Privacy Policy & Data Rights
Last Updated: November 1, 2026 • Compliant with EU GDPR (Reg. 2016/679), UK Data Protection Act, and California Consumer Privacy Act (CCPA).
Our Zero-Storage Wall Visualizer Guarantee
When you use our interactive "See It On Your Wall" visualizer feature, all images of your living room or sanctuary are processed strictly within your local device's browser memory via client-side HTML5 Canvas APIs.
Your interior photos are never transmitted, uploaded, analyzed, or stored on Craftchirp servers or third-party cloud infrastructure. As soon as you close the modal or refresh your browser tab, the session data is permanently cleared from your device's memory.
1. Data Controller Identification
Craftchirp ("we", "our", or "us") operates the virtual gallery and marketplace located at craftchirp.com. The data controller responsible for your personal information under the General Data Protection Regulation (GDPR) is:
Entity: Craftchirp Creations (Solo Founder: Rachana Agarwal)
Studio Location: Maharashtra, India
Data Protection Contact: privacy@craftchirp.com
2. Information We Collect and Lawful Basis
We process personal data only where necessary to fulfill our contract with you (GDPR Art. 6(1)(b)), comply with international export customs laws (Art. 6(1)(c)), or where you have provided explicit consent (Art. 6(1)(a)):
- Order & Fulfillment Data: Full name, delivery address, phone number (required by international air carriers such as DHL and FedEx for customs clearance notifications), and email address for order receipts and Certificate of Authenticity delivery.
- Payment Information: All credit card and electronic transactions are processed directly by PCI-DSS Level 1 certified payment providers (e.g., Stripe, PayPal, Razorpay). Craftchirp never stores or views raw card numbers, CVC codes, or banking credentials.
- Inquiry Data: Name, contact details, and bespoke requests submitted through our contact forms or gated Russian inquiry portal.
3. International Customs and Logistics Disclosures
To transport physical artworks across international borders, customs authorities (e.g., US Customs and Border Protection, EU Member State Customs, UK HMRC) require consignee name, destination address, and contact numbers on commercial export manifests and air waybills. We share this information solely with:
- Designated international express air carriers (DHL Express, FedEx, Aramex).
- Authorized licensed customs brokers handling import duty and VAT payment reconciliation.
We never sell, rent, monetize, or trade collector contact details to commercial advertising networks or data brokers.
4. Cookies and Local Storage
We use minimal, privacy-preserving client storage:
- Essential Session Storage: Maintains your cart reservation timer (15-minute checkout hold) and preferred display currency (USD, EUR, GBP, INR).
- Privacy Preference Cookie: Remembers your consent choice so you are not repeatedly prompted.
5. Your Statutory Rights (GDPR & CCPA)
Regardless of your geographical location, Craftchirp extends full data subject rights:
To exercise any of these rights, email us at privacy@craftchirp.com. We respond to all verified requests within 30 days without fee.
6. Data Security and Retention
All traffic between your browser and Craftchirp is encrypted via modern Transport Layer Security (TLS 1.3). Order records and Certificates of Authenticity are maintained securely for tax compliance and secondary-market provenance verification for a period of 7 years, following which non-provenance personal identifiers are permanently scrubbed.