Legal
Privacy Policy
Last updated: January 1, 2025 · Effective immediately
At Statue Art Gallery, your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you visit our website or make a purchase.
Information We Collect
We collect information you provide directly to us, as well as information generated through your use of our services.
Personal Information
- Name, email address, phone number, and delivery address when you place an order
- Billing address. Payments are processed securely via Razorpay, and we do not store your card or payment details.
- Account credentials if you create a profile with us
- Communications you send us via email, phone, or contact forms
- Gender and city if provided during profile setup
Automatically Collected
- IP address, browser type, and device information
- Pages visited, time spent, and links clicked on our website
- Referring URLs and search terms used to find our site
- Order history and browsing behaviour on our platform
How We Use Your Information
We use the information we collect to provide, improve, and personalise our services to you.
- Process and fulfil your orders, including shipping and delivery updates
- Send order confirmations, invoices, and customer support responses
- Personalise your shopping experience and recommend relevant products
- Send promotional emails and offers (only with your consent)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and resolve disputes
- Improve our website, products, and services based on usage data
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit permission (e.g., marketing emails, cookies)
- Contractual necessity: To process and deliver your orders
- Legal obligation: To comply with applicable laws and regulations
- Legitimate interests: To improve our services, prevent fraud, and enhance user experience
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We only share your data in the following limited circumstances:
- Shipping partners (Shiprocket and courier services) to deliver your orders
- Payment processors (Razorpay) to securely handle transactions
- Invoicing services to generate and manage receipts
- Analytics providers to understand how our website is used (data may be aggregated or anonymised where possible)
- Law enforcement or regulatory authorities when required by law
- Business transfers - in the event of a merger or acquisition, your data may be transferred
Note: We take reasonable steps to ensure third parties handle your data securely
Data Security
We take data security seriously and employ industry-standard measures to protect your information.
- SSL/TLS encryption for all data transmitted to and from our website
- Payment data handled exclusively by Razorpay - we never store card details
- Access to personal data is restricted to authorised personnel only
- We implement appropriate technical and organisational safeguards
While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy.
- Order and transaction data is retained for legal and tax compliance
- Account data is retained until you request deletion
- Marketing data is retained until you withdraw consent
- Analytics data may be retained in aggregated or anonymised form
Once data is no longer required, we securely delete or anonymise it.
We use cookies and similar tracking technologies to enhance your browsing experience and understand how you use our site.
- Essential cookies: required for the website to function correctly (cart, session)
- Analytics cookies: help us understand traffic and usage patterns
- Preference cookies: remember your settings and preferences
You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality. For full details, see our Cookie Policy.
Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete information
- Deletion: Request that we delete your personal data ("right to be forgotten")
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing of your data for marketing purposes
- Withdraw consent: Unsubscribe from marketing emails at any time
To exercise any of these rights, please contact us at the details below. We aim to respond within 30 days.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
Any updates will be posted on this page with a revised "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out to us:
