Your privacy, handled with care.

1. Scope of this policy

This policy applies to personal information processed by CRESTORA Gifting Co. through crestoragifts.com, our enquiry and quotation workflows, WhatsApp Business communications, email communications, customer support, marketing interactions and related business systems.

By voluntarily providing information to us or using our services, you acknowledge the practices described in this policy. Where consent is required by applicable law, we process information on the basis of that consent and you may withdraw it as permitted by law.

2. Information we may collect

Information you provide directly

• Name, mobile/WhatsApp number, email address and city.
• Company name, GST/business details and contact-person information for corporate enquiries.
• Product interests, gifting occasion, quantity, budget, branding/customisation requirements and quotation details.
• Delivery or billing information where required to fulfil an order.
• Messages, files, images or other information you voluntarily send through WhatsApp, website forms, email or other support channels.

Information collected automatically

• IP address, browser and device information, approximate location derived from technical data, referral source, timestamps and pages viewed.
• Website interactions such as catalogue views, product interactions, enquiry actions and WhatsApp CTA clicks.
• Analytics identifiers, campaign/UTM parameters and similar measurement data used to understand website and advertising performance.

3. How we use personal information

We use information only for legitimate business and service purposes, including to:

• Respond to product, catalogue, corporate gifting and custom-branding enquiries.
• Prepare quotations, proposals, order confirmations, invoices and customer-support responses.
• Provide automated first responses and route high-intent/finalising WhatsApp conversations to a human team member.
• Manage follow-ups, customer relationships and service history.
• Improve our products, website, campaigns, catalogue experience and customer service.
• Measure website usage, advertising effectiveness, lead sources and conversion performance.
• Prevent misuse, protect our systems, maintain security and comply with applicable legal or regulatory obligations.
• Send marketing or promotional communications where permitted and, where required, with your consent.

4. WhatsApp Business communications

When you contact CRESTORA through WhatsApp, we may receive and process your WhatsApp phone number, profile name, message content, message timestamps, delivery/status metadata and other information you choose to share.

We may use the WhatsApp Business Platform to provide automated enquiry responses, answer common questions, collect basic gifting requirements and identify conversations that require human follow-up. When a conversation indicates that you may be ready to finalise an order, request payment/quotation details or speak with our team, automated responses may pause and the conversation may be handed to a CRESTORA representative.

Your use of WhatsApp is also subject to WhatsApp/Meta's own terms and privacy practices. CRESTORA does not control how Meta independently processes information through its services.

5. Analytics, cookies & advertising

We use analytics and advertising technologies, including Google Analytics and Google Ads measurement, to understand traffic, campaign performance, user journeys and enquiries. These services may use cookies or similar identifiers and may receive technical information such as device/browser details, IP-derived information, page interactions and campaign parameters.

You can control cookies through your browser settings and may use the privacy controls offered by the relevant third-party platforms. Blocking certain technologies may affect measurement but should not prevent you from browsing our core catalogue pages.

6. When we share information

We do not sell personal information. We may share limited information with service providers only where reasonably necessary to operate our business, provide requested services, protect our systems or comply with law.

These providers may include website hosting and infrastructure providers, Meta/WhatsApp, Google analytics and advertising services, email/communication providers, payment or logistics providers when applicable, professional advisers and technology vendors supporting our business systems.

Some service providers may process information outside India. Where cross-border processing occurs, we take reasonable steps to use providers and arrangements appropriate to the services being delivered and applicable legal requirements.

7. Retention & security

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including customer service, quotation/order administration, accounting, dispute resolution, security and legal obligations. Retention periods can differ depending on the type of record and the applicable requirement.

We use reasonable administrative and technical safeguards designed to protect information against unauthorised access, misuse, loss or alteration. No internet or messaging system is completely risk-free, and we cannot guarantee absolute security.

8. Your privacy choices & rights

Subject to applicable law, you may ask us to provide information about your personal data, correct inaccurate information, delete information that is no longer required, withdraw consent where processing is based on consent, stop promotional communications, or raise a privacy grievance.

To protect your information, we may ask you to verify your identity or your association with the relevant phone number/email before completing certain requests.

9. Data deletion instructions

For faster verification, include the phone number or email address used to contact CRESTORA and a short description of the information you would like deleted. After verifying the request, we will delete or de-identify eligible information within the timeframe required by applicable law, except where retention is necessary for legal, accounting, fraud-prevention, dispute-resolution or other lawful purposes.

Deletion from CRESTORA's systems does not automatically delete information independently held by third-party platforms such as Meta/WhatsApp or Google; requests relating to those platforms may also need to be made through their own privacy controls.

10. Children's privacy

CRESTORA's products and services are intended for adults and business customers. We do not knowingly solicit personal information from children for independent purchasing or marketing purposes. If you believe a child has provided personal information to us without appropriate authorisation, contact us so we can review and address it.

11. Changes to this policy

We may update this Privacy Policy when our services, technology, legal requirements or business practices change. The latest version will always be published on this page with an updated effective date.

12. Contact CRESTORA

For privacy questions, data requests, deletion requests or grievances, contact us using the details below.