Kohom Organics — Privacy Policy


1. Introduction

Kohom Organics (the “Company”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what personal information we collect, how we use it, when and with whom we share it, how long we retain it, your rights, and how to contact us. This Policy applies to information collected via our websites, mobile apps, and other online services we control (collectively the “Platform”), and to personal information we collect in connection with the sale or sampling of all products and services offered by Kohom Organics on its Platform www.kohom.com (including any new products added from time to time).

By using the Platform or otherwise providing your personal information to us, you consent to the collection, use, disclosure and transfer of your personal information as described in this Policy. If you do not agree with the terms of this Policy, please do not use the Platform.

2. Scope And Applicability

This Policy governs processing of personal information of individuals located in India who access or use the Platform or purchase our Products. It does not apply to information that is aggregated or anonymized so that you cannot be identified. Third-party websites, links, apps, social media pages and plug-ins are not controlled by Kohom Organics; we encourage you to read their privacy notices before sharing personal information.

3. Definitions

  • “Personal information” means any information that identifies you or can be used to identify you directly or indirectly (name, postal address, email, phone number, payment and transaction details, device identifiers, IP address, location data, health/welfare information such as skin type or skin concerns, and other data described below).

  • “Sensitive personal data or information / SPI” has the meaning given in applicable Indian rules and includes certain health and biometric data; we will collect or process such information only with your explicit consent where required by law.

4. Personal Information We Collect

We collect categories of information necessary to provide and improve the Platform and our Products, including:

Identity & contact data

  • Name, email address, postal address, phone number, delivery address, billing address.

Account & login data

  • Username, password, account preferences, purchase history, loyalty program data.

Purchase and payment data

  • Order details, transaction IDs, payment instrument token (payment card numbers are collected directly by PCI-DSS compliant payment service providers; we do not store raw card numbers).

Technical & device data

  • IP address, browser type/version, device identifiers, operating system, mobile device ID, app usage logs.

Cookies & tracking

  • Cookie identifiers, usage data, analytics and advertising identifiers.

Profile & preference data

  • Skincare preferences, skin type, product interests, survey responses, reviews and ratings you submit.

Communications

  • Customer service interactions (email, chat transcripts, call recordings for quality and training where notified), and correspondence.

Sensitive data

  • Skin/wellness data you voluntarily provide in product sign-ups, app features, or customer service enquiries. We will ask for explicit consent where required.

5. How We Collect Information

  • Directly from you when you register an account, place an order, sign up for newsletters, enter contests, complete surveys, or contact customer support.

  • Automatically when you use our Platform (cookies, web beacons, analytics).

  • From third parties such as logistics providers, payment processors, advertising partners (Google, Meta, Amazon, etc.), social platforms if you use social login, and public sources.

  • From affiliates and service providers acting on our behalf (eg., courier companies, CRM providers).

6. Purposes Of Processing And Legal Bases

We process personal information for the following purposes and legal bases:

Performance of a contract

  • To process and fulfil your orders, deliver Products, process payments, administer returns/refunds, and perform services you request.

Compliance with legal obligations

  • To comply with tax, accounting, legal, regulatory, and consumer-protection obligations.

Legitimate interests

  • To improve and secure our Platform, detect and prevent fraud, manage our business operations, run analytics, and provide personalized but lawful marketing (we balance our interests with your rights).

Consent

  • For marketing communications, profiling for marketing personalization, processing of certain sensitive data, and other activities where we ask for your explicit consent.

Examples of uses

  • Providing and improving Products and Platform features; processing orders and returns; responding to enquiries; sending transaction communications; sending marketing where you have consented; running promotions and contests; fraud prevention and security; analytics and site optimization; complying with legal processes.

7. Marketing, Promotions And Communications

We will send you marketing or promotional communications only when you have opted in or when we have another lawful basis to do so. You may opt out of marketing at any time by:

  • Clicking “unsubscribe” in promotional emails;

  • Changing your account preferences; or

  • Contacting us at the details below.

If you consent to receive SMS/WhatsApp messages we will send such messages to the number you provide. You may withdraw consent at any time.

Note: transactional communications (order confirmations, delivery updates, safety notices) are necessary to perform the contract and cannot be opted-out of.

8. Cookies And Tracking Technologies

We use cookies and similar technologies to provide core site functionality, improve performance, analyze use, and deliver personalized content and advertising.

Cookie categories

  • Essential cookies (necessary for basic site operation).

  • Performance and analytics cookies (help us improve the Platform).

  • Functional cookies (remember preferences).

  • Advertising and personalization cookies (may be used for tailored advertising and retargeting).

You can manage cookies through your browser settings and via our cookie banner/settings. Disabling some cookies may affect your ability to use certain features.

9. Sharing and Disclosure

We disclose personal information only for legitimate business purposes and under appropriate safeguards:

Service providers and processors

  • Payment processors, shipping and logistics partners, cloud hosting providers, CRM and email platforms, analytics and advertising partners, customer support providers — only to the extent necessary for them to provide agreed services and under contractual confidentiality and security obligations.

Affiliates

  • To other Kohom Organics group companies where necessary for business operations, fraud detection, or centralized marketing (subject to this Policy).

Business transfers

  • In connection with a merger, sale, reorganization or asset transfer. The acquirer will be required to honor this Policy.

Legal and safety

  • When required by law, regulation, court order, or to respond to lawful requests by public authorities; to detect, prevent or investigate illegal activities or fraud; to protect the rights, property or safety of Kohom Organics, its customers or the public.

Third-party marketing

  • We will only share data for direct marketing with third parties with your explicit consent.

We do not sell or rent your personal information to third parties for their direct marketing without your consent.

10. Cross-border Transfers

Your personal information may be transferred to and stored on servers outside India (including countries where our service providers operate). When we transfer personal information outside India, we will take appropriate steps to protect it, such as standard contractual clauses, processor agreements, or other legal mechanisms to provide an adequate level of protection.

11. Data Retention

We retain personal information only as long as necessary to accomplish the purposes set out in this Policy, and to comply with legal, tax, accounting, and regulatory requirements. Typical retention examples:

  • Order and transactional data: retained for statutory periods required for tax and accounting (and for a commercially reasonable period thereafter for warranty, dispute or fraud prevention).

  • Marketing consents: retained until you withdraw consent.

  • Support logs and call recordings: retained for as long as necessary to handle disputes or for quality/improvement purposes.

  • Anonymized/aggregated information: may be retained indefinitely.

If you request deletion, we will delete or anonymize your personal information unless we are required to retain it for legal or legitimate business reasons.

12. Security

We implement administrative, physical and technical safeguards designed to protect your personal information against unauthorized access, loss, misuse, alteration or destruction. These include access controls, encryption in transit (SSL/TLS), secure authentication, network security, periodic vulnerability assessments and staff training. While we use reasonable measures to secure data, no internet transmission is 100% secure — transmission is at your own risk.

13. Your Rights And Choices

Subject to applicable law, you have the right to:

  • Access the personal information we hold about you.

  • Correct or update inaccurate or incomplete information.

  • Request deletion of your personal information (subject to legal/contractual retention obligations).

  • Withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing).

  • Object to or restrict certain processing (including profiling for marketing) where applicable.

  • Port certain personal data to another service provider in a machine-readable format (data portability) where applicable.

  • Opt out of direct marketing and advertising.

To exercise any of these rights, contact us at the details below. We may ask for reasonable information to verify your identity. We will respond within the timeframes required by law.

14. Automated Decision-making And Profiling

We may use automated systems to detect fraud or to personalize communications and offers (profiling). Automated fraud checks may delay order processing while transactions are reviewed; in such cases human review may be involved. You may have the right to request human review or object to profiling affecting you — contact us to learn more.

15. Children

Our Platform and Products are not intended for use by children below 18 years. We do not knowingly collect personal information from minors without parental consent. If we learn that we have collected personal information from a minor without parental consent, we will take steps to delete it.

16. User-Generated Content And Reviews

If you post reviews, photos or other content on our Platform, you agree that Kohom Organics may use, reproduce, modify, publish and display that content for marketing and other lawful purposes in accordance with the permissions you grant at the time of submission. Do not include sensitive personal data in public posts.

17. Links To Other Websites And Social Media

Our Platform may contain links to third-party websites and social logins (Google/Facebook/Instagram, etc.). Those sites have their own privacy practices which we do not control. Review their policies before sharing personal information.

18. Third-Party Analytics And Advertising

We and our partners (e.g., Google, Meta, Amazon) use analytics and advertising technologies that collect information about your interactions with the Platform and other websites to deliver relevant advertising and measure ad performance. Such third parties may set cookies or use similar technologies and may receive personal information from us for these purposes.

19. Employees, Recruitment And Vendors

If you apply for a job or share resume/CV details, we will use that information for recruitment and evaluation. Vendor and supplier information is processed to manage contractual relationships and payments.

20. Grievance Officer / Data Protection Contact

Pursuant to applicable Indian rules, we have appointed a Grievance Officer to address complaints and queries about this Privacy Policy and our personal information practices.

Grievance officer
Email: grievance@kohomorganics.com

Please allow us reasonable time to investigate and resolve your complaint. If you are not satisfied with our response, you may approach the appropriate data protection or consumer authority.

21. How To Contact Us

For privacy inquiries, privacy requests, or questions about this Policy, contact:

Kohom Organics
Email: privacy@kohomorganics.in

22. Changes To This Policy

We may update this Policy from time to time. We will post the updated Policy on the Platform with the revised effective date. Material changes will be notified to users where required by law.

23. Additional Operational And Legal Notes

  • Payments: Payment card details are processed by PCI-DSS compliant third-party payment gateways; we do not store raw card data on our servers.

  • Call recording: Calls to customer care may be recorded for quality and training; you will be notified at the start of the call.

  • Data processing agreements: We enter into written contracts with all service providers acting as processors, imposing confidentiality, security and data protection obligations.

  • Consumer complaints & e-commerce rules: Our returns, refund and cancellation policies are available on the Platform and comply with Indian E-commerce Rules (as applicable).

  • Sensitive data: Where we process health or skin-related data (welfare data) in the Platform or App (e.g., skin type, skin concerns), we will request explicit consent where necessary and limit processing to the minimum required for the feature.