Promotions

Where permitted by applicable law and, where required, with your consent, we may use your contact information to:

• Send newsletters and product updates.
• Announce new collections and product launches.
• Share offers, discounts, and seasonal promotions.
• Communicate about relevant products or events.
• Measure the effectiveness of marketing campaigns.

You may withdraw your consent or opt out of promotional communications without affecting the processing necessary to complete an order or meet legal obligations.

4.7 Legal and Regulatory Compliance

We may process information where necessary to:

• Comply with applicable laws and regulations.
• Maintain tax, accounting, and transaction records.
• Respond to lawful requests from competent authorities.
• Establish, exercise, or defend legal claims.
• Enforce our agreements and protect legal rights.

4.8 Business Administration

We may use relevant information for inventory management, accounting, internal reporting, service-provider coordination, customer relationship management, and legitimate operational requirements, subject to applicable law.

5. Legal Basis for Processing

We process personal information only where an appropriate legal basis exists under the laws applicable to the relevant activity.

Depending on the circumstances, this may include:

• Consent: Where you have freely provided valid consent for a specified purpose.
• Order fulfilment and requested services: Where processing is necessary to fulfil your purchase or provide a service you request, to the extent permitted by applicable law.
• Legal obligations: Where processing is required to comply with applicable legal or regulatory requirements.
• Other lawful grounds: Where processing is permitted under applicable legislation.

Where consent is required, we will explain the relevant purpose in an appropriate notice. You may withdraw consent through the available mechanism or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and it does not require us to stop processing that has another valid legal basis.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, and similar technologies.

These technologies may be used to:

• Keep products in your shopping cart.
• Maintain sessions and account functionality.
• Remember preferences.
• Improve website security.
• Understand website traffic and performance.
• Measure advertising effectiveness.
• Support personalised advertising, where enabled and permitted.

6.1 Types of Cookies

Essential cookies: These support core website features, security, shopping-cart functionality, and checkout.

Functional cookies: These remember preferences and improve convenience.

Analytics cookies: These help us understand how visitors use our website.

Advertising cookies: These may be used to measure campaigns or deliver relevant advertisements, where enabled and permitted.

6.2 Managing Cookies

You may be able to control cookies through your browser settings and any cookie preference tool available on our website.

Disabling essential cookies may affect some features, including login, cart functionality, and checkout. Where required, we will obtain consent before using non-essential cookies or similar technologies.

Cookie availability and functionality depend on the technologies actually deployed on our website.

7. How We Share Personal Information

Nikloop does not sell personal information to third parties in exchange for money.

We may disclose or make personal information available to the following categories of recipients where necessary and lawful.

7.1 Payment Providers

Payment processors and banks may receive relevant information to authenticate, process, verify, and reconcile transactions.

7.2 Shipping and Delivery Partners

Courier companies, logistics providers, and delivery partners may receive your name, contact number, shipping address, and order-related information needed to deliver your purchase.

7.3 Website and Technology Providers

Our website hosting provider, e-commerce platform, developers, security services, cloud storage providers, and technical support providers may process information to operate and maintain our services.

7.4 Communication and Customer Support Providers

Email services, messaging platforms, customer support tools, and notification providers may process relevant information to communicate with you.

7.5 Analytics and Advertising Providers

Where enabled and legally permitted, analytics and advertising providers may receive technical information, cookie identifiers, or other permitted data to measure website performance and campaign effectiveness.

We will provide required disclosures and obtain consent where applicable. The actual providers and tracking technologies used will depend on our website configuration.

7.6 Professional Advisers

Accountants, auditors, lawyers, insurers, and other professional advisers may receive relevant information when required for legitimate business, compliance, or legal purposes.

7.7 Government and Regulatory Authorities

We may disclose information where required by law, a valid legal process, or a lawful request from an authorised public authority.

7.8 Business Transfers

If Nikloop undergoes a merger, acquisition, restructuring, sale of assets, or similar business transaction, relevant information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.

7.9 With Your Direction or Consent

We may share information where you specifically request or authorise us to do so, or where another lawful basis permits the disclosure.

We expect relevant service providers to handle personal information appropriately and, where required, under contractual confidentiality, security, and data-protection obligations.

8. Third-Party Websites and Services

Our website may contain links, embedded content, payment interfaces, social media links, or other integrations operated by third parties.

When you interact with those services, their own privacy policies and terms may apply. For example, a payment gateway may independently process payment credentials, while a social media platform may collect information about your interaction with its features.

Nikloop is not responsible for the independent privacy practices of third parties outside our control. We encourage you to review their policies before providing information directly to them.

9. International Data Transfers

Some of our technology providers, hosting services, or business partners may process information outside India.

Where personal information is transferred internationally, we will comply with applicable Indian law and any relevant restrictions, government requirements, or contractual safeguards.

The location and processing arrangements of our providers may change as our services evolve.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may depend on:

• Whether your customer account remains active.
• Whether an order or refund is pending.
• Applicable tax and accounting requirements.
• Warranty, product support, and complaint periods.
• Fraud prevention and security requirements.
• Legal claims, disputes, or investigations.
• Consent status and the purpose of the information.

When information is no longer required, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, subject to applicable legal obligations and legitimate retention requirements.

Some information may remain in secure backups for a limited period before being overwritten or deleted in accordance with our retention practices.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

Depending on the nature of the information and our systems, safeguards may include:

• Access controls and restricted permissions.
• Secure website connections using HTTPS.
• Appropriate authentication practices.
• Security monitoring and system maintenance.
• Updates and vulnerability management.
• Backups and recovery procedures.
• Service-provider security requirements.
• Staff confidentiality and appropriate access practices.

No website, network, or electronic storage system can be guaranteed to be completely secure. Although we work to protect your information, we cannot promise absolute security against every possible threat.

You should keep your account credentials confidential and notify us promptly if you suspect unauthorised access to your account.

12. Data Breaches and Security Incidents

If a personal-data breach occurs, we will assess and respond to the incident in accordance with applicable law.

Where required, we will notify affected individuals and relevant authorities within the applicable timelines, provide appropriate information about the incident, and take reasonable steps to contain, investigate, and mitigate its effects.

We may also take steps to prevent similar incidents from occurring in the future.

13. Your Privacy Rights

Subject to applicable law, you may have rights concerning your personal information.

These rights may include the following.

13.1 Right to Access Information

You may request information about personal data processed by us and other details available to you under applicable law.

13.2 Right to Correction and Updating

You may request correction of inaccurate or misleading personal information and completion or updating of information where applicable.

13.3 Right to Erasure

You may request deletion of personal information where permitted by law. We may retain certain records when required for legal compliance, transaction records, security, dispute resolution, or another valid purpose.

13.4 Right to Withdraw Consent

Where processing relies on consent, you may withdraw your consent using the available mechanism or by contacting us.

Withdrawal may affect features or services that depend on the relevant information, but it will not invalidate prior lawful processing.

13.5 Right to Grievance Redressal

You may raise privacy-related concerns or complaints through the contact details provided in this policy. We will address them in accordance with applicable law.

13.6 Right to Nominate

Where provided by applicable law, you may nominate another individual to exercise your rights in the event of death or incapacity, subject to applicable procedures.

13.7 How to Exercise Your Rights

To submit a request, contact us using the details in the Contact Us section.

Please include sufficient information to help us understand and verify your request. We may ask for reasonable verification where necessary to prevent unauthorised disclosure or changes to personal information.

We will respond within the timelines prescribed by applicable law. Certain requests may be restricted where a lawful exception or mandatory retention obligation applies.

14. Marketing Communications and Opt-Out

If you subscribe to our newsletter or otherwise consent to promotional communication, we may send updates about Nikloop products, collections, offers, and other relevant information.

You may opt out by:

• Clicking the unsubscribe link in a marketing email, where available.
• Using the relevant preference or consent settings on our website.
• Contacting us at the email address listed below.

We will process opt-out requests in accordance with applicable law.

Opting out of marketing does not prevent us from sending essential transactional or service communications, such as order confirmations, delivery notifications, refund updates, security alerts, or responses to your enquiries.

15. Children’s Privacy

Our website is intended for general shopping use and is not specifically directed at children.

We do not knowingly collect children’s personal information in circumstances where such collection is prohibited or requires consent or other safeguards that have not been satisfied.

Where applicable law requires verifiable parental or guardian consent or additional safeguards for processing children’s personal data, we will follow the requirements applicable to the relevant activity.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can assess the situation and take appropriate action.

16. Social Media and User-Generated Content

You may interact with Nikloop through social media platforms or submit photographs, reviews, testimonials, and other content.

Please be aware that information you publicly post on a social media platform may be visible to others and subject to that platform’s privacy settings and terms.

We may respond to public comments or enquiries and may process relevant information to provide customer support.

We will not treat a public post or product review as unrestricted permission to use someone’s content in advertising. Where additional permission is required, we will obtain it before such use.

17. Personalised Advertising and Analytics

If we use analytics tools or advertising platforms, certain information about website visits and interactions may be processed to measure performance, understand customer journeys, or support advertising activities.

Depending on the tools implemented, these providers may use cookies, pixels, identifiers, or similar technologies.

Where required, we will provide notice, seek consent, and offer applicable preference controls before enabling non-essential tracking.

You may also have controls available through your browser, device, or advertising platform.

We do not promise to use any particular analytics or advertising platform unless it is actually implemented on our website.

18. Automated Processing and Fraud Detection

We or our service providers may use automated systems to identify suspicious transactions, unusual activity, technical errors, or potential security threats.

These systems may support fraud prevention, transaction verification, and website security.

Where applicable law grants you rights relating to automated decision-making, we will respect those rights and provide relevant information or review mechanisms as required.

We do not intend to make statements about automated decision-making features that are not actually used by Nikloop.

19. Account Deletion and Closure

If customer accounts are available, you may request account closure or deletion through the relevant account settings or by contacting us.

We may need to verify your identity before completing the request.

Closing an account does not automatically require deletion of all associated information. We may retain transaction, invoice, tax, fraud-prevention, or dispute-related records where required or permitted by law.

Where information is retained, we will handle it in accordance with this policy and the applicable retention requirements.

20. Confidentiality of Custom Orders and Uploaded Files

If you share reference images, design ideas, personalisation details, or other files for a custom order, we will use them for the relevant purpose and associated customer service.

Access to such information should be restricted to personnel and service providers who need it to fulfil the request.

We will not intentionally publish private customer files or personalisation details as marketing material without an appropriate legal basis and any permission required by law.

Please do not upload payment credentials, government identification documents, or other sensitive information unless specifically necessary and requested through an appropriate secure process.

21. Accuracy of Information

Please ensure that the personal information you provide is accurate and up to date, especially your contact number, email address, and delivery address.

Incorrect information may delay order processing, delivery, refunds, or customer support.

You may contact us to request correction or updating of your information, subject to applicable verification and legal requirements.

22. Business and Legal Disclosures

We may process or disclose relevant personal i