Privacy Policy

Information we collect

• Account details: If you sign in with Google, we receive the name, email address, profile image, and account identifier that Google makes available to us.
• Shopping and delivery details: We process cart contents and, when you place an order, the name, email, phone number, delivery address, notes, products, quantities, payment status, and order history you submit or generate through the purchase.
• Existing sketch orders: For pencil-sketch orders already placed, we retain the reference image, description, selected options, and delivery and order details needed to fulfil the order and show your sketch gallery.
• Reviews: We store the name, rating, title, text, and any photos you submit. Reviews are checked before publication; approved review content may be visible to website visitors.
• Website activity: Only if you separately opt in, the storefront records selected page views and interactions, such as clicks, form submissions, changes, and section visits. Records may include the page URL, page or section, interaction type, limited element identifiers, product identifier, and your account identifier when signed in. Google sign-in button interactions are excluded.
• Session and technical information: Essential session data supports sign-in, security checks, the acceptance record for these Terms, and guest-cart functionality. Our hosting and application infrastructure may process request, device, and security information, such as IP address and browser details, in server logs.

How we use information

We use information to authenticate accounts, remember carts, take and fulfil orders, fulfil existing sketch orders, provide support, moderate and display approved reviews, understand storefront activity when you opt in to activity tracking, maintain the Terms acceptance session, and protect the website from misuse.

We do not use the website activity records to record interactions with Google sign-in buttons.

We use personal data for the purposes described here and as permitted or required by applicable law. Where consent is required, we will ask for it separately; accepting these Terms is not, by itself, consent to optional personal-data processing.

Payments and service providers

Google provides sign-in. Razorpay receives the payment and contact information needed to create and process your payment; payment details are handled on Razorpay’s service. We store order and payment-status information, but do not ask you to enter card credentials on this website.

Hosting, storage, and other infrastructure providers process information for us to operate the website. Our authorized personnel may access information when needed to manage orders, support customers, or moderate content. We do not sell personal data. We may disclose data if required by law or to protect rights, users, and the service. Third-party providers handle data under their own terms and privacy notices.

Cookies and session storage

We use essential first-party cookies and related browser storage to keep your session, protect forms, support guest carts and sign-in, and remember that you accepted the current Terms version. The accepted Terms version is stored in an HTTP-only browser cookie; the acceptance timestamp and your optional activity-tracking choice remain in the server-side session.

With your separate, optional permission, the website sends selected page and interaction events to our own application database for storefront operations and analysis. Activity tracking is off unless you opt in, is not an advertising cookie, and does not record Google sign-in button interactions. We do not use this activity tracking to serve targeted advertising. You can change your choice below; opting out stops new activity collection but does not automatically erase earlier records. You may separately ask us to erase those records, subject to applicable law.

You can block or clear cookies in your browser, but essential features such as sign-in, the cart, and remembering your Terms acceptance may stop working.

Public reviews and external links

Approved reviews may be displayed publicly with the name and review content you submitted. Please avoid including private or sensitive information in a review. Links to services such as Google, Razorpay, or Instagram take you to third-party services whose privacy practices we do not control.

Retention and your choices

We retain account, order, review, activity, and uploaded content only as long as needed for the purposes above, to resolve disputes, protect the service, or meet legal and accounting obligations. These records do not currently have a fixed automatic deletion schedule; guest-cart and Terms acceptance session data expires with the applicable session. Retention needs differ by record type, and you may request erasure subject to legal exceptions.

Subject to applicable law, you may ask us to confirm whether we hold your personal data and provide access to it, correct or update inaccurate data, complete or update information, erase data we no longer need, or withdraw consent where processing relies on consent. You may also raise a grievance and, where permitted by law, nominate another person to exercise your rights if you die or become incapable. We may need to verify your identity and may retain records that we are legally required or permitted to keep.

To exercise a right or complain about our handling of data, contact us using the details below. We will respond within applicable legal timeframes. Where available under applicable law, you may escalate an unresolved grievance to the relevant data-protection authority.

You can choose not to sign in or provide information, but some account, cart, review, and checkout features may then be unavailable.

Children’s privacy and policy updates

This storefront is not directed to children. If you are under 18, please have a parent or legal guardian supervise your use and place orders. We do not knowingly seek personal data from children without any required authorization.

We review this policy at least annually and when our data practices or applicable law changes. Material updates will be posted here with a revised date. Please check this page periodically.

Contact us

The responsible business for this website is Caroline D Souza, trading as Million Shades.

For a privacy request or grievance, contact MillionShades Crafts By Caroline D Souza through our Instagram account (@_creation.bycrln_) or use the contact links in the Contact us section. Please do not send passwords, payment credentials, or sensitive documents through social media. We may request appropriate information to verify your identity.