Artify by Atharv — Privacy Policy Last updated: 21.07.2026.
1. Who is responsible for your data (Data Fiduciary). Poonam Saraf, sole proprietor trading as "Artify by Atharv" (artifybyatharv.in), is the Data Fiduciary / body corporate responsible for personal data collected through the Site. Contact: saraf.poonam.84@gmail.com, +91 82829 60497, India. This Policy is issued under the Information Technology Act, 2000 and the IT
(Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025, and includes hooks for the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA ("CCPA"), and the US Children's Online Privacy Protection Act ("COPPA").
2. What we collect. (a) Identity & contact data: name, email, phone, billing and shipping address. (b) Order data: items, sizes, custom-design files you upload, order history. (c) Communications: messages to support, reviews. (d) Technical/usage data: IP address, device/browser, cookies and similar technologies (see Cookie Policy). (e) Payment data: processed by our payment gateway — we do not collect or store your full card/banking details.
3. Why we use it and our lawful basis. We process data to: create and manage your account; perform the contract (process, produce, fulfil, ship orders); communicate about orders and support; comply with legal/tax obligations; prevent fraud and secure the Site; and, only with your consent, send marketing and use analytics/advertising cookies. Our lawful bases are: performance of a contract; your consent; compliance with law; and our legitimate interests in operating and securing the Site (where recognised). Consent is obtained through clear affirmative action — we do not use pre-ticked boxes.
4. Who we share it with (processors and partners). We share data only as needed with: Shopify (e-commerce platform/hosting); our payment gateway (payment processing); our print-on-demand and fulfilment partner, QIKink (operated by Huepress Fashion Private Limited, Coimbatore, India) and its courier partners (production and delivery); and analytics/advertising providers such as Google Analytics (subject to consent). We require processors to protect your data and use it only on our instructions. We do not sell your personal information.
5. International transfers. As we use cloud and fulfilment services and may ship worldwide, your data may be processed outside your country, including outside India. Where we transfer personal data internationally, we take reasonable steps to ensure a comparable level of protection consistent with the SPDI Rules, the DPDP Act, and (for EU/UK data) appropriate safeguards under the GDPR.
6. Data retention. We keep personal data only as long as necessary for the purposes above or as required by law (e.g., tax/accounting records). When no longer needed, we securely delete or anonymise it. (Note: under the DPDP Rules 2025, certain large e-commerce fiduciaries — those with at least two crore registered users in India — must erase user data three years after the user's last interaction, with 48 hours' prior notice; we apply data-minimisation and timely deletion as a matter of policy regardless of threshold.)
7. Security. We implement reasonable security practices and procedures proportionate to the data we hold, including access controls, encryption in transit, and reliance on reputable processors (Shopify, payment gateways) that maintain industry-standard safeguards, as required under Section 43A of the IT Act and the SPDI Rules.
8. Your rights. Subject to applicable law you may: access a summary of your data and the processors with whom it is shared; correct, complete, or update it; request erasure; withdraw consent (without affecting prior lawful processing); nominate another person to exercise your rights in case of death or incapacity (DPDP Act); and raise a grievance. EU/UK residents additionally have GDPR rights (portability, restriction, objection, and to lodge a complaint with a supervisory authority). California residents have CCPA rights to know, delete, correct, and to opt out of "sale"/"sharing" — we do not sell or share personal information for cross-context behavioural advertising. To exercise any right, contact our Grievance Officer below.
9. Children's data (special protections — DPDP Act 2023 s.9, DPDP Rules 2025 Rule 10; COPPA; GDPR-K). The Site and our products are intended for adults (18+). We do not knowingly collect personal data from any person under 18 without verifiable consent of a parent or lawful guardian. Consistent with Section 9 of the DPDP Act and Rule 10 of the DPDP Rules 2025, before processing any child's data we obtain verifiable parental consent (verifying the consenting adult's identity and age using reliable details already held by us, or details/virtual token voluntarily provided by the parent, including via a Digital Locker / authorised provider). We do not track, behaviourally monitor, profile, or direct targeted advertising at children — this prohibition applies even where parental consent exists. For US users we comply with COPPA for under-13s, and for EU/UK users with GDPR-K age thresholds. If you believe a child has provided us data without parental consent, contact us and we will delete it. (Note: India's children's-data obligations carry penalties of up to ₹200 crore, which is why we apply this section strictly.)
10. A note about the artist (minor). The artist associated with the Brand is a minor whose data and likeness are managed exclusively by his parent/guardian, the Operator. We do not collect or process customers' children's data through the artist's public association with the Brand. See our "About the Artist / Minor Protection & Likeness Notice".
11. Cookies. See our separate Cookie Policy.
12. Changes. We may update this Policy and will post the revised version with a new "Last updated" date.
13. Grievance Officer / Data Protection contact.
Grievance Officer (and data-protection contact): Poonam Saraf
Email: saraf.poonam.84@gmail.com (updatable to support@artifybyatharv.in)
Phone / WhatsApp: +91 82829 60497 · Country: India
We acknowledge complaints within 48 hours and aim to resolve them within one month (E-Commerce Rules 2020), and in any event respond to data-principal grievances within a reasonable period not exceeding 90 days as required under DPDP Rules 2025, Rule
14(3). Indian data principals may, after exhausting our grievance process, approach the
Data Protection Board of India.
Artify by Atharv — Cookie Policy Last updated: 21.07.2026
1. What cookies are. Cookies are small text files placed on your device when you visit artifybyatharv.in. We also use similar technologies (pixels, local storage, SDKs).
2. Types of cookies we use.
Strictly necessary — enable core functions such as cart, checkout, security, and account login. These cannot be switched off.
Functional/preferences — remember choices such as language and region.
Analytics — help us understand site usage (e.g., Google Analytics). Set only with your consent where required.
Advertising/marketing — measure and (where applicable) personalise marketing (e.g., Google Ads). Set only with your consent. We do not use advertising cookies to target children.
3. Consent banner. Where required by law (including for EU/UK visitors and under evolving Indian norms), non-essential cookies are loaded only after you give consent via our cookie banner. You can accept, reject, or customise, and change your choice at any time. We do not use pre-ticked consent.
4. How to manage or opt out. You can manage cookies through your browser settings (block, delete, or be warned before cookies are set). You can opt out of Google Analytics using Google's browser opt-out add-on, and manage Google ad personalisation in your Google account settings. Blocking strictly necessary cookies may break parts of the Site.
5. Third-party cookies and Google. Some cookies are set by third parties (e.g., Shopify, Google). Their use of data is governed by their own policies. For Google's practices, see Google's Cookie/Privacy and "How Google uses information from sites or apps that use our services" notices.
6. Changes. We may update this Policy; the current version is always posted here.
7. Contact. Cookie questions: saraf.poonam.84@gmail.com, +91 82829 60497.