Privacy policy

Effective Date: August 2026

1. INTRODUCTION AND ROLE DEFINITION:

Welcome to ART BY SEHGAL. This Privacy Notice explains how Abhay Sehgal, trading as ART BY SEHGAL (hereinafter referred to as "we", "us", or "our"), collects, processes, and protects your digital personal data in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023. For the purposes of the Act, we act as the "Data Fiduciary," determining the specific purpose and means of processing your data when you visit our studio platform or purchase original artworks and prints.

2. THE DATA WE COLLECT (DATA MINIMIZATION):

We adhere to the principle of data minimization, collecting only the information strictly necessary to fulfill your orders and operate our digital gallery. This includes:

  1. Identity & Contact Data: Name, shipping address, billing address, email address, and phone number.
  2. Transaction Data: Order history and tokenized payment identifiers. (Note: Core financial credentials are encrypted via our RBI-compliant payment gateways; we do not store them on our servers).
  3. Technical Data: IP address and device information necessary for platform security and fraud prevention.

3. PURPOSE OF PROCESSING & AFFIRMATIVE CONSENT:

Your personal data is processed exclusively for specific, lawful purposes:

  1. Order Fulfillment: To ship your physical artwork, provide tracking updates, and manage any post-sale support.
  2. Customer Service: To address inquiries regarding commissions, available pieces, or technical grievances.
  3. Marketing (By Affirmative Consent Only): We do not bundle consent. If you explicitly opt-in to receive exclusive art drops and studio updates via a distinct affirmative action, we will send you promotional communications. You may withdraw this consent at any time with the exact ease with which it was provided, without affecting the legality of prior processing.

4. SHARING WITH DATA PROCESSORS:

To deliver your artwork securely and maintain our digital infrastructure, we must share necessary data fragments with trusted third-party "Data Processors." This includes:

  1. Our e-commerce infrastructure provider, Shopify.
  2. Specialized art logistics and courier partners.
  3. Payment gateway providers.

We execute strict Data Processing Agreements with all vendors, legally binding them to implement equivalent security safeguards and prohibiting them from utilizing your data for any independent commercial purposes.

5. STATUTORY RIGHTS OF THE DATA PRINCIPAL:

Under the DPDP Act, 2023, you retain absolute statutory rights over your digital footprint. You have the right to:

  1. Right to Access & Correction: Request a summary of your personal data processed by us and demand the correction of inaccurate records.
  2. Right to Erasure: Request the total erasure of your personal data from our systems once the specific commercial purpose is fulfilled.
  3. Right to Withdraw Consent: Revoke your consent for optional data processing (such as newsletters) at any time.
  4. Right to Nominate: Nominate another individual to exercise your statutory data rights in the event of your death or incapacity.

6. DATA RETENTION AND STATUTORY PURGING:

We retain your personal data only for the duration necessary to fulfill the specific purpose of its collection. Upon fulfillment, or upon your explicit withdrawal of consent, the data is securely erased or anonymized. Exceptions are strictly limited to transactional and billing data that we are mandated to retain to comply with prevailing taxation or financial laws in India.

7. PROHIBITION ON MINOR DATA PROCESSING:

Our platform and Artwork are intended exclusively for individuals who have attained the age of majority (18 years). We do not knowingly collect personal data from, track the behavioral patterns of, or direct targeted advertising toward children. If we become aware that the personal data of a minor has been collected without verifiable parental consent, such data shall be immediately and permanently erased from our servers.

8. SECURITY SAFEGUARDS AND BREACH NOTIFICATION:

We deploy robust, industry-standard encryption and internal security protocols to protect your data from unauthorized access. In the unlikely event of a verified personal data breach compromising your information, we shall promptly notify the Data Protection Board of India and the affected Users within the legally mandated timeframes, detailing the nature of the breach and recommended protective measures.

9. GRIEVANCE REDRESSAL MECHANISM:

To exercise any of your statutory Data Principal rights, withdraw consent, or report a privacy concern, please contact our designated Grievance Officer:

●       Grievance Email: contact@artbysehgal.com

●       Registered Office Address: House no 172, New Jawahar Nagar, Model Town, Jalandhar, Pin 144003, Punjab, India.

●       Entity: Abhay Sehgal, trading as ART BY SEHGAL

All formal requests will be acknowledged within forty-eight (48) business hours and resolved within the timeframe mandated by statutory rules.