Privacy Policy
Effective Date: October 1, 2026 • Last Updated: October 2026 • COCOON Artisanal Studio
Welcome to COCOON (“we”, “our”, “us”), operated by Mehak Agarwal from our atelier in India. We slow-craft made-to-order crochet pieces and deeply respect your personal privacy.
This Privacy Policy outlines how we collect, store, utilize, and protect your Personal Identifiable Information (PII) in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (IT) Act, 2000 of India.
1.Data Minimization — What We Collect
In accordance with data minimization principles, we only collect the absolute minimum data required to craft, dispatch, and support your orders:
- Contact Details: Your full name, delivery address, postal PIN code, telephone number, and email address.
- Fulfillment & Courier Data: Delivery location coordinates or GPS pin (only when voluntarily shared for courier routing).
- Payment References: Transaction identifiers such as UPI UTR numbers or payment gateway transaction IDs. We never store credit card numbers, CVVs, or bank net banking passwords.
- Custom Atelier Inputs: Measurements, color preferences, and reference images voluntarily submitted for bespoke heirlooms.
2.Purpose of Processing & Legal Basis
Your data is processed strictly for legitimate contractual and service purposes:
3.Third-Party Service Providers
We never sell, rent, trade, or monetize your personal information to data brokers or advertising exchanges. Data is only shared with verified infrastructure partners who adhere to enterprise encryption:
- Logistics: Shiprocket (BigFoot Retail Solutions Pvt. Ltd.) & assignees (Delhivery, Xpressbees, Blue Dart) solely to transport the parcel to your doorstep.
- Database & Storage: Supabase (PostgreSQL with SSL / TLS 1.3 encryption at rest and in transit).
- Email Communications: Resend Inc. for transactional dispatch notices and 6-digit verification codes.
4.Your Rights Under DPDP Act 2023
As a data principal under Indian law, you have the following guaranteed rights:
Right to Access: You can view all your orders, stored addresses, and submissions directly in your customer portal (My Profile).
Right to Correction: You may edit your contact numbers or delivery addresses at any time before shipment dispatch.
Right to Erasure (“Right to be Forgotten”): You may email us to permanently delete your customer profile and stored address records, subject to statutory tax retention periods.
Right to Grievance Redressal: Dedicated response within 48 hours by our Data Grievance Officer.
5. Grievance Officer & Business Details
For privacy inquiries, rights requests, or feedback, contact our designated Grievance Officer:
Attn: Mehak Agarwal (Founder & Data Controller)
Brand: COCOON Artisanal Studio
Location: India
Email: cocoon.by.mehak@gmail.com
Studio WhatsApp: +91 8171902255