Privacy

Information we handle

Depending on how you use the gallery, we may handle your name, verified email address and phone number, account identifier, delivery and billing addresses, wishlist and enquiry bag, order and payment status, shipping details, customer-support messages, custom-commission requirements, uploaded reference or milestone images, approvals and notification history. Hosting and security systems may also process request time, browser details, network address and diagnostic information.

Why we use it

• To create and secure your account.
• To calculate delivery, place and fulfil orders, confirm payments and provide invoices.
• To prepare quotations and manage custom-moorti production milestones.
• To send requested transactional updates by email, SMS or WhatsApp.
• To answer questions, prevent misuse, investigate errors and maintain legal or financial records.

Service providers

Only when the relevant feature is configured, information may be processed by providers that help operate the service: Clerk for authentication; the selected hosting platform for application delivery; PostgreSQL for structured data; and private S3-compatible storage for media; Razorpay for online payments; Shiprocket and selected couriers for delivery rates and fulfilment; Resend for email; MSG91 for SMS; and Meta for WhatsApp. Payment-card or UPI credentials are entered into Razorpay's payment experience and are not stored in the Divine Stone Gallery database. Each provider also applies its own terms and privacy practices.

Cookies and device storage

Essential account services may use secure session cookies. The site also uses device-local storage for signed-out wishlist and enquiry-bag items and to remember this privacy notice. We do not currently use advertising trackers. If analytics or marketing cookies are added later, the notice and consent controls must be updated before they are enabled.

Retention and protection

We keep information only as long as reasonably needed to provide the requested service, maintain order, tax, payment, security and dispute records, or meet applicable legal obligations. Private commission images require account ownership or staff authorization. Access controls, encrypted connections, provider secrets and audit records are used to reduce risk, although no internet service can promise absolute security.

Your choices and requests

You may ask to access or correct your account information, withdraw an optional communication consent, or request deletion where applicable. Some records may need to be retained for completed orders, taxation, fraud prevention, disputes or other legal obligations. WhatsApp updates must not be enabled without your affirmative opt-in, and withdrawing that opt-in stops future optional WhatsApp processing without affecting an order already being fulfilled.