Privacy Policy — Rajni Dutta Art & Design

Effective Date: 1 April 2026 Last Updated: 28 April 2026 Jurisdiction: Delhi, India Governing Law: Digital Personal Data Protection Act, 2023 & Information Technology Act, 2000

1. About This Policy

This Privacy Policy describes how Rajni Dutta Art & Design (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you visit our website, engage our design or art services, or communicate with us in any manner.

We are committed to safeguarding your privacy in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and all other applicable Indian laws.

By accessing our website or using our services, you acknowledge that you have read and understood this Policy and consent to the practices described herein.

2. Who We Are

Rajni Dutta Art & Design is a creative services practice registered and operating from New Delhi, India, specialising in fine art, graphic design, brand identity, illustration, and related visual communication services.

For the purposes of applicable data protection law, we are the Data Fiduciary responsible for your personal data collected through this website and our service engagements.

Registered Address: New Delhi, Delhi, India Email: contact@rajniduttaart.com Phone: +91-9818856775

For all privacy-related correspondence, please write to our Grievance Officer whose details are provided in Section 14.

3. Data We Collect

We collect only such personal data as is necessary and proportionate for the purposes described in this Policy.

Information you provide directly:

Full name and contact details (email address, phone number, mailing address)
Business or organisation name and professional role
Project briefs, creative requirements, and assets you share with us
Payment information (processed via secure third-party payment gateways; we do not store card data)
Correspondence, feedback, testimonials, and enquiries

Information collected automatically:

IP address, browser type, and device information
Pages visited, referral URLs, and time spent on our website
Cookie identifiers and session data (see Section 10)

Sensitive Personal Data or Information (SPDI) as defined under the IT Rules, 2011 is not intentionally collected. Please do not share SPDI (such as financial passwords, health information, or biometric data) through general website forms.

4. How We Use Your Data

Your personal data is used solely for the following specified, lawful, and transparent purposes:

To provide, manage, and deliver our art and design services to you
To communicate with you about your project, enquiries, or bookings
To process payments and issue invoices or receipts
To send service-related notices (changes to terms, project updates)
To send marketing communications about our work, exhibitions, or offers — only with your prior, explicit consent
To improve our website, services, and user experience through analytics
To comply with applicable legal obligations and resolve disputes
To protect the security and integrity of our systems

We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Legal Bases for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following legal bases:

Consent: Where you have given free, specific, informed, unconditional, and unambiguous consent — for example, when subscribing to our newsletter or submitting a contact form
Contractual Necessity: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request
Legitimate Uses: Where processing is necessary for compliance with any legal obligation, or for purposes specified under applicable law as legitimate uses
Vital Interests: In rare circumstances, to protect life or safety

You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, email us at contact@rajniduttaart.com or call +91-9818856775.

6. Sharing Your Data

We do not disclose your personal data to third parties except in the following limited circumstances:

Service Providers: Trusted vendors (web hosting, payment gateways, email platforms, accounting software) who process data on our behalf under binding confidentiality obligations and only as instructed by us
Professional Advisors: Lawyers, accountants, or auditors who require access to data to provide us with professional services, under professional privilege
Legal Requirements: When we are required to disclose data under any law, court order, or direction of a competent government authority
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice to you
With Your Consent: For any other purpose with your prior, explicit consent

Any third party with whom we share data is required to handle it securely and in accordance with applicable law. We do not transfer personal data outside India unless such transfer complies with the DPDP Act, 2023 and any rules or guidance issued thereunder.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law:

Client project files and correspondence: up to 7 years from project completion (in line with statutory limitation periods under Indian law)
Financial and invoicing records: 8 years as required under the Income Tax Act, 1961 and GST law
Marketing consent records: until consent is withdrawn, plus a reasonable period thereafter for compliance evidence
Website analytics data: up to 26 months in anonymised or aggregated form

Once data is no longer required, we take reasonable steps to delete, anonymise, or securely destroy it.

8. Security Measures

We implement reasonable security practices and procedures as required under Rule 8 of the IT (SPDI) Rules, 2011, including:

SSL/TLS encryption for data transmitted through our website
Access controls limiting data access to authorised personnel only
Regular security reviews of our systems and practices
Secure third-party payment processing (we do not store payment card data)
Confidentiality agreements with staff and contractors

While we take appropriate technical and organisational measures, no transmission over the internet is entirely secure. We encourage you to exercise caution when sharing personal information online.

In the event of a personal data breach that is likely to result in harm to you, we will notify the relevant authority and affected individuals in accordance with the DPDP Act, 2023.

9. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access: Obtain a summary of your personal data held by us and the purposes for which it is processed
Right to Correction: Request correction of inaccurate, incomplete, or outdated personal data
Right to Erasure: Request deletion of your personal data where it is no longer necessary for the stated purpose
Right to Grievance Redressal: Lodge a complaint with our Grievance Officer and receive a timely response
Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting prior processing
Right to Nominate: Nominate an individual to exercise your rights in the event of your death or incapacity

To exercise any of the above rights, please contact our Grievance Officer (Section 14). We will respond within 30 days of receiving your request. Requests may be verified to confirm your identity before processing.

If you are dissatisfied with our response, you may approach the Data Protection Board of India once operationalised under the DPDP Act, 2023.

10. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to enhance your browsing experience. Types of cookies we may use:

Strictly Necessary Cookies: Essential for the website to function; cannot be disabled
Analytics Cookies: Help us understand how visitors interact with our website — used only with your consent
Functional Cookies: Remember your preferences such as language or display settings
Marketing Cookies: Used to deliver relevant content — only with your explicit prior consent

When you first visit our website, you will be shown a cookie consent notice. You may withdraw consent for non-essential cookies at any time through your browser settings or our cookie preferences tool.

11. Children’s Privacy

Our website and services are not directed at individuals under the age of 18 years. We do not knowingly collect personal data from children. Under the DPDP Act, 2023, processing of personal data of children requires verifiable parental consent.

If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take prompt steps to delete such data. If you believe we may have collected data relating to a child, please contact us at contact@rajniduttaart.com or call +91-9818856775 immediately.

12. Third-Party Links & Services

Our website may contain links to third-party websites and social media platforms (such as Instagram, Behance, or LinkedIn). We are not responsible for the privacy practices of such third parties and encourage you to review their respective privacy policies before submitting any personal information. The inclusion of any link does not constitute our endorsement of the linked site.

13. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this page, post the revised Policy on our website, and notify you by email at contact@rajniduttaart.com where we hold your address and the changes are significant.

Your continued use of our website or services after the updated Policy is posted will constitute acceptance of such changes. We encourage you to review this Policy periodically.

14. Grievance Officer

In accordance with Rule 5(9) of the IT (SPDI) Rules, 2011 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns relating to the processing of your personal data:

Grievance Officer: Rajni Dutta Organisation: Rajni Dutta Art & Design Address: New Delhi, Delhi, India Email: contact@rajniduttaart.com Phone: +91-9818856775 Response Time: Within 30 days of receipt of complaint

You may submit a written grievance at the contact details above. Please include your full name, contact details, a description of your concern, and any relevant supporting information. All complaints will be acknowledged promptly and resolved within the statutory timeframe.

15. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please reach out to us through any of the following:

Rajni Dutta Art & Design New Delhi, Delhi, India Email: contact@rajniduttaart.com Phone: +91-9818856775 Working Hours: Monday – Saturday, 10:00 AM – 6:00 PM IST