1. Introduction
This Privacy Policy describes how The Prints Plus ("we," "us," or "our") collects, uses, stores, and protects the personal information of visitors and customers who access our website at www.theprintsplus.com and use our services. We are committed to safeguarding your privacy in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.
By using our website, placing an order, creating an account, or otherwise interacting with our services, you consent to the collection and use of your personal data as described in this policy. If you do not agree with any part of this policy, please refrain from using our website.
2. Information We Collect
We collect the following categories of personal data when you interact with our website and services:
2.1 Information You Provide Directly
- Identity Data: Full name, username, and password when you register an account.
- Contact Data: Email address, phone number, and delivery address (including pin code, city, and state).
- Order Data: Product selections, custom design files you upload, sizing specifications, and order notes.
- Payment Data: Payment method selection. Actual card numbers and UPI IDs are processed securely by our payment gateway Razorpay and are never stored on our servers.
- Communication Data: Messages sent through our contact form, WhatsApp enquiries, emails, and customer support interactions.
2.2 Information Collected Automatically
- Device and Browser Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
- Usage Data: Pages visited, time spent on pages, click patterns, product searches, referral URLs, and navigation paths through our website.
- Location Data: Approximate geographic location derived from your IP address, used to estimate shipping times and costs.
3. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. The types of cookies we use include:
- Essential/Session Cookies: Required for the website to function. These manage your login session, shopping cart contents, and checkout flow. They expire when you close your browser or after a set period.
- Analytics Cookies (Google Analytics GA4 / Google Tag Manager): Help us understand how visitors use our website, which pages are most popular, and how users navigate. Data is aggregated and anonymised where possible.
- Marketing Cookies (Meta Pixel / Facebook Pixel): Enable us to measure the effectiveness of our advertising campaigns on Facebook and Instagram, and to show you relevant advertisements on those platforms.
- Behavioural Analytics (Microsoft Clarity): Records session replays and heatmaps to help us identify usability issues and improve the user experience. Personal data is masked in recordings.
- Firebase Cookies: Used for push notifications, app analytics, and performance monitoring where applicable.
You may disable cookies through your browser settings. However, disabling essential cookies may impair website functionality, including the ability to add items to your cart or complete purchases.
4. How We Use Your Information
We process your personal data for the following purposes:
- Processing and fulfilling your orders, including custom print production and delivery coordination.
- Communicating order status updates, shipping notifications, and delivery confirmations via email, SMS, or WhatsApp.
- Providing customer support and resolving complaints or disputes.
- Personalising your shopping experience and recommending relevant products.
- Processing payments securely through Razorpay and detecting fraudulent transactions.
- Sending promotional emails and marketing communications (only with your opt-in consent; you may unsubscribe at any time).
- Improving our website, products, and services through analytics and user feedback.
- Complying with legal obligations, tax regulations, and law enforcement requests.
5. Third-Party Service Providers
We share your personal data with trusted third-party service providers who assist in operating our business. These partners are contractually obligated to protect your data and use it only for the purposes specified:
- Razorpay: Processes all online payments including credit/debit cards, UPI, net banking, and wallets. Razorpay is PCI-DSS compliant and handles payment data securely. We do not store your card details.
- Shiprocket: Our logistics partner for shipping and delivery. We share your name, phone number, and delivery address to facilitate order dispatch, tracking, and last-mile delivery.
- Google Analytics (GA4) and Google Tag Manager: Collects anonymised website usage data for analytics purposes. Data may be processed on Google servers outside India.
- Meta (Facebook/Instagram): Meta Pixel tracks conversion events from our advertising campaigns. Aggregated data is shared for ad measurement and optimisation.
- Microsoft Clarity: Records user sessions for UX improvement. Personal identifiers are masked.
- Firebase (Google): Used for push notifications and app performance monitoring.
We do not sell, rent, or trade your personal information to any third party for their independent marketing purposes.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Order data and invoices are retained for a minimum of 8 years as required under the Indian Income Tax Act and GST regulations. Account data is retained until you request account deletion. Marketing consent records are retained for as long as the consent is valid.
7. Data Security
We implement industry-standard security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, secure server infrastructure, regular security audits, and access controls limiting employee access to personal data on a need-to-know basis. While we strive to protect your information, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights Under the DPDP Act, 2023
As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: You may request a summary of the personal data we hold about you and the processing activities associated with it.
- Right to Correction: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
- Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations (e.g., tax records). Upon a valid erasure request, we will delete or anonymise your data within 30 days.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to Grievance Redressal: You may raise a grievance with our Grievance Officer (details below) if you believe your data is being processed unlawfully.
- Right to Nominate: You have the right to nominate another individual to exercise your data rights in the event of your death or incapacity, as provided under the DPDP Act.
To exercise any of these rights, please contact us using the details provided in the Grievance Officer section below.
9. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to delete such data from our records.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
11. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data privacy. If you have any questions, complaints, or requests regarding this Privacy Policy or the handling of your personal data, please contact:
We will acknowledge your grievance within 24 hours and aim to resolve it within 30 days of receipt.
12. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Surat, Gujarat, India.