Cyber Security Policy

At Kirti Kunj, our heritage of trust extends directly to the digital sphere. We are committed to safeguarding our customers' personal information, transaction history, and digital interactions.

This Cyber Security Policy outlines the technical, administrative, and physical controls Kirti Kunj Company Limited employs to protect our digital assets, networks, and services against unauthorized access, data theft, and disruptions.

We secure sensitive user data during both transmission and storage using industry-recognized cryptographic standards:

• Data in Transit: All data exchanged between your browser and our servers is encrypted using Secure Sockets Layer / Transport Layer Security (SSL/TLS) protocols.
• Data at Rest: Sensitive customer databases, order registers, and backups are stored on secure servers and encrypted using Advanced Encryption Standard (AES-256).

Your financial security is paramount. Kirti Kunj partners exclusively with PCI-DSS (Payment Card Industry Data Security Standard) compliant payment gateways to handle transactions.

Kirti Kunj Company Limited does not collect, process, or store credit card numbers, CVVs, or Net Banking credentials on our servers.

All transaction details are routed directly through secure APIs provided by licensed financial facilitators, ensuring that your details remain strictly confidential and protected from database breaches.

We employ strict access controls within our systems to protect customer profiles:

• Internal Access Control: Access to customer personal data is strictly limited to authorized personnel who require it to perform specific roles (e.g., shipping logistics, customer dispute resolution).
• Multi-Factor Authentication (MFA): Administrative access to database nodes and website configuration panels requires strict authentication checks and security tokens.
• Session Inactivity Timeouts: Customer sessions on checkout and account portals automatically log out after periods of inactivity to prevent unauthorized access from shared computers.

In the event of a security alert, Kirti Kunj maintains a structured Cyber Security Incident Response Plan (CSIRP).

Our technical team continuously monitors database logs and traffic anomalies. If a data breach or suspicious activity is identified, we will take immediate isolation measures, notify relevant regulatory authorities (such as CERT-In), and inform affected users with guidance on protective steps.

Cyber security is a shared commitment. We encourage our customers to adopt safety habits:

• Password Hygiene: Use strong, unique passwords containing a mix of letters, numbers, and symbols. Do not reuse credentials across sites.
• Phishing Prevention: Kirti Kunj representatives will never ask you for your account password, UPI pin, or credit card details over email, message, or phone. If you receive suspicious requests claiming to represent our brand, do not click on links and report it immediately.
• Device Security: Ensure your computer or smartphone runs updated software and antivirus protection when completing online checkouts.

We welcome responsible disclosures from independent security researchers and ethical hackers.

If you discover a security vulnerability in our website or web services, please submit details to us at security@kirtikunj.com.

Please provide a detailed proof-of-concept description so we can reproduce and patch the issue. We pledge to review and remediate reports in a timely manner and will not take legal action against individuals who conduct responsible, non-disruptive testing.