PRIVACY POLICY 

EFFECTIVE DATE: FEBRUARY 22nd, 2026 

LAST UPDATE: FEBRUARY 22nd, 2026 

INTRODUCTION: 

FIBERSGENIX PRIVATE LIMITED (“Crafted Fibers” or “we” or “Company” or “us” or “our/s”) is  committed to practicing the highest degree of protection of every information that we collect from the visitors,  users, and others who use our Platform (as defined hereunder) (“User/s” or “you” or “your/s”) through our platform, including website and/or any other online services (“Platform”). Safeguarding the privacy of our  User’s data is of paramount importance to us. We have framed this privacy policy (“Policy”) to make you aware  of the data handling practices undertaken by Crafted Fibers. This Policy will help you to understand the extent  to which we collect, use, store, transfer and disclose your Personal Information (as defined hereinafter). 

By accessing or using the Platform and by clicking “I Agree” or otherwise providing any Personal Information,  you confirm that you have read and understood this Policy and voluntarily consent to the collection and  processing of your Personal Information, including but not limited to: 

a. Your name and contact details; 

b. Account-related information (such as username and password); 

c. Device, log and usage data; and 

d. Any information you provide while using the Platform. 

Your Personal Information is processed only for specific and lawful purposes, including enabling access to the  Platform, providing services, communicating with you, ensuring security and fraud prevention, and complying  with legal obligations. We do not process Personal Information for any additional purpose without obtaining  fresh consent, where required by law. 

You may withdraw your consent at any time by clicking by contacting us at contact@craftedfibers.in. Upon  withdrawal of consent, processing of your Personal Information shall cease to the extent required under  applicable law. If you do not agree with this Policy, you should refrain from using the Platform. 

Further details regarding the categories of Personal Information collected, the purposes of processing, data  retention, your rights, and grievance redressal mechanisms are set out in the relevant sections of this Policy  below. 

1. SCOPE 

1.1 This Policy is legally binding electronic record under the Indian Contract Act, 1872, and is  published pursuant to the Digital Personal Data Protection (“DPDP”) Act, 2023, DPDP Rules,  2025, Information Technology Act, 2000 and other applicable laws of India. This Policy does not  require any physical, electronic, or digital signature and is binding on all its Users by mere usage  of our Platform and is a legally binding document between you and the Company. 

1.2 This Policy applies to all Users of our Platform. By accessing or using the Platform, you consent  to the collection, use, sharing, and processing of your Personal Information as described herein. 

1.3 We collect, use, store, transfer, and disclose your Personal Information only to the extent  mentioned in this Policy. Our data handling practices are at par with the prevalent laws of India. The Company ensures that it adheres to the highest industry standard in upholding the privacy of  its Users which is also enshrined by the Constitution of India. 

1.4 This Policy was last updated or is effective (as the case may be) on the above-mentioned date and  gives details of the current data handling practices undertaken by the Company. We reserve the  right to amend this Policy from time to time, at our sole discretion, thus we recommend you to  frequently go through our updated Policy to be aware of our latest amendments.  

2. CONSENT 

2.1 By visiting/using our Platform, you consent to the data handling practices undertaken by the  Company as mentioned in this Policy. Your continued usage of our Platform implies your consent  to the disclosure of your Information (as defined hereinafter) to the extent contemplated in this  Policy. This Policy should be read in addition to the Consent Notice, terms and conditions of our  Platform (“Terms and Conditions”). 

2.2 We do not share any Personal Information of our Users with any third-party without taking prior  consent for the same or in contravention to this Policy. The extent of sharing any information of  our Users to any third-party is limited to the permissible prerequisites of the DPDP Act 2023,  DPDP Rules 2025 and other applicable laws. 

2.3 Withdrawal of consent: You may withdraw your consent to the processing of your Personal  Information at any time. Upon withdrawal, the Company shall cease processing your Personal  Information for the purposes for which consent was originally obtained. 

Withdrawal of consent may be exercised by: 

(a) contacting us at contact@craftedfibers.in; or 

(b) using any withdrawal mechanism or link made available on the Platform. 

2.4 Withdrawal of consent will not affect: 

(i) any processing lawfully undertaken prior to such withdrawal; or 

(ii) processing required for compliance with applicable law, enforcement of legal claims,  prevention of fraud, or performance of statutory obligations. 

Upon withdrawal of consent, certain services/features may become unavailable to you to the  extent they require such Personal Information for their functioning. 

2.5 Consent of Minors: Our Platform is not intended to attract anyone under the relevant age of  consent to enter into binding legal contracts under the laws of their respective jurisdictions  (“Minors”). We do not solicit or intend to collect any Information from any Minor. If you are a  Minor, you may only use the Platform with the explicit consent of your parent or legal guardian.  Additional parental or legal guardian details will be required before any Personal Information of  a Minor is collected or processed. We will not be responsible for any mishandling or abuse of our  Platform by any Minor or their consenting parents or legal guardians. 

3. INFORMATION CATEGORY 

We collect the following two types of information (“Information”) through our Platform:

3.1. Personal Information: 

3.1.1. We collect the following form of personal information (“Personal Information”)  through our Platform from the Users: 

i. Personal Information includes every Information that may be required to identify  an individual. Such Information may include but is not limited to such User’s full  

name, contact number, email ID, location, address or any other personal  

information which such individual may have submitted through our Platform or  

otherwise; 

ii. your log-in and password details in connection with the creation of account and  sign-in process on the Platform, if any. We reserve the right to reject usernames  

that are offensive or unsuitable or already in use by other Users;  

iii. details of any requests, payments and/or transactions made by you through the  Platform including, but not limited to, billing address, credit/debit card details,  

UPI ID and other payment instrument and tracking details. 

iv. To ensure security and prevent fraud; 

v. To comply with applicable laws and legal requirements. 

3.1.2. If any User chooses to connect with us through the email ID or phone number mentioned on our Platform, we will retain such Information which you may have  submitted through any of the above-mentioned mediums. Such Information is retained  to attain any dispute, address query, provide User redressal, and troubleshoot problems. 

3.2. Non-Personal Information: 

3.2.1. Non-Personal Information means information that is not limited to determine the  identity of any individual or business. Such information includes but is not limited to  your browser type, the URL of the previous platforms you visited, your internet service  provider (ISP), operating system, device type and model, device identifiers (such as  Apple IDFA, Android Advertising ID, or other manufacturer-assigned IDs), mobile  network information, device settings (like language, time zone and connection type) Internet Protocol (IP) address and general usage statistics. Such information shall be  collected from our Users through their use of the Platform and shall be termed as  “Non-Personal Information”. 

3.2.2. The Company may also collect Non-Personal Information through its Platform or  otherwise that any User may come forward and provide or that may have been requested  either through a response to a questionnaire or any survey conducted by us or through  the ‘Contact Us’ feature present on our Platform. We may also appoint an individual or  a business to collect such Information on behalf of the Company. Such Information  helps us to cater to our User expectations and thus serve a better User experience. Any  such Non-Personal Information collected by us/submitted by you is retained with due  adherence to the governing laws of India.  

4. HOW WE COLLECT THE INFORMATION

4.1. We may collect Information from our Users regarding their product purchase or login and/or  registration details they put on our Platform which includes their email ID, password, full name, address and mobile number. Such Information shall also include their google mail (“Gmail”) credentials in case they choose to login and/or register themselves through their Gmail account  on our Platform. 

4.2. Please note that where ever possible, we indicate which fields are required and which fields are  optional. You always have the option to not provide information by choosing not to use a  particular service or feature on the Platform. 

4.3. In the event any User has either registered themselves as a customer and/or guest (“Customer/s”) to purchase any product (“Product/s”) from our Platform, we may collect  Information including but not limited to their full name, contact number, email ID, address, and, payment details including, but not limited to, billing address, credit/debit card details, UPI ID and  other payment instrument in order to deliver the Products to such Customers.  

4.4. We may collect any other Information that any User voluntarily chooses to provide us through  our Platform including the Information shared through our User support facility. 

4.5. The Company may collect device and connection-specific information when you access or use  the Platform. This includes information like hardware model, operating system information, IMEI  number, signal strength, app version, browser information, connection information including  phone number, mobile operator or ISP, language and time zone, and IP.  

5. HOW WE USE THE INFORMATION 

5.1. The Company may use your Information for the following purposes:  

5.1.1. register and maintain your account; 

5.1.2. provide you access to our app and services; 

5.1.3. to ensure security and prevent fraud; 

5.1.4. delivering the services enlisted on our Platform in accordance with the Terms of  Conditions to the Users; 

5.1.5. we collect and analyze demographic and profile data of our Users’ activity on our  Platform; 

5.1.6. providing the Users with the necessary resolutions for any issues faced by them while  using the Platform; and 

5.1.7. marketing and promotion of the services that we provide through our Platform or  otherwise. 

5.2. We may use your Information to share promotional offers by way of digital and/or direct  communication to you. Such communication may be shared after receiving your consent through  your contact number, email, and/or text messages.

5.3. We may use your IP address and other relevant Information to analyze our web traffic. Such  Information may also be used to ease any form of technical complication faced by our Users  while using our Platform. 

5.4. We may use and share your collected Information to ensure technical service functionality and  data accuracy, perform trouble-shooting and prevent or detect fraud, security breaches or other  illegal activities. 

5.5. We may release your Personal Information to a third-party in order comply with a court order or  other similar legal procedure, or when we believe in good faith that such disclosure is necessary  to comply with the law; prevent imminent physical harm or financial loss; or investigate or take  action regarding illegal activities, suspected fraud, or violations of Terms and Conditions.  

5.6. We may also use cookies and similar technologies to remember your preferences, analyse activity  and improve user experience. 

6. SHARING OF INFORMATION 

6.1. We may disclose and, in some cases, transfer your Information to such entities as required to  provide services to you, to the extent permitted by applicable law. We require such entities to  protect your Information through equivalent security measures as what we would adopt. Below  is an indicative list of entities that we provide your Information to: 

6.1.1. We share your Information with entities that provide services on our behalf, including  but not limited to platform hosting, data storage, software services, email services,  marketing, providing payment services, data analytics, data mining, delivery services, pick-up services, and, conducting surveys. 

6.1.2. We may share your Information with law enforcement agencies or regulatory  authorities pursuant to lawful requests for Information, and, otherwise as required  under any law applicable at the given time. 

6.1.3. When any Information is required to respond to any enquiry, investigation, allegation  regarding any infringement of any propriety right. 

6.2. If we restructure our business by merger or acquisition, or amalgamation, we may share your full  or partial Information with our affiliates in order to continue providing the services to you. 

7. DATA RETENTION AND ERASURE 

7.1. Retention of Personal Information: We retain your Personal Information only for the duration  necessary to fulfil the purposes described under Section 5 – How We Use the Information, unless  a longer retention period is required under any applicable law. 

7.2. Personal Information, associated traffic data, and logs of processing activities will be retained for  a minimum of one (1) year from the date of such processing, or for any longer period as notified  by the Government of India, unless further retention is required for legal or regulatory  compliance.

7.3. Automatic Erasure of Personal Information: When the applicable retention period ends, the  Company will erase the Personal Information and associated logs, unless continued retention is  required under applicable law or for any legal claims. 

7.4. You will receive at least forty-eight (48) hours’ advance notice before such erasure, unless you  log into your account, contact us for performance of a pending purpose, or exercise any of your  rights under the DPDP Act and Rules or any other applicable laws. 

7.5. User-Initiated Requests for Erasure: You may request the deletion of your Personal  Information at any time by: 

a. emailing us at contact@craftedfibers.in; or 

b. using any other mechanism provided on the Platform. 

7.6. Upon receiving a valid request, we will erase your Personal Information from our active systems  subject to Section 7.2. 

7.7. Effect of Erasure: Once erased, your Personal Information will no longer be actively processed. However, certain audit logs, system backups, and archival copies may be retained strictly for  compliance, security, or fraud-prevention purposes, and will not be used for any new processing  activity 

8. THIRD-PARTY LINKS 

8.1. Our Platform may provide you links to third-party platforms. The Company has no control over any Information that is collected or sought by such third-party platforms. We do not have any  control over the data handling process or the content of such third-party platforms. We neither  represent nor warrant the privacy policy or terms of use of such third-party platforms.  

8.2. You further acknowledge and agree that we are not liable for any loss or damage which may be  incurred by you as a result of the collection and/or disclosure of your Personal Information by  external applications, sites or resources, or as a result of any reliance placed by you on the  completeness, accuracy or existence of any advertising, products or other materials on, or  available from such applications, platforms or resources. 

8.3. We shall not be accountable or responsible for any breach or misuse of data committed by any  such third-party platforms. These platforms and resource providers may have their own privacy  policies governing the collection, storage, retention, and, disclosure of your Personal Information  that you may be subject to. We recommend you to read through the privacy policy and terms of  use of such third-party platforms or resources to understand their data handling mechanism. 

9. COOKIES AND OTHER TRACKING TECHNOLOGIES  

9.1. When you visit the Platform, we may use cookies, web beacons, flash cookies, pixels and other  web application software methods (“Cookies”), that are essentially small data files to collect and  store information in your mobile application, web browser or on mobile phone, tablet, computer,  or other devices (“Device/s”) that allow us to store and receive information on how you use the  Platform. Some Cookies may serve to recall Personal Information previously indicated by a User.  We may ask advertisers or other partners to serve ads or services to your Devices, which may use  Cookies placed by us or the third-party.

9.2. Most browsers allow you to control Cookies, including whether or not to accept them and how  to remove them. You will be intimated when Cookies are being sent to your Device and you may  choose to accept or reject it, however, if you choose to not accept our cookies, you may not be  able to use certain features of the Platform. 

9.3. By interacting on the Platform, you consent to the use and placement of Cookies on your Devices  in accordance with this Policy. 

10. PROTECTION OF INFORMATION 

We are committed towards maintaining the privacy of the Information provided by you on the Platform by storing such information in the jurisdiction of India and complying with the industry standard security  safeguards for the purpose of securing the Platform and the information gathered from you within the  terms of this Policy. We have implemented physical, electronic, and procedural safeguards in order to  protect the information, including that the Information will be stored on secured servers and protected  by secured networks to which access is limited to a few authorized employees and personnel. We only  allow authorized individuals to access any Information that is collected through our Platform However,  no protecting measure can guarantee 100% security of any data over the internet. We commit to  safeguarding your Information but cannot guarantee any safety of your data from any unauthorized access  or unwitting breach from our side. For any data loss or theft due to unauthorized access to your electronic  devices through which you access our Platform, Crafted Fibers shall not be held liable for any loss  whatsoever incurred by you.  

11. THIRD-PARTY ANALYTICS 

We may use any third-party analytic tool such as Google Analytics to monitor and analyze your usage of  our Platform which will in return help us to enhance User experience. We may share your Information or  such Information may be directly collected by such tools or any other similar third-party that we may use  to help us to evaluate the use of our Platform.  

12. LIMITED LIABILITY 

12.1. We shall not be accountable or responsible for any breach committed by any of our service  partners or affiliates or third-party platforms.  

12.2. We shall not be held accountable or responsible for any loss, damage, or misuse of your  Information, if such loss, damage, or misuse is attributable to any event that is beyond the  reasonable control of the Company and shall include, without limitation, sabotage, fire, flood,  explosion, acts of God, civil commotion, strikes, lockouts or industrial action of any kind, riots,  insurrection, war, acts of government, computer hacking, civil disturbances, unauthorized access  to computer data and storage device, computer crashes, breach of security and encryption, and, any other similar events not within the control of the Company. Any such event mentioned herein  shall be referred to as “Force Majeure Event”. 

13. COPYRIGHT 

We reserve the right over the content present on our Platform. Such right may include but not be limited  to images, logo, illustrations, texts, and the like. By accessing our Platform, you agree not to tamper, alter,  or restructure any of the content present on our Platform. 

14. CHANGES TO THIS POLICY

We reserve the right to update, change or modify this Policy at any time. The Policy shall come to effect  from the date of such update, change or modification.  

15. GRIEVANCE OFFICER AND COMPLAINTS TO THE DATA PROTECTION BOARD 15.1. The name and contact details of the Grievance Officer are provided below:  

Name : Mr. Joy Gajmer 

Address: Namthang, Namchi District, Sikkim, 737102 

Mobile: 7029389774 

Email ID: joygajmer0@gmail.com 

15.2. Right to File a Complaint with the Data Protection Board of India (“DPBI”): If you are  not satisfied with the resolution provided by the Grievance Officer, or if your grievance is not  addressed within the prescribed period, you may file a complaint with the DPBI as per the  mechanism notified by the Government of India. 

16. CONTACT US 

If you have any questions or concerns or requests or suggestions regarding this Policy or the terms  mentioned in this Policy, please reach out to us at contact@craftedfibers.in.