Privacy Policy

Shilp Creations — sole proprietorship trading as shilp.

Last updated: 23 May 2026

This privacy policy explains what personal data we collect from you when you shop at shilp.store, why we collect it, and how we keep it safe. We follow the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are

The data controller is Shilp Creations, a sole proprietorship owned by Shilpa Arora, with registered place of business at B-1831, Shastri Nagar, Delhi — 110052, India. Contact: heybuzzcraft@gmail.com.

2. What we collect

Identity & contact: name, email, phone, billing & shipping address
Order data: products purchased, customisation details (names, dates, uploaded photos), order value
Payment data: handled entirely by Razorpay — we never see or store your card or UPI details
Device & usage: IP address, browser type, pages visited, referring source (via Shopify analytics and, if enabled, Google Analytics + Meta Pixel)
Communication: emails, WhatsApp messages, and chat messages you send us

3. Why we collect it

To process and ship your order, and contact you about it
To produce your personalised item exactly as ordered
To send order confirmations, shipping updates, and delivery notifications
To send marketing emails or WhatsApp messages — only if you opt in. You can unsubscribe any time.
To improve the store, fix bugs, and prevent fraud
To comply with Indian tax and accounting laws (GST invoices, books of accounts)

4. Who we share it with

We never sell your data. We share only what’s necessary, with:

Shopify — our e-commerce platform (data may be processed outside India per Shopify’s privacy policy)
Razorpay — our payment processor
Shiprocket and the chosen courier — to deliver your order
Email/WhatsApp tools (e.g. Shopify Email, official WhatsApp Business API) — for transactional and opt-in marketing messages
Analytics — Google Analytics and Meta Pixel, only in aggregated form
Government authorities — only when legally required

5. Customer-uploaded photos

If you upload a photo for a lithophane lamp or other photo-based product, we use it only to print your order. We store it on our secure servers for up to 90 days after dispatch (in case of replacement requests), then permanently delete it. We never use customer photos in marketing without your written consent.

6. Cookies

We use cookies to keep your cart working, log you in, and understand site usage. You can disable cookies in your browser, but parts of the checkout will stop working.

7. How long we keep your data

Order, billing, and tax records: 8 years (required by Indian tax law)
Customer photos: 90 days after dispatch
Marketing subscriber data: until you unsubscribe
Analytics: anonymised after 26 months

8. Your rights under the DPDP Act

You have the right to:

Access the personal data we hold about you
Ask us to correct or update inaccurate data
Ask us to delete your data (subject to tax-record retention)
Withdraw consent for marketing at any time
Lodge a complaint with the Data Protection Board of India

To exercise any right, email heybuzzcraft@gmail.com with the subject line “Data Request”. We respond within 30 days.

9. How we keep your data safe

All payments use 256-bit SSL encryption via Razorpay. Our Shopify admin uses two-factor authentication. We follow reasonable security practices as defined under Rule 8 of the IT (Reasonable Security Practices) Rules, 2011.

10. Children’s data

shilp.store is for adults aged 18+. We do not knowingly collect data from children. If you believe we have, please email us and we’ll delete it.

11. Changes to this policy

We may update this policy. The “Last updated” date at the top reflects the most recent change. Major changes will also be emailed to subscribers.

12. Grievance officer

As required under Indian IT Rules, our grievance officer is:
Shilpa Arora, Proprietor
Email: heybuzzcraft@gmail.com
Phone / WhatsApp: +91 92207 34520
Address: B-1831, Shastri Nagar, Delhi — 110052
Response time: within 30 days of receipt