Privacy policy

Geeli Maati is a pottery studio. We decide how your personal data is used on this website (under India's Digital Personal Data Protection Act, 2023, we are the “data fiduciary”).

For anything about your personal data, including requests and complaints, contact us at geelimaatipottery@gmail.com. Studio: Sarvdhaam, Sector A, Sarvdharm Colony, Kolar Rd, Bhopal, Madhya Pradesh 462042.

• Your account: your name, email address and profile picture from Google, when you sign in with Google. We use them to identify you and to send you emails about your bookings and orders. We never see your Google password.
• Phone number and addresses: so a courier can deliver your pieces, and so we can reach you about an order. Saved addresses stay in your account until you delete them; each order keeps a copy of the address it was sent to.
• Bookings, orders and firing requests: what you booked or bought, when, how many, and the amounts, so we can run your workshop and deliver your pieces.
• Payments: the amount and the UTR (transaction reference) you give us, so we can find your payment on our bank statement. We never ask for card numbers, bank logins or payment screenshots. If we refund you, we record the account we sent the money back to (the one your payment came from) and the reference of our transfer.
• Reviews: your rating and comment. Once approved, they are shown publicly with your first name and the initial of your last name only.
• Messages you send us: your name, email address and message, so we can reply. To stop spam we keep a one-way code made from your internet address; the address itself is not stored.
• Sign-in sessions: the internet (IP) address and browser type you signed in from, to keep your account secure. They are deleted soon after the session expires.
• Error reports: when something breaks on our side, a technical report of the error. It is set up not to contain your name, email, cookies or anything you typed.

We do not sell your data, and we do not use it for advertising.

We use one cookie: it keeps you signed in. It is needed for the site to work, so there is nothing to accept or decline. We use no advertising, analytics or tracking cookies.

We use a few services to run the site. They handle your data only to provide their service to us:

• Google: signing in.
• Netlify (USA): hosts the website.
• Neon (USA): stores our database.
• Resend (USA): sends our emails (booking and order confirmations, refunds).
• Sentry (USA): receives the error reports described above.
• India Post's PIN code service: when you type a PIN code, we look up its city and state. Only the PIN code is sent.

This means your data is stored on servers outside India, in the USA, which Indian law permits. Photos on the site are served by Cloudinary; they show our pieces and studio, not your data.

We only send emails about things you did on the site: a payment received, a booking confirmed or cancelled, an order shipped, a refund sent. No newsletters or marketing.

We keep your account while you use it. Records of bookings, orders, payments and refunds are kept for as long as tax and accounting rules require us to. Messages you send us are kept while we need them to follow up. When we no longer need something, we delete it.

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it, or bring it up to date;
• delete it, and close your account (we may have to keep payment records that the law requires us to keep);
• let someone you nominate exercise these rights if you die or become unable to.

You can see and edit your addresses yourself in your account. For everything else, write to us (section 1). If you are not happy with our answer, you can complain to the Data Protection Board of India.

Accounts are for adults. If a child is joining a workshop, a parent or guardian books it from their own account.

The site is only reachable over an encrypted connection (HTTPS). Only the studio's own staff can see your bookings and orders, and you sign in with Google, so we never hold a password of yours that could leak.

If we change this policy, we update it here and change the date at the top. See also our terms.