Privacy policy
Short version first: we collect what is needed to pack an order, get it to you, and answer questions about it. Nothing beyond that. The detail is below.
What is not collected
What is not here counts too. Because this store does not accept cards, no card details are collected or stored – there is purely no such data. UPI payments are authorised inside your own banking app, so your PIN never touches our systems.
Cookies
Cookies here are the essential kind only – the ones that let a cart persist and a checkout complete. No advertising or profiling cookies are used.
Who it is shared with
Your details go to the delivery partner handling your parcel, the payment processor, and the hosting provider – the three services needed to operate the store – plus anyone the law obliges us to tell. That is the complete list. No selling, no renting, no marketing lists.
How long it is kept
Retention is tied to purpose: records stay while they are reasonably needed for returns, queries and accounts, and for whatever period the law requires. There is no fixed calendar figure beyond that.
Your rights
You can ask to see the data held about you, to have it corrected, to have it deleted where nothing in law requires it to be kept, and to withdraw consent where the processing is based on consent. These rights come from the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000). Requests go to [email protected] with an Order ID.
What is collected
- Order details: name, delivery address, phone number and email address – needed to pack the order, hand it to a courier and contact you about it.
- Order history: what was ordered and when, so returns and queries can be checked.
- Technical data: the minimum your browser sends when loading pages.
Grievance contact
The grievance contact for privacy complaints is [email protected]. We have not appointed a separate named officer; complaints are handled directly by whoever is responsible for running Maevera Gallery, with acknowledgement inside one business day.
Security
HTTPS throughout, and order records restricted to those who need them for fulfilment and support. That is a reasonable standard, not a guarantee of perfect security.
Changes
If this policy changes, the updated version is published on this page.
If something goes wrong
If order data is exposed in a way that could affect you, we will contact the people affected at the email address on the order and describe what happened and what we have done about it.
Where data is held
Order records are held on the servers that run this website and in the systems of the delivery and payment providers named above. We do not move order data to any other system for analysis or resale.