Privacy Policy

Last updated: 14 August 2026

1. Introduction

This Privacy Policy explains how KRATU DES TECH LLP ("Kratu", "we", "us", "our") collects, uses, and protects personal data when you visit our website, use our client portal, or engage our design services.

2. Information we collect

  • Contact details you provide: name, email address, phone number, company name.
  • Account & billing information collected through our client portal and payment processor (we do not store full card numbers ourselves).
  • Project content: briefs, brand assets, feedback, and files you share with us to complete design requests.
  • Usage data: pages visited, browser type, and similar analytics collected automatically via cookies or similar technologies.
  • Communications: emails, portal messages, and other correspondence with our team.

3. How we use your information

  • To deliver, manage, and improve our design services and client portal.
  • To process payments and manage subscriptions.
  • To communicate with you about requests, projects, billing, and service updates.
  • To showcase completed work in our portfolio and marketing (only where you haven’t requested confidentiality).
  • To comply with legal obligations, such as tax and accounting requirements.

4. Legal basis for processing

Where UK/EU data protection law applies, we process your data on the basis of: performance of a contract (delivering the services you’ve engaged us for), legitimate interests (improving our services, preventing fraud), consent (e.g. marketing communications, where required), and legal obligation (e.g. tax records).

5. Sharing your information

We do not sell your personal data. We may share it with:

  • Service providers who support our operations, e.g. payment processors, the client portal platform, cloud hosting, and email tools — under contractual confidentiality obligations.
  • Professional advisors (accountants, lawyers) where necessary.
  • Authorities, where required by law, regulation, or legal process.

6. International data transfers

Kratu is based in India and serves clients internationally, including in the UK and EU. Where personal data is transferred across borders, we take reasonable steps to ensure it receives an adequate level of protection, including the use of service providers with appropriate safeguards (such as standard contractual clauses, where applicable).

7. Data retention

We retain personal data for as long as necessary to provide our services, comply with legal obligations (e.g. tax records), resolve disputes, and enforce our agreements. Project files may be retained for a reasonable period after a project ends to support revisions or reference, unless you request earlier deletion.

8. Cookies

Our website may use cookies or similar technologies for essential functionality and basic analytics. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

9. Data security

We use reasonable technical and organisational measures — including SSL/TLS encryption in transit — to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you’re located, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below.

10.1 UK/EU residents

You have rights under the UK GDPR and/or EU GDPR as applicable, including the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).

10.2 India residents

You have rights under India’s Digital Personal Data Protection Act, 2023, including the right to access and correct your personal data and to withdraw consent where applicable.

11. Children’s privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

13. Contact us

For questions about this Privacy Policy or to exercise your data rights, please reach out via the Contact Us link on our website or through your client portal.