Privacy Policy

1. Information We Collect

We collect information that you voluntarily provide to us when you:

• Submit an inquiry or booking form (name, WhatsApp number, city, email if provided)
• Upload photographs of items you wish to have preserved
• Communicate with us via WhatsApp or email
• Visit our website (automatically collected technical data)

2. Purpose of Data Collection

Your data is collected and processed for the following purposes:

• To process and fulfil your custom resin art orders
• To communicate with you regarding order status, mockup approvals, and delivery
• To create mockup designs based on your uploaded photographs
• To respond to your inquiries and provide customer support
• To improve our website and services

3. Consent

By submitting an inquiry form or uploading photographs on our website, you consent to the collection, storage, and processing of your personal data as described in this policy. Under the DPDPA 2023, you have the right to withdraw consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

4. Data Storage & Security

Your data is stored securely on our cloud infrastructure provider (Supabase) which implements industry-standard encryption and security measures. We implement reasonable security practices as required under Rule 8 of the IT Rules, 2011, including:

• Encrypted data transmission (HTTPS/TLS)
• Access controls limiting data access to authorised personnel
• Secure file storage for uploaded photographs
• Regular review of security practices

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties. Your photographs and personal information are used solely for fulfilling your order. We may share data with shipping/courier partners solely for the purpose of delivering your order. In such cases, only the minimum information necessary (name, address, phone number) is shared.

6. Your Rights Under DPDPA 2023

As a Data Principal, you have the right to:

• Access — Request a summary of your personal data we hold
• Correction — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data (subject to legal obligations)
• Grievance Redressal — Lodge a complaint about our data handling practices
• Nomination — Nominate another person to exercise your rights in case of death or incapacity

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Order-related data (including photographs) is retained for up to 12 months after order delivery to handle any post-delivery queries. You may request earlier deletion by contacting us.

8. Cookies & Analytics

Our website may use essential cookies to ensure proper functionality. We do not currently use third-party analytics or advertising cookies. If this changes, we will update this policy and seek your consent where required.

9. Grievance Officer

In accordance with the IT Act 2000 and DPDPA 2023, you may contact our Grievance Officer for any privacy-related concerns: