Privacy & Data Policy

1. IntroductionKalpataru Kinetic respects the privacy of its customers, prospective customers, website visitors, and individuals who communicate with us.This Privacy Policy explains how Kalpataru Kinetic collects, uses, stores, shares, and protects personal information in connection with its electric-vehicle business and related customer communications.Kalpataru Kinetic is a proprietorship operating in the electric vehicle category at 1237, Misal Pride, Upper Ground Floor, Shahu Mill Road, Kolhapur, Maharashtra – 416008, India.In this Privacy Policy, “we”, “us”, “our”, and “the Business” refer to Kalpataru Kinetic. “You” and “your” refer to an individual whose personal information we collect or process.This policy applies, as relevant, when you contact us by telephone, email, WhatsApp, RCS, SMS, or another communication channel; enquire about an electric vehicle or related product; place an order; request assistance; or interact with our digital business presence.We aim to collect only information that is reasonably relevant to our business activities, explain why it is needed, use it responsibly, and retain it only for an appropriate period.This policy is intended to support transparency and responsible data handling under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), to the extent its relevant provisions are in force and apply to the processing concerned.The DPDP Act and Digital Personal Data Protection Rules, 2025 have a phased commencement framework. Kalpataru Kinetic will apply the provisions that are legally applicable to its processing activities and take appropriate steps toward compliance with provisions as they become effective.MeitY+2

2. Information We CollectThe information we collect depends on how you interact with Kalpataru Kinetic. We do not claim to collect every category listed below. We collect the categories that are relevant to the particular interaction or service.
2.1 Information You Provide DirectlyWhen you contact us, request information, place an order, or seek customer support, you may provide:Name or business name.Mobile or telephone number.Email address.Residential, billing, or delivery address, where required.Product enquiry, preferred model, or purchase-related information.Order details, invoice information, and transaction references.Customer service requests, complaints, or feedback.Information you voluntarily include in a message or document.We may also receive information you provide when requesting an appointment, delivery coordination, warranty assistance, or another service that we actually offer.Please provide only information that is relevant to your request. You should avoid sending sensitive personal information unless it is specifically necessary and requested through an appropriate channel.
2.2 Device and Technical InformationIf we operate a website or other digital service that collects technical information, we may receive limited information such as:Device type and operating system.Browser type and version.Internet Protocol (IP) address.Approximate location derived from technical information, where enabled.Website pages or features accessed.Date, time, and duration of a visit.Basic diagnostic, security, or error information.The exact technical information collected will depend on the website configuration, hosting provider, analytics tools, and other technologies actually used.We do not promise that every category of technical information is collected.
2.3 Cookies and Similar TechnologiesIf our website uses cookies or similar technologies, those technologies may collect information about browsing activity, session preferences, website functionality, or website performance.Some cookies may be necessary for the website to function. Other cookies, including certain analytics or advertising cookies, may require consent under applicable law.Further details are provided in the Cookies and Tracking Technologies section below.
2.4 Message and Communication DataWhen you communicate with Kalpataru Kinetic through WhatsApp, RCS, SMS, email, telephone, or another channel, we may process information contained in the communication.Depending on the channel and the interaction, this may include:Your telephone number or messaging identifier.Your name or profile information made available to us.The text of messages you send to us.Product enquiries and customer-support requests.Images or documents you voluntarily provide.Message timestamps and delivery or interaction status, where made available.Your communication preferences and opt-out requests.We use message information primarily to understand and respond to the communication, manage relevant business activities, and maintain appropriate records.We do not intend to collect private communications from your device that are unrelated to your interaction with Kalpataru Kinetic.
2.5 Transaction and Payment InformationWhere you make a purchase or payment, we may collect information needed to record and manage the transaction, such as the product purchased, invoice details, payment amount, transaction reference, billing information, and payment status.Where a third-party payment processor handles a payment, that provider may collect payment credentials directly under its own procedures.Kalpataru Kinetic does not need your payment PIN, banking password, or one-time password for ordinary customer support. Do not send these credentials through our messaging channels.
2.6 Information from Other SourcesWhere necessary and lawful, we may receive relevant transaction information from suppliers, delivery partners, payment providers, or other parties involved in fulfilling your request.We may also receive information you have made available through a business communication or authorised referral.We will use such information only where it is relevant to the purpose for which it was obtained and permitted under applicable law.

3. Purpose of Data CollectionKalpataru Kinetic collects personal information for specific and legitimate business purposes.These purposes may include:Responding to enquiries about electric vehicles and related products.Preparing quotations and processing orders.Confirming customer identity or contact details where reasonably necessary.Coordinating payments, delivery, handover, and transaction documentation.Providing product-related assistance and responding to complaints.Communicating important changes to an order or service.Maintaining accounting, tax, and other legally required records.Preventing fraud, misuse, and unauthorised transactions.Protecting the security and integrity of our systems.Managing communication preferences and consent records.Improving the usability and reliability of our website or customer-support processes.Sending promotional communications where legally permitted and appropriately authorised.Establishing, exercising, or defending legal claims where necessary.We will not treat your provision of contact information for one purpose as unrestricted permission to use it for unrelated purposes.Where a new purpose requires additional consent or notice under applicable law, we will take appropriate steps before processing the information for that purpose.

4. Consent for WhatsApp and RCS Data ProcessingKalpataru Kinetic may use WhatsApp Business messaging and RCS to communicate with customers, subject to availability and applicable platform requirements.
4.1 How Consent May Be ObtainedDepending on the communication, consent or permission may be obtained when you:Submit a form requesting contact through a specified messaging channel.Initiate a conversation with our business account.Explicitly request an order update or customer-support message.Select a clearly described messaging preference.Otherwise provide a valid indication of permission where recognised by applicable law and platform rules.The method of obtaining consent will depend on the particular communication and the requirements applicable to it.Where a separate consent is required for promotional messaging, it will not be inferred merely from your purchase of an electric vehicle or your request for a quotation.
4.2 Transactional and Promotional MessagesTransactional messages may include responses to enquiries, order confirmations, payment-related updates, delivery coordination, and relevant product-support communications.Promotional messages may include information about offers, new products, events, or other marketing material.We will distinguish promotional communications from communications necessary to fulfil an existing request, as appropriate, and seek the relevant permission where required.
4.3 WhatsApp Business MessagingWhere WhatsApp is used, messages may be processed through Meta’s systems and other authorised service providers involved in delivering the Business’s communications.Use of WhatsApp is also subject to the applicable WhatsApp terms and privacy notices.Kalpataru Kinetic does not control all data processing undertaken independently by Meta or other providers under their own roles and policies.
4.4 RCS MessagingWhere RCS is used, messages may pass through supported messaging applications, Google-related services, mobile network operators, or other providers, depending on the implementation.The processing of message information by those providers is subject to their applicable terms, technical arrangements, and privacy notices.
4.5 Opting OutYou may request that Kalpataru Kinetic stop sending optional promotional messages by using an available opt-out method or contacting us at KALPATARUENG.KOP@gmail.com or 9881122131.We will take reasonable steps to process the request and update our communication preferences.Opting out of promotional messages does not necessarily prevent messages that are needed to complete an existing transaction, respond to a customer-initiated request, or meet a legal obligation, where such messages are permitted.

5. Legal Basis for ProcessingKalpataru Kinetic will process personal data on a basis permitted by applicable law.Depending on the activity and the legal provisions in force, the relevant basis may include:Consent: Where consent is required, we will seek it for the stated purpose and provide a reasonable means to withdraw it.Voluntary provision for a requested purpose: Information you voluntarily provide when requesting a product enquiry, quotation, or service may be processed as permitted by applicable law and subject to any required notice or consent.Performance of a transaction: Certain information may be necessary to process an order, coordinate delivery, provide agreed customer assistance, or fulfil a contractual obligation.Legal obligations: We may retain or disclose information where required by applicable tax, accounting, consumer-protection, regulatory, or other legal requirements.Legitimate and legally permitted operational purposes: Where recognised by applicable law, processing may be necessary for security, fraud prevention, dispute handling, or other lawful operational purposes.The DPDP Act contains specific rules concerning consent and certain permitted uses of personal data. The precise basis applicable to a particular activity depends on the facts and the provisions in force at that time.India Code+1We will not rely on this general description as a substitute for obtaining consent where consent is legally required.

6. How We Use Collected DataWe use personal information in a manner consistent with the purposes described in this policy.For example, your name and contact details may be used to respond to an enquiry. Delivery information may be used to coordinate fulfilment of an accepted order. A transaction reference may be used to reconcile a payment or respond to a billing question.Communication records may be used to understand the context of a customer-support request and avoid asking you to repeat information unnecessarily.Where technically available and appropriate, limited device or website information may be used to identify errors, improve functionality, detect suspicious activity, and maintain the security of our digital services.We may use aggregated or de-identified information for operational analysis, provided it is handled in a manner consistent with applicable law and is not used to improperly identify individuals.We do not sell personal data as a business activity.We do not intend to use customer contact information to send unrelated third-party marketing without an appropriate legal basis.

7. Data Retention and DeletionKalpataru Kinetic retains personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal requirements.Retention periods may vary according to the type of information and the relevant transaction.For example:Enquiry information may be retained for a reasonable period to respond and manage follow-up.Order and invoice records may be retained for applicable accounting, tax, and legal purposes.Customer-support records may be retained for a reasonable period to resolve issues and maintain relevant transaction history.Consent and opt-out records may be retained as needed to demonstrate communication preferences and avoid sending messages contrary to those preferences.Technical logs may be retained for a limited period based on security and operational needs.When personal information is no longer required, we will take reasonable steps to delete it, anonymise it, or otherwise dispose of it securely, subject to applicable law.A deletion request may not result in immediate removal of every record if certain information must be retained to comply with a legal obligation, resolve a dispute, establish a claim, or maintain a necessary suppression record to honour an opt-out.Where retention is legally required, the information will be retained only for the relevant purpose and period.

8. Data Sharing with Third PartiesKalpataru Kinetic may share personal information with third parties only where relevant to the purposes described in this policy and permitted by applicable law.
8.1 Meta and WhatsAppWhere we use WhatsApp Business messaging, relevant contact and message information may be processed through Meta’s systems and authorised providers involved in the messaging service.Meta may also process certain information under its own terms and privacy practices. Customers should review the relevant Meta and WhatsApp privacy notices to understand the provider’s independent processing.
8.2 Google and RCS ProvidersWhere RCS messaging is used, relevant information may be processed by Google-related services, messaging applications, telecommunications operators, or other providers involved in message delivery.The providers involved will depend on the particular RCS implementation and the recipient’s device, network, and messaging application.
8.3 Telecom OperatorsMobile network operators and other telecommunications providers may process information necessary to route or deliver SMS or RCS communications, where those services are used.Their processing is governed by applicable law and their own service arrangements.
8.4 Suppliers and Delivery PartnersWhere a product order requires assistance from a manufacturer, supplier, courier, or delivery partner, we may share relevant information such as the customer’s name, contact number, delivery address, and order details.We aim to limit such sharing to the information reasonably needed to fulfil the relevant activity.
8.5 Payment and Professional Service ProvidersWe may share necessary transaction information with payment processors, accountants, legal advisers, auditors, or other professional service providers where required for payment processing, compliance, dispute resolution, or legitimate business administration.
8.6 Legal and Regulatory DisclosuresWe may disclose information where required by law, a valid legal process, a competent authority, or a lawful direction.Where permitted, we will seek to limit disclosure to the information reasonably necessary to meet the relevant requirement.
8.7 No Unrestricted Sale of Personal DataKalpataru Kinetic does not sell personal information as a standalone commercial product. We do not authorise third parties to use customer data for purposes unrelated to the relevant service unless permitted by applicable law and supported by an appropriate legal basis.

9. Security Measures and EncryptionKalpataru Kinetic recognises the importance of protecting personal information against unauthorised access, misuse, loss, alteration, or disclosure.Depending on the systems and services actually used, reasonable safeguards may include:Restricting access to information to persons who need it for business purposes.Using appropriate passwords and account-protection measures.Maintaining relevant software and systems.Using secure connections where supported.Limiting the information shared with service providers.Taking reasonable steps to protect business devices and records.Reviewing suspicious activity and responding to identified security concerns.Using service providers that offer appropriate security features for the relevant processing.Encryption may be provided by a messaging platform, hosting provider, payment provider, or other technology service, depending on the service and configuration.We do not claim that every communication or record held by Kalpataru Kinetic is end-to-end encrypted. Security features vary by channel, device, provider, and type of data.No internet transmission or electronic storage method can be guaranteed to be completely secure. We will nevertheless take reasonable steps appropriate to the nature of the information and the risks involved.If a personal-data breach occurs, Kalpataru Kinetic will assess the incident and take steps required under applicable law, including any required notifications to affected individuals or authorities.

10. Cookies and Tracking TechnologiesIf Kalpataru Kinetic operates a website that uses cookies or similar technologies, those technologies may help the website function, remember preferences, measure performance, or support other disclosed purposes.Cookies may include:Essential cookies: Technologies required for basic website operation, security, or requested functionality.Preference cookies: Technologies that remember settings or preferences.Analytics cookies: Technologies used to understand website usage and improve performance, where implemented.Advertising or marketing technologies: Technologies that may be used for advertising measurement or relevant promotional purposes, where implemented and permitted by law.The actual cookies used will depend on the website’s configuration and the third-party tools installed.Where consent is required for a cookie or tracking technology, we will seek consent through an appropriate mechanism before using it for that purpose.You may be able to manage cookies through your browser settings or a website consent tool, where available. Blocking certain cookies may affect some website functions.Kalpataru Kinetic does not claim to use a particular analytics or advertising service unless that service has actually been implemented.

11. Data Transfer and Storage (India-Based)Kalpataru Kinetic is a proprietorship based in Kolhapur, Maharashtra, India.We intend to manage business records in accordance with applicable Indian law and use appropriate service providers for business operations.However, the physical or logical location of every data record cannot be guaranteed to be within India. Messaging platforms, cloud hosting providers, payment processors, and other service providers may process or store information in locations determined by their systems and service arrangements.Where personal data is processed or transferred outside India, Kalpataru Kinetic will take account of applicable legal requirements, including any restrictions or conditions in force for the relevant transfer.We will not describe our systems as exclusively India-hosted unless that has been verified for the actual systems and providers used.Customers who require specific information about a particular processing arrangement may contact us using the details in this policy.

12. User Rights: Access, Correction and DeletionSubject to applicable law and the provisions in force, individuals may have rights concerning their personal data.These may include the ability to:Request information about personal data processed by Kalpataru Kinetic.Request correction of inaccurate or incomplete information.Request erasure of personal data where legally available.Withdraw consent where processing is based on consent.Raise a grievance concerning the handling of personal data.Exercise other rights provided by applicable data protection law.The availability and scope of these rights depend on the relevant law, the type of information, and any applicable exceptions.
12.1 How to Make a RequestYou may submit a privacy request by emailing KALPATARUENG.KOP@gmail.com or contacting 9881122131.Please identify the request clearly, for example, “Privacy Request – Access”, “Privacy Request – Correction”, or “Privacy Request – Deletion”.We may need to verify your identity or authority before acting on a request, particularly where disclosure or deletion could affect another person’s information or an existing transaction.We will respond within the period required by applicable law or, where no statutory period applies, within a reasonable period.
12.2 Withdrawal of ConsentWhere processing relies on consent, you may withdraw that consent through an available method or by contacting us.Withdrawal does not invalidate processing lawfully undertaken before withdrawal. It may also affect our ability to provide a service that requires the relevant information.
12.3 Complaints and GrievancesIf you believe that Kalpataru Kinetic has handled your personal information improperly, please contact us with details of your concern.We will review the matter and respond in accordance with applicable legal requirements and our operational capabilities.Nothing in this policy prevents you from approaching a competent authority or exercising a legal remedy available under applicable law.

13. Policy for ChildrenKalpataru Kinetic’s business communications and transactions are not intentionally directed toward children for independent purchase or use of products where legal capacity or age restrictions apply.We do not knowingly seek personal information from children for purposes that require parental or lawful guardian involvement without taking appropriate steps required by applicable law.Certain electric vehicles may be subject to legal age, licence, registration, or usage requirements. Customers and guardians should confirm those requirements before permitting a child or young person to use a product.Where we become aware that personal data has been collected from a child in circumstances that require consent or other safeguards, we will take appropriate steps in accordance with applicable law.This policy does not remove any legal responsibility that may apply to the Business in relation to children’s personal data.

14. Direct Marketing and Communication PreferencesKalpataru Kinetic may send promotional communications where permitted by applicable law and where the necessary consent or other legal basis exists.Promotional communications may relate to electric vehicles, product availability, relevant offers, or other business information connected with our actual offerings.We aim to provide a reasonable way to stop optional promotional communications.You may contact us at KALPATARUENG.KOP@gmail.com or 9881122131 to request an update to your communication preferences.Where an opt-out request is received, we will take reasonable steps to stop the relevant promotional messages.We may retain limited information necessary to record and respect your opt-out preference.

15. Third-Party Websites and ServicesOur communications may include links to manufacturer websites, payment services, messaging platforms, maps, or other third-party services.When you visit or use a third-party service, that service may collect information directly from you under its own privacy policy and terms.Kalpataru Kinetic does not control the privacy practices of independent third parties and is not responsible for the contents of their policies.We encourage customers to review the privacy information of any third-party service before submitting personal information or completing a transaction through that service.

16. Changes to This Privacy PolicyKalpataru Kinetic may update this Privacy Policy to reflect changes in its business operations, communication channels, service providers, legal requirements, or data-handling practices.The revised version will display an updated effective date.Where required by law, we will provide notice or seek fresh consent before making a material change that requires it.A change to this policy will not retrospectively authorise processing that was unlawful when it occurred.We encourage customers to review this policy periodically, particularly when providing new information or using a new communication channel.

17. Governing Law (India)This Privacy Policy shall be interpreted in accordance with the laws of India, including applicable data protection, consumer-protection, information technology, and other relevant legislation.The processing of personal data will be subject to the provisions of the DPDP Act and associated rules to the extent they are in force and applicable to the relevant activity.The DPDP Act recognises the protection of personal data alongside the need to process it for lawful purposes. Its provisions and implementing rules should be read with the relevant commencement notifications.India Code+2Nothing in this policy is intended to limit a right or remedy that cannot lawfully be excluded.Any dispute concerning this policy may be raised with Kalpataru Kinetic using the contact details below, without prejudice to any statutory complaint or remedy available to the individual.

18. Contact InformationFor privacy questions, requests for access or correction, deletion requests, consent withdrawal, or complaints relating to personal information, please contact:Privacy ContactKalpataru KineticKALPATARUENG.KOP@gmail.com98811221311237, Misal Pride, Upper Ground Floor, Shahu Mill Road, Kolhapur, Maharashtra – 416008, IndiaPlease include enough information for us to understand and respond to your request. We may ask for reasonable verification where necessary to protect your information and prevent unauthorised disclosure.