Privacy Policy & Data Protection

1. Introduction & Corporate Entity

Crystal Art Gallery ("Atelier", "We", "Us", or "Our"), operating from Udaipur, Rajasthan, India, is dedicated to protecting the privacy, discretion, and personal data of our collectors, clients, and website visitors.

This Privacy Policy details how we collect, process, store, and safeguard your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 (IT Act), and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2. Personal Data We Collect

We collect only necessary personal data provided voluntarily by you when inquiring about artwork, scheduling salon viewings, or commissioning bespoke gemstone sculptures:

• Identity & Contact Details: Full name, telephone/mobile number, email address, and physical delivery address.
• Curatorial & Advisory Inquiries: Artwork preferences, custom commission dimensions, architectural layout requests, and consultation history.
• Transaction & Logistics Data: Invoicing details, bank transfer/GST registration numbers (where applicable for tax invoicing under Indian GST laws), and shipping destinations.
• Technical Interaction Data: IP address, browser type, device information, and anonymous usage analytics.

3. Purpose & Legal Basis of Data Processing

Pursuant to Section 4 of the DPDP Act 2023, your personal data is processed strictly for specified, lawful purposes based on your explicit consent or legal requirement:

• To respond to collector inquiries and arrange private salon viewings in Udaipur or international exhibitions.
• To execute bespoke lapidary commissions, structural engineering calculations, and tailored lighting integration.
• To fulfill specialized, fully insured armored transportation and white-glove artwork installation.
• To issue legal tax invoices, GST documentation, and export clearances under Indian customs and commercial regulations.

4. Security Practices & Data Safeguards

In accordance with Rule 8 of the IT (Reasonable Security Practices and Procedures) Rules, 2011, we maintain comprehensive technical, organizational, and physical security measures to prevent unauthorized access, disclosure, alteration, or destruction of collector data.

All digital communications and inquiry forms are transmitted via 256-bit SSL encryption. We adhere to a strict non-disclosure policy: we never sell, rent, trade, or monetize collector information to any third party.

5. Third-Party Service Providers & Disclosures

We share data only with verified partners under binding confidentiality agreements strictly necessary to deliver museum-grade service:

• Armored Logistics & Freight: Specialized artwork couriers (e.g., Sequel Logistics, Blue Dart, DHL Express) for insured delivery.
• Legal & Statutory Compliance: Government authorities or law enforcement agencies only when mandated by valid court orders or Indian statutory obligations.

6. Collector Rights under DPDP Act 2023

Under the Digital Personal Data Protection Act, 2023, you hold the following statutory rights regarding your personal data:

• Right to Access & Summary: Request a summary of personal data being processed by us.
• Right to Correction & Erasure: Request correction of inaccurate data or erasure of data no longer required for statutory purposes.
• Right to Withdraw Consent: Withdraw your consent for non-statutory data processing at any time.
• Right of Grievance Redressal: Seek resolution of any data privacy concerns through our designated Grievance Officer.

7. Grievance Redressal Officer (IT Act 2000 & DPDP Act)

In compliance with the Information Technology Act, 2000 and DPDP Act 2023, the contact details of our Grievance Officer are provided below:

8. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts located at Udaipur, Rajasthan, India.