This notice explains how the studio of Manjoo Kiraan ("we", "us") handles your personal data when you use this website. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.
What we collect
- Account details: your name, email address and profile picture, received from the sign-in service you choose when you create an account.
- Order details: delivery name, address and phone number, the paintings you buy, and your order history.
- Payment status: confirmation that a payment succeeded or failed, and a payment reference. Your card or bank details are handled by our payment provider and are never seen or stored by us.
- Messages: what you send us through enquiries, commission requests, copyright reports and data requests.
- Technical data: information needed to keep you signed in and to keep the website secure, such as session cookies and basic server logs.
We do not use advertising or tracking cookies, and we do not sell your personal data.
Why we use it
- to create and manage your account
- to process, deliver and support your orders
- to reply to your messages and requests
- to issue and verify certificates of authenticity
- to keep the website and our records secure, and prevent fraud
- to meet our legal, tax and accounting obligations
We use your data only for these purposes, on the basis of your consent or where the law permits it. We will not send you marketing emails unless you have asked for them.
Who we share it with
We share personal data only with service providers that help us run the website and fulfil orders, and only as much as they need:
- website hosting and database providers
- the sign-in service
- the payment provider
- courier and delivery partners, for your delivery address and contact number
- email service providers, to send you messages about your orders and requests
We may also disclose data where the law requires it. Some providers may process data outside India, in which case we rely on them to protect it as required by law.
How long we keep it
- Account data: while your account is open.
- Orders and payment records: for as long as tax and accounting law requires.
- Messages and enquiries: for as long as needed to deal with them and any follow-up.
When data is no longer needed, we delete or anonymise it.
Your rights
You may ask to:
- see a summary of the personal data we hold about you
- correct or update it
- erase it, where we are not legally required to keep it
- withdraw consent you have given
- nominate another person to exercise your rights if you are unable to
Signed-in users can make these requests from the "Your data" page. You can also contact us. We aim to respond within 30 days.
Complaints
If you have a concern about how we handle your data, please contact us first, see our Grievance and Customer Support page. You also have the right to complain to the Data Protection Board of India.
Children
This website is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
We may update this notice. The date at the bottom of this page shows when it was last changed.