Privacy policy
Last updated: 11 October 2026
Artlas (“we”, “us”) runs shopartlas.com. This page says what we collect, why, who else sees it, and what you can ask us to do about it. It is written to be read, not to be survived.
What we collect
When you buy something
- Your name, delivery address, pin code, email address and phone number.
- What you ordered — product, series, size, quantity, and whether you added installation.
- Your order amount and the payment reference our gateway returns to us.
We never see your card or UPI details. Payment is taken on the payment gateway’s own page. Your card number, CVV, UPI PIN and bank credentials never reach Artlas and are never stored on our systems. We receive only a success or failure result and a transaction reference.
When you use the site without buying
- Standard web data your browser sends: IP address, device and browser type, the pages you looked at, and where you arrived from. This is collected by Shopify and by our analytics, and is used in aggregate.
- Cookies, described below.
When you write to us
Whatever you send us by email or WhatsApp, and our replies, kept so we can pick up a conversation where it left off.
When you sign up for emails
Your email address, and later, which of our emails you opened or clicked.
We do not knowingly collect anything from anyone under 18.
Why we use it
| We use it to | Because |
|---|---|
| Make and deliver your order | It is the contract between us — we cannot ship a map without an address |
| Message you about your order | Same |
| Take payment and issue a GST invoice | Contract, and Indian tax law |
| Answer your questions and handle a complaint | Contract, and our legal duty as a seller |
| Send you marketing email | Only with your consent, and you can withdraw it at any time |
| Understand how the site is used, and improve it | Our legitimate interest in running a shop |
| Keep records we are legally required to keep | Indian tax and company law |
We do not sell your data. We do not rent it, and we do not hand it to anyone for their own marketing.
Who else sees it
Only the companies that make the shop work, and only the part each one needs:
| Who | What they get | What for |
|---|---|---|
| Shopify | Order and account data | The store platform itself |
| Our payment gateway — PhonePe or Razorpay. Both are onboarded; the one that processes your payment is named at checkout. | Name, email, phone, amount | Taking payment |
| Courier partners | Name, address, phone | Delivering the box |
| Email provider | Email address | Order emails and, with consent, marketing |
| Analytics | Anonymous or pseudonymous usage data | Seeing how the site is used |
| Our accountant | Invoice data | GST filing and statutory accounts |
We will also disclose data where a law, a court or a government authority requires it.
Most of these providers host data outside India. Where that happens, it is under the provider’s standard contractual protections and only to the extent needed to run the shop.
Cookies
The site uses cookies — small files your browser stores.
- Necessary — keeping you logged in, remembering your cart, and security. The site does not work without these.
- Analytics — counting visits and seeing which pages get read.
- Marketing — measuring whether an ad led to a sale. Meta and Google advertising tags are installed on this store.
You can block or delete cookies in your browser. If you block the necessary ones, the cart and checkout will stop working.
How long we keep it
- Order and invoice records: 8 years, as Indian tax law requires.
- Marketing consent and email history: until you unsubscribe, then we keep only the fact that you unsubscribed, so we do not email you again.
- Support conversations: 3 years.
- Website analytics: 26 months.
How we protect it
The site runs over HTTPS on Shopify, which is PCI-DSS certified for payments. Access to customer data inside Artlas is limited to the people who need it to make and send your order. We do not store card details anywhere, because we never receive them.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India as the law requires.
What you can ask us to do
Under the Digital Personal Data Protection Act, 2023 you can ask us to:
- show you the personal data we hold about you, and who we have shared it with;
- correct anything wrong, incomplete or out of date;
- erase your data, where we are not required to keep it — tax records we must keep;
- withdraw consent you gave us, at any time, for anything we do on the basis of consent, such as marketing;
- nominate someone to exercise these rights for you if you die or become incapable.
Write to hello@shopartlas.com with your request and enough detail to find your records — the order number is usually enough. We reply within 48 hours and complete the request within one month.
If you are not satisfied with how we handle it, you can complain to the Data Protection Board of India.
Marketing email
We only send marketing email to people who asked for it. Every one of those emails has an unsubscribe link, and it works immediately. Unsubscribing does not stop the emails about an order you have placed — those are part of the sale, not marketing.
Changes to this page
If we change this policy, the new version goes up here with a new “last updated” date. If the change is significant, we will say so by email to customers it affects.
Contact
Email hello@shopartlas.com
Phone and WhatsApp +91 73870 20411, Monday to Saturday, 10 am to 7 pm
Grievance officer: Raj Lunavat · hello@shopartlas.com · +91 73870 20411
Acknowledged within 48 hours · resolved within one month.
Artlas, Ramtekadi Industrial Estate, Scheme II, Plot No. 4/16, Hadapsar, Pune, Maharashtra 411013 · GSTIN 27ASAPL5865A2ZV