PRIVACY POLICY

Effective Date: September 5, 2025

This Privacy Policy ("Policy") outlines how Arttykase ("we," "us," or "our") collects, uses, discloses, and protects the personal data of users ("you" or "your") who visit our website, www.arttykase.com (the "Website"), purchase our DIY Indian art kits, or enroll in our Indian art workshops.

We are committed to protecting your privacy in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), as and when it comes into effect, as well as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") under the Information Technology Act, 2000

1. Personal Data Collected

We collect personal data that you voluntarily provide to us when you interact with our Website, including but not limited to when you:

Create an account.
Place an order for our Products.
Enroll in our Services.
Subscribe to our newsletter.
Contact us for customer support.

The types of personal data we may collect include:

Contact Information: Name, email address, phone number, and mailing address.
Account Information: Username and password.
Payment Information: Credit card details or other payment information. We do not store full payment card details on our servers; this information is processed by our secure payment gateway partners.
Transaction Information: Details of the Products you purchase and Services you enroll in.
Communications: Records of your correspondence with us.

We may also automatically collect certain information when you visit our Website, such as your IP address, browser type, operating system, and a record of the pages you visit. This data is collected to improve the functionality and security of our Website and is generally non-personally identifiable.

2. Purpose of Collection and Lawful Basis

We collect and process your personal data for the following lawful purposes:

To fulfill orders and provide services: This includes processing your payments, shipping your art kits, and managing your enrollment in workshops. This processing is necessary for the performance of our contract with you.
To communicate with you: We use your data to send you order confirmations, shipping updates, and information about our workshops. This is a legitimate use to ensure proper service delivery.
To improve our Website and offerings: We analyze user behavior to enhance our Website's functionality, personalize your experience, and develop new Products and Services. This is based on our legitimate interest in improving our business.
For marketing and promotional purposes: With your explicit, affirmative, and unambiguous consent, we may send you newsletters and promotional emails about our Products, Services, and special offers. You may withdraw your consent at any time.
To comply with legal obligations: We may process and disclose your personal data as required by law, court order, or governmental authority.

3. Consent

By providing us with your personal data, you consent to the collection, use, and disclosure of that information as described in this Policy. Where required, we will obtain your specific, informed, and unambiguous consent through a clear affirmative action before processing your personal data for marketing purposes. You have the right to withdraw your consent at any time by contacting us at the details provided below.

4. Data Sharing and Disclosure

We will not sell, rent, or trade your personal data to third parties for their marketing purposes without your explicit consent. We may share your personal data with:

Service Providers: Third-party vendors who perform services on our behalf, such as payment processors, shipping companies, and IT support. These providers are contractually obligated to protect your data and are only authorized to use it for the purposes for which we hired them.
Legal Authorities: If required by law, court order, or to protect our legal rights, we may disclose your personal data to government or law enforcement agencies.

5. Data Security

We have implemented reasonable security safeguards and procedures to protect your personal data from unauthorized access, loss, misuse, or alteration. These measures include:

Utilizing secure socket layer (SSL) technology to encrypt data transmission.
Restricting access to your personal data to authorized personnel on a need-to-know basis.
Regularly reviewing our security practices to ensure compliance with relevant standards.

However, please be aware that no data transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Your Rights

Under Indian data protection laws, you have certain rights concerning your personal data. You have the right to:

Right to Access: Request a summary of the personal data we hold about you.
Right to Correction/Erasure: Request the correction of any inaccurate or incomplete personal data, and the erasure of your data when it is no longer necessary for the purpose for which it was collected.
Right to Grievance Redressal: Lodge a complaint with our Grievance Officer regarding any breach of this Policy or the DPDP Act.

7. Data Retention

We will retain your personal data for a period no longer than is necessary to fulfill the purposes for which it was collected, or as required by law. Once the data is no longer needed, we will take steps to securely destroy or anonymize it.

8. Children's Privacy

Our Website and Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to remove such data from our systems.

9. Changes to this Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Effective Date." Your continued use of the Website after any such changes constitutes your acceptance of the updated Policy.