Privacy policy

The data controller for personal data collected through krmc.shop is:

Sanskriti Indian, trading as Karmic Books is the data controller for personal data collected through krmc.shop.

For any privacy question or request, email support@krmc.shop.

When you order: your name, email address, delivery address and order contents. We need these to take payment, post your books and deal with returns. The legal basis is performance of our contract with you.

When you email us: your email address and whatever you write, kept so we can answer you and handle any follow-up.

Your cart: stored in your own browser's local storage on your device. It is not sent to us until you check out, and we cannot read it before then.

We do not run advertising trackers, and we do not build profiles of you for marketing.

Nobody processes a payment for us. We don't take card payments online at the moment. You place the order, we confirm it against your cart code, and we arrange payment directly — by bank transfer, Tikkie, or in person. No card details reach us or anyone acting for us, because none are collected.

PostNL receives the name and delivery address needed to deliver your parcel.

Google Firebase (Google Cloud) hosts this site and its database, in the EU (europe-west4, the Netherlands).

Each of these acts as a processor on our behalf. We don't sell or rent your personal data to anyone, for any purpose.

Order and invoice records are kept for as long as tax and accounting law requires — in the Netherlands, seven years. Email correspondence is kept only as long as it is useful for supporting you, then deleted.

Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it (where we're not legally required to keep it), object to processing, or ask for it in a portable form. Email support@krmc.shop and we'll respond within one month.

If you think we've handled your data badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.

We don't use advertising or analytics cookies. The site stores two things in your browser: your cart, and your light/dark theme preference. Both stay on your device. No payment processor sets cookies onits checkout page for fraud prevention — that's covered by their privacy policy.