Privacy policy

Last updated: 13 October 2026

This Privacy Policy explains, in simple words, what personal data Chitrashila Artwork ("Chitrashila", "we", "us") collects when you use chitrashila.com (the "Website"), why we collect it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. It applies to everyone who uses the Website, in India or outside India.

1. Who is responsible for your data

Chitrashila Artwork (sole proprietorship), Vaishali Nagar Ward No 3, Bramhni-Kalmeshwar, Nagpur, Maharashtra 441501, India, is the "Data Fiduciary" for the personal data collected on the Website. Contact: info@chitrashila.com | +91-8484004428.

2. What we collect and why

Data	Why we use it
Name, phone number, email, delivery address, and the recipient's name and address if you are gifting	To accept, pack, deliver and support your order; to send order updates (confirmation, dispatch, tracking, delivery, refund) by SMS, WhatsApp, email or call; to issue invoices; to handle returns, refunds and complaints.
Payment status and transaction reference from our payment partner	To confirm payment and process refunds. We never see or store your card number, CVV, UPI PIN or net-banking password — these are handled directly by the payment partner.
Order history and the products you view or add to cart	To show you your orders, help you reorder, and improve our range.
Device and browsing data (IP address, device type, browser, pages visited) collected through cookies and similar tools	To run the Website securely, understand how it is used, and measure our advertising.
Messages you send us (WhatsApp, email, call, reviews, photos)	To answer you, resolve claims and improve our service.

We collect only what is needed for these purposes. We do not ask for your date of birth, government ID or any sensitive personal data to place an order.

3. Your consent

• Order processing: When you place an order, we use your data to fulfil it. This is a legitimate use under Section 7 of the DPDP Act, because you have voluntarily given us the data for that purpose.
• Marketing messages (offers, new products, festival reminders) are sent only if you have opted in — for example by ticking the box at checkout or subscribing to our newsletter/WhatsApp updates. You can stop them at any time by replying STOP on WhatsApp, clicking "unsubscribe" in an email, or writing to us. Stopping marketing does not affect your order updates.
• Cookies: Essential cookies are needed for the Website and cart to work. Analytics and advertising cookies are used as described in Section 6; you can block them in your browser settings.

4. Who we share your data with

We share your data only with service providers who need it to serve you, and only for that purpose. They are not allowed to use it for anything else. We never sell or rent your personal data.

• Shopify — hosts the Website, store and order records.
• GoKwik — checkout, payments and Cash on Delivery processing.
• Courier and logistics partners — receive your name, address and phone number to deliver your parcel and may call or message you about delivery.
• SMS / WhatsApp / email service providers — to send order updates and, if you opted in, marketing messages.
• Google Analytics and Meta (Facebook/Instagram) — anonymised or pseudonymised usage and advertising measurement data (see Section 6).
• Review platform — if you post a review, your first name and review text are shown on the Website.
• Government or legal authorities — only when required by law, court order or to protect our legal rights.

If the business is ever transferred or merged, your data may be transferred to the new owner under the same protections.

5. How long we keep your data

• Order, invoice and payment records: for the period required under GST and Income Tax law (currently up to 8 years).
• Marketing data: until you opt out or ask us to delete it.
• Browsing and analytics data: as per the retention settings of the analytics tools (typically up to 26 months).
• Other data: no longer than needed for the purpose it was collected for.

6. Cookies and analytics

The Website uses cookies and similar technologies from Shopify (to run the store and cart), Google Analytics (to understand how visitors use the Website) and Meta Pixel (to measure the results of our Facebook/Instagram ads and show relevant ads). These tools may collect your IP address, device information and the pages you visit. You can manage or delete cookies through your browser settings; blocking essential cookies may stop the cart and checkout from working.

7. Security

The Website is served over HTTPS (encrypted connection). Order data is stored on Shopify's secured servers. Access inside Chitrashila is limited to the people who handle orders and support. No system is completely secure, so please keep your account details private and let us know immediately if you suspect misuse.

8. Children

You must be 18 years or older to shop on the Website. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, write to us and we will delete it.

9. Your rights under the DPDP Act, 2023

• Access & correction: Ask for a summary of the personal data we hold about you and request correction of anything inaccurate or incomplete.
• Erasure: Ask us to delete your personal data, except where we must keep it by law (for example, invoice and tax records).
• Withdraw consent: Stop marketing messages at any time (reply STOP, click unsubscribe, or write to us). Withdrawal does not affect processing already done.
• Nomination: Nominate a person to exercise these rights on your behalf in case of death or incapacity.
• Grievance & escalation: Write to our Grievance Officer (Section 11). If you are not satisfied with our response, you may approach the Data Protection Board of India.

To use any of these rights, email info@chitrashila.com or WhatsApp +91-8484004428 from the number/email linked to your order. We respond within 7 working days and in all cases within the time required by law.

10. Data breach

If a personal data breach affects you, we will inform you and the Data Protection Board of India as required under applicable law.

11. Grievance Officer

Utkarsh Manjare — Grievance Officer, Chitrashila Artwork
Vaishali Nagar Ward No 3, Bramhni-Kalmeshwar, Nagpur, Maharashtra 441501, India
Email: info@chitrashila.com | Phone/WhatsApp: +91-8484004428 (Mon–Sat, 10 am – 7 pm IST)
Complaints are acknowledged within 48 hours and resolved within one month.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version. Significant changes will be notified on the Website.