Privacy Policy
Aanya Rao Studio · Effective 22 October 2026
Who we are
Aanya Rao Studio (vyrel.io/aanya) is run by Aanya Rao Studio, [registered address]. For this notice we are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023. This notice took effect on 22 October 2026.
What we collect and why
We collect only what we need. Each item and its purpose:
Your name: to identify your order and address you.
Email address: to deliver what you bought, send receipts and answer support requests.
Phone number: for order updates and support, by call, SMS or WhatsApp.
Payment details: to take payment. Card and UPI details are handled by our payment processor; we only see the transaction ID and status.
Device and usage data (pages visited, browser, approximate location): to keep the store secure and understand what works.
Marketing preferences: to send you new launches and offers, only if you opt in.
Your consent
By placing an order or signing up, you agree to us using your data for the purposes above. Marketing messages are separate: we send them only if you tick the box, and you can say no without affecting your order.
You can withdraw consent at any time by emailing [support email] or using the unsubscribe link in any email. Withdrawing is as easy as giving consent. It won't undo what we did before, and we may still keep records the law requires (like invoices).
Who we share it with
Razorpay to process payments, and the service providers who host our store and send our emails. They may only use your data to provide that service to us. We do not sell your data.
How long we keep it
We keep order and invoice records for 8 years, as Indian tax law requires. Other data is deleted once it's no longer needed for the purpose you gave it for, or when you withdraw consent, unless the law requires us to keep it.
Security
We use reasonable safeguards, including encryption in transit, access controls and trusted providers. If a breach affects your data, we'll tell you and the Data Protection Board of India as the law requires.
Children
This store is meant for adults. We don't knowingly collect data from anyone under 18. If you think a child has given us data, write to us and we'll delete it.
Your rights
You can ask us to: give you a summary of the data we hold and who we've shared it with; correct, complete or update it; erase it; and nominate someone to act for you if you die or can't act yourself.
To use any of these, email [support email]. We'll reply within 30 days.
Complaints
Our grievance officer is [grievance officer name], reachable at [support email] or [phone]. Please contact us first. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.