Privacy and Policy

1. Who we are

Get & Craft (“we”, “us”, “our”) is an online store for craft supplies, gifts, stationery and creative products, operated by Craft and Creations (registered business) from Vengara, Keralam, India. In this policy, “website” means craftandcreations.store.

Our address is 3X2J+JR2, Room No. IX-475H, Ground Floor, VPC Mall, Gandhidas Padi, Vengara, Keralam 676304, India. You can reach us at craftandcreations137@gmail.com or on WhatsApp at +91 80868 51468.

2. Information we collect

Information you give us

• Account: your name, email address and password when you create an account. Passwords are stored in encrypted form.
• Orders: your name, billing and shipping address, phone number, email address, the items you ordered and any order notes.
• Contact form: your name, phone number, email address and message.
• Reviews: your name, email address, rating and comment when you review a product.
• Wishlist: the products you save to your wishlist.
• WhatsApp and email: the messages you send us, and for returns and exchanges, the photos and videos you share of the product and parcel.

Information we get when you pay

Payments are handled by Razorpay. We receive the payment status, the payment reference and the method used. We do not see or store your full card number, CVV, UPI PIN or net-banking password.

We do not knowingly collect sensitive personal data such as health information, government ID numbers or biometric data.

3. How we use your information

We use your information to:

• Create and manage your account.
• Take, process, pack and deliver your orders, and keep you updated about them.
• Process payments and prevent fraud.
• Handle returns, exchanges, refunds and cancellations, including checking the photos, videos and reasons you send.
• Answer your questions and give customer support.
• Show your wishlist and the reviews you write.
• Send you marketing messages, only if you have agreed to receive them.
• Keep the website secure, fix problems and improve how it works.
• Keep records and meet our legal, tax and accounting duties.

We use your information only where you have given consent, where it is needed to complete your order or contract, or where the law allows or requires it.

4. Cookies and similar technologies

Cookies are small files saved on your device. We use only the cookies needed to run the store and understand where visitors come from. At the time of writing we do not use advertising cookies or third-party analytics tools such as Google Analytics or a Meta (Facebook) pixel.

You can block or delete cookies in your browser settings. If you block essential cookies, the cart, checkout and sign-in will not work properly.

5. Who we share your information with

We do not sell your personal information. We share it only with those who help us run the store, and only what they need:

• Payment provider: Razorpay, to process your payment.
• Courier and logistics partners: we pass on your name, address and phone number so your parcel can be delivered. We may use a shipping platform and its courier partners.
• Google: messages sent through our contact form may be saved to a Google Sheet that we use to manage enquiries, and the reviews widget on our site loads from a third-party service.
• Gravatar: on product review sections, profile pictures may load from Gravatar, which receives a coded version of the reviewer’s email address and the visitor’s IP address.
• WhatsApp: when you message us on WhatsApp, the conversation also passes through WhatsApp (Meta) under its own privacy terms.
• Website, hosting and business software providers: who store our website and order records and help us manage orders and stock.
• Professional advisers and authorities: our accountants and advisers, and government or law enforcement bodies, where the law requires or to protect our rights and prevent fraud.

Each of these has its own privacy policy. We ask the service providers we choose to protect your information and use it only for the service they give us.

6. Social media and links to other sites

Our pages link to Facebook, Instagram, YouTube and WhatsApp. If you click those links you leave our site, and their privacy policies apply. We are not responsible for how other websites handle your information.

7. How long we keep your information

We keep your information only for as long as we need it:

• Order and payment records: for the period required by Indian tax and accounting laws.
• Account details: until you ask us to delete your account.
• Contact messages and WhatsApp conversations: until your request is closed, and for a reasonable time after in case of follow-up.
• Return photos and videos: until the return or claim is resolved, and for a reasonable period afterwards.
• Marketing preferences: until you withdraw your consent.

After that, we delete or anonymise the information, unless the law requires us to keep it longer.

8. How we protect your information

Our website uses HTTPS encryption. We limit access to personal information to the people who need it, use passwords and access controls on our systems, and choose service providers that take security seriously. No website or internet connection is completely secure, so we cannot promise absolute security. Please keep your account password private and tell us straight away if you think someone else has used your account.

9. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct information that is wrong or out of date.
• Delete your information and your account, subject to records we must keep by law.
• Withdraw consent at any time, including for marketing messages. This does not affect what we did before you withdrew it.
• Complain if you think your data has been mishandled (see Section 12).
• Nominate another person to exercise these rights for you if you are unable to, as allowed by law.

To use any of these rights, write to craftandcreations137@gmail.com or message us on WhatsApp at +91 80868 51468. We may ask you to confirm who you are first. If you are signed in to your account, you can also edit your details under My Account.

10. Marketing messages

We send promotional messages (email or WhatsApp) only if you have agreed. You can stop them at any time by using the unsubscribe link, replying STOP, or contacting us. We will still send you messages that are needed for your orders, such as confirmations and delivery updates.

11. Transfers outside India

Some of the services we use, such as Google, Gravatar and WhatsApp, may store or process information on servers outside India. When this happens, we rely on providers that protect personal information and follow the law that applies.

12. Contact us and complaints

If you have a question or complaint about this policy or how we handle your personal information, please contact us:

• Business: Craft and Creations (registered business), operating as Get & Craft
• Address: 3X2J+JR2, Room No. IX-475H, Ground Floor, VPC Mall, Gandhidas Padi, Vengara, Keralam 676304, India
• Email: craftandcreations137@gmail.com
• WhatsApp: +91 80868 51468

We will acknowledge your complaint within 48 hours and aim to resolve it within one month.

13. Changes to this policy

We may update this policy from time to time, for example if our services or the law change. We will post the new version on this page and update the “last updated” date. If a change is significant, we will tell you in a clear way. Please check this page now and then. Using the website after a change means you accept the updated policy.