Privacy Policy
Last updated:
We are a family-friendly brand, so we keep data collection to the minimum. We never sell your personal data. This policy explains what we collect, why, and the choices you have under India's Digital Personal Data Protection Act, 2023.
1Who is responsible for your data
, trading as , is the "Data Fiduciary" for the personal data described here. Questions or requests: .
2What we collect
| When | What | Why |
|---|---|---|
| You place an order | Name, phone number, email, delivery address, order details | To process, deliver and support your order, and to issue GST invoices |
| You pay | Payment status and transaction ID (from our payment partner) | To confirm payment and handle refunds. We never receive your full card, UPI PIN or bank login. |
| You send a bulk / return-gift enquiry | Name, phone, occasion, event date, city, kids' age group, your notes | To prepare your quote and deliver on time |
| You email us | Your messages and contact details | To reply and help you |
| You join our newsletter | Email address | To send new kits, craft ideas and offers. Unsubscribe any time. |
| You browse the website | Basic technical data (device type, browser, pages visited), collected by our hosting provider | To keep the website secure and working well |
3Children's privacy 🧒
- Our kits and games are made for children, but orders are placed by parents or guardians. We do not knowingly collect personal data from children.
- The online games (Paint a Rock, Brain Games and the Brain Arcade) do not collect any personal data. They have no accounts, no chat, no ads and no tracking. Saved paintings download straight to your device.
- If you believe a child has sent us personal data, please contact us and we will delete it.
- We do not track children's behaviour or target them with advertising.
4Information stored on your device
Our website uses your browser's local storage, not tracking cookies, to remember your shopping cart, game stars, your chosen age group and sound on/off. This stays on your device; we cannot see it. You can clear it at any time from your browser settings.
5Who we share data with
Only with trusted service providers who help us run the business, and only what they need:
- Courier and logistics partners: your name, phone and address, to deliver your order.
- Payment partners (for example PhonePe or other RBI-regulated payment gateways), to process payments and refunds.
- Website hosting and email providers, to run the site and send order emails.
- Google Fonts, which supplies our website's fonts. Your browser may share your IP address with Google when loading them.
- Government authorities, only when the law requires it.
6How long we keep it
- Order and invoice records: as long as tax and accounting laws require (usually up to 8 years).
- Enquiries and chats: up to 2 years, unless they become an order.
- Newsletter email: until you unsubscribe.
7How we protect it
Our website uses HTTPS encryption, payments go through PCI-DSS compliant payment gateways, and access to customer details is limited to people who need it to fulfil orders. No system is 100% secure, but we take reasonable care and will inform you and the authorities as the law requires if a breach affects you.
8Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- Access: ask what personal data we hold about you.
- Correct or update wrong or old details.
- Erase: ask us to delete your data (except records we must keep by law).
- Withdraw consent, for example unsubscribe from emails.
- Nominate someone to exercise these rights for you.
- Complain to our Grievance Officer, and if you're not satisfied, to the Data Protection Board of India.
To make a request, email or . We will reply within 30 days.
9Grievance Officer
| Name | |
|---|---|
10Changes
If we change this policy, we will update the date at the top. For important changes, we will also email you if you have ordered from us.