This Privacy Policy explains how The Paint Medley, based in Jaipur, Rajasthan, India, collects and uses digital personal data when you visit this website, create an account, contact us, or make a payment. We process personal data only for a lawful, specific purpose and only to the extent reasonably necessary for that purpose.
1. Data we collect and why
- Contact enquiries: name, email, phone number, and message, to respond to your enquiry and provide support.
- Accounts: name, email address, and password, to create and secure an account. Passwords are stored in hashed form.
- Payments: name, email, phone number, amount, and payment identifiers, to initiate, verify, reconcile, and support a payment. Card and bank credentials are handled by Razorpay and are not stored by us.
- Technical data: IP address, browser, device, and necessary storage, to operate, secure, and troubleshoot the website.
- Optional analytics: website usage information through Google Analytics only after you choose to allow analytics.
2. Consent and optional services
Necessary storage is used to remember your privacy choice and support core site functions. Analytics and external content, including Google Maps and embedded video services, are disabled until you choose to allow them. You may reject optional processing without losing access to core website functions. You may change your choice by clearing the site's consent record or contacting us.
3. Sharing and processors
We share data only where needed to provide the service or comply with law. This may include our email provider for enquiry replies, Razorpay for payment processing, hosting/database providers, and Google when you allow analytics or external content. These providers process data under their own terms and privacy notices. We do not sell personal data.
4. Retention and security
- Contact enquiries: up to 24 months after the enquiry is closed.
- Account data: while the account is active, then deletion from active systems within 30 days of an approved erasure request, subject to required legal retention.
- Payment transaction metadata: up to 8 years where needed for accounting, tax, fraud-prevention, or dispute obligations.
- Consent evidence and completed privacy requests: 3 years after the record is replaced, withdrawn, or closed.
- Routine security and technical logs: up to 90 days unless needed for investigation or legal compliance.
We use access controls, password hashing, encrypted transport, and reasonable technical and organisational safeguards. No online service can guarantee absolute security.
5. Your rights
You may request:
- access to a summary of your personal data and its processing;
- correction, completion, or updating of inaccurate data;
- erasure where retention is not required by law or for a permitted purpose;
- withdrawal of consent, where consent is the basis of processing; and
- grievance redressal regarding our handling of your personal data.
Submit requests through our Privacy Request form, which verifies your email and provides a reference number. You may also email [email protected]. We will respond within the period required by applicable law.
6. Children
The website's account, contact, and payment services are intended for individuals aged 18 or older. We do not knowingly process children's personal data through these services or use children's data for targeted advertising or tracking. A parent or lawful guardian may use the Privacy Request form if they believe a child has provided data.
7. Changes and contact
We may update this Policy when our processing or legal requirements change and will update the date above. For privacy requests or complaints, contact Sandeep Kawat at [email protected] or use the Privacy Request form. Our legal terms are available in the Terms & Conditions.