This Privacy policy explains what ArtNest collects when you shop, log in, or message us, why we use it, and who else sees it. It is written with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023 (DPDP) in mind. We do not claim a DPDP certification, ISO certificate, or a named audit.
ArtNest (Pune) is the business that decides why order and account data are used (a data fiduciary under DPDP, when that Act applies). Processors and other businesses we use are listed below.
1. What we collect
- Orders — name, mobile number, email, shipping or pickup address, cart contents, amounts, payment status, and order notes.
- Account — the same mobile number, name and email you save, and addresses you store for later checkouts.
- WhatsApp OTP — we send a one-time code to your number (or email as fallback) to log in or confirm an order. We store that you verified, not your chat history. We do not read WhatsApp conversations beyond the messages you send to our business number.
- Payment — Cashfree Payments processes UPI, card, and net banking. We keep Cashfree order/payment identifiers, amount, and status. We do not store full card numbers or CVV. See Security.
- Courier — if you choose Shiprocket delivery, we share name, phone, and address so the parcel can be picked up in Pune and delivered.
- Support — WhatsApp, email, Meanits chats, and photos you send for a wrong-or-damaged ticket.
- Technical — session cookies for cart, login, and CSRF; server logs (IP, user agent) for security and debugging.
We do not collect your income-tax PAN at checkout. We do not need Aadhaar or other KYC documents to sell craft goods.
2. Why we use it
- To take, confirm, pack, ship, or hand over a prepaid order.
- To send OTP, order updates, tracking, and delivery notices you would expect (confirm, packed, shipped, out for delivery, delivered).
- To handle cancellation, replacement, and refund tickets under our Cancellation & Returns policy.
- To prevent fraud, abuse, and failed-payment loops.
- To keep records required for tax, accounts, and consumer disputes.
We do not sell your list to advertisers. We do not run promotional blast campaigns to your number beyond order and account messages you should expect, unless you have asked us for catalogue help on WhatsApp.
3. Who else sees it (processors)
- Payment partners (Cashfree Payments and banks) for processing prepaid transactions only.
- Shiprocket and the assigned courier — name, phone, and address for pan-India prepaid delivery from Pune. Not used for shop-pickup orders except as needed to record the order.
- Meta (WhatsApp Cloud API) — OTP and order template messages to the number you gave.
- Email — order confirmation and OTP fallback from no-reply@artnestindia.com (or the From address configured for the shop).
- Hosting — our website, database, and session store, hosted in the infrastructure that serves artnestindia.com.
Those parties act for their stated purposes. We do not authorise them to sell your ArtNest order list.
4. How long we keep it
Order and payment records are kept as long as tax, accounting, and dispute rules require — typically several years after the order. Account data stays until you ask us to close the account. OTP codes expire in minutes. Support photos are kept as long as the ticket and any related dispute need them.
When you ask us to delete or anonymise what the law allows, we will do so after we no longer need the data for a prepaid order, refund, or legal duty. Some invoice and payment identifiers must be retained.
5. Your choices
Subject to DPDP and other applicable law, you may ask to access, correct, or erase personal data we hold, or to close an account. Write to no-reply@artnestindia.com or WhatsApp +91 91752 78533 from the number on the order. The Grievance Officer is the contact for a formal privacy or consumer complaint.
You can refuse OTP only by not creating an account or not completing a checkout that requires verification — we cannot fulfil a prepaid order without a working mobile number.
6. Children
The shop is aimed at adult makers. We do not knowingly take prepaid orders from persons under 18. A parent or guardian who orders for a young maker should use their own contact details.
7. Changes
We will post updates on this page. The version in force when you place an order applies to that order, together with later notices required by law.