Privacy policy
Last updated: 30 September 2026
This notice explains what personal data Dear You collects, why we collect it, who we share it with, how long we keep it, and what your rights are. It follows the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Most duties under these laws apply from May 2027. We follow them now.
Who we are
Dear You is run by MAAVI LIFE PRIVATE LIMITED, Ground Floor, No. 106, 4th C Cross, Koramangala 4th Block, Bengaluru, Karnataka 560095, India. We decide how your personal data is used, so under the law we are the "Data Fiduciary".
For any question about your data, contact our Grievance Officer, Madhavi K (Customer Experience Officer), at hello@dearyou.art or +91 97111 50489.
What we collect and why
| Data | Where it comes from | What we use it for |
|---|---|---|
| Your name, email address, phone number and billing address | You, at checkout or when you create an account | To take and confirm your order, send order and delivery updates, make your tax invoice and answer your questions |
| Payment status, payment method type and transaction reference | Razorpay | To confirm payment, make refunds and prevent fraud. We never see your full card number, CVV, UPI PIN or netbanking password |
| Gift recipient's name, delivery address and phone number | You, the buyer | Only to make and deliver the gift and to sort out delivery problems |
| Gift message, preferred delivery date and whether you asked us to leave prices out of the parcel | You | To prepare and pack the gift the way you asked |
| Personalisation: names, text, photos and logos you add | You | Only to make your item |
| Business details: company name, GSTIN, billing address, contact person, and recipient lists for bulk orders | You or your company | To prepare quotes, GST invoices and deliveries |
| Messages you send us by email, phone or contact form | You | To reply, and to keep a record of complaints |
| Reviews: your name, review text and any photos | You, through Judge.me | To show reviews on our store |
| Device and browsing data: IP address, browser and device type, pages visited, cart contents, cookies | Your browser, through Shopify | To run the store and checkout and keep them secure. Only if you allow it: to understand how the store is used |
| Your marketing choice | You | To send news and offers only if you said yes |
We collect only what we need for these purposes.
Why we are allowed to use it
- When you give us details to place an order or ask us something, we use them for that purpose. The law allows this without a separate consent form.
- For marketing emails and for analytics or marketing cookies, we ask for your consent first. You can withdraw it at any time.
- Some records, such as GST invoices and accounts, we must keep by law.
Gift recipients
When you send a gift, you give us another person's name, address and phone number, and sometimes their name or photo for the gift itself. Please share these only if you believe the recipient would be comfortable with it.
We use recipient details only to make and deliver that gift and to sort out delivery problems. We do not add recipients to our mailing list, send them marketing, or share their data with anyone for marketing. We keep recipient details with the order record for as long as the law requires (see "How long we keep data").
If you received a gift from us, you can ask to see, correct or delete your details (within what the law allows), using the contact details at the end of this notice.
Children
Our store is for adults. If you are under 18, please ask a parent or guardian to place the order.
Some gifts, such as birthday return gifts, carry a child's name or photo. If you add a child's name or photo, you confirm that you are the child's parent or lawful guardian, or that you have their permission. We use it only to make that item. We do not track children's behaviour or show them targeted advertising.
Who we share data with
We share only what each provider needs to do its job. They work for us under agreements that include security duties.
| Provider | What they do for us | Data they handle |
|---|---|---|
| Shopify | Runs our online store, checkout and customer accounts, and stores order data | The store data listed above |
| Razorpay (Razorpay Payments Private Limited) | Processes payments and refunds | Payment details you enter, order amount, your contact details |
| Shiprocket and the courier companies it assigns | Pick up and deliver parcels, send tracking updates | Recipient name, address and phone number; your name, email and phone number |
| Easify Product Options (a Shopify app) | Collects personalisation text and uploaded photos or logos | Personalisation details and files |
| GST Invoices India by Warp Studio (a Shopify app) | Creates GST tax invoices | Order details, billing name and address, GSTIN |
| Judge.me (a Shopify app) | Collects and shows product reviews | Your name, email address, review and photos |
| Cloudflare | Routes emails sent to hello@dearyou.art to our inbox | Emails you send us |
| Google (Gmail) | Our email inbox | Emails you send us |
We also share data when the law requires it, for example with tax authorities, or with police or courts under a lawful order. Our accountants and lawyers may see records when they advise us, and they must keep them confidential.
We do not sell personal data.
Shopify
Our store is hosted by Shopify. Shopify processes your data when you visit and buy from our store, including to provide services based on your interactions with other Shopify stores and with Shopify. Your information may be shared with Shopify and other third parties, which may be located in other countries, to provide these services. You can read Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and use Shopify's privacy portal at https://privacy.shopify.com to exercise your rights with Shopify directly.
Data stored outside India
Some of our providers, such as Shopify, store or process data outside India. Indian law allows this, except to countries the Central Government restricts. If a provider's country is restricted, we will stop sending data there.
Cookies
Shopify sets cookies on our store.
| Type | What it does | Can you turn it off? |
|---|---|---|
| Necessary | Keeps your cart, runs checkout, remembers your cookie choice, protects the store | No. The store does not work without them |
| Analytics | Shows us how visitors use the store, such as pages visited and where visitors came from | Yes |
| Marketing | Supports advertising | Yes |
We ask for your choice in a cookie banner. You can change it at any time using "Cookie preferences" in the footer. We do not use advertising tools such as the Meta Pixel or Google Ads tags at present. If we add them, we will update this notice and they will follow your cookie choice.
Shopify lists its cookies at https://www.shopify.com/legal/cookies.
Marketing and review emails
We send marketing emails only if you tick the sign-up box at checkout or sign up on our site. The box is never ticked for you. Every marketing email has an unsubscribe link. We do not send marketing by SMS or WhatsApp. If that changes, we will ask you first.
If you start checkout and do not finish, we may send you one reminder email about that checkout.
After delivery, Judge.me may email you to ask for a review. Tell us if you do not want these emails and we will stop them.
How long we keep data
| Data | How long we keep it |
|---|---|
| Orders, invoices and payment records, including recipient details | As long as tax and company laws require us to keep accounts, and in any case at least one year |
| Personalisation photos and logos | One year after delivery, then deleted. Corporate clients can ask us to keep a logo for repeat orders |
| Emails and complaint records | One year after the matter is closed, or longer if needed for a legal claim |
| Corporate enquiries that do not become orders | One year after our last contact |
| Marketing consent | Until you unsubscribe, plus a record that you did |
| Customer account | Until you ask us to close it. Order records are then kept as above |
Indian data protection rules require us to keep personal data and related logs for at least one year after we process them. When we no longer need data, we delete it or remove anything that identifies you, and we ask our providers to do the same.
How we protect data
- Payments are handled by Razorpay. We never see or store your full card number.
- Our store and checkout use encrypted (HTTPS) connections.
- Only people who need it can access our admin systems, and we use two-step login on them.
If a data breach affects your data, we will tell you without delay what happened, what it means for you, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India, as the law requires.
Your rights
You can:
- ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with;
- ask us to correct, complete or update it;
- ask us to erase it, unless we must keep it by law or to complete an order;
- withdraw any consent you gave (for example, to marketing emails or cookies), as easily as you gave it. This does not undo what we did before. If an order is already paid, we still deliver it;
- nominate another person to use these rights for you if you die or cannot act because of illness or incapacity;
- complain to us, and then to the Data Protection Board of India.
To make a request, email hello@dearyou.art with "Privacy request" in the subject line, or use the contact form at dearyou.art. Write from the email address on your order, or give us your order number and the phone number used on it, so we can check it is you. We reply within 30 days.
If you are not satisfied with our reply, you can complain to the Data Protection Board of India. The law asks you to use our grievance process first. The Board works online, and the Ministry of Electronics and Information Technology publishes how to reach it at https://www.meity.gov.in.
Language
You can ask for this notice in Hindi, Kannada or any other language listed in the Eighth Schedule to the Constitution of India. Email us and we will send it.
Changes to this notice
If we change this notice, we update the date at the top. If a change affects how we use data you have already given us, we will email you before it applies.
Contact
Grievance Officer: Madhavi K, Customer Experience Officer
MAAVI LIFE PRIVATE LIMITED, Ground Floor, No. 106, 4th C Cross, Koramangala 4th Block, Bengaluru, Karnataka 560095, India
Email: hello@dearyou.art
Phone: +91 97111 50489