Your Privacy, Our Commitment

Who Is Responsible for Your Data

The data controller for information collected through this website is Kanchan Cashmere Industries Pvt. Ltd., founded in 2008 and registered in Kathmandu, Nepal, with its atelier at Syuchatar-1, Nagarjun-9, Kathmandu 44600, Nepal.

This policy covers personal data collected directly from you (for example when you complete a form, place an order, or contact us by email), as well as information generated when you use our website (such as technical and analytics data).

If you engage with us as a wholesale or trade buyer, this policy also covers personal information included in technical packs, purchase orders, proforma invoices, shipping documents and quality records associated with your account.

Types of Data We Work With

We collect only the information needed to operate our business, handle your enquiries, and fulfil your orders. Depending on how you interact with us, this may include:

• Identity and contact details (name, company, role, email, phone, country)
• Billing and shipping addresses for D2C and wholesale shipments
• Order details (styles, quantities, sizes, colors, values, payments, delivery preferences)
• Account and communication history (emails, messages, notes from calls or meetings)
• Technical data such as IP address, browser type, device identifiers and basic usage logs
• Marketing preferences (for example, whether you wish to receive updates from us)
• Any documents, tech packs, measurement charts, reference images or feedback you choose to share with us in relation to sampling, production or quality control
• Recruitment information if you apply for a role, such as CVs, portfolios and references

We do not intentionally collect sensitive categories of personal data (such as information about your health or beliefs). Please avoid sending such information unless it is clearly necessary and you choose to provide it.

Why We Use Your Personal Data

We use your information to run our daily operations and to provide you with a calm, reliable experience from first enquiry to final delivery. In particular, we may use your data to:

• Respond to enquiries, share product information, and advise on yarns, gauges and knit structures
• Prepare costings, swatch proposals, technical confirmations and proforma invoices
• Process and deliver D2C and wholesale orders, including production planning, QC, packing and shipment booking via DHL Express or other carriers
• Manage invoices, payments and refunds in line with our trade terms and D2C conditions
• Maintain internal production, quality and compliance records, including AQL inspection reports and packaging checks where relevant to your orders
• Operate and improve our website, including security, performance, navigation and content relevance
• Send carefully selected updates, collection news or service notices where you have requested or reasonably expect such communication
• Comply with our legal, tax, customs and regulatory obligations in Nepal and in the markets where our pieces are delivered

We do not sell your personal data. Where we use your information for insights (for example, understanding which pages are most visited or which categories attract interest), we do so at an aggregated or anonymised level wherever possible.

How We Use Cookies

Our website may use cookies and similar technologies to support core functionality, keep the browsing experience stable, and understand how visitors engage with our content.

Broadly, the cookies we may use fall into these groups:

• Strictly necessary cookies – required for the site to function (for example, keeping your cart session active or remembering basic preferences).
• Performance and analytics cookies – helping us understand traffic patterns, page performance and navigation so we can improve structure and content.
• Functional cookies – supporting optional features such as language preferences or embedded content.

You can adjust your browser settings to refuse or limit cookies, or to alert you when websites set or access cookies. Please note that disabling certain cookies may affect how some parts of the site function or display.

On What Grounds We Process Your Data

Depending on your location and the context of our interaction, we rely on one or more of the following grounds to process your personal data:

• Contract – where processing is necessary to enter into or perform a contract with you (for example, responding to a confirmed order, arranging shipping or handling returns).
• Legitimate interests – where we have a reasonable business interest that is not overridden by your rights (for example, maintaining quality and production records, improving our website, or keeping a history of buyer communication).
• Consent – where you explicitly opt in (for example, to receive newsletters or certain types of marketing). You may withdraw consent at any time for future communications.
• Legal obligations – where we must keep records or share information to comply with tax, customs, accounting or other regulatory requirements.

How Long We Keep Your Information

We keep your data only for as long as it is needed for the purposes described in this policy, or as required by law. Retention periods can vary depending on the type of data and the nature of our relationship with you.

• Order, invoicing and shipment records are typically kept for several years to meet accounting, tax and customs requirements.
• Quality, production and packaging records are retained for as long as necessary to support our AQL 2.5 quality benchmark and after-sales support.
• Enquiry and communication history is kept while the conversation remains active and for a reasonable period afterwards, to provide continuity if you return.
• Newsletter and marketing preferences are stored until you unsubscribe or ask us to delete them.
• Recruitment records are kept only as long as required for the selection process and any associated legal obligations.

When data is no longer needed, we will either delete it securely or anonymise it so that it can no longer be linked back to you.

How We Share Information

We share your data only with trusted parties who help us operate our business and fulfil our commitments to you, and only to the extent reasonably necessary for that purpose.

Typical recipients include:

• Shipping and logistics partners (for example, DHL Express and customs brokers) handling delivery of your orders
• Banks and payment service providers processing your payments and refunds
• IT, hosting and platform providers who support our website, email and related systems
• Professional advisers such as accountants, auditors or legal counsel where needed
• Suppliers and production partners where your information is required to complete an order (for example, for labelling, packaging or certification requests)
• Authorities, regulators or law enforcement bodies where we are legally obliged to share information

We require our service providers to handle personal data carefully, use it only for the agreed purpose, and protect it with appropriate safeguards.

Transfers Across Borders

Kanchan Cashmere is based in Nepal and ships worldwide. As a result, your personal data may be transferred to, stored in, or accessed from countries outside your own, including where our hosting providers, payment processors or logistics partners are located.

These transfers are inherent to operating a global knitwear atelier and arranging international deliveries. Where required by applicable law, we take steps to ensure that any international transfer is subject to suitable safeguards, for example through contractual protections with our service providers.

How We Protect Your Data

We apply practical, layered measures to protect your personal information against accidental loss, misuse and unauthorised access. These measures include restricted access to business systems, password and access controls, security monitoring on hosted services, and disciplined operational procedures in our factory and office.

While no system can be guaranteed to be perfectly secure, we strive to keep our environment stable and well-governed, and we review our safeguards periodically in line with operational needs.

How You Can Work With Us

Subject to applicable law, you may have rights in relation to your personal data. These may include the right to:

• Request access to the personal data we hold about you
• Ask for corrections if any of your details are incomplete or inaccurate
• Request deletion of your data where there is no longer a good reason for us to keep it
• Object to or request restriction of certain types of processing, particularly for direct marketing
• Withdraw consent at any time where processing is based on your consent (for example, email marketing)

If you wish to exercise any of these rights, please contact us using the details in the “Updates & How to Reach Us” section. We may need to verify your identity before actioning a request and may be unable to fulfil it where legal obligations require us to retain certain records.

D2C Clients, Wholesale Buyers & Trade Partners

For D2C customers purchasing through our online store, we use your data to process your order, arrange free worldwide delivery via DHL Express, handle returns and exchanges within our 30-day window, and provide client care support.

For wholesale and trade buyers, we may hold additional business contact information, order and shipment history, technical documentation, and quality-control records linked to your brand. This supports our workflow from proto to bulk production, including yarn availability confirmation, AQL 2.5 inspections and eco-packaging choices in line with our house standards and certifications.

In all cases, the same principles apply: we use your information carefully, for clear purposes, and with a focus on reliability, traceability and long-term partnership.

Children’s Privacy

Our website, services and collections are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe that a child has provided us with personal information without appropriate consent, please contact us so we can review and, where appropriate, delete the data.