Privacy Policy

1.1The Website crazyovercrochet.com is operated by Renu Tyagi, an individual seller (sole proprietor) based at Vaishali, Ghaziabad, Uttar Pradesh 201019, India, trading as Crazy Over Crochet (the “Seller”, “we”, “us”). The Seller decides the purposes and means of processing your personal data and is the data fiduciary for it.

1.2Questions about this Policy and requests concerning your data may be sent by email to crazyovercrochet@gmail.com or by WhatsApp message to +91 81780 26772.

2.1This Policy is published under the Digital Personal Data Protection Act, 2023 and the rules made under it, as and when in force, and under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2.2Where this Policy and applicable law differ, the law prevails.

3.1When you place an order. Your name, email address, WhatsApp number, delivery address and PIN code, the Pieces ordered, the amount paid and the payment reference returned by Razorpay. We never receive or store your card number, bank credentials or UPI PIN; those are entered on Razorpay’s secure payment page.

3.2When you request a custom piece. The name and email address you give, the description, colour and details of your request, and the reference images you upload (up to four). Please do not include personal data about other people in your request or images.

3.3When you browse. The Website does not use analytics or advertising trackers. Items you save to your cart are stored in your browser’s local storage on your own device and are not sent to us until you place an order. To enforce daily limits on the custom-order form and on studio sign-in, our systems keep a one-way, salted and shortened hash derived from your IP address for the day in question. Raw IP addresses are not stored by us.

3.4Hosting and delivery logs. Our hosting provider processes standard request logs, which may include IP addresses and browser details, for security and operations under its own policies.

3.5When you contact us. The content of your emails and WhatsApp messages and the details you provide in them.

4.1We use personal data only for the following purposes:

• to accept, confirm, prepare and deliver your order, and to send order confirmation, dispatch notice and tracking details by email;
• to review, discuss, quote and fulfil custom-order requests;
• to respond to your questions and complaints and to keep records of them;
• to prevent abuse of the Website, including enforcing the daily limits on the custom-order form;
• to keep the accounting and tax records that the law requires of a seller;
• to comply with legal obligations and to establish, exercise or defend legal claims.

4.2We rely on your consent, given when you place an order, submit a request or contact us, and on the legitimate uses recognised by law for performing a transaction you have asked for and for complying with legal obligations.

4.3We do not send marketing emails, promotional WhatsApp messages or newsletters. We do not sell personal data and we do not share it with anyone for their own marketing.

5.1We share personal data only with the service providers needed to run the Website and deliver orders, each bound by its own terms and data-protection commitments:

• Razorpay Software Private Limited (Bengaluru, India): processes payments and refunds and receives the details needed to complete a transaction. When in use.
• Google Cloud (Google LLC): stores our order, request and catalogue records and uploaded images in a data centre in Mumbai, India. In use.
• Vercel Inc.: hosts and serves the Website, including the servers that run it and their request logs, which may be processed outside India. In use.
• Cloudflare, Inc.: provides domain name services and, when enabled, the human-verification check on the custom-order form. In use.
• Meta Platforms (WhatsApp Business): carries WhatsApp messages between you and us when that channel is used. When in use.
• Courier partners: receive your name, delivery address, PIN code and phone number to deliver your order. When in use.

5.2We may also disclose personal data where the law requires it, to comply with a lawful order of a court or authority, or to protect the rights, property or safety of the Seller or others.

6.1Our records are stored with Google Cloud in the Mumbai region of India. The Website is served through a global hosting network, and hosting logs and cached pages may be processed in other countries under the hosting provider’s safeguards.

7.1The public Website sets no tracking, analytics or advertising cookies.

7.2One cookie is used only in the password-protected studio area that the Seller uses to manage the shop. Visitors do not receive it.

7.3Your cart is kept in your browser’s local storage on your device so that it survives a page reload. You can clear it at any time through your browser settings.

8.1Order and payment records are kept for 8 years from the end of the financial year of the order, as required for accounting and tax purposes.

8.2Custom-order requests, including reference images, are deleted 12 months after they are received, unless they have become an order, in which case the order retention period applies.

8.3Anti-abuse counters derived from hashed IP addresses are kept per day and are not used after the day has ended.

8.4Correspondence is kept for as long as needed to deal with the matter and for any legal limitation period that applies.

9.1Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• have inaccurate or incomplete data corrected or updated;
• have your data erased once it is no longer needed for the purpose it was collected for or required to be kept by law;
• withdraw consent for processing that is based on consent, without affecting the lawfulness of processing before withdrawal;
• nominate a person to exercise these rights on your behalf in the event of your death or incapacity, as provided by law;
• have your grievance heard and addressed.

9.2To exercise a right, write to crazyovercrochet@gmail.com or message +91 81780 26772 from the email address or number connected with the data in question. We may ask for reasonable verification of your identity. We respond within the time the law allows and without charge unless a request is manifestly unfounded or excessive.

9.3If you are not satisfied with our response, you may complain to the Grievance Officer named in section 12 and, thereafter, to the Data Protection Board of India once it is constituted and functioning.

10.1The Website is served only over HTTPS. Records are held in access-controlled storage, uploaded images are stored privately and are reached only through short-lived signed links, payment details are handled entirely by Razorpay, and the studio area is protected by a signed session and sign-in limits. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11.1The Website sells to adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.

12.1In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for this Website is Vaibhav Tyagi, reachable by email at crazyovercrochet@gmail.com and on WhatsApp at +91 81780 26772, Vaishali, Ghaziabad, Uttar Pradesh 201019, India. Grievances are acknowledged within 48 hours and resolved within one month of receipt.

13.1We may update this Policy from time to time. The effective date at the top of the page shows the version in force. Material changes will be highlighted on the Website. Continued use of the Website after a change means you accept the updated Policy.

13.2This Policy should be read together with the Terms and Conditions.