This page explains how ArtNest protects prepaid checkout and account access. It is not a certification, audit report, or PCI-DSS attestation. We do not claim ISO, PCI, or similar marks for ArtNest.
1. Transport security
artnestindia.com is served over HTTPS (TLS). You should see a lock in the browser address bar before you enter an address or proceed to pay from our checkout. Do not pay on a page that is not our domain or a secure payment page opened from our checkout.
2. Payments — PayU
All payments are prepaid through PayU (UPI, card, or net banking). There is no cash on delivery and no payment collected by the courier or at shop pickup — pickup orders are also paid online before collection.
Card details, including the card primary account number (the long number on the card) and CVV, are entered on PayU’s secure checkout. ArtNest does not receive, store, or process full card numbers, CVV, or card PINs on its servers. We store PayU transaction and payment identifiers, the amount, and payment status so we can confirm the order and, if needed, refund to the original prepaid method (UPI, card, or net banking).
PayU is a payment aggregator. Card-network rules and PayU’s own security programme apply to data entered on their checkout. That is not the same as ArtNest holding a PCI-DSS merchant certificate, and we do not claim one.
We also do not collect your income-tax Permanent Account Number (PAN) at checkout.
3. WhatsApp OTP and login
We send a one-time password on WhatsApp (Meta Cloud API) to the mobile number you give, to log in or to confirm an order. If WhatsApp cannot be used, we may send the code by email. The code is short-lived. We do not read your WhatsApp chat history. Do not share the OTP with anyone, including a person who claims to be from ArtNest — our team will not ask you to read an OTP aloud to “verify a refund”.
4. What we store
Order records, account mobile number, saved addresses, and payment identifiers sit on our hosting and database. Access to the admin tools is limited to the shop. Session cookies keep your cart, login, and a CSRF token. See Privacy for purposes and processors (including Shiprocket when you choose courier).
5. Your part
- Use a device and browser you control.
- Do not share OTP, login links, or invoice-download links.
- Check that checkout is on artnestindia.com before you pay.
- If you see a charge you do not recognise, write to us at hello@artnestindia.com and to PayU / your bank as appropriate.
6. Incidents
If we become aware of a security incident that affects your personal data, we will act as required under applicable law (including the Digital Personal Data Protection Act, 2023, when its duties apply) and contact you using the mobile number or email on the order where notice is required or reasonably needed.
Questions: WhatsApp +91 91752 78533 or the Grievance Officer.