Privacy Policy
At Komando Labs, we respect your privacy and are committed to protecting the personal information you share with us. This policy explains what we collect, why, and how we safeguard it.
Last updated: 22 May 2026 · Effective from: 1 January 2026
Encrypted & Secure
All data is transmitted over SSL/TLS. Payments are PCI-DSS compliant.
No Selling Data
We never sell your personal information to third parties, period.
Your Control
Access, update, or delete your data at any time by contacting us.
1. Information We Collect
Personal Information
When you create an account, place an order, or contact us, we may collect your name, email address, phone number, shipping address, billing address, and payment-related information (processed securely by third-party gateways — we do not store card numbers).
Automatically Collected Data
When you visit our Site, we automatically collect certain information including your IP address, browser type, device information, operating system, referring URLs, pages viewed, time spent on pages, and clickstream data. This is collected via cookies and similar tracking technologies.
Product Verification Data
When you use our product verification feature at /verify, we may collect the QR code or batch number scanned, device information, and geolocation (city level) to detect counterfeits and protect our customers.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Process and fulfil your orders, including shipping and delivery
- Send order confirmations, shipping updates, and delivery notifications
- Respond to your inquiries and provide customer support
- Verify product authenticity and detect counterfeit products
- Improve our website, products, and services based on usage patterns
- Send promotional emails, newsletters, and offers (only with your consent — you can unsubscribe at any time)
- Prevent fraud, detect security threats, and enforce our terms
- Comply with legal and regulatory obligations under Indian law
3. Cookies & Tracking
Our Site uses the following types of cookies:
Essential Cookies
Required for the Site to function (cart, authentication, security). Cannot be disabled.
Analytics Cookies
Help us understand how visitors interact with the Site (e.g., Google Analytics).
Marketing Cookies
Used to deliver relevant ads and track campaign effectiveness across platforms.
Preference Cookies
Remember your settings, language preferences, and previously viewed products.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.
4. Data Sharing & Third Parties
We do not sell your personal data. We may share your information with:
- Payment processors (Razorpay, etc.) to securely process transactions
- Courier and logistics partners to deliver your orders
- Analytics providers (Google Analytics) to improve our services
- Marketing platforms (Meta, Google Ads) for retargeting with your consent
- Legal and regulatory authorities when required by law or to protect our rights
All third-party service providers are contractually obligated to protect your data and use it only for the purposes specified.
5. Data Security
We implement industry-standard security measures to protect your personal data, including:
- 256-bit SSL/TLS encryption for all data in transit
- PCI-DSS compliant payment processing
- Regular security audits and vulnerability assessments
- Restricted access to personal data (need-to-know basis only)
- Secure server infrastructure with automated backups
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Under applicable Indian data protection laws and the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data (subject to legal obligations)
- Withdraw consent for marketing communications at any time
- Nominate a person to exercise your data rights on your behalf
- Lodge a grievance with the Data Protection Board of India
To exercise any of these rights, email us at support@komandolabs.com with the subject "Data Privacy Request". We will respond within 30 days.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law:
- Order and transaction data: 8 years (as required by Indian tax and accounting regulations)
- Account data: Until you request deletion or close your account
- Marketing preferences: Until you unsubscribe
- Analytics data: 26 months from collection
8. Children's Privacy
Our Site and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information from our servers.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, if appropriate, via email notification.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
10. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.
Data Protection Contact
For any questions, concerns, or data-related requests, please contact our Data Protection Officer: