Privacy Policy

 Okashi – Master Privacy Policy
Effective Date: JANUARY 24 2026
------------------------------
## 1. Overview
Okashi Private Limited (“Okashi”, “we”, “our”, or “us”) is deeply committed to protecting the privacy, confidentiality, and security of the personal data shared by our retail customers, corporate entities, and elite membership circles.
This Master Privacy Policy governs our primary digital architecture located at www.okashijpnind.com , our marketplace nodes, and our backend logistics databases. All operations strictly adhere to the Information Technology Act, 2000 (and the rules framed thereunder), the Digital Personal Data Protection (DPDP) Act, 2023, and international privacy guidelines where globally applicable.
------------------------------
## 2. Information We Collect & Sourcing Mechanics
We ingest specific data tracks to power our multi-tenant e-commerce storefront, distribute bulk B2B freight, and initialize premium brand memberships:

* Directly Supplied Personal Identifiers: Your full legal name, permanent physical shipping coordinates, commercial billing addresses, validated phone numbers, and company corporate records (GSTIN, Corporate PAN, and Incorporation Certificates for B2B merchants). This data is gathered securely when registering accounts, completing PayU checkouts, or filing corporate trade applications.
* Automated Transactional Payloads: Granular purchase histories, item preferences, customized gift hamper specifications, and digital payment receipts generated seamlessly during active sessions.
* Financial Tokenization Data: To handle high-value single transactions for premium membership tiers, our payment gateway partner, PayU, captures data payloads securely. Raw card numbers, corporate banking credentials, PINs, or CVV digits are processed exclusively inside PayU's PCI-DSS-compliant infrastructure. Okashi never views or stores raw payment credentials.
* Network & Logistics Telemetry: IP addresses, operating system specifications, browser properties, and device telemetry logged via secure server caches to assist our 3PL warehouse systems in routing same-day regional deliveries and reducing partner Return-to-Origin (RTO) friction.

------------------------------
## 3. Purpose and Legal Grounding for Data Processing
We utilize, organize, and store your collected data under the strict legal grounds of contractual necessity, legitimate business interests, and compliance with statutory frameworks:

* Contractual Fulfillment: Executing order pick-and-pack tasks inside our mega-warehouses, processing cargo shipping bills, deploying tracking links, and managing custom apparel drops.
* The Black Card Circle Initialization: Managing the 90-day global sourcing window, configuring your flat 20% store-wide discount matrix, routing priority Express Air freight tracking, and issuing digital vacation or luxury cruise bookings.
* Ecosystem Enterprise Growth: Analyzing localized buyer demand patterns to establish future brick-and-mortar convenience stores and physical Okashi Café hubs in top target metro lanes.
* Corporate and Tax Compliance: Generating valid GST invoices, conducting corporate financial audits, maintaining statutory accounting records, and tracking advance commercial service deposits.
* Security & Fraud Mitigation: Staging structural screening protocols to prevent malicious digital attacks, block payment gateway chargeback fraud, and identify unauthorized automated scraping on our servers.

------------------------------
## 4. Structured Information Sharing Constraints
Okashi enforces a strict zero-monetization policy. We never sell, rent, or trade your personal or corporate data tracks to speculative third-party aggregators. Information sharing is bounded strictly to authorized ecosystem components:

* Logistics & Gateway Infrastructure Partners: Disclosing necessary delivery coordinates and contact channels to our integrated courier fleets, regional 3PL hubs, and our primary payment aggregator, PayU, to complete your transactions.
* Corporate Travel Intermediaries: Securely transmitting necessary legal identity records for Platinum and Onyx members to our registered corporate travel agencies solely to book travel vouchers within the established internal budget caps (up to ₹1,50,000 for domestic travel; up to ₹3,00,000 for luxury cruise packages).
* Legal Enforcement: Cooperating fully with statutory government bodies, SEBI, the Ministry of Corporate Affairs (MCA), or court orders when required under applicable Indian laws.

------------------------------
## 5. Cookies & Advanced Analytics Tracking
Our Site deploys secure session cookies, pixel tags, and encrypted web beacons to improve user interface response times, retain current shopping cart inventories, and measure promotional campaign conversions. You maintain complete control to block or purge tracking cookies via your individual web browser configurations; however, doing so may cause specific high-value checkout features or user dashboards to face processing errors.
------------------------------

## 6. Corporate Data Retention Guidelines

* Standard Retention Frame: We retain basic customer profiles and transactional telemetry for as long as your user account remains voluntarily open on our domain.
* Statutory Obligations: To align with corporate tax legislation and accounting standards in India, all core invoicing records, advance membership receipts, and GST-linked transaction transcripts are retained in archival security vaults for a mandatory period of 7 financial years.

------------------------------
## 7. Statutory Privacy Rights of Data Principles
Under current Indian DPDP regulations and data protection frameworks, you have full authority to execute the following rights directly from your account node:

* Right to Access & Review: Request an official digital extract of the specific personal data points stored within our company servers.
* Right to Correction: Instantly amend or update inaccurate delivery metrics, business credentials, or communication streams.
* Right to Erasure (The Right to be Forgotten): Ask for the permanent deletion of your e-commerce data profile, subject to statutory tax data retention laws.
* Right to Marketing Withdrawal: Revoke authorization for performance marketing loops or WhatsApp brand alerts by clicking the "Unsubscribe" path embedded inside our digital broadcasts.

To execute a formal right verification or request data deletion, you must file a verified written notice to our privacy officer at privacy@okashipvtltd.com.
------------------------------
## 8. Structural Security Safeguards
Okashi deploys multi-layered technical, electronic, and administrative firewalls to insulate your data profiles from unauthorized breach, digital leakage, or modification. Our security perimeter features bank-grade 256-Bit SSL/TLS checkout encryption, continuous vulnerability monitoring, and isolated, credential-gated backend access points for logistics operations.
------------------------------
## 9. Third-Party Web Links
Our Site may feature specific web links to external vendor domains, brand collaboration portals, or marketplace networks. Okashi Private Limited holds zero legal responsibility for the external privacy policies, terms, or server security mechanisms operated by outside web domains.
------------------------------
## 10. Children’s Personal Privacy Protection
Okashi operates as a general youth-lifestyle and commercial wholesale enterprise. We do not knowingly compile or harvest data profiles from minors under the clear age of 18 without parental oversight. If our security team discovers an accidental collection of minor data metrics, it will be immediately deleted from our live server databases.
------------------------------
## 11. Governance Amendments
We reserve the absolute corporate right to update, modify, or rewrite this master Privacy Policy at any time to align with legal shifts or logistics upgrades. The current active version will remain continuously updated on this URL page with a revised "Effective Date."
------------------------------
## 12. Corporate Privacy Contacts & Grievance Redressal
For any security concerns, privacy requests, or data processing questions, please contact our legal desk:

* Corporate Entity Name: Okashi Private Limited
* Designated Data Officer Email: privacy@okashipvtltd.com
* Corporate Support Line: +91-9278024282
* Registered Corporate Address: C-112, Sarvodaya Nagar, Lucknow, Uttar Pradesh, India

------------------------------
By continuing your session, registering an account, or processing a purchase tier on www.okashijpnind.com , you certify that you have read, explicitly understood, and agree to stay bound by this Master Privacy Policy.