Skip to content
Story Roots

Story Roots — Privacy Policy

DRAFT — for review by a qualified Indian advocate before publishing. This document is a

starting template, not legal advice. It reflects the Digital Personal Data Protection Act, 2023

("DPDP Act") and the DPDP Rules, 2025 (notified 14 November 2025), the Information Technology

Act, 2000 and rules thereunder, and the Consumer Protection Act, 2019. Have it reviewed and

localised to your actual data practices before going live.

Last updated: 【fill: effective date】

1. Who we are

This website, storyroots.co (the "Website"), and the Story Roots brand are operated by

Kuldhar Global Ventures LLP ("Story Roots", "we", "us", "our"), Office 1206, SS Omnia,

Sector-86, Gurugram, Haryana – 122004, India. We are the data fiduciary responsible for personal

data collected through the Website. Questions: support@storyroots.co.

2. Scope & your consent

This Policy explains what personal data we collect, why, how we use and protect it, and your

rights. By using the Website or providing us your personal data, you consent to the practices

described here. You may withdraw consent at any time (see §10) — withdrawal does not affect

processing already carried out.

3. What personal data we collect

Information you give us:

  • Your email address when you join the Common Table Club or ask for updates.
  • Your name, email and message when you contact us.
  • If you place an order via WhatsApp, your phone number and the content of your messages

(this exchange also happens on WhatsApp and is subject to WhatsApp's/Meta's own privacy terms).

Information collected automatically (if applicable): basic device/browser information, IP

address and usage data, via cookies or analytics — 【fill: name the analytics/cookie tool, or state "we currently use only essential cookies and no third-party analytics"】.

What we do NOT collect: we do not take payment or card details on the Website (there is no

on-site checkout), and we do not knowingly collect sensitive personal data or children's data

(see §11).

4. Why we use it

To respond to your queries; to send you updates/newsletters where you have opted in; to receive

and follow up on order enquiries you send via WhatsApp; to operate, secure and improve the

Website; and to comply with law.

5. Legal basis

We process your personal data on the basis of your consent under the DPDP Act. Where we rely on

any other lawful ground (e.g. legal obligation), we will act consistently with applicable law.

6. Sharing and disclosure

We share personal data only as needed with service providers/data processors who work on our

behalf (e.g. hosting, email delivery, analytics) under confidentiality and data-protection

obligations; with authorities where required by law or to protect our rights; and in a

business transfer (merger/acquisition). We do not sell your personal data.

7. Cookies and analytics

【fill: describe cookies/analytics actually used】 You can manage or disable cookies through your

browser settings; disabling some cookies may affect Website functionality.

8. Data retention

We keep personal data only as long as necessary for the purposes above or as required by law, after

which we delete or anonymise it.

9. Security

We maintain reasonable security safeguards (such as access controls and encryption in transit) in

line with the DPDP Rules, 2025. No method of transmission or storage is completely secure; we

cannot guarantee absolute security. In the event of a personal-data breach, we will notify affected

individuals and the Data Protection Board of India as required under applicable law.

10. Your rights

Subject to applicable law, you may: access your personal data; correct or complete it;

request erasure; withdraw consent; nominate another person to exercise your rights; and

raise a grievance. To exercise any right, email our Grievance Officer (§14). We may need to

verify your identity before acting on a request.

11. Children

The Website is not directed at children. We do not knowingly collect personal data of anyone under

18 without verifiable parental/guardian consent as required by the DPDP Act and Rules. If you

believe a child has provided us data, contact us and we will delete it.

12. Cross-border transfers

Where our service providers process data outside India, such transfers are made in accordance with

applicable law, including any restrictions notified under the DPDP Act.

13. Third-party links

The Website may link to third-party sites and services (including WhatsApp). We are not responsible

for their content or privacy practices; review their policies separately.

14. Grievance Officer

In accordance with the DPDP Act, the Information Technology Act, 2000 and the Consumer Protection

(E-Commerce) Rules, 2020, our Grievance Officer is:

`【fill: Grievance Officer name】`

Kuldhar Global Ventures LLP, Office 1206, SS Omnia, Sector-86, Gurugram, Haryana – 122004

Email: support@storyroots.co

We will acknowledge your complaint within a reasonable time and endeavour to resolve it within the

timelines prescribed under applicable law.

15. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date will change accordingly, and

continued use of the Website means you accept the revised Policy.

16. Governing law

This Policy is governed by the laws of India.