Privacy Policy

Last updated: [DD Month YYYY]

[Business Legal Name] (“we”, “us”, “our”), operating the website [website URL] (the “Site”), is committed to protecting the privacy of everyone who visits or transacts on the Site. This Privacy Policy is published in accordance with Section 43A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the Digital Personal Data Protection Act, 2023 (“DPDPA”). By using the Site, you consent to the collection and use of your information as described here.

1. Information We Collect

We may collect the following categories of information when you browse the Site, create an account, place an order, or contact us:

• Identity & contact information — name, email address, phone number, billing and shipping address.
• Order and transaction information — items purchased, order value, order history, GSTIN (if provided for a business purchase).
• Payment information — we do not store your card, UPI or net-banking credentials. Payments are processed by our payment gateway partner (Razorpay), which is independently PCI-DSS compliant. We only retain the payment status and a transaction reference.
• Account information — username, encrypted password, saved addresses and order preferences, if you register for an account.
• Technical information — IP address, browser type, device information, pages visited and approximate location, collected automatically through cookies and similar technologies.
• Communications — messages you send us via contact forms, the on-site chat, WhatsApp, email or phone, including complaint and support records.

2. How We Use Your Information

• To process, confirm, pack, ship, and deliver your orders, including custom/made-to-order pieces.
• To send order confirmations, shipping updates, invoices and GST-compliant receipts.
• To respond to enquiries, complaints, and custom-order requests, and to provide IT-services support where applicable.
• To detect and prevent fraud, abuse, and unauthorised transactions.
• To improve the Site, our products, and customer experience through aggregated, non-identifying analytics.
• To send you promotional communications, only where you have opted in; you may withdraw this consent at any time (see Section 7).
• To comply with applicable law, including tax, accounting and consumer-protection record-keeping obligations.

3. Legal Basis and Consent

We process your personal data on the basis of your consent (given by using the Site, creating an account, or placing an order), for the performance of a contract with you (order fulfilment), and to comply with our legal obligations under Indian tax and consumer protection law.

4. Sharing of Information

We do not sell your personal information. We share it only with:

• Payment processors (e.g. Razorpay) to complete transactions.
• Courier and logistics partners to deliver your order.
• IT service providers who host the Site, send transactional emails/SMS, or provide chat support, under confidentiality obligations.
• Government authorities, where required under law, a court order, or a lawful request from a law-enforcement or regulatory agency.

5. Cookies

The Site uses cookies and similar technologies to keep you signed in, remember your cart, and understand how the Site is used. You can control or disable cookies through your browser settings; doing so may affect certain features such as checkout or saved preferences. Where analytics or advertising cookies (e.g. Google Analytics, Meta Pixel, Google Tag Manager) are used, they are covered separately by the Cookie/Consent Banner on the Site.

6. Data Security

We implement reasonable security practices and procedures, including access controls, encrypted password storage, and secure (HTTPS) transmission of data, that are commensurate with the sensitivity of the information we hold, in line with the IT Act, 2000 and the SPDI Rules, 2011. No method of transmission or storage is 100% secure, and while we strive to protect your personal information, we cannot guarantee absolute security.

7. Your Rights

You may, at any time:

• Request access to, or a copy of, the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal data, subject to our statutory record-retention obligations (e.g. GST invoices).
• Withdraw consent to marketing communications by using the unsubscribe link or writing to us.
• Lodge a grievance with our Grievance Officer (see the Grievance Redressal Policy).

To exercise any of these rights, write to us at [privacy/support email address].

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law (for example, invoices and transaction records are retained as required under GST and other tax legislation).

9. Children’s Privacy

The Site is not directed at children under 18. We do not knowingly collect personal information from minors without the consent of a parent or guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised “Last updated” date. Continued use of the Site after any changes constitutes acceptance of the revised policy.

11. Contact Us

For any questions about this Privacy Policy or our data practices, contact:
[Business Legal Name]
[Registered Address, Jaipur, Rajasthan, India]
Email: [support/privacy email]
Phone: [support phone number]