Who We Are
Aanshi Shringar Art (“we”, “us”, or “our”) is a Pushtimarg devotional house based in Rajkot, Gujarat, India, crafting handcrafted gold/silver shringar, cotton vastra/poshak, and seva samagri for Thakorji & Shrinathji. This policy applies to everyone who visits this website, creates an account, or places an order with us.
- GSTIN: 24AQNPS5607A1ZY
- Registered/business address: Shop No. G-3, Rameshwar Complex, Nr. Jitriya Hanuman Temple, opp. Aashirvad Hospital, Mavdi Main Road, Rajkot, Gujarat, India - 360004
- Contact: [email protected] · +91 90543 85595
This policy is written to satisfy India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025, the Information Technology Act, 2000 & SPDI Rules, 2011, and — for visitors browsing from abroad — the EU/UK GDPR and the US CCPA/CPRA. By using our website, placing an order, or creating an account, you agree to the practices described here.
Information We Collect, By Purpose
We collect only what we need, tied to a specific purpose:
- Account & identity: name, email, phone, and a securely hashed password, to create and secure your account.
- Orders, delivery & invoices: shipping/billing address, items purchased, order history, and GST-compliant tax invoices, to fulfil and support your orders.
- Identity verification (KYC) for high-value purchases & old-gold exchange: where required by RBI/PMLA rules for a high-value transaction or an old-gold exchange, we capture PAN and the last 4 digits of Aadhaar (never the full Aadhaar number in plain form — see “How We Protect Your Data” below), used only for that verification and statutory record-keeping.
- Payments: processed by Razorpay, our sole active payment gateway. We never store your full card number, UPI PIN, or bank credentials on our servers.
- Delivery: your name, address, and phone number are shared with our shipping partner Shiprocket and its carrier network, solely to deliver your order.
- Communications: order updates, OTPs, and (where you’ve opted in) marketing messages are sent via MSG91 over SMS, WhatsApp, and email.
- Customer support: messages you send our live-support chat or contact form are handled by our own support team — a human, not an AI system.
- My Swaroop visualiser (if you choose to use it): a photo of your home Swaroop (deity form) that you upload is processed through an image pipeline solely to preview shringar on it; it is not used for any other purpose.
- Analytics & advertising cookies — only with your consent:device, browser, and browsing-behaviour data, collected only after you accept the relevant category in our cookie banner. See “Cookies & Your Choices” below.
Legal Basis for Processing
- Contract: account creation, order processing, delivery, and customer support — necessary to provide the service you asked for.
- Consent: marketing communications, analytics cookies, and advertising cookies — you may withdraw this at any time, as easily as you gave it (see “Cookies & Your Choices” and Your Privacy Choices).
- Legal obligation: GST/tax invoicing and records, and KYC for high-value/old-gold transactions under RBI/PMLA rules.
- Legitimate use: fraud prevention, account security, and improving the store’s reliability.
Cookies & Your Choices
We use a consent banner that blocks every non-essential cookie until you choose — analytics and advertising scripts do not load at all until you accept them:
- Necessary cookies — required for the cart, checkout, and secure login. Cannot be disabled.
- Functional cookies — remember your preferences and settings.
- Analytics cookies — help us see how the store is used so we can improve it.
- Marketing cookies — used, only with your consent, to show relevant ads and measure their performance.
You can change your choice at any time: . California visitors (and anyone browsing with a Global Privacy Control signal enabled) can also use our dedicated Do Not Sell or Share page.
Sharing & Third-Party Processors
We never sell your personal data. We share it only with the service providers below, strictly to the extent needed to run our store:
- Payment gateway — Razorpay: to process your payments securely (PCI-DSS compliant; we never see your full card details).
- Search — Algolia: to power fast, relevant product search.
- Shipping & logistics — Shiprocket and its carrier network: to deliver your order.
- Communications — MSG91: SMS, WhatsApp, and transactional email for order updates, OTPs, and opted-in marketing.
- Infrastructure & security — Cloudflare, Sentry: content delivery, bot/attack mitigation, and error monitoring. These providers see technical/traffic data as part of running the site, not a sale of your information.
- Legal & regulatory authorities: where disclosure is required by law or to protect our rights.
Some of these providers may process data outside India. Where they do, we rely on their own security and compliance commitments and take reasonable steps to keep your data protected to a comparable standard.
Automated Tools & AI
Aanshi Shringar Art uses a small number of automated tools, and we, the company, are responsible for how they behave and for what they produce. We disclose them here so you are never surprised by them:
- Replies to reviews: when you review our shop on a public platform (for example Google), the text of that review may be sent to a large-language-model (LLM) service so it can draft a reply in our voice. Routine, positive reviews may receive that reply automatically; every other review is held for our team to read and approve first. If the LLM service is unavailable, a standard template reply is used instead.
- My Swaroop try-on preview: if you upload a photo, computer-vision software removes the background and detects face and body landmarks so shringar can be positioned on the picture. These steps run automatically, only to build your preview, and are not used to identify you or to build a biometric profile.
Neither tool makes a decision about your order, price, payment or account. If an automated reply or preview is wrong or upsets you, tell us through our Grievance Officer below and we will correct it.
How Long We Keep Your Data
A daily automated job enforces these exact, admin-configured periods:
- Account data: 3 years after your last activity, then anonymised.
- Marketing-communication records: 2 years.
- Analytics/browsing-history data: 26 months.
- Invoices, payment records, and accounting ledgers: at least 7 years, as required by Indian tax law — kept even after an account is closed or erasure is requested, as a legal hold.
How We Protect Your Data
- Encryption in transit (HTTPS/TLS) for every page and API call.
- Sensitive fields — PAN, Aadhaar, bank details, biometric templates — are encrypted at rest; only the last 4 digits of Aadhaar are ever shown in any interface.
- Payments handled by a PCI-DSS-compliant gateway; card data never touches our servers.
- Role-based access controls, hashed passwords, and audit logging on every account/data change.
Your Rights
You have the right to access, correct, erase, and receive a copy of your personal data, and to withdraw consent at any time — exercise all of these instantly, yourself, on our Your Privacy Rights page. That page also covers your right to nominate someone to act on your behalf and how to raise a grievance. To submit a privacy request or grievance that needs a person to act on it, use your account’s Privacy Requests page.
Children’s Privacy
Our store is intended for customers aged 18 and above; account registration asks you to confirm this. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will remove it.
Grievance Officer & Complaints
In line with the IT Act, 2000 and the DPDP Act, 2023, you may reach our Grievance Officer for any question about this policy or to exercise your rights:
Aanshi Shringar Art — Grievance Officer
Email: [email protected]
For phone and postal contact, please use our Contact page.
We acknowledge grievances within 48 hours and aim to resolve them within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India (once constituted for public complaints) or, for EU/UK/California visitors, your local supervisory authority.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page. We encourage you to review it periodically.
Questions? We are here to help.
Our client-care atelier is happy to assist with anything you need — orders, custom commissions, or care for your pieces.