Privacy Policy

GDPR Compliant India DPDP Act 2023 CalOPPA PIPEDA POPIA (South Africa)

Summary (Plain Language)
KDN Stones collects your name, email, phone, and company details only when you fill in our contact form or subscribe to our newsletter. We use this data solely to respond to your enquiry and send trade updates you have opted into. We do not sell your data to any third party, ever. You can request deletion of your data at any time by emailing support@kdnstones.com.

Who We Are
Personal Data We Collect
Legal Basis for Processing (GDPR)
How We Use Your Data
Data Sharing & Third Parties
International Data Transfers
Data Retention
Your Rights
Cookies & Tracking
Children's Privacy
Security
India DPDP Act 2023
California Residents (CalOPPA / CCPA)
Canadian Residents (PIPEDA)
Changes to This Policy
Contact Us / Data Requests

1. Who We Are

KDN Stones Private Limited ("KDN Stones", "we", "our", or "us") is a company incorporated under the Companies Act, India, with its registered office at Dharmapuri, Tamil Nadu – 636701, India.

We operate the website https://kdnstones.com (the "Website") and engage in the export and import of natural stone products globally. For the purpose of applicable data protection laws, KDN Stones is the Data Controller (GDPR) / Data Fiduciary (India DPDP Act 2023) of your personal data.

Data Protection Contact:
Email: support@kdnstones.com
Phone: +91 96001 55722
Address: KDN Stones Private Limited, Dharmapuri, Tamil Nadu – 636701, India

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Data You Provide Directly

Data Category	Examples	Source
Identity Data	Full name	Contact / enquiry form
Contact Data	Email address, phone/WhatsApp number	Contact form, WhatsApp chat
Business Data	Company name, designation, country	Contact form, email correspondence
Trade Data	Product interest, quantity, specification requirements	Contact form, email
Communication Data	Messages, attachments, correspondence history	Email, WhatsApp
Newsletter Data	Email address	Newsletter subscription form

2.2 Data Collected Automatically

Data Category	Examples	Source
Usage Data	Pages visited, time on site, referrer URL	Server logs
Device Data	Browser type, OS, screen resolution	Browser / HTTP headers
IP Address	Approximate geolocation (country/city level)	Server logs
Cookie Data	Session identifiers, preferences	Browser cookies (see Section 9)

We do not collect sensitive personal data (e.g. health, financial account numbers, biometric data, political opinions, or religious beliefs).

3. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases under Article 6 of the GDPR:

Purpose	Legal Basis
Responding to an enquiry or quotation request	Article 6(1)(b) — Performance of a (pre-)contract
Sending trade newsletters / market updates	Article 6(1)(a) — Consent (opt-in at subscription)
Maintaining business correspondence records	Article 6(1)(f) — Legitimate interests (record-keeping)
Improving Website performance and security	Article 6(1)(f) — Legitimate interests (security & UX)
Complying with legal obligations (e.g. export documentation)	Article 6(1)(c) — Legal obligation

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your data protection rights.

4. How We Use Your Data

To respond to your enquiry and provide product information, samples, or quotations.
To prepare and send Proforma Invoices, Commercial Invoices, and trade documentation.
To send newsletters and stone market updates if you have subscribed (you may unsubscribe at any time).
To maintain a business relationship record for follow-ups and repeat orders.
To comply with Indian export regulations, customs requirements, and any applicable law.
To detect, investigate, and prevent fraudulent or unauthorised activities.
To improve Website functionality, content, and user experience.

We will never use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

We do not sell, rent, or trade your personal data. We may share it with the following categories of recipients only where necessary:

Recipient	Purpose	Safeguard
Hostinger International Ltd (hosting)	Website hosting & server infrastructure	Data Processing Agreement; servers in EU/LT
Email Service Provider	Delivery of transactional emails	Contractual data processing clauses
Freight Forwarders / Logistics Partners	Shipment booking and export documentation (for active orders only)	Shared only when required for trade execution
Indian Government Authorities	Export/Import filings (DGFT, Customs, GST)	Legal obligation under Indian trade law
Professional Advisors	Legal, accounting, compliance	Bound by professional confidentiality

All third-party processors are required to maintain the confidentiality and security of personal data and may only process it on our documented instructions.

6. International Data Transfers

KDN Stones is based in India. When we receive enquiries from the EEA, UK, or other jurisdictions with transfer restrictions, your data may be processed in India, which is not yet recognised by the European Commission as providing an adequate level of protection equivalent to the EEA.

Where applicable, we implement appropriate safeguards including:

Standard Contractual Clauses (SCCs) approved by the European Commission (for EEA transfers).
The UK International Data Transfer Agreement (IDTA) where required.
Contractual obligations on our processors to maintain GDPR-equivalent protections.

By submitting your information to us, you acknowledge that your data may be transferred to and stored in India.

7. Data Retention

Data Type	Retention Period	Reason
Enquiry / contact form data	3 years from last interaction	Business relationship management; re-enquiry cycles
Completed trade / order data	8 years from transaction date	Indian Companies Act; GST and customs audit requirements
Newsletter subscriber data	Until you unsubscribe, then 30 days	Consent-based; deleted promptly on opt-out
Server / access logs	90 days	Security monitoring
Cookie data	Session or up to 12 months (see Section 9)	Functionality & analytics

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you.

8. Your Rights

Depending on your country or region, you may have the following rights regarding your personal data. We respond to all verifiable requests within 30 days (extendable by a further 60 days for complex requests, with notice).

Right of Access Obtain a copy of the personal data we hold about you and information about how we use it.

Right to Rectification Request correction of inaccurate or incomplete personal data.

Right to Erasure Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.

Right to Restrict Processing Request that we limit how we use your data while a dispute is resolved.

Right to Data Portability Receive your data in a structured, machine-readable format (applies to GDPR-covered processing).

Right to Object Object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent Withdraw consent at any time where processing is consent-based (e.g. newsletter). Withdrawal does not affect prior lawful processing.

Right to Lodge a Complaint Complain to your local supervisory authority (e.g. EU DPA, ICO in the UK, or the India Data Protection Board).

To exercise any of these rights, email us at support@kdnstones.com with the subject line "Data Rights Request". We may need to verify your identity before processing the request.

9. Cookies & Tracking Technologies

Our Website uses cookies and similar technologies. A cookie is a small text file stored on your device.

Cookie Type	Purpose	Duration
Strictly Necessary	Required for the Website to function (e.g. session management, security). Cannot be disabled.	Session
Functional	Remember your preferences (e.g. language, region).	Up to 12 months
Analytics	Understand how visitors use our site (page views, bounce rate) using aggregated, anonymised data.	Up to 12 months
Third-Party	Fonts loaded from Google Fonts; icons from Font Awesome CDN. These may set cookies on your device.	Per provider policy

You can control or delete cookies through your browser settings at any time. Disabling cookies may affect certain features of the Website. Most browsers also support the "Do Not Track" (DNT) signal; we honour DNT requests where technically feasible.

10. Children's Privacy

Our Website and services are directed exclusively at businesses and trade professionals. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at support@kdnstones.com and we will delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These include:

HTTPS / TLS encryption for all data in transit.
Access controls and authentication for internal systems.
Regular security assessments of our hosting infrastructure.
Staff training on data handling and confidentiality.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

12. India DPDP Act 2023

KDN Stones complies with the Digital Personal Data Protection (DPDP) Act, 2023 (India). Under this Act:

You are a "Data Principal" and KDN Stones is the "Data Fiduciary".
We process your personal data only for lawful purposes for which you have given consent, or for purposes specified under the Act (e.g. compliance with Indian law, national security).
You have the right to access information about your data, correct inaccuracies, erase data (subject to legal retention requirements), and nominate another person to exercise your rights in the event of your death or incapacity.
You have the right to raise a grievance with us. We will acknowledge and resolve grievances within 72 hours of receipt.
You have the right to complain to the Data Protection Board of India if your grievance is not resolved to your satisfaction.

Consent obtained under the DPDP Act is specific, informed, unconditional, unambiguous, and can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

13. California Residents (CalOPPA / CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, and sold in the preceding 12 months.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale / Sharing: We do not sell or share personal information for cross-context behavioural advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of the above rights.

To exercise California rights, email support@kdnstones.com with subject "California Privacy Request".

14. Canadian Residents (PIPEDA)

For residents of Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access the personal information we hold about you and to challenge its accuracy. To make a request, contact us at support@kdnstones.com. If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically.

For significant changes that materially affect how we use your data, we will notify you by email (if you are a subscriber or active contact) or by a prominent notice on our Website.

Continued use of our Website or services after the effective date of any changes constitutes your acceptance of the updated Policy.

16. Contact Us / Data Requests

For all data protection queries, rights requests, or complaints:

KDN Stones Private Limited — Data Privacy

Email: support@kdnstones.com
Phone: +91 96001 55722 / +91 96777 36746
Address: KDN Stones Private Limited, Dharmapuri, Tamil Nadu – 636701, India

We aim to respond to all data protection requests within 30 days.

This Privacy Policy was drafted in good faith to reflect KDN Stones' commitment to data privacy. It is not a substitute for legal advice. For compliance questions specific to your jurisdiction, please consult a qualified legal professional.

Table of Contents