Privacy Policy

1. Who we are & scope

Purva Heritage (“Purva Heritage”, “we”, “us” or “our”) is a retailer of handcrafted goods sourced from artisan clusters across West Bengal, Jharkhand and Odisha, operating from Ballygunge Place, Kolkata 700019, West Bengal, India. We are the data controller responsible for the personal information processed through this website and our order, support and marketing channels.

This policy applies to information we collect on this website, by email, by phone or WhatsApp, at our studio and showroom, and through our social media and advertising accounts. It does not apply to third-party websites we link to, which operate under their own privacy policies.

2. Information we collect

2.1 Information you give us

• Identity and contact details — name, email address, phone or WhatsApp number, billing and delivery addresses, and any details you add to your account or an enquiry.
• Order information — the items you buy, order references, gift messages, custom or bulk-order specifications, and delivery instructions.
• Payment information — payments are processed by our payment partners. We receive confirmation of payment and a limited transaction reference; we do not store full card numbers on our own systems.
• Communications — messages you send us through the contact form, email, phone, WhatsApp or social media, and our replies.
• Marketing preferences — whether you have opted in to newsletters or promotional messages, and your interactions with them.

2.2 Information we collect automatically

• Device and usage data — IP address, browser type and settings, operating system, referring pages, the pages you view, and the dates and times of your visits.
• Cookies and identifiers — small files and similar technologies used to keep your basket, remember preferences and measure traffic. See section 5.

2.3 Information from third parties

• Payment and fraud-prevention partners (payment status, risk signals).
• Logistics and courier partners (delivery tracking and confirmation).
• Analytics and advertising platforms (aggregated audience and campaign data).
• Social media platforms when you interact with our pages or link an account.

3. How we use your information

• To take, process, pack and deliver your orders, and to handle returns, exchanges and refunds.
• To manage your account and provide customer support.
• To communicate with you about orders, enquiries, stock, and changes to our services or policies.
• To process custom and bulk-order requests and prepare quotations.
• To take payment and to detect, prevent and investigate fraud and misuse.
• To send newsletters and offers where you have asked us to, and to measure whether they are useful.
• To understand how our website is used so we can improve its content, performance and security.
• To comply with tax, accounting, consumer-protection and other legal obligations, and to establish or defend legal claims.

4. Legal bases for processing

Where data-protection law requires a legal basis, we rely on the following:

• Performance of a contract — to fulfil an order or a request you have made.
• Legitimate interests — to run and secure our business, prevent fraud, keep records, and carry out limited marketing to existing customers, balanced against your rights.
• Consent — for optional cookies, newsletters and other marketing you opt in to. You may withdraw consent at any time.
• Legal obligation — to meet tax, accounting and regulatory requirements.

5. Cookies & similar technologies

We use cookies and similar technologies to operate the website and to understand how it is used:

• Strictly necessary — keep your basket and session, remember security and consent choices. These cannot be switched off in our systems.
• Functional — remember preferences such as region and recently viewed items.
• Analytics — measure visits, traffic sources and page performance in aggregate.
• Marketing — measure campaigns and, where enabled, show relevant ads on other platforms.

You can control cookies through your browser settings and, where offered, through our cookie banner. Blocking some cookies may affect how parts of the site work.

6. How we share information

We do not sell your personal information. We share it only as needed with:

• Service providers — hosting, website and IT support, email and messaging tools, and customer-support platforms, acting on our instructions.
• Payment partners — to authorise and settle payments and to screen for fraud.
• Logistics and courier partners — to deliver your order and handle returns.
• Professional advisers — accountants, auditors, insurers and lawyers, where reasonably required.
• Authorities — where we are legally required to disclose information, or to protect our rights, customers or the public.
• Business transfers — a buyer or successor entity if our business is reorganised, merged or sold, subject to this policy.

7. How long we keep data

We keep personal information only for as long as we need it. Order and invoice records are generally retained for up to eight years to meet tax and accounting rules. Account data is kept while your account is active and for a reasonable period afterwards. Support messages are kept for up to three years. Marketing data is kept until you unsubscribe or ask us to erase it. When data is no longer needed we delete it or anonymise it.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls, and limiting access to staff and partners who need it. No method of transmission or storage is completely secure; if a breach affects your rights we will notify you and the relevant authority where the law requires.

9. Your rights & choices

Depending on where you live, you may have the right to:

• access a copy of the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete information in certain circumstances;
• object to or restrict certain processing, including direct marketing;
• request portability of information you provided to us;
• withdraw consent where processing is based on consent;
• complain to your local data-protection authority.

To exercise any of these rights, contact us using the details in section 13. We may need to verify your identity, and we will respond within the time limits set by applicable law. You can unsubscribe from marketing at any time using the link in our emails or by replying to ask us to stop.

10. International transfers

We are based in India and primarily process data here. Some of our service providers may process data in other countries. Where we transfer personal information across borders, we use providers that offer recognised safeguards, such as standard contractual clauses or an adequate level of protection, as required by law.

11. Children’s privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. We will post the revised version here with a new “last updated” date, and where changes are significant we will give notice by a website notice or email.

13. Contact & grievance officer

For any question about this policy or to exercise your rights, contact: