Privacy Policy

Last Updated: March 5, 2026

1. Introduction

Khatu Impex ("we," "our," or "STAR Tools") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or do business with us.

2. Information We Collect

2.1 Personal Information

• Name and contact details (email, phone, address)
• Company name and business information
• Payment and billing information
• Order history and preferences

2.2 Technical Information

• IP address and browser type
• Device information
• Website usage data and analytics
• Cookies and tracking technologies

3. How We Use Your Information

• Process and fulfill orders
• Communicate about products, services, and promotions
• Improve our website and customer experience
• Comply with legal obligations
• Prevent fraud and ensure security

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers (shipping, payment processing)
• Business partners for OEM/ODM collaborations
• Legal authorities when required by law

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure.

6. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, analyze traffic, and personalize content. You can control cookie preferences through your browser settings.

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Opt-out of marketing communications
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the details in Section 13.

8. Data Retention

We retain personal data only as long as necessary for business purposes and legal requirements. Order records are maintained for 7 years as per Indian tax laws.

9. International Data Transfers

As we serve customers in 36+ countries, your data may be transferred internationally. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions.

10. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To fulfill orders and provide services
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with tax and regulatory requirements
• Consent: For marketing communications (you may withdraw anytime)

11. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities within 72 hours as required by law.

13. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

14. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

15. Marketing Communications

With your consent, we may send promotional emails about new products, special offers, or industry insights. You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

16. Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated revision date. For material changes, we will provide prominent notice or seek your consent where required.

17. Contact Us & Data Protection Officer

For privacy-related questions or to exercise your rights, contact us at:

18. Compliance & Governing Law

This privacy policy complies with applicable Indian data protection laws (including the Digital Personal Data Protection Act, 2023), GDPR principles for our European customers, and other international privacy standards. This policy is governed by the laws of India, and disputes shall be subject to the jurisdiction of courts in Ludhiana, Punjab.