Privacy Policy

Information we collect

• Account details: If you sign in with Google, we receive the name, email address, profile image, and account identifier that Google makes available to us.
• Shopping and delivery details: We process cart contents and, when you place an order, the name, email, phone number, delivery address, notes, products, quantities, payment status, and order history you submit or generate through the purchase.
• Sketch requests: If you request a pencil sketch, we collect your reference image, description, selected options, and delivery and order details. Uploaded images are stored so we can fulfil the request and show your own sketch gallery.
• Reviews: We store the name, rating, title, text, and any photos you submit. Reviews are checked before publication; approved review content may be visible to website visitors.
• Website activity: We do not currently collect page-view or interaction analytics through the storefront. A historical activity table may still contain records from earlier versions, including an account identifier, action, page, and, where recorded, page URL, section, interaction type, event time, or additional event data. Authorized administrators may review these records for internal engagement analysis; they are not used for advertising.
• Session and technical information: Essential session data supports sign-in, security checks, the acceptance record for these Terms, and guest-cart functionality. Our hosting and application infrastructure may process request, device, and security information, such as IP address and browser details, in server logs.

How we use information

We use information to authenticate accounts, remember carts, take and fulfil orders, create requested sketches, provide support, moderate and display approved reviews, maintain the Terms acceptance session, protect the website from misuse, and review historical activity records for internal engagement analysis. We do not currently collect new storefront page-view or interaction events for analytics.

We use personal data for the purposes described here and as permitted or required by applicable law. Where consent is required, we will ask for it separately; accepting these Terms is not, by itself, consent to optional personal-data processing.

Payments and service providers

Google provides sign-in. Razorpay receives the payment and contact information needed to create and process your payment; payment details are handled on Razorpay’s service. We store order and payment-status information, but do not ask you to enter card credentials on this website.

Hosting, storage, and other infrastructure providers process information for us to operate the website. Our authorized personnel may access information when needed to manage orders, support customers, or moderate content. We do not sell personal data. We may disclose data if required by law or to protect rights, users, and the service. Third-party providers handle data under their own terms and privacy notices.

Cookies and session storage

We use essential first-party session cookies and related browser storage to keep your session, protect forms, support guest carts and sign-in, and remember that you accepted the current Terms version. The acceptance version and time are stored in the server-side session; these session records expire under the site’s configured session lifetime.

The current storefront does not send new page-view or interaction events to our application database. Historical activity records collected by earlier versions may remain available to authorized administrators for internal engagement analysis; this is not advertising tracking. You may ask us to access, correct, or erase those historical records, subject to applicable law.

You can block or clear cookies in your browser, but essential features such as sign-in, the cart, and the Terms acceptance session may stop working.

Public reviews and external links

Approved reviews may be displayed publicly with the name and review content you submitted. Please avoid including private or sensitive information in a review. Links to services such as Google, Razorpay, or Instagram take you to third-party services whose privacy practices we do not control.

Retention and your choices

We retain account, order, review, historical activity, and uploaded content only as long as needed for the purposes above, to resolve disputes, protect the service, or meet legal and accounting obligations. These records do not currently have a fixed automatic deletion schedule; guest-cart and Terms acceptance session data expires with the applicable session. Retention needs differ by record type, and you may request erasure subject to legal exceptions.

Subject to applicable law, you may ask us to confirm whether we hold your personal data and provide access to it, correct or update inaccurate data, complete or update information, erase data we no longer need, or withdraw consent where processing relies on consent. You may also request an electronic copy or portable export of personal data you provided, in a commonly used format where required by law or reasonably feasible. An export may be limited to protect other people’s rights, confidential information, and records we must retain. You may raise a grievance and, where permitted by law, nominate another person to exercise your rights if you die or become incapable. We may need to verify your identity and may retain records that we are legally required or permitted to keep.

To exercise a right or complain about our handling of data, contact us using the details below. We will respond within applicable legal timeframes. Where available under applicable law, you may escalate an unresolved grievance to the relevant data-protection authority.

You can choose not to sign in or provide information, but some account, cart, review, and checkout features may then be unavailable.

Children’s privacy and policy updates

This storefront is not directed to children. If you are under 18, please have a parent or legal guardian supervise your use and place orders. We do not knowingly seek personal data from children without any required authorization.

We review this policy at least annually and when our data practices or applicable law changes. Material updates will be posted here with a revised date. Please check this page periodically.

Contact us

For a privacy request or grievance, contact Caroline D Souza, trading as Million Shades through our Instagram account (@_creation.bycrln_) or use the contact links in the Contact us section. Please do not send passwords, payment credentials, or sensitive documents through social media. We may request appropriate information to verify your identity.