Privacy policy
Privacy Policy — 3DCrafts
Last Updated: March 31, 2026
3DCrafts.studio operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). 3DCrafts.studio is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, store, protect, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us through any channel including but not limited to our website, mobile applications, social media pages, email, WhatsApp, phone, or any other medium.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
We respect your privacy and are committed to protecting the personal information you share with us. We believe transparency matters, which is why we have written this policy in as much detail as possible so you understand exactly what happens with your data at every stage of your interaction with us.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use our Services.
1. Personal Information We Collect
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
-
Contact Details: Your full name, email address, phone number (including WhatsApp number if provided), shipping address, billing address, and any alternative addresses you provide for delivery purposes. If you contact us through social media platforms such as Instagram, Facebook, or Twitter, we may collect your public profile name and any information you share in those conversations.
-
Financial and Payment Information: Credit card numbers, debit card numbers, UPI IDs, net banking details, wallet information, financial account numbers, payment card expiration dates, CVV (processed securely by our payment partners and never stored on our servers), transaction amounts, form of payment, payment confirmation details, refund details, and other payment-related information necessary to complete your purchase.
-
Account Information: Your username, password, security questions and answers, account preferences, settings, wishlist items, saved addresses, and any other information you provide while creating or managing your account on our website.
-
Transaction and Order Information: The items you view, search for, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel. This also includes your complete order history, order amounts, delivery preferences, shipping tracking information, return and refund history, product reviews you submit, and any other data generated during the course of a transaction.
-
Communications: Any and all information you include in communications with us, regardless of the channel. This includes emails, WhatsApp messages, Instagram direct messages, Facebook messages, phone call records and notes, live chat transcripts on our website, customer support tickets, feedback forms, survey responses, product review submissions, and any other correspondence. We may retain these communications for quality assurance, training, dispute resolution, and to improve our customer service.
-
Device and Technical Information: Information about the device you use to access our Services, including your device type (mobile, desktop, tablet), device manufacturer and model, operating system and version, browser type and version, screen resolution, language preferences, time zone settings, your Internet Protocol (IP) address, mobile network information, and other unique device identifiers such as advertising identifiers, cookie IDs, and hardware identifiers.
-
Usage and Behavioural Information: Detailed information regarding your interaction with the Services, including the pages you visit, the products you view, how long you spend on each page, the links you click, the search terms you use on our website, the date and time of your visits, referring and exit URLs, the sequence in which you navigate through our website, scroll depth, mouse movements and click patterns (through analytics tools), and any errors or crashes you may experience while using our Services.
-
Location Information: Your approximate geographic location as determined by your IP address, and if you have enabled location services on your device, your more precise location data. We may use this information to provide location-relevant content, shipping estimates, and regional offers.
-
Social Media Information: If you interact with us through social media platforms, log in using social media credentials, or use social sharing features on our website, we may collect information from those platforms including your public profile information, profile picture, friend or follower lists (if made available by the platform), and any other information you have made publicly available or that the platform shares with us based on your privacy settings on that platform.
2. Personal Information Sources
We may collect personal information from the following sources:
-
Directly from you, including when you create an account, visit or use the Services, place an order, subscribe to our newsletter, participate in a promotion or contest, fill out a form, communicate with us through any channel, leave a product review, or otherwise provide us with your personal information voluntarily.
-
Automatically through the Services, including from your device when you use our products or services or visit our website. This automatic collection happens through the use of cookies, pixel tags, web beacons, log files, and similar tracking technologies that record your interactions with our website.
-
From our service providers, including when we engage them to enable certain technology, perform analytics, process payments, deliver shipments, run marketing campaigns, and when they collect or process your personal information on our behalf. This includes but is not limited to Shopify, payment gateways, shipping partners, email marketing platforms, analytics providers, advertising networks, and customer support tools.
-
From our partners or other third parties, including social media platforms, advertising partners, data analytics providers, and public databases or directories, to the extent permitted by applicable law.
3. How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
-
Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments through our payment partners, to fulfill and ship your orders through our logistics partners, to remember your preferences and items you are interested in, to send notifications to you related to your account and orders, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping and delivery, to facilitate any returns and exchanges, to enable you to post product reviews, and to create a customized and personalized shopping experience for you, such as recommending products related to your browsing history and purchases. This may include using your personal information and behavioural data to better tailor and continuously improve the Services, our product offerings, website design, and overall user experience.
-
Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, SMS, WhatsApp, push notifications, or postal mail, and to show you online advertisements for products or services on the Services or on other websites and social media platforms, including based on items you previously have purchased, viewed, or added to your cart and other activity on the Services. We will only send you promotional communications if you have opted in to receive them, and you may opt out at any time. Even if you opt out of marketing communications, we may still send you transactional messages related to your orders, account, and important service updates.
-
Security and Fraud Prevention. We use your personal information to authenticate your account, verify your identity, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, monitor for suspicious transactions, protect public safety, and to secure our services and infrastructure. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else. We are not responsible for any unauthorized access to your account resulting from your failure to protect your login credentials.
-
Analytics and Performance. We use your personal information, device information, and usage data to understand how our website performs, identify technical issues, analyse traffic patterns and trends, measure the effectiveness of our marketing campaigns, understand which products and features are most popular, and make data-driven decisions to improve our Services.
-
Communicating with You. We use your personal information to provide you with customer support across all channels (email, phone, WhatsApp, social media, live chat), to respond to your inquiries and complaints, to send order confirmations, shipping notifications, delivery updates, and other transactional communications, to provide effective services to you and to maintain our business relationship with you.
-
Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms, policies, or the rights of third parties.
-
Automated Processing: We may use automated systems to provide product recommendations or fraud detection. However, we do not use automated decision-making that has a significant legal or similar effect on you without human intervention.
We will never sell your personal information to third parties for their own independent marketing purposes.
4. How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. We want to be transparent about who we work with and why your information may be shared. Such circumstances may include:
-
With Shopify, our e-commerce platform provider, which hosts our store and processes data related to your browsing, account, and transactions. Shopify may store and process your data on servers located outside India, including in the United States and Canada.
-
With payment processors and financial institutions, including but not limited to Razorpay, PayU, Cashfree, Stripe, UPI providers, and banking partners, who process your payment transactions. These providers handle your financial data directly and are bound by their own privacy policies and PCI-DSS compliance standards.
-
With shipping and logistics partners, including but not limited to Shiprocket, Delhivery, Blue Dart, DTDC, India Post, Ecom Express, and any other courier services we may use to fulfill and deliver your orders. These partners receive your name, shipping address, phone number, and order details necessary to complete delivery.
-
With email marketing and communication platforms, including but not limited to Mailchimp, Klaviyo, Omnisend, or similar services that help us send newsletters, promotional emails, transactional emails, and other communications. These platforms may store your email address, name, purchase history, and engagement data.
-
With analytics and advertising providers, including but not limited to Google Analytics, Google Ads, Meta (Facebook/Instagram) Pixel, and similar services that help us understand website traffic, measure advertising effectiveness, and deliver targeted advertisements. These providers may use cookies and similar technologies to collect data about your online activity across websites.
-
With customer support tools and platforms, including but not limited to Zendesk, Freshdesk, Tidio, WhatsApp Business, or similar tools that help us manage customer inquiries and provide support. These platforms may store your communications and personal details shared during support interactions.
-
With cloud storage and hosting providers that store our data and backups, which may include your personal information, on servers located in various countries.
-
With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
-
When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
-
With our affiliates or otherwise within our corporate group, if applicable.
-
In connection with a business transaction such as a merger, acquisition, bankruptcy, or sale of assets, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
5. Third-Party Services — Important Disclaimer
Our Services rely on and integrate with numerous third-party tools, platforms, and service providers to function effectively. These third-party services operate independently and are governed by their own terms of service, privacy policies, and data handling practices.
We want to be very clear: 3DCrafts is not responsible for the privacy practices, data handling, security measures, data breaches, downtime, errors, or any actions or omissions of any third-party service provider. This includes but is not limited to:
- E-commerce platform: Shopify and its sub-processors
- Payment gateways: Razorpay, PayU, Cashfree, Stripe, UPI providers, and any other payment processors we may use now or in the future
- Shipping and logistics: Shiprocket, Delhivery, Blue Dart, DTDC, India Post, Ecom Express, and any other courier or fulfilment partners
- Email and marketing: Mailchimp, Klaviyo, Omnisend, and any other email service providers
- Analytics and advertising: Google Analytics, Google Ads, Google Tag Manager, Meta (Facebook/Instagram) Pixel, Pinterest Tag, Snapchat Pixel, and any other tracking or advertising platforms
- Social media platforms: Instagram, Facebook, Twitter/X, Pinterest, YouTube, WhatsApp, and any other social platforms where we maintain a presence or integrate features
- Customer support: Zendesk, Freshdesk, Tidio, WhatsApp Business API, and any other support tools
- Cloud and hosting: Amazon Web Services (AWS), Google Cloud, Microsoft Azure, or any other cloud infrastructure providers
- SMS, OTP, and messaging: SMS gateway providers, OTP service providers, WhatsApp Business API providers, and any other messaging service providers
- Reviews and user-generated content: Any third-party review platforms or widgets integrated into our store
- Domain and DNS: Domain registrars and DNS providers
- Any other third-party tools, plugins, integrations, APIs, or services that we may add, change, or remove at any time to operate, improve, or expand our Services
Each of these third-party providers collects, processes, and stores data according to their own policies. When you use our Services, your data may be transmitted to, processed by, and stored on servers operated by these third parties, which may be located in countries other than India, including the United States, European Union, and other jurisdictions. We do not control how these third parties handle your personal information, and we are not liable for any misuse, breach, loss, or unauthorized access to your data by any third-party service provider. We encourage you to review the privacy policies of any third-party service that you interact with through our Services.
We may add, remove, or change third-party service providers at any time without prior notice to you. When we do, the new provider's own privacy policy and terms will govern their handling of your data.
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies extensively to enhance your browsing experience, analyse website performance, and deliver relevant marketing. Here is a detailed explanation of what we use and why:
-
Essential Cookies: These are strictly necessary for the website to function properly. They enable core features such as your shopping cart, account login sessions, security features, and checkout process. Without these cookies, the website cannot function as intended. You cannot opt out of essential cookies.
-
Analytics Cookies: These help us understand how visitors use our website. We use services such as Google Analytics, which collects data about your browsing behaviour, pages visited, time spent on pages, bounce rates, traffic sources, and other usage metrics. This data helps us improve our website layout, product presentation, and overall user experience. Analytics data may be processed on servers outside India.
-
Marketing and Advertising Cookies: These are used to track your browsing activity across our website and, in some cases, across other websites, in order to deliver advertisements that are relevant to your interests. We use platforms such as Meta (Facebook/Instagram) Pixel, Google Ads remarketing, and potentially other advertising networks. These cookies allow us to measure the effectiveness of our advertising campaigns and show you personalised ads on social media and other websites based on your activity on our store.
-
Functional Cookies: These remember your preferences and choices, such as your language preference, region, currency, and other settings, to provide a more personalised experience when you return to our website.
-
Third-Party Cookies: Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. Third parties such as Google, Meta, and other advertising and analytics partners may set their own cookies when you interact with their features on our website.
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, if you block essential cookies, certain features of our website may not function properly, and your shopping experience may be significantly affected. Disabling analytics and marketing cookies will not affect core website functionality but may result in a less personalised experience and less relevant advertisements.
7. Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.
In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify.
In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. Shopify operates servers in multiple countries, and your data may be stored and processed outside India, including in the United States and Canada. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.
8. Third-Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. This includes links in our product descriptions, blog posts, social media icons, partner websites, and any other external references. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions before providing any personal information.
We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.
Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
9. Data Security
We take the security of your personal information seriously and implement reasonable administrative, technical, and physical security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- SSL (Secure Socket Layer) encryption on all pages of our website, especially during checkout and payment processing.
- All payment transactions are processed through PCI-DSS compliant payment gateways. We do not store your complete credit card, debit card, or CVV details on our servers at any time. Payment data is handled directly by our payment partners.
- Access controls that limit employee and contractor access to personal information on a need-to-know basis.
- Encryption and masking of personal data in our possession or under our control, as required under the Digital Personal Data Protection Act, 2023.
- Access logging and monitoring to detect unauthorized access and investigate and remediate security incidents.
- Data backups and other means to preserve continued processing in the event of a data breach or system failure.
- Regular monitoring of our systems for potential vulnerabilities and security threats.
However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." No method of electronic transmission over the internet or method of electronic storage is 100% secure. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us, and that you use strong, unique passwords for your account.
In the event of a personal data breach that affects your personal information, we will notify you and the Data Protection Board of India (or such other relevant authority) without unreasonable delay, as required by applicable law including the Digital Personal Data Protection Act, 2023.
10. Data Retention
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Generally:
- Account information is retained for as long as your account is active. If you request account deletion, we will delete or anonymize your data within a reasonable timeframe, subject to our legal obligations.
- Order and transaction information is retained for a minimum period as required by Indian tax and accounting laws (including the Income Tax Act, 1961 and the Central Goods and Services Tax Act, 2017), even after account deletion.
- Communication records (emails, chat transcripts, support tickets) may be retained for up to 3 years for quality assurance and dispute resolution purposes.
- Analytics and usage data may be retained in aggregated or anonymized form indefinitely for business analysis purposes.
- Marketing preferences are retained until you opt out or request deletion.
We will not retain your personal data beyond the period necessary for the purpose for which it was collected, unless retention is required by law. Once the purpose is fulfilled and no legal retention requirement applies, we will erase your personal data, as required under the Digital Personal Data Protection Act, 2023.
If you wish to have your personal data deleted, you may contact us using the details provided below. Please note that certain data may need to be retained to comply with legal obligations even after your deletion request.
11. Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know. You may have a right to request access to the personal information that we hold about you, including what data we have collected, how we use it, and who we have shared it with.
- Right to Delete. You may have a right to request that we delete personal information we maintain about you, subject to certain legal exceptions and retention requirements.
- Right to Correct. You may have a right to request that we correct inaccurate or incomplete personal information we maintain about you.
- Right of Portability. You may have a right to receive a copy of the personal information we hold about you in a commonly used, machine-readable format, and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
- Right to Withdraw Consent. Where we process your data based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. We ensure that the process to withdraw consent is as easy as the process to give consent, as required under the Digital Personal Data Protection Act, 2023.
- Right to Restrict Processing. You may have a right to request that we restrict the processing of your personal information in certain circumstances.
- Right to Object. You may have a right to object to certain types of processing, including processing for direct marketing purposes.
- Right to Nominate. Under the Digital Personal Data Protection Act, 2023, you have the right to nominate another individual who can exercise your rights on your behalf in the event of your death or incapacity.
- Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you, by replying STOP to any marketing SMS, or by contacting us directly. If you opt out, we may still send you non-promotional emails, such as those about your account, orders, shipping updates, and important service announcements.
You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
12. Children's Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of 18 or below the age of majority in your jurisdiction, whichever is higher. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age. If we become aware that we have collected personal information from a child without verification of parental consent, we will take immediate steps to delete that information.
In compliance with the Digital Personal Data Protection Act, 2023, we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children. We do not process children's data in any manner that is likely to cause any detrimental effect on the well-being of a child.
13. International Transfers
Please note that we may transfer, store, and process your personal information outside the country you live in, including in countries that may not provide the same level of data protection as your home country. Our Services use infrastructure and third-party providers located in various countries, including but not limited to the United States, Canada, European Union member states, and other jurisdictions.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
In compliance with the Digital Personal Data Protection Act, 2023, we will not transfer personal data to any country or territory that the Government of India has restricted through notification. If such restrictions are notified in the future, we will comply with them promptly.
By using our Services, you acknowledge and consent to the transfer of your personal information to countries outside your jurisdiction as described in this Privacy Policy.
14. Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. We take all complaints seriously and will investigate and respond to your complaint in a timely manner.
Depending on where you live, you may have the right to appeal our decision by contacting us, or lodge your complaint with your local data protection authority. For users in India, this may include filing a complaint with the Data Protection Board of India established under the Digital Personal Data Protection Act, 2023, once it is fully operational. You may also approach the relevant consumer forum under the Consumer Protection Act, 2019, or file a complaint through the National Consumer Helpline.
15. Your Responsibilities
While we take every reasonable step to protect your data, you also play an important role in keeping your information secure:
- Keep your account credentials (username and password) confidential and do not share them with anyone.
- Use a strong, unique password for your 3DCrafts account.
- Log out of your account after each session, especially on shared or public devices.
- Notify us immediately if you suspect any unauthorized access to your account.
- Ensure that the personal information you provide to us is accurate, complete, and up to date. Under the Digital Personal Data Protection Act, 2023, you have a duty to not impersonate another person, to not suppress any material information, and to not provide any false or misleading personal data or documents.
- Review the privacy settings and policies of any third-party services you use in connection with our Services.
We are not responsible for any loss or damage arising from your failure to protect your account credentials or personal information, or from any inaccurate, incomplete, or misleading information provided by you.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices, changes in the third-party services we use, or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last Updated" date at the top of this page. We will provide notice of material changes as required by applicable law, which may include email notification for significant changes.
We encourage you to review this page periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
17. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of India, including but not limited to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Consumer Protection Act, 2019. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Srikakulam, Andhra Pradesh, India.
18. Compliance with Indian Laws
3DCrafts.studio is committed to complying with all applicable Indian laws governing e-commerce, data protection, and consumer rights, including but not limited to:
A. The Digital Personal Data Protection Act, 2023 (DPDP Act) and Digital Personal Data Protection Rules, 2025:
As a Data Fiduciary under the DPDP Act, we are responsible for the lawful processing of your digital personal data. We collect and process your personal data only for specified, clear, and lawful purposes, and only with your free, specific, informed, and unambiguous consent where required. We limit the collection of personal data to what is necessary for the specified purpose. We ensure that consent withdrawal is as easy as giving consent. We implement appropriate technical and organisational security measures including encryption, access controls, access logging, monitoring, and data backups to safeguard your personal data.
In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals without unreasonable delay, as required by the DPDP Act and Rules. You have the right to access your personal data, request correction of inaccurate data, request erasure of your data, nominate a person to exercise your rights, and withdraw your consent at any time. We provide clear and accessible mechanisms for you to exercise these rights.
This privacy notice is made available in English and may be made available in other languages listed in the Eighth Schedule of the Constitution of India, as required. Full compliance with all provisions of the DPDP Act is expected by 13 May 2027, and we are actively working towards meeting all requirements within the phased implementation timelines set by the Government of India. Non-compliance with the DPDP Act may attract penalties of up to INR 250 crores.
B. The Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
Until the DPDP Act is fully implemented, the IT Act and its rules continue to govern aspects of data protection and privacy in India. We comply with the reasonable security practices and procedures prescribed under these rules to protect sensitive personal data and information. We have implemented security measures conforming to industry standards, and our privacy practices are in accordance with the requirements of the IT Act.
C. The Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020:
As an e-commerce entity operating in India, we comply with all duties imposed on e-commerce entities under these rules, including but not limited to:
- Displaying our legal business name, registered address, and contact information prominently on our platform.
- Providing clear and accessible information regarding our return, refund, exchange, warranty, delivery, shipping, payment methods, grievance redressal mechanism, country of origin of products, and all other legally required disclosures.
- Appointing a Grievance Officer for consumer grievance redressal whose name, contact details, and designation are displayed on our platform.
- Acknowledging consumer complaints within 48 hours and resolving them within one month from the date of receipt.
- Recording consumer consent for purchases only through explicit and affirmative action and never through pre-ticked checkboxes.
- Processing all refunds within a reasonable period as prescribed by the Reserve Bank of India.
- Not adopting any unfair trade practices on our platform or otherwise, including price manipulation, fake reviews, misleading advertisements, or dark patterns.
- Providing accurate product information including descriptions, images, pricing breakdowns, mandatory notices, and expiry dates where applicable.
- Cooperating with the National Consumer Helpline on a best-effort basis.
D. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:
Where applicable, we comply with the obligations imposed on intermediaries, including the appointment of a nodal contact person resident in India, compliance officer obligations, and grievance redressal mechanisms.
E. The Legal Metrology Act, 2009 and Legal Metrology (Packaged Commodity) Rules, 2011:
Where applicable to our products, we display necessary product details such as dimensions, weight, and other required attributes on our product pages, as mandated by the Legal Metrology Act.
F. The Central Goods and Services Tax Act, 2017 (GST):
We comply with all applicable GST registration and compliance requirements for e-commerce entities operating in India, including the collection and remittance of applicable taxes.
19. Grievance Officer
In accordance with the Consumer Protection (E-Commerce) Rules, 2020, the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns, complaints, and requests related to your personal data, privacy, consumer rights, and any other grievances arising from your use of our Services.
Grievance Officer Details:
- Name: Sreedharrao Jallepalli
- Designation:
- Email:
- Address:
The Grievance Officer will acknowledge your complaint within 48 hours of receipt and endeavour to resolve your grievance within one month from the date of receipt, in compliance with applicable law.
If you are not satisfied with the resolution provided by the Grievance Officer, you may escalate your complaint to:
- The Data Protection Board of India (once fully operational), via the Ministry of Electronics and Information Technology at https://www.meity.gov.in
- The appropriate Consumer Dispute Redressal Commission (District, State, or National level) under the Consumer Protection Act, 2019
- The National Consumer Helpline at 1800-11-4000 or online at https://consumerhelpline.gov.in
- The Central Consumer Protection Authority (CCPA) established under the Consumer Protection Act, 2019
- Any other relevant regulatory authority having jurisdiction
20. OTP and Verification Services
To verify your identity, secure your account, and authenticate transactions, we may send you One-Time Passwords (OTPs) and verification codes via SMS, email, or WhatsApp. These OTPs are generated and delivered through third-party OTP and SMS gateway service providers, including but not limited to MSG91, Twilio, Gupshup, Kaleyra, Textlocal, or any other SMS/OTP service provider we may engage now or in the future.
When we send you an OTP, your mobile phone number and/or email address is shared with these third-party OTP delivery partners solely for the purpose of delivering the verification message to you. These service providers may process your phone number and message delivery data according to their own privacy policies and data handling practices.
3DCrafts is not responsible for:
- Any delay, failure, or non-delivery of OTP messages caused by the OTP service provider, your telecom operator, network congestion, DND (Do Not Disturb) settings on your phone, or any other factor beyond our control.
- Any security vulnerabilities, data breaches, or unauthorized access occurring at the OTP service provider's end.
- Any misuse of your phone number or email address by the OTP service provider beyond the scope of OTP delivery.
- Any charges imposed by your telecom operator or mobile service provider for receiving SMS messages.
- Any issues arising from your failure to receive OTPs due to incorrect phone number or email provided by you, spam filters blocking messages, or any other reason attributable to your device, settings, or telecom provider.
We strongly advise you to never share your OTP with anyone, including anyone claiming to represent 3DCrafts. Our team will never ask you for your OTP over phone, email, or any messaging platform.
21. Product Designs — Intellectual Property and Liability Disclaimer
All product designs sold on 3DCrafts.studio are sourced under valid commercial licenses from third-party designers and design studios. These designs are manufactured in India by 3DCrafts under the terms of such commercial licenses.
Important disclaimers regarding product designs:
-
All product designs are the intellectual property of their respective original designers and are used by 3DCrafts under commercial license. 3DCrafts does not claim original authorship or ownership of the underlying design files.
-
The designs are provided and manufactured "as-is" based on the licensed design files. While we perform quality checks during manufacturing, 3DCrafts is not liable for any inherent design flaws, structural limitations, or design-related deficiencies that exist in the original design itself.
-
3DCrafts is not responsible for any damage, injury, loss, or harm arising from the use or misuse of any product, including but not limited to: damage caused by using a product for purposes other than its intended use; damage caused by exposure to conditions beyond the product's specifications (e.g., excessive heat, direct prolonged sunlight, heavy impact, immersion in water where not specified); personal injury arising from improper handling or misuse; any allergic reactions or sensitivities to the material; or damage to surfaces, electronics, or other items used in conjunction with our products.
-
Product images and descriptions on our website and marketplace listings are representative and created in good faith. Actual products may vary slightly in colour, texture, dimensions, and finish due to the nature of 3D printing, which produces items layer by layer and may result in minor variations between individual units. Such variations are inherent to the manufacturing process and are not considered defects.
-
Products listed as accessories for electronics (e.g., phone stands, charger holders, headphone stands, lamp bodies) are designed to complement specific devices but are not officially endorsed, certified, or affiliated with any electronics brand including but not limited to Apple, Samsung, Sony, Bose, JBL, or any other brand. Compatibility is based on standard dimensions at the time of design and may not account for future device changes or design revisions by the device manufacturer.
-
Where a product listing includes a disclaimer that electronics, bulbs, wiring, plants, or other items are not included, the customer acknowledges that only the 3D-printed product body is being sold, and all other items shown in product images are for illustrative and styling purposes only.
-
3DCrafts shall not be held liable for any indirect, incidental, special, consequential, or punitive damages arising from the purchase, use, or inability to use any product, regardless of whether we were advised of the possibility of such damages.
- Material Safety & Handling: While we use high-quality resins and filaments, our products are not rated for food safety or medical use unless explicitly stated. Customers are responsible for ensuring 3D-printed items are kept out of reach of small children or pets who may attempt to ingest them, as small parts may break off and pose a choking hazard
-
The customer assumes full responsibility for determining the suitability of any product for their intended use. 3DCrafts makes no warranties, express or implied, regarding the fitness of any product for a particular purpose beyond its described intended use.
22. User-Generated Content
If you submit product reviews, ratings, comments, photographs, or any other content through our website, marketplace listings, social media pages, or any other platform in connection with our Services (collectively, "User-Generated Content"), you grant 3DCrafts a non-exclusive, royalty-free, perpetual, irrevocable, worldwide license to use, reproduce, modify, adapt, publish, translate, distribute, and display such content in any media or medium for marketing, promotional, and business purposes.
You represent and warrant that any User-Generated Content you submit is your own original work, does not infringe on the intellectual property rights of any third party, and does not contain any unlawful, defamatory, obscene, or otherwise objectionable material. 3DCrafts reserves the right to remove any User-Generated Content at its sole discretion without prior notice.
3DCrafts does not guarantee the accuracy, integrity, or quality of any User-Generated Content posted by other users and is not responsible for any content posted by users on our platforms or third-party review sites.
23. Indemnification
By using our Services, you agree to indemnify, defend, and hold harmless 3DCrafts.studio, its owners, officers, employees, agents, and partners from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or in connection with: your use of the Services; your violation of this Privacy Policy or our Terms of Service; your violation of any applicable law or regulation; your violation of any rights of a third party; any User-Generated Content you submit; any inaccurate, incomplete, or misleading information you provide; or any activity conducted through your account whether or not authorized by you.
24. Limitation of Liability
To the maximum extent permitted by applicable law, 3DCrafts.studio shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, goodwill, or other intangible losses, resulting from:
- Your access to or use of, or inability to access or use, the Services.
- Any conduct or content of any third party on or related to the Services.
- Any unauthorized access to or use of our servers, your personal information, or any data stored therein.
- Any interruption, suspension, or cessation of transmission to or from the Services.
- Any bugs, viruses, trojan horses, or similar harmful elements transmitted through the Services by any third party.
- Any errors, omissions, or inaccuracies in any content, or any loss or damage incurred as a result of the use of any content posted, emailed, transmitted, or otherwise made available through the Services.
- Any actions, errors, omissions, data breaches, security incidents, service disruptions, or failures of any third-party service provider, platform, payment gateway, shipping partner, OTP provider, analytics service, hosting provider, or any other service that we use to operate our business.
- Any damage, injury, or loss arising from the use, misuse, or inability to use any product purchased from us.
- Any design flaws, structural deficiencies, or limitations in the original product designs that we manufacture under license.
Our total cumulative liability to you for any and all claims arising from or related to the Services shall not exceed the amount you paid to us for the specific product or service giving rise to the claim, or INR 5,000 (Indian Rupees Five Thousand), whichever is lower.
25. Force Majeure
3DCrafts shall not be held liable for any failure or delay in performing any obligation under this Privacy Policy or our Terms of Service due to causes beyond our reasonable control, including but not limited to acts of God, natural disasters, epidemics, pandemics, government orders or restrictions, war, terrorism, civil unrest, strikes, lockouts, power failures, internet or telecommunications failures, cyberattacks, data breaches at third-party service providers, changes in law or regulation, or any other event beyond our reasonable control.
26. Anti-Dark Patterns Commitment
In compliance with the Guidelines for Prevention and Regulation of Dark Patterns, 2023 issued by the Government of India, and the Consumer Protection Act, 2019, 3DCrafts.studio commits to not employing any deceptive design patterns on our website or platform, including but not limited to:
- False urgency or countdown timers designed to create artificial pressure to purchase.
- Hidden charges or fees that are not disclosed upfront before checkout.
- Forced action or subscription traps that compel users into unintended purchases or commitments.
- Bait and switch tactics that advertise one product and deliver another.
- Confirm shaming or guilt-based language designed to manipulate user decisions.
- Disguised advertisements that are not clearly marked as advertisements.
- Pre-selected checkboxes for additional products, services, or marketing consent.
- Difficult-to-find cancellation, unsubscribe, or account deletion options.
We are committed to providing a transparent, honest, and fair shopping experience.
27. Severability
If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other provision of this Privacy Policy, and the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent of the provision.
28. Entire Agreement
This Privacy Policy, together with our Terms of Service, Shipping Policy, Return and Refund Policy, and any other policies referenced herein, constitutes the entire agreement between you and 3DCrafts.studio with respect to the subject matter hereof, and supersedes all prior or contemporaneous communications, representations, or agreements, whether oral or written, with respect to such subject matter.
29. Contact Us
Should you have any questions about our privacy practices or this Privacy Policy, if you would like to exercise any of the rights available to you, or if you have any complaints, concerns, or grievances, please contact us:
3DCrafts.studio Proprietor:
Email:
Address:
Grievance Officer:
- Name:
- Designation:
- Email:
For data-related requests, please include "Privacy Request" in your email subject line. For consumer grievances, please include "Consumer Complaint" in your subject line so we can acknowledge and process your request within the timelines required by law.
Escalation Channels:
- National Consumer Helpline: 1800-11-4000
- NCH Online Portal: https://consumerhelpline.gov.in
- Data Protection Board of India: Once fully operational, details will be available at https://www.meity.gov.in
- Central Consumer Protection Authority (CCPA): https://ccpa.gov.in
This Privacy Policy was last reviewed and updated on March 31, 2026. We recommend that you save or print a copy of this Privacy Policy for your records.