Privacy Policy

1. Introduction

Welcome to WeGift3D ("we", "us", "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share your personal information when you visit our website or place an order with us. It also explains your legal rights under applicable Indian and international data protection law.

2. Data We Collect

We collect the following categories of personal data to provide and improve our services:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Payment card details, UPI IDs, or net banking details — processed securely by our payment partners. We do not store card numbers on our servers.
• Transaction Data: Details about payments to and from you, and details of products or custom designs you have purchased.
• Technical Data: IP address, browser type and version, time zone setting and location, operating system, and other technology identifiers on devices you use to access our website.
• WhatsApp Data: If you choose to place an order or make an inquiry via WhatsApp, your phone number and message content will be processed by Meta Platforms, Inc. in accordance with their own privacy policy. We only use this information to fulfil your order or respond to your inquiry.

3. Third-Party Data Processors

To provide our services, we share your data with the following trusted third-party processors. Each is bound by their own privacy commitments and applicable law:

• Clerk (clerk.com): User authentication and account management. Stores your identity and login credentials.
• Supabase (supabase.com): Database and backend storage. Stores your orders, addresses, and custom design data. Hosted on AWS with encryption at rest.
• Razorpay / Stripe: Payment gateway processing. Handles your payment information under PCI-DSS compliance standards.
• Meta Platforms, Inc. (WhatsApp): If you use the WhatsApp ordering option, your communication is subject to Meta's privacy policy.
• Vercel (vercel.com): Our website hosting provider. May process basic access logs including IP addresses.

We require all third-party processors to respect the security of your personal data and to treat it in accordance with the law. We do not allow them to use your data for their own purposes.

4. How We Use Your Data

We only use your personal data where the law allows. We use your data to:

• Process and fulfil your orders (including custom 3D printed designs).
• Manage your account and provide customer support.
• Send order confirmations, shipping updates, and delivery notifications via email or WhatsApp.
• Comply with our legal obligations, including GST invoice generation under Indian law.
• Improve our website and services through aggregated, anonymised analytics.

5. Data Security

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Access to your data is restricted to staff and contractors who need it to fulfil your orders. All data is transmitted over encrypted HTTPS connections. Our database is protected by Row Level Security (RLS) policies.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, including satisfying any legal, accounting, or reporting obligations. Order records are retained for a minimum of 7 years as required under Indian tax law (GST compliance). Account data is retained until you request deletion.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Withdraw Consent: Withdraw consent to data processing at any time, where processing is based on consent.
• Grievance Redressal: Lodge a complaint with our designated Data Protection Officer or with the Data Protection Board of India.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

8. Cookies

We use essential cookies and local storage to maintain your session, shopping selection, and authentication state. We do not use third-party advertising cookies. By using our website, you consent to the use of these essential cookies.

9. Contact & Grievance Officer

If you have questions about this policy or wish to exercise your data rights, contact our Grievance Officer: