Privacy policy

1. Scope

This policy covers atelierd.in: the enquiry form, the private pages where invited clients view unreleased work, and the emails we send from them. It does not cover other websites we link to, such as LinkedIn or Instagram, which have their own policies.

2. Personal data we collect

2.1 Enquiry form

Your name, company, email address, phone number, what you need, the category you chose, your message, the page you came from, and whether you asked for studio updates. To limit spam, we also keep a scrambled (hashed) form of your IP address, which cannot be turned back into the address.

2.2 Private work for invited clients

When Deepti invites you to view private work: your email address, which works were shared, the viewing time allowed, and a record of which private pages you opened and when, with a hashed IP address. Your email address is shown as a light watermark on those pages to protect unreleased designs.

2.3 Analytics

Through Google Analytics 4 (loaded by Google Tag Manager): pages visited, approximate location (country and city), device and browser type, how you arrived, and which buttons you used, such as "Start an enquiry". Google Analytics does not log or store IP addresses. It never receives what you type into the form; when an enquiry is sent it only learns that one was sent, and which needs and category were chosen. Private client pages and our admin pages are not tracked.

We also use Microsoft Clarity, loaded the same way, to see how pages are used as a whole: heatmaps of where people click and scroll, and replays of individual visits showing mouse movement, clicks and scrolling. Clarity hides the text typed into forms, so replays never show what you enter in the enquiry form. Microsoft uses your IP address to estimate your location. Private client pages and our admin pages are not recorded.

2.4 Cookies and browser storage

2.5 What we do not collect

No payment details, government ID numbers or passwords.

3. How we use your data

• To read and reply to your enquiry, and to send you a confirmation of it.
• To show invited clients the work Deepti has shared with them, for the time allowed.
• To send occasional studio updates, only if you asked for them.
• To understand how the site is used and improve it.
• To prevent spam and misuse, and to comply with the law.

4. Legal basis

We process your data with your consent, given when you send an enquiry, ask for studio updates, or accept an invitation to view private work, and for legitimate uses permitted under the DPDP Act, such as keeping the site secure. You can withdraw consent at any time (section 9).

5. Who we share your data with

We do not sell your data. We share it only with the service providers that run the site for us, and only as far as they need it, or where the law requires.

6. Cross-border transfers

Some of these providers may process data on servers outside India. Any such transfer follows the conditions of the DPDP Act and its rules. Visitors from the European Union or the United Kingdom have the same rights described here, as far as we can provide them.

7. Data retention

• Enquiries (including the copy in Google Sheets) and client access records: 24 months from your last contact with us.
• Contact list for studio updates: until you unsubscribe or withdraw consent.
• Analytics data: as set in Google Analytics, up to 14 months. Clarity keeps session replays for 30 days and heatmap data for up to 13 months.

After that, the data is deleted or anonymised.

8. Your rights as a Data Principal

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• have a grievance addressed (section 12);
• nominate someone to exercise these rights for you in the event of your death or incapacity.

Write to privacy@atelierd.in. We may ask you to confirm your identity before acting on a request.

9. Withdrawing consent

• Studio updates: use the unsubscribe link in any update, or write to us.
• Enquiries and client access: write to privacy@atelierd.in and we will delete your data, unless we must keep it by law.
• Analytics: block cookies in your browser settings, or install Google's opt-out add-on. Blocking cookies also stops Clarity.

Withdrawing consent does not affect processing that took place before.

10. Children's data

This website is for businesses and adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian, and we do not track or target advertising at children. If you believe a child has sent us their data, write to us and we will delete it.

11. Security

We use reasonable safeguards to protect your data from unauthorised access, loss or misuse: encrypted connections, access limited to Atelier D, and sign-in checks on private and admin pages. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the law requires.

12. Grievance and contact

For any question, request or complaint about your personal data, write to privacy@atelierd.in. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

13. Changes to this policy

We may update this policy. The "Last updated" date above shows the current version, and we will point out significant changes on this site.