Privacy policy

Who is responsible

Tinybridge Ventures Private Limited, WeWork Galaxy, 43 Residency Road, Richmond Town, Bangalore 560025, Karnataka, India, is the data fiduciary under the Digital Personal Data Protection Act, 2023 for everything described here. Write to kantha@catsofkochi.com about any of it.

What we collect, and why

• Your designs — kept, with your cloth photos and boxes, in the browser or app on your device, and never sent to kantha.app.
• Your order — name, delivery address, email, telephone. Needed to make and deliver the panel, and to issue the tax invoice Indian law requires.
• Payment — made on the cats of kochi shop, under that shop's own policies. We never see or store your card number.
• Our newsletter — your email address, if you subscribe in the box at the bottom of any page. We send you an email with a link first. You are subscribed only when you click it. We use your address to send you stitching tips and Kantha ideas. Our newsletter server also records which of our emails you open and which links in them you click. We use this to see which emails readers find useful.
• Messages you send us — if you use the contact form: your email address, your message, a subject if you write one, the page you sent it from, and the page you came from if your browser tells us. We use them to read your message and reply.
• The check that you are a person — the newsletter box and the contact form use Cloudflare Turnstile, which tells people from automated programs. It loads only when you use one of the forms: when you click, tab into or type in it, or press send. It looks at signals from your browser and device, such as your IP address (the number that identifies your connection), your browser type and how it connects. Cloudflare says it cannot directly identify you from these signals and uses them to block automated programs. Cloudflare also uses them to improve that blocking. Read Cloudflare's Turnstile privacy addendum. We do not receive these signals. We receive only Cloudflare's pass or fail result.
• Which pages are visited — counted by Plausible, an analytics tool we run on our own server. It records the page, the site that sent you, your approximate location, the kind of browser and device, how far you scroll and how long the page is open, when the page you asked for does not exist, and when you follow a link off the site, download a file or send a form — not what you typed in it. It uses no cookies, keeps no IP address and cannot tell you apart from one day to the next. It tells us which pages people find.

We do not run advertising, we do not profile you, and we do not sell or rent personal data to anybody. Plausible is the only analytics on this site, and nobody else receives what it counts.

Who else sees it

• The courier — your name, address and telephone, to deliver the parcel.
• Cloudflare — if you use the newsletter box or the contact form, Cloudflare runs the Turnstile check and sees the signals described above. Cloudflare is based in the United States, so this data may be processed outside India.
• Email delivery — Amazon Simple Email Service (Amazon SES), in Amazon's Mumbai region, sends our newsletter and the email that confirms your sign-up. It also carries your contact messages to us.
• Our hosting — servers in Germany operated for us. They hold your newsletter sign-up (in Ghost, at friendraiser.app, our own newsletter server) and your contact messages (in Directus, at directus.folktaler.com, our own content system). Personal data may therefore be processed outside India, which the DPDP Act permits. The page counts above are kept on a server in Bengaluru, also operated for us.

We also disclose where a law, a court or a tax authority requires it.

How long we keep it

• Order and tax records: 8 years, as Indian law requires.
• Server logs: 90 days.
• Newsletter: until you ask us to delete your address. You can unsubscribe from any newsletter email. We then stop sending, but keep your address, marked as unsubscribed, until you ask us to delete it (see “Your rights”).
• Contact messages: until you ask us to delete them.
• The Turnstile check: we keep nothing from it. Cloudflare keeps its own signals under its own policy.

Cookies

There is no advertising or analytics cookie on this site, which is why there is no consent banner to click away.

Your rights

Under the DPDP Act you may ask what we hold about you, ask us to correct or complete it, ask us to delete it where we are not required to keep it, and withdraw consent. This includes your newsletter address, your contact messages and any question about the Turnstile check. Write to kantha@catsofkochi.com and we will answer within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

To leave the newsletter, use the unsubscribe link at the bottom of any newsletter email. Or write to us and we will remove you.

Children

The Kantha app is for people aged 13 and over. The shop is for people aged 18 and over: you must be 18 or over to place an order. The newsletter and contact form are for people aged 13 and over. We do not knowingly collect data from children. Tell us if you believe we have, and we will delete it.

Keeping it safe

Traffic is encrypted in transit. Access to order data, newsletter addresses and contact messages is limited to the people who need it to make and send your panel, run the newsletter and answer you. No system is perfect; if a breach ever affects you, we will tell you and the Data Protection Board as the Act requires.

Write to us

Tinybridge Ventures Private Limited, trading as Kantha. Email kantha@catsofkochi.com or telephone +91 97405 97878, 10:00 to 18:00 IST, Monday to Saturday.

Registered address: WeWork Galaxy, 43 Residency Road, Richmond Town, Bangalore 560025, Karnataka, India. GSTIN 29AAMCT7015P1ZJ.

We acknowledge every message within 48 hours and aim to resolve it within 7 working days.