Privacy Policy

1. Who We Are

Shilpani (brand name of Matply Infotech LLP, hereinafter "we", "us", or "our") operates the e-commerce store at shilpani.com. We sell premium acrylic spiritual art frames and related products.

This Privacy Policy is governed by the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Data We Collect

2.1 Information you provide directly

• Account & Order data: Name, email address, phone number, shipping & billing address, order history
• Payment data: Payment is processed by our payment gateway partner (Razorpay, operated via Matply Infotech LLP). We do not store card numbers or UPI credentials on our servers.
• Communication data: Messages, emails, or WhatsApp queries you send us
• Newsletter data: Email address if you subscribe to our newsletter

2.2 Information collected automatically

• Device & browser data: IP address, browser type, operating system, referring URLs
• Browsing behaviour: Pages viewed, products clicked, time spent on site — collected via cookies and analytics tools
• Cookies: We use essential, analytics, and marketing cookies. See Section 6 for details.

3. How We Use Your Data

• Order fulfilment: Processing, packaging, and delivering your order; sending tracking and delivery updates
• Customer support: Responding to queries, returns, and complaints
• Marketing (with consent): Sending offers, new arrivals, and devotional content via email or WhatsApp — only if you opt in
• Analytics: Understanding how customers use our site to improve the experience
• Legal compliance: Meeting obligations under Indian tax law (GST), consumer protection regulations, and the DPDP Act 2023
• Fraud prevention: Detecting and preventing fraudulent orders and transactions

4. Data Sharing

We do not sell your personal data. We share it only with the following categories of partners, strictly for operating our business:

• Shopify Inc.: Our e-commerce platform — stores order and account data. Privacy policy at shopify.com/legal/privacy.
• Razorpay (via Matply Infotech LLP): Payment processing. PCI-DSS compliant.
• Courier partners (Bluedart, Delhivery, etc.): Your name, address, and phone number for delivery.
• Google Analytics / Google Ads: Anonymised browsing data for analytics and advertising.
• Meta Platforms (Facebook / Instagram): Anonymised data via Meta Pixel for advertising, if you have consented to marketing cookies.
• WhatsApp Business (Meta): If you contact us or opt in to WhatsApp notifications.
• Email service provider: For sending transactional and marketing emails.

All third-party processors are bound by data protection agreements and are required to handle your data in compliance with applicable law.

5. Data Retention

• Order & account data: Retained for 7 years as required by Indian tax and accounting law
• Marketing data: Retained until you unsubscribe or withdraw consent
• Analytics data: Retained for up to 26 months in aggregated, anonymised form

6. Cookies

We use the following categories of cookies:

• Strictly necessary: Required for the store to function (shopping cart, login, checkout). Cannot be disabled.
• Analytics: Google Analytics — helps us understand traffic patterns. You can opt out via your browser settings or the Google opt-out tool.
• Marketing: Meta Pixel — enables retargeted advertising on Facebook and Instagram. You can opt out via your browser or Meta's ad settings.

7. Your Rights Under DPDP Act 2023

As a data principal (user), you have the right to:

• Access: Request a summary of what personal data we hold about you
• Correction: Request correction of inaccurate data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Grievance redressal: Raise a complaint with our Grievance Officer (see below)
• Nominate: Nominate another person to exercise your rights in the event of your incapacity or death

To exercise any of these rights, email our Grievance Officer at karan.singh@shilpani.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including SSL/TLS encryption for all data in transit, access controls, and secure hosting via Shopify's PCI-DSS-compliant infrastructure. Payment data is handled exclusively by Razorpay and is never transmitted to or stored on our servers.

9. Children's Privacy

Our store is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact our Grievance Officer and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email (if you are subscribed) or via a notice on the website. The "Last updated" date at the top of this page reflects the most recent revision.

11. Grievance Officer

In accordance with the DPDP Act 2023 and the IT Act 2000, the details of our Grievance Officer are:

Name: Karan Singh
Designation: Grievance Officer
Email: karan.singh@shilpani.com
Phone: +91 90019 95029
Address: Matply Infotech LLP, Jaipur, Rajasthan – 302001, India
Response time: Within 30 days of receiving a complaint