Privacy Policy

1Scope & Our Role

This Privacy Policy applies to personal data collected by Real Innerspring Technologies Private Limited (“King Koil India”, “we”, “us”, “our”) through www.kingkoil.in, our enquiry and warranty-registration forms, our SleepID tools, our customer-care channels, and our interactions with you at authorised showrooms and events.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), King Koil India is the Data Fiduciary and you are the Data Principal. This Policy should be read together with our Terms & Conditions.

Authorised dealers and showrooms are independent businesses. Where you share data directly with a dealer, that dealer may act as a separate data fiduciary in respect of its own records.

2Key Definitions

3Data We Collect

a) Information you provide directly

• Identity & contact data: name, mobile number, WhatsApp number, email address, postal address, city, state and PIN code.
• Purchase & warranty data: invoice image, MRP/law label image, product model, date of purchase, dealer name, e-Warranty registration number.
• Enquiry data: the content of your enquiry, call-back request, complaint, service ticket or feedback.
• SleepID inputs: preferences and physical attributes you voluntarily provide (such as sleeping position, comfort preference, height/weight range) to generate a mattress recommendation.
• Career data: where you apply for a role, your CV and the information it contains.

b) Information collected automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, language settings.
• Usage data: pages viewed, time spent, clickstream, referring URL, search terms, date/time of access.
• Approximate location: derived from IP address, used to surface nearby showrooms.
• Cookies and similar technologies – see section 7.

We do not intentionally collect sensitive personal data such as biometric data, health records, financial account details, caste, religion or sexual orientation. Please do not submit such information to us. Any information you volunteer in a free-text field is provided at your own discretion.

4How We Collect It

• Directly from you, when you fill a form, register a warranty, call or email us, use SleepID, subscribe to updates, or visit a showroom.
• Automatically, through cookies, analytics tools and server logs when you browse the Website.
• From our authorised dealers, in connection with a purchase, delivery, service request or warranty claim.
• From third-party platforms, where you interact with our advertisements or lead forms on social media or search platforms.

5Why We Use Your Data

We process your personal data only for specified, lawful purposes, namely to:

• respond to your enquiries, call-back requests and complaints;
• register, validate and administer your product warranty and issue your e-Warranty certificate;
• provide after-sales service, arrange inspections, and process replacement or repair claims;
• connect you with the nearest authorised showroom or dealer;
• generate SleepID recommendations and personalise the product information shown to you;
• verify authenticity of purchase and prevent fraud, counterfeit claims and warranty abuse;
• send you service and transactional communications (order, delivery, service and warranty updates);
• send you marketing communications about products, offers and events, where you have consented;
• analyse Website usage, measure campaign performance and improve our products, content and services;
• maintain records and comply with legal, tax, accounting and regulatory obligations; and
• establish, exercise or defend legal claims.

We do not sell your personal data. We do not rent or trade your personal data to any third party for their independent marketing purposes.

6Consent & Legal Basis

We process your personal data on the basis of your free, specific, informed, unconditional and unambiguous consent, given by a clear affirmative action – such as submitting a form, ticking a consent checkbox, or registering your warranty. At the point of collection you are given a notice describing the data sought and the purpose.

We may also process data for certain legitimate uses permitted under the DPDP Act, including where you have voluntarily provided data for a specified purpose, for compliance with law or a court order, and for responding to a medical emergency or a threat to public health or safety.

7Cookies & Tracking Technologies

Cookies are small text files placed on your device. We and our partners use cookies, pixels, tags and similar technologies to operate the Website, remember your preferences, understand usage and measure advertising.

You can control or delete cookies through your browser settings, and you may block them entirely. Please note that if you disable cookies, some features of the Website may not function correctly. As there is currently no uniform industry standard for browser “Do Not Track” signals, we do not respond to them at this time.

8Sharing & Disclosure

We may share your personal data only in the following circumstances:

• Authorised dealers and showrooms – to fulfil your enquiry, arrange a store visit, complete a delivery, or process a warranty or service claim.
• Service providers / processors – who perform services on our behalf under contract (see section 9).
• Group companies and affiliates – where necessary for the purposes described in this Policy.
• Legal and regulatory disclosure – where required by applicable law, a court order, or a lawful request by a government, tax or law-enforcement authority.
• Enforcement and protection – where we believe in good faith that disclosure is necessary to investigate or prevent fraud, protect the rights, property or safety of King Koil India, our customers or the public, or to enforce our Terms.
• Corporate transactions – in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business, in which case personal data may be transferred as a business asset, subject to the recipient honouring this Policy.

9Service Providers

We engage trusted third parties to process personal data on our behalf, including providers of website and application hosting, cloud storage, CRM and lead management, email, SMS and WhatsApp communication, analytics, advertising, customer support and logistics.

Such providers are permitted to process your data only on our documented instructions and solely for the purposes we specify. They are bound by contractual obligations of confidentiality and security and are not permitted to use your data for their own purposes.

10Cross-Border Transfers

Your personal data is primarily stored and processed in India. Some of our service providers may store or process data on servers located outside India. Where such a transfer occurs, it will be made in accordance with the DPDP Act and applicable law, and only to countries not restricted by the Central Government, with appropriate contractual safeguards in place to protect your data.

11Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required to comply with a legal, tax, accounting or regulatory obligation, or to establish, exercise or defend legal claims.

• Warranty records are retained for the full warranty period plus a reasonable buffer, so that we can service your claim.
• Enquiry and lead data is generally retained for up to 24 months from last interaction, unless you request earlier erasure.
• Transaction and statutory records are retained for the period prescribed by applicable law.

When personal data is no longer required and there is no legal obligation to retain it, we will erase it or irreversibly anonymise it. Residual copies may persist in backups and logs for a limited period and will not be used for any active purpose.

12Data Security

We implement reasonable security safeguards and practices designed to protect personal data from unauthorised access, disclosure, alteration, loss or destruction. These include access controls and role-based permissions, encryption in transit (HTTPS/TLS), secure hosting, firewalls, logging and monitoring, staff confidentiality obligations, and contractual security commitments from our processors.

13Your Rights

Subject to applicable law, and on verification of your identity, you have the right to:

• Access – obtain a summary of the personal data we hold about you and the processing activities undertaken;
• Correction – have inaccurate or misleading data corrected, and incomplete data completed;
• Updating – have your data kept up to date;
• Erasure – request deletion of your personal data where it is no longer necessary for the purpose and no legal obligation requires its retention;
• Withdraw consent – at any time, as easily as it was given (see section 14);
• Grievance redressal – a readily available means of raising a complaint with us (see section 19);
• Nominate – nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, write to our Grievance Officer at privacy@kingkoil.in with sufficient detail to identify you and your request. We will respond within the timelines prescribed by law. We may decline a request where permitted by law, and will inform you of the reason.

Your duties. Under the DPDP Act, you must not impersonate another person, suppress material information, or file false or frivolous grievances. You must provide only authentic and verifiable information.

14Withdrawing Consent

You may withdraw your consent at any time by emailing privacy@kingkoil.in, by clicking “unsubscribe” in any marketing email, or by replying STOP to a marketing SMS/WhatsApp.

Withdrawal of consent is prospective and does not affect the lawfulness of processing carried out before withdrawal. Please note that if you withdraw consent necessary for a service – for example, warranty registration – we may be unable to continue providing that service, and the consequences of withdrawal shall be borne by you.

15Children's Data

Our Website and services are intended for individuals aged 18 and above and are not directed at children. We do not knowingly process the personal data of any child (a person under 18 years of age) without verifiable consent from a parent or lawful guardian.

We do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us with personal data, please contact privacy@kingkoil.in and we will take steps to delete it.

16Marketing & Communications

Where you have consented, we may contact you by email, SMS, WhatsApp, phone call or push notification with information about our products, offers, new launches and events. By providing your number and opting in, you also consent to being contacted notwithstanding any DND/NCPR registration, to the extent permitted by TRAI regulations.

You may opt out of marketing at any time using the unsubscribe link, by replying STOP, or by writing to us. We will continue to send you transactional and service messages (such as warranty confirmations, delivery updates and service appointments), which are necessary to fulfil our obligations to you and are not marketing.

17Third-Party Links & Platforms

The Website may link to third-party websites, dealer pages, maps and social media platforms. We do not control and are not responsible for the privacy practices or content of those third parties. This Policy does not apply to them. We encourage you to read the privacy policy of every website you visit.

18Data Breach Notification

We maintain procedures to detect, investigate and respond to personal data breaches. In the event of a personal data breach, we will notify the Data Protection Board of India and each affected Data Principal in the manner and within the timelines prescribed under the DPDP Act and the applicable CERT-In directions.

19Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the contact details of our Grievance Officer are set out below. You may write to the officer with any question, concern or complaint regarding this Policy or the processing of your data.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India in accordance with the DPDP Act.

20Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated Policy takes effect upon posting on this page with a revised “Last updated” date. Where the change is material, we will take reasonable steps to notify you. Your continued use of the Website after such posting constitutes acceptance of the revised Policy.

21Contact Us