At Ink Lovers Tattoo & PMU (“we,” “us,” or “our”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and safeguard your data when you visit our website, schedule appointments, or purchase products through our online store.
This policy is formulated in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Information We Collect
We collect information directly from you when you place an order or contact us, as well as general technical information transmitted by your device when you browse our site.
A. Information You Provide Directly
- Contact & Shipping Details: Your full name, mobile phone number, email address, billing address, and delivery address submitted during checkout or inquiry.
- Order & Booking Records: Products purchased, studio service appointments scheduled, transaction amounts, and customer support communications.
- Voluntary Feedback: Ratings, suggestions, and responses submitted through interactive feedback prompts on our site.
B. Technical Data Automatically Collected
When you browse our online catalog, our servers and integrated tools automatically collect standard connection data:
- Internet Protocol (IP) Address: Logged by our hosting server, security firewalls, and attached to finalized orders for fraud prevention, tax jurisdiction compliance, and security audits.
- Device & Browser Details: Browser type, operating system, device specifications, and screen resolution to ensure the site displays correctly on your device.
- Browsing Activity: Pages viewed, timestamps of requests, referring web pages, and navigation paths across our store.
2. Cookies and Browser Storage
We use standard cookies and local browser storage strictly to support website functionality, preserve your shopping cart, and evaluate general website performance:
- Essential Shopping Cart Storage: Temporary session storage used by our e-commerce platform to remember what items you have added to your cart as you browse between pages, and to generate security tokens that protect forms against unauthorized submissions.
- Interactive Tool Diagnostics: Temporary browser storage used by product options, appointment selectors, and date/time pickers to validate your selections on your screen without sending unsubmitted draft data to our servers.
- User Feedback Controls: Storage used to track whether you have seen or dismissed customer feedback prompts so that popups are not displayed repeatedly.
- Browser Display Checks: Standard WordPress core checks to verify if your device supports modern emoji rendering.
Managing Your Storage
You can manage, restrict, or clear cookies and browser cache at any time through your web browser settings. Please note that disabling functional storage may cause checkout and shopping cart features to stop working.
3. Payment Processing & Fraud Prevention (Razorpay)
We do not collect, process, or store credit card numbers, debit card details, CVVs, UPI PINs, or net banking credentials on our web servers. All payment transactions are handled directly by our RBI-authorized, PCI-DSS compliant payment gateway partner:
- Payment Gateway Partner: Razorpay Software Private Limited (“Razorpay”).
- Security & Device Telemetry: When you initiate checkout, Razorpay’s secure checkout interface automatically verifies your transaction using device tokens, network IP addresses, and session identifiers stored locally in your browser.
- Purpose: Razorpay processes this data along with order amounts and billing details solely for fraud monitoring, transaction authentication, risk assessment, and secure payment settlement.
For more information on payment security standards, please refer to the Razorpay Privacy Policy.
4. Third-Party Service Providers
We share limited data with reputable third-party service providers solely to operate our store, process payments, and maintain site performance:
| Service Provider | Role | Data Handled |
|---|---|---|
| Razorpay Software Pvt. Ltd. | Payment Gateway | Billing address, phone number, order total, customer IP, and device verification tokens. |
| Google LLC (Analytics & Tag Manager) | Site Traffic Analytics | Anonymized IP addresses, browser specifications, referring URLs, and page interaction timestamps. |
| Formbricks | User Feedback & Surveys | Pseudonymous session identifiers, survey responses, and interaction timestamps. |
| Hosting & Cloud Infrastructure | Server Operations & DDoS Defense | Web server access logs containing visitor IP addresses, requested URLs, and browser user-agent details. |
We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.
5. Why We Process Your Data
We process personal information only for legitimate operational and legal purposes:
- Fulfilling Orders & Bookings: Processing payment transactions, arranging product delivery, confirming studio appointments, and sending customer receipts.
- Site Security & Fraud Detection: Preventing fraudulent orders, blocking malicious bot traffic, and protecting user transactions.
- Statutory Compliance: Issuing Goods and Services Tax (GST) compliant invoices, keeping mandatory financial records, and complying with lawful requests from Indian authorities.
- Platform Optimization: Identifying broken links, fixing technical checkout errors, and improving catalog navigation.
6. Data Retention
- Order & Financial Invoices: In compliance with Indian commercial and taxation laws, order details, billing records, and customer contact data are retained for a statutory minimum of 8 years.
- Server Access & Security Logs: Connection logs and IP addresses are routinely rotated and purged within 30 to 90 days, unless retained longer for ongoing fraud or security investigations.
- Local Browser Data: Stored directly on your personal device and remains until cleared by you or overwritten by your browser.
7. Data Security Measures
In accordance with Rule 8 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we implement appropriate technical and operational safeguards:
- Transport Encryption: All website traffic is protected using Secure Sockets Layer / Transport Layer Security (SSL/TLS) encryption.
- Tokenized Transactions: Sensitive payment credentials are handled exclusively inside Razorpay’s encrypted gateway and never touch our web servers.
- Restricted Access: Administrative access to order records and customer information is restricted strictly to authorized personnel.
8. Your Rights (Under DPDP Act, 2023)
As a customer and website user in India, you have the following statutory rights regarding your personal data:
- Right to Access: Request a summary of the personal data we hold about you and the third parties with whom it has been shared.
- Right to Correction & Erasure: Request the update of inaccurate or incomplete information, or request the deletion of your personal data where it is no longer required for statutory legal, tax, or fraud-prevention purposes.
- Right of Grievance Redressal: Register a complaint with our designated Grievance Officer regarding any concern about our data processing practices.
- Right to Nominate: Nominate another person to exercise your data rights in the event of death or incapacity.
To exercise any of these rights, please write to our Grievance Officer using the details below.
9. Age Restriction / Minors
Our website, products, and cosmetic tattoo/PMU services are intended strictly for individuals aged 18 years or older. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information on our site, please notify us immediately so we can remove the data.
10. Grievance Redressal (Grievance Officer Details)
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the contact details of our designated Grievance Officer are:
- Designation: Grievance Officer
- Business Name: Ink Lovers Tattoo & PMU
- Studio Address: [Insert Physical Studio / Registered Business Address, Bhavnagar, Gujarat, India]
- Email Address: support@inkloverstattoopmu.com
- Phone: [Insert Business Contact Phone Number]
- Redressal Timeline: We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.
11. Governing Law & Jurisdiction
This Privacy Policy and any disputes arising out of the handling of your personal information shall be governed by the laws of India, subject to the exclusive jurisdiction of the courts located in Bhavnagar, Gujarat.
12. Updates to this Policy
We may periodically update this Privacy Policy to reflect modifications to our site, e-commerce features, or applicable legal obligations. Any updates will be posted on this page with a revised ‘Last Updated’ date.