Privacy policy

Who is responsible for your data

This policy covers personal data collected through Kindly Objects for orders in this store. The company responsible for that data (the Data Fiduciary under the Digital Personal Data Protection Act, 2023) is Blue Barrows India Private Limited. Its details are at the end of this page.

What we collect

To make a keepsake of someone, we need to know a little about you and see them. That means:

• Order and contact information — your name, email, shipping address and payment details, collected through Shopify’s checkout. We never see or store your full card details ourselves.
• Photos you upload — the reference photos you choose during Create Yours, used to generate your 2D concept and, once you approve it and check out, the 3D model your keepsake is made from.
• Personalisation choices — who the piece is for, the style you pick, any occasion or engraving text you add, and your revision requests.
• Session and device data — things like which step of Create Yours you’re on, your browser and device type, and pages you visit, so the flow can be resumed and so we can see where people get stuck.

Why we collect it

Solely to build and ship the piece you’re ordering, to run the site, and to support you if something goes wrong. We do not use your photos for anything beyond producing your order and, if you separately opt in, showing our work with your permission.

How your photos are handled

Photos are stored in private object storage — not on a public content delivery network, and not visible anywhere in our storefront or its admin as a public image. Storage paths are random, non-guessable identifiers rather than sequential file names, and access requires a signed link that expires after 15 minutes. We record your consent at the moment you upload a photo, alongside the session it belongs to.

What never leaves our systems

Your photos, and any internal identifiers from our generation partners, are never written to Shopify. The only information attached to your order in Shopify is an opaque reference number and non-sensitive selections like “couple” or “standing” — nothing that could expose a photo or a file.

Who we share it with

We do not sell, rent or trade your personal data. We share it only with the service providers that run parts of the service for us, and only what each one needs:

• Shopify — our store, checkout and customer accounts: your order, contact and delivery details.
• Payment providers — Razorpay and the payment methods offered at checkout process your payment. We never see or store your full card details.
• Delivery partners — your name, address and phone number, to deliver your order.
• Image-generation providers — the photos you upload, to create your concept and model. They process photos on our instructions and not for their own purposes.
• Hosting and storage — Vercel hosts this site and our database provider stores your session and uploaded photos.
• Email — to send order updates and replies to your messages.

We may also disclose information where the law requires it, for example to a court or a tax authority.

Analytics and advertising

To understand how the site is used and to measure our advertising, this site uses Google Analytics and Google Tag Manager, Microsoft Clarity (which records anonymised interactions such as clicks and scrolling) and the Meta pixel. These tools use cookies or similar technologies and receive information such as the pages you visit, your device and browser, and events like adding an item to your cart or placing an order — including order value and product codes, never your photos. Advertising tools are used only to measure and improve our own ads.

You can block or delete cookies in your browser settings, and use the Google Analytics opt-out browser add-on. Doing so does not stop you from ordering.

How long we keep things

Asking us to delete your data

Email [email protected] and we will delete your photos, generated assets and session data on request, ahead of the schedule above. The one exception is the consent record described above, which we keep for the legal minimum period even after a deletion request. See Photo policy for more detail specific to photos. To delete your whole account, see Delete your account.

Your rights

You can ask us to access, correct, update or delete the personal data we hold about you, withdraw a consent you have given, or ask a question about how we use your data. Under the Digital Personal Data Protection Act, 2023 you may also nominate another person to exercise these rights on your behalf, and raise a grievance with our grievance officer below before approaching the Data Protection Board of India. Email [email protected] from the address on your order and we will respond within 30 days.

Children

This site is not intended for children, and orders must be placed by an adult. A photo of a child can only be uploaded by a parent or guardian, or with their consent.

Changes to this policy

If we change how we use personal data, we update this page and the date at the top.

The business behind this site

Blue Barrows India Private Limited
A private limited company incorporated in India under the Companies Act, 2013.
CIN: U74999UP2021PTC146339
GSTIN: 09AAJCB8603Q1Z0

Help and questions: help@kindlyobjects.com
Order support: support@kindlyobjects.com
Phone: +91 95998 01600
Registered address: see our contact page.

Grievance officer

In line with the Consumer Protection (E-Commerce) Rules, 2020, the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, complaints about an order, this site or how we handle your personal data can be addressed to our grievance officer:

Heemang Parmar, Director
Blue Barrows India Private Limited
Email: help@kindlyobjects.com
Phone: +91 95998 01600

We acknowledge every complaint within 48 hours and aim to resolve it within one month of receiving it.