Privacy Policy

---

 Effective Date: 21-02-2025

1. Introduction

Welcome to Craftstar Powered by SANCHAKUSH ("Company," "we," "our," "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with applicable laws and regulations, including the General Data Protection Regulation (GDPR) of the European Union/EEA and the Swiss Federal Act on Data Protection (FADP).

By using our website [https://craftstar.net/] (Craftstar), you agree to the terms of this Privacy Policy.

2. Data We Collect

We collect the following types of personal data:

• Personal Identification Information: Name, email address, phone number, and other contact details.
• Account Information: Username, password, and other authentication details if applicable.
• Payment Information: Billing details, payment method information, and transaction records.
• Technical Data: IP address, browser type, operating system, and website usage data.
• Cookies and Tracking Data: Information collected through cookies and similar tracking technologies.

3. How We Use Your Data

We process your personal data for the following purposes:

• To provide and maintain our Website and services.
• To manage your account and process transactions.
• To improve and personalize user experience.
• To respond to inquiries and provide customer support.
• To comply with legal obligations and enforce our terms and policies.
• To send marketing communications where consent has been provided.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given explicit consent.
• Contractual Necessity: When processing is required for the performance of a contract.
• Legal Obligation: When processing is necessary for compliance with legal obligations.
• Legitimate Interest: When processing is necessary for our legitimate business interests, provided these interests do not override your rights.

5. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Once the data is no longer needed, we securely delete or anonymize it.

6. Data Sharing and Third Parties

We may share your personal data with:

• Service Providers: Third-party vendors who assist in website operations, payment processing, and marketing.
• Legal Authorities: When required by law or to protect our rights.
• Business Transfers: In case of a merger, sale, or asset transfer.

We do not sell or rent your personal data to third parties.

7. International Data Transfers

If you are located outside of the country where our servers are located, your personal data may be transferred to and processed in a different jurisdiction. We ensure appropriate safeguards are in place to protect your data, including standard contractual clauses where required by GDPR and the Swiss FADP.

8. Your Rights Under GDPR and Swiss FADP

Under GDPR and the Swiss FADP, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Request limitation on how we process your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to data processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Information and Disclosure (Swiss FADP-specific): Request how your data is being processed under Swiss law.

To exercise any of these rights, contact us at sanu8mr@gmail.com.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience and analyze website usage. You can manage cookie preferences through your browser settings.

11. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these websites, and we encourage you to review their privacy policies before providing any personal data.

12. Swiss Representative Requirement

If you are located outside Switzerland but process personal data of Swiss residents, you may be required to appoint a Swiss representative in accordance with the revised Swiss FADP. Please ensure compliance if this applies to your organization.

13. Data Breach Notification

• Under GDPR, we will notify authorities within 72 hours of becoming aware of a personal data breach where required.
• Under Swiss FADP, we will report a breach if it poses a high risk of harm to the affected individuals.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.

15. Jurisdiction and Applicable Laws

This Privacy Policy complies with the General Data Protection Regulation (GDPR) of the European Union/EEA and the Swiss Federal Act on Data Protection (FADP). In case of discrepancies, applicable Swiss or EU laws will govern the processing of personal data.

16. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
sanu8mr@gmail.com

17. Complaints

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction:

• For EU/EEA residents: Contact your national Data Protection Authority.
• For Swiss residents: Contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) (https://www.edoeb.admin.ch/).