Privacy Policy

We collect only what is needed to sell and deliver our products:

• Account and order details — name, email address, phone number, delivery address (address, city, state, PIN code), the items you order, order value and order status. If you check out without registering, we create an account for you from these details.
• Login credentials — your password, stored only as a one-way (bcrypt) hash. We cannot read it.
• Payment information — payments are handled by Razorpay. We receive only the payment status, payment ID and the method type (for example UPI or card). We never see or store your card number, CVV, UPI PIN or bank login.
• Wholesale, sample and contact enquiries — name, company, email, phone, country/city, product interest, quantity, message, and any reference image or file you choose to upload.
• Messages you send us — by contact form, email, phone or WhatsApp.
• Technical data — IP address, browser/device type and pages visited, collected by our servers and (on the website) by analytics tools described in section 5.

What the Android app does not collect: the app does not ask for or use your location, contacts, camera, microphone, photos, SMS or call logs. It needs only internet access.

• To create and run your account and to take, pack, ship and track your orders.
• To process payments, cancellations and refunds.
• To send order confirmations, shipping updates and replies to your enquiries (email, phone call or WhatsApp on the details you gave us).
• To prepare quotations for wholesale and export enquiries.
• To prevent fraud and abuse, keep the Services secure and meet legal, tax and accounting obligations.
• To understand how the website is used and improve it.

We send marketing messages only if you have asked for them (for example by subscribing to the newsletter), and every message lets you opt out. We do not sell your personal data and we do not use it for third-party advertising profiles.

We share data only with the service providers who help us run the business, and only as much as they need:

• Razorpay — payment processing (their own privacy policy applies to the payment data you enter on their screen).
• Courier and logistics partners — your name, phone number and delivery address, to deliver your parcel.
• Hosting and email providers — our website, database and email run on Hostinger-hosted servers; transactional emails (order and enquiry mails) are sent through our own mailbox at Hostinger.
• Image delivery — the app may load product images through the public image proxy images.weserv.nl, which sees the image address and your IP address like any web server.
• Analytics providers (website only) — see section 5.
• Authorities — where required by law, court order or to protect our legal rights.

If our business is ever sold or restructured, your data may transfer to the new owner under the same protections.

Data travels over HTTPS (TLS). Passwords are hashed, the app keeps your sign-in token in the device’s secure storage, admin access is restricted to authorised staff, and uploaded files are available only to our team. No system is perfectly secure, so please choose a strong password and do not share it. If you suspect misuse of your account, write to info@mypearlcraft.com immediately.

• Essential cookies — keep your cart, sign-in session and wishlist working.
• Language — if you choose a language from the globe menu, we remember it with a cookie and load Google Translate to translate the page in your browser. Google then receives the page text and your IP address under its own privacy policy. Visitors who stay on the English version never load Google Translate. We also remember, in a cookie, that you dismissed the language suggestion.
• Analytics — we may use Google Analytics, Meta Pixel and Microsoft Clarity on the website to measure visits and enquiries. These tools set their own cookies and receive pseudonymous usage data. They are not used inside the Android app or on the account, checkout, payment and tracking screens loaded in the app.

You can block or delete cookies in your browser settings; the cart and sign-in will not work without essential cookies. You can also opt out of Google Analytics with Google’s browser add-on.

• Account data — until you delete your account.
• Order and invoice records — up to 8 years after the order, because Indian GST and tax law require us to keep them. After you delete your account these records stay, but are no longer linked to a login.
• Enquiries — up to 3 years, or earlier if you ask us to delete them.
• Server logs — a few weeks.

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023) you may ask us to access, correct or erase your personal data, to withdraw consent, and to nominate someone to exercise these rights for you.

• Edit your details — Account → Edit Profile on the website.
• Delete your account and data — in the app: Account → Delete my account. On the web: mypearlcraft.com/delete-account. You can also email info@mypearlcraft.com from your registered address.
• Other requests — write to info@mypearlcraft.com; we reply within 30 days.

What deletion removes and what the law requires us to keep is explained on the Delete Account page.

The Services are meant for adults and are not directed to children under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, email info@mypearlcraft.com and we will delete it.

Our servers and team are in India, so your data is processed in India. Overseas buyers who send an export enquiry agree to this transfer. We apply the same protections to all users.

We may update this policy; the date at the top shows the latest version. For significant changes we will notify you on the website or in the app. Continued use after a change means you accept it.

India Craft (MyPearlCraft)
2037/3, Sec-14, Rajiv Nagar, Gurugram, Haryana, 122001
Email: info@mypearlcraft.com
Phone / WhatsApp: +91-9199770786

Privacy complaints and grievances can be sent to the same email with the subject “Privacy grievance”; we acknowledge within 48 hours and resolve within 30 days.