Privacy policy

Last updated: 11 October 2026

MrigArt collects only the personal data needed to sell and deliver your order, run the Site and, with your consent, keep you informed. We never sell your personal data. This policy explains what we collect, why, who we share it with and how you can exercise your rights.

1. Who we are

1.1 Anurag Chauhan, sole proprietor, trading as MrigArt ("we", "us" or "our"), operates mrigart.com (the "Site"). We are the Data Fiduciary for the personal data described in this policy.

1.2 We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Law"), and the Information Technology Act, 2000 and the rules made under it.

2. Personal data we collect

2.1 Data you give us: your name, email address, phone number, shipping and billing addresses, order details, and anything you send us. This includes messages, photos and unboxing videos submitted with a claim, product reviews, and your email if you subscribe to our updates.

2.2 Payment data: payments are processed by third-party payment gateways, such as Razorpay. We receive confirmation of the payment and limited transaction details. We do not receive or store your full card number, CVV, UPI PIN or net banking credentials.

2.3 Data collected automatically: your IP address, device and browser type, approximate location, pages viewed, referring website and similar technical information, collected through cookies and similar technologies.

2.4 Data from third parties: delivery status from our courier partners, and information from advertising and social media platforms, such as Instagram, when you interact with our content or advertisements.

3. Why we use your personal data

3.1 We use your personal data to:

  • (a) process, produce, ship and deliver your orders;
  • (b) process payments and prevent fraud;
  • (c) send order confirmations, shipping updates and other service messages;
  • (d) respond to your queries, claims and complaints;
  • (e) send marketing communications, only where you have consented;
  • (f) understand how the Site is used and improve it; and
  • (g) comply with our legal obligations, including tax, accounting and consumer protection laws.

3.2 We process your personal data on the basis of your consent, and for legitimate uses permitted under the DPDP Law. These include processing data you voluntarily provide to complete a purchase, and processing required by law.

4. Who we share it with

4.1 We share personal data only as needed for the purposes above, with:

  • (a) Shopify, which hosts the Site and processes orders;
  • (b) payment gateways, such as Razorpay, which process payments;
  • (c) printing and fulfilment partners, which produce and pack your products;
  • (d) courier partners, which deliver your orders;
  • (e) analytics and advertising providers, such as Google and Meta, which help us measure and improve our Site and advertising;
  • (f) professional advisers, such as accountants and lawyers; and
  • (g) government or law enforcement authorities, where required by law.

4.2 These parties may use your data only to provide services to us, and are required to protect it. If our business is sold or restructured, personal data may be transferred to the new owner under the same protections.

5. Cookies

5.1 We use essential cookies to run the Site and your cart, and analytics and marketing cookies to understand visits and measure advertising.

5.2 You can manage or disable cookies through your browser settings. Disabling essential cookies may affect how the Site works.

6. Where your data is stored

6.1 Your data may be stored and processed on servers located outside India, including those of Shopify and other service providers. Any such transfer is made in compliance with the DPDP Law and not to any country restricted by the Government of India.

7. How long we keep it

7.1 We keep personal data only for as long as needed for the purposes it was collected for. Order, invoice and payment records are kept for the periods required by tax and accounting laws.

7.2 Claim photos and videos are kept until the claim is closed and for a reasonable period afterwards. Marketing data is kept until you withdraw your consent.

8. Security

8.1 We use reasonable security safeguards to protect your personal data, including encrypted (HTTPS) connections and PCI-DSS compliant payment gateways.

8.2 No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

9. Your rights

9.1 Under the DPDP Law, you have the right to:

  • (a) obtain a summary of the personal data we hold about you and how we process it;
  • (b) have your personal data corrected, completed or updated;
  • (c) have your personal data erased, unless we must keep it to comply with law;
  • (d) withdraw your consent at any time, as easily as you gave it;
  • (e) have your grievances addressed; and
  • (f) nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

9.2 To exercise any right, write to hello@mrigart.com. We will respond within the period required by law, and in any case within 90 days.

9.3 Withdrawing consent does not affect processing already carried out. It may mean we can no longer provide certain services, such as completing an order.

9.4 If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

10. Marketing communications

10.1 You can unsubscribe from marketing emails at any time using the link in each email, or by writing to us. You will continue to receive service messages about your orders.

11. Children

11.1 The Site is not directed at children under 18. We do not knowingly collect personal data from children without verifiable consent from a parent or guardian. If you believe a child has provided us data, please contact us and we will delete it.

12. Third-party websites

12.1 The Site may link to other websites and platforms. Their own privacy policies govern how they handle your data.

13. Changes to this policy

13.1 We may update this policy from time to time. The latest version will always be on this page, with the date of the last update shown above.

14. Contact and grievances

14.1 For any question, request or complaint about your personal data, contact our Grievance Officer, Anurag Chauhan, at hello@mrigart.com.