Artful Miniature™

Legal

Privacy Policy

At Artful Miniature ("we", "us" or "our"), we respect your privacy and protect your personal data. This Privacy Policy explains what we collect, why, who we share it with, and the rights you have when you visit https://artfulminiature.shop or buy our colouring books, stationery kits and stickers.

Effective Date: 1st October 2026
Last Updated: 9th October 2026

This policy is written to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and, for visitors in the European Union and United Kingdom, the General Data Protection Regulation ("GDPR" / "UK GDPR").

1. Who We Are

Artful Miniature, B/27, Sainath Society, Behind Yash Complex, Gotri Road, Gotri, Vadodara, Gujarat 390021, India, is responsible for your personal data. Under the DPDP Act we are the Data Fiduciary, and under the GDPR the controller.
Contact: [email protected]

2. Information We Collect

A. Information you give us

  • Contact details: name, email address, phone number, and billing and shipping addresses.
  • Payment information: Payments are processed by Shopify and Razorpay. We never see or store your full card number.
  • Account information: If you create an account, we keep your login details and order history.
  • Communications: messages, feedback or requests you send us.

B. Information collected automatically

  • Device and usage data: IP address, browser type, operating system, pages viewed, and the date and time of visits.
  • Cookies and similar technologies: Strictly necessary cookies keep the site and your cart working. Analytics and marketing cookies are set only if you agree through our cookie banner.
  • Processing and delivering orders, cancellations, returns and order emails: needed to perform our contract with you (GDPR Art 6(1)(b)); for the specified purpose you gave the data for (DPDP Act s.7(a)).
  • Keeping tax and accounting records: legal obligation.
  • Customer support: to answer your request.
  • Analytics, personalised content and advertising: your consent, given through the cookie banner.
  • Marketing emails: your consent. Every email has an unsubscribe link.
  • Fraud prevention and site security: our legitimate interest in protecting customers and the store (GDPR); legitimate use (DPDP Act).

Where we rely on consent, you can withdraw it at any time, as easily as you gave it. Use the cookie settings link in the footer or email us. Withdrawing consent doesn't affect processing that happened before.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract:

  • Shopify: our e-commerce platform; it hosts orders, accounts and checkout.
  • Razorpay: payment processing.
  • Shipping carriers: name, address and phone number, to deliver your parcel.
  • Google Analytics (via Google Tag Manager): website analytics, only with your consent.
  • Meta (Pixel and Conversions API): measuring and showing relevant ads, only with your consent.
  • PostHog: product analytics to improve the website, only with your consent.
  • Microsoft Clarity: heatmaps and session recordings of how visitors use our pages (clicks, scrolling and page views), to find and fix problems, only with your consent. Text you type, your account details and checkout are masked or never recorded. Clarity sets the cookies _clck and _clsk (up to 1 year) and CLID and MUID (Microsoft, up to 1 year), and keeps recordings for 30 days.
  • Authorities: where the law requires it, for example a valid court order.

5. International Transfers

Some of our service providers, including Shopify, Google, Meta, PostHog and Microsoft, store or process data on servers outside India, the EU and the UK. Where data leaves the EU or UK, these providers rely on recognised safeguards such as the European Commission's Standard Contractual Clauses. Transfers from India follow the DPDP Act and any restrictions notified by the Government of India.

6. How Long We Keep Data

  • Account data: until you delete your account.
  • Order records: as long as Indian tax and accounting law requires (generally up to 8 years). After account deletion, these records are kept with your identifying details removed.
  • Analytics data: kept for up to 14 months, then deleted or anonymised.
  • Support emails: up to 2 years after your last message.

7. Your Rights

Under the DPDP Act (India)

  • Get a summary of the personal data we hold about you and how we use it.
  • Have inaccurate or incomplete data corrected or updated.
  • Have your data erased once it is no longer needed.
  • Withdraw consent at any time.
  • Raise a grievance with our Grievance Officer (section 10).
  • Nominate someone to exercise your rights if you die or become incapacitated.
  • If you're not satisfied with how we handled your grievance, complain to the Data Protection Board of India.

Under the GDPR / UK GDPR (EU and UK)

  • Access a copy of your data.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to processing, including direct marketing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Complain to your local data protection authority (in the UK, the ICO).

To use any of these rights, delete your account yourself (section 8) or email [email protected]. We'll respond within one month, and may ask you to confirm your identity first.

8. Account Deletion and Data Erasure

A. Deleting your account yourself

  1. Log in to your account.
  2. Open the Profile section of your dashboard.
  3. Follow the prompts under Delete Account.

B. What happens next

  • Erasure request: We ask Shopify to permanently erase your personal details held by this shop, including your name, email and phone number, saved addresses, saved payment methods and marketing preferences.
  • Sign-out: You're signed out on all devices straight away.
  • Timeline: Erasure can take up to 14 days to complete across all connected systems.
  • Permanent: Deletion cannot be undone. Signing in again during those 14 days won't stop it.
  • Order records: Past orders are kept as long as tax and accounting law requires, with your identifying details removed.
  • Shop Pay: Cards saved to Shop Pay belong to your separate Shop account, run by Shopify. Manage them in your Shop account.

9. Security and Children

We use administrative, technical and physical safeguards, including encrypted connections, secure edge caching and rate limiting, to protect your data. If a breach affects your personal data, we'll notify you and the relevant authorities as the law requires.

Our website is not directed at children under 18. We don't knowingly collect personal data from children without verifiable parental consent. If you believe a child has given us data, contact us and we'll delete it.

10. Grievance Officer & Contact

Grievance Officer: Dr. Dharni Parekh, Founder
Email: [email protected]
Address: Artful Miniature, B/27, Sainath Society, Behind Yash Complex, Gotri Road, Gotri, Vadodara, Gujarat 390021, India

11. Third-Party Websites

Our website may link to sites we don't own or control. We're not responsible for their privacy practices, so please read their policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the new version here with an updated "Last Updated" date. For significant changes, we'll also let account holders know by email.