Digital Personal Data Protection Act, 2023 Compliant

Privacy Policy & Data Principal Rights

At MittiMuse Clay Studio, we respect your privacy and process personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, Govt of India) and the Information Technology Act, 2000.

Last Updated: July 25, 2026•Data Fiduciary: MittiMuse Clay Studio, India

1. Lawful Basis & Notice of Processing (DPDP Section 5)

In accordance with Section 5 of the DPDP Act 2023, MittiMuse acts as a Data Fiduciary. We collect and process personal data only after obtaining your explicit, informed consent or for specific lawful purposes related to fulfilling your e-commerce orders, providing customer support, and complying with statutory tax obligations under Indian law.

2. Personal Data We Collect

We collect only the minimum necessary personal data required to operate our studio services:

Identity & Contact Data

Full Name, Email Address, Primary & WhatsApp Mobile Numbers, Delivery Address, Pincode, and State.

Transaction & Audit Logs

Order numbers, Razorpay Payment References, UPI UTR numbers, IP Address, Device User-Agent, and Audit timestamps.

3. Your Rights as a Data Principal (DPDP Sections 11–14)

Guaranteed by Govt of India Law

Under the DPDP Act 2023, you hold statutory rights over your personal data. You can exercise these anytime via your Customer Account Dashboard:

Right to Access & Summary (Section 11):You can download a full portable JSON export of all personal data, addresses, and order history linked to your account.

Right to Correction & Erasure ("Right to be Forgotten", Section 12):You can update inaccurate information or request complete deletion of your account and personal records from our databases.

Right to Withdraw Consent (Section 6):You may revoke consent for marketing emails, WhatsApp notifications, or non-essential cookies at any time.

4. Data Security & Third-Party Processors

We implement industry-standard AES-256 encryption and Supabase Row Level Security (RLS) policies. Payment details are processed directly via PCI-DSS compliant gateways (Razorpay). Courier logistics partners (Delhivery, Shiprocket, BlueDart, DTDC, India Post) only receive essential delivery address and contact details required for order fulfillment.

5. Protection of Children's Personal Data (Section 9)

MittiMuse does not knowingly collect or track personal data of individuals under 18 years of age without verifiable parental or legal guardian consent. If you believe a minor has registered an account, please contact our Grievance Officer immediately for swift erasure.

Statutory Grievance Redressal

6. Data Protection Officer (DPO) & Grievance Mechanism

In compliance with Section 13 of the DPDP Act 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, you may direct any privacy inquiries, consent withdrawals, or grievances to our designated Grievance Officer:

Grievance Officer

Nidhi Gondalia

Data Protection Officer

Official Email Helpline

privacy@mittimuse.com

nidhigondalia9509@gmail.com

WhatsApp / Helpline

+91 9408366042

Response SLA: 24 Hours

* Grievance Acknowledgment Period: Within 24 Hours. Statutory Resolution SLA: Maximum 15 Days from receipt of complaint.

Loading handcrafted treasures...