Privacy

This draft document is prepared for review by the business owner and legal counsel prior to commercial launch.

Data fiduciary and regulatory framework

This privacy policy sets out how Cassien collects, uses, stores, and protects personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian information technology regulations.

The data fiduciary responsible for determining the purposes and means of processing your personal data on this storefront is Cassien, a sole proprietorship based in Noida, Uttar Pradesh, India (GSTIN 09HYOPK2664B2Z4). In this policy, "Cassien", "we", "us", or "our" refers to Cassien.

If you have any questions regarding our data governance or wish to communicate with our data protection team, please contact us at atelier@shopcassien.com.

Personal data we collect

We collect personal data directly from you when you interact with our website, configure a case, or complete a transaction. We collect the following categories of information:

• Contact information: your full name, email address, and mobile phone number.
• Delivery and billing details: your physical delivery address, billing address, postal PIN code, and your GSTIN, if you add one for a business invoice.
• Order and customisation specifications: the handset model, design selection, colourway, relief intensity, monogram characters, and any gift message you enter during checkout.
• Transaction status: the order identifier, transaction timestamp, payment method type, and payment status confirmed by our payment gateway.

We never see, collect, or store your credit card numbers, debit card details, CVV codes, net banking passwords, or UPI security PINs. All financial transactions are processed directly by our payment gateway, Razorpay.

Purposes of data processing

We process your personal data solely for specified, lawful, and transparent purposes:

• Order fulfilment: to 3D-print your custom phone case, complete manual finishing, package your goods, and coordinate shipping and delivery through our courier partners.
• Invoicing and legal compliance: to issue statutory tax invoices, maintain commercial records, and comply with applicable tax, accounting, and consumer protection laws in India.
• Customer service: to communicate order confirmations, provide dispatch tracking links, and respond to inquiries or warranty claims under our Perfect-Fit Promise.
• Marketing communications: to send atelier news and new collection announcements through our email newsletter only when you have provided explicit opt-in consent. You may withdraw your consent at any time.

Analytics and consent preferences

Our storefront loads third-party analytical and advertising tools, specifically Google Analytics 4 and Meta Pixel, only after a visitor grants explicit consent.

When you visit our storefront, a consent bar presents two clear options: "Accept analytics" and "Only essential".

If you select "Only essential", Google Analytics 4 and Meta Pixel remain entirely disabled, and no analytical cookies or tracking pixels are loaded onto your device. If you select "Accept analytics", these scripts are loaded to assist us in evaluating aggregate browsing patterns and improving storefront usability.

Your preference is recorded locally in your browser storage. You can change your choice at any time from the Privacy choices link at the foot of every page.

Data processors and third-party disclosure

We disclose personal data to service providers who act as data processors under contractual obligations of confidentiality and security:

• Payment gateway: Razorpay processes electronic payments and returns transaction verification statuses to our storefront.
• Cloud hosting providers: secure web hosting infrastructure hosts our storefront application, static assets, and operational databases.
• Email delivery services: transactional email platforms transmit order confirmations, dispatch notices, and customer support correspondence.
• Domestic courier partners: licensed domestic shipping carriers receive your recipient name, delivery address, postal PIN code, and contact telephone number exclusively to perform physical parcel delivery.

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

Data retention

We retain personal data only for as long as necessary to fulfil the operational purposes for which it was gathered, or as required to satisfy statutory, fiscal, and regulatory mandates:

• Order and financial records: transactional records, tax invoices, and customer identification details are kept for as long as Indian tax and company law requires.
• Customer service correspondence: support messages and fit claims are retained for up to two years to resolve potential warranty questions.
• Newsletter subscriptions: your email address is retained on our distribution list until you withdraw consent by clicking the unsubscribe link included in every newsletter.

Your rights under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights over your personal data:

• Right to access: you may request a summary of the personal data processed by us and the processing activities undertaken.
• Right to correction and completion: you may request that inaccurate personal data be rectified or incomplete details completed.
• Right to erasure: you may request the deletion of your personal data where its continued retention is no longer necessary for the purpose for which it was processed or required by law.
• Right of grievance redressal: you have the right to readily available means of grievance redressal regarding our performance of data obligations.
• Right to nominate: you have the right to nominate another individual who, in the event of your death or incapacity, shall exercise your data privacy rights.

To exercise any of these rights, please submit a written request to atelier@shopcassien.com. We will process and respond to your request within the statutory timeframe.

Protection of children

Our storefront and products are intended exclusively for adults. In accordance with the DPDP Act, 2023, we do not knowingly collect personal data from or track individuals under 18 years of age. Children under 18 should not place orders or submit personal details on this storefront.

Grievance officer

Pursuant to the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, our designated Grievance Officer is:

• Name: Shivam Kumar
• Designation: Grievance Officer
• Entity: Cassien (GSTIN 09HYOPK2664B2Z4)
• Location: Noida, Uttar Pradesh, India
• Email: shivam.kumar@manorinfinity.com

Our Grievance Officer will acknowledge receipt of your grievance within 48 hours and endeavour to resolve your concern within 30 days of receipt.