Dharohar Arts

Privacy Policy

1. Introduction

Dharohar Arts ("Dharohar Arts", "we", "us", "our") is a UK company headquartered in Leicester, England. We intend to celebrate and preserve India's traditional heritage art forms by partnering with artisan communities and organisations across India to bring authentic, ethically sourced framed wall art to customers in the United Kingdom and worldwide, and to host exhibitions celebrating this heritage.

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website [dharohararts.com] (the "Site"), buy our products, subscribe to our newsletter, register for an exhibition, or otherwise interact with us (together, the "Services"). It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where you are based in the EU/EEA, the EU General Data Protection Regulation (EU GDPR).

By using our site or our services, you automatically agree and acknowledge this Privacy Policy.

2. Who We Are: The Data Controller

The data controller responsible for your personal information is:

• Dharohar Arts [Ltd]

• Registered office: [full registered address], Leicester, United Kingdom

• Company number: [Companies House registration number]

• Contact email: [heritage@dharohararts.com]

If you have questions about this policy or how we handle your data, contact us using the details above or in Section 15 below.

3. Information We Collect

3.1 Information you give us directly

• Contact details: name, email address, postal address, telephone number

• Account details: username, encrypted password, order history, wish list items

• Order and billing/shipping details, and confirmation that payment has been made (see Section 6, we do not store full card details)

• Communications you send us: enquiries, exhibition RSVPs, requests for an artwork brochure, customer support messages

• Newsletter and marketing preferences, if you choose to subscribe

• Content you choose to submit, such as reviews or testimonials

  
  

3.2 Information collected automatically

When you use our Site, we automatically collect Usage Data through cookies and similar technologies, including device and browser information, IP address, pages viewed, and referral source. See Section 7 (Cookies) for detail.

3.3 Information from third parties

• Our website/e-commerce hosting provider

• Payment processors, who confirm a payment has been made (they hold your full card details, not us)

• Shipping, logistics and customs partners who help deliver artwork to you internationally

• Social media platforms, if you interact with our pages or use a social sign-in

• Exhibition venues or event partners, if you register for an event through them

  
  

4. How and Why We Use Your Information

Under UK/EU GDPR, we must have a valid legal basis for each way we use your personal data. The table below sets out our main purposes and the basis we rely on.

We only use your personal data for the purpose(s) it was collected for, unless we reasonably consider we need to use it for another, compatible reason, or you give consent for something new.

5. How We Share Your Information

We do not sell your personal information. We may share it with:

• Our artisan and export partners in India (for example, KalaAnchal and the artisan clusters we work with through Tri-Impact Global and any other Strategic Partners necessary), only where necessary to fulfil an order, such as custom packing or export documentation, and only the minimum information needed (e.g. name and delivery address)

• Payment processors, to process your payment securely

• Shipping, courier and customs agents, to deliver your order internationally

• IT, hosting, email and website service providers who support our Site

• Professional advisers, such as accountants and lawyers, where necessary

• Regulators or law enforcement, where required by law

• A buyer or successor, in the event of a sale, merger or reorganisation of our business

Any third party who processes personal data on our behalf does so under a data processing agreement that requires them to protect your data and use it only as we instruct.

6. Payments

We use a third-party payment processor to handle payments. We do not store your full card number, CVV or other sensitive payment details on our own systems; these are processed directly and securely by our payment provider in line with PCI-DSS standards.

7. Cookies and Similar Technologies

Our Site uses cookies and similar technologies to:

• Enable core site functionality, such as your shopping cart and sign-in

• Remember your preferences

• Understand how visitors use our Site (analytics)

• Where you consent, show you relevant marketing

You can manage or withdraw cookie consent at any time via our cookie banner/settings or your browser controls. Blocking some cookies may affect how the Site works. See our [Cookie Policy] for a list of the specific cookies we use.

8. International Transfers

We are based in the UK, and some of our artisan, production and fulfilment partners are located in India. India has not been recognised by the UK or EU as providing an "adequate" level of data protection. Where personal data is transferred outside the UK/EEA, for example, to enable production, packing or export of your order, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (as applicable), so your data continues to be protected to UK/EU standards. Contact us for more detail on these safeguards.

9. Data Retention

We keep personal data only as long as necessary for the purpose it was collected, including to:

• Maintain your account while it remains active

• Fulfil orders and handle returns, warranty or dispute periods

• Meet legal, tax and accounting obligations (generally 6 years for financial records under UK law)

• Keep marketing preferences until you unsubscribe or ask us to delete your data

When data is no longer needed, we securely delete or anonymise it.

10. Your Rights

Under UK/EU GDPR, you have the right to:

• Access the personal data we hold about you

• Rectify inaccurate or incomplete data

• Erasure of your data ("right to be forgotten") in certain circumstances

• Restrict how we use your data

• Object to processing based on legitimate interests, or to direct marketing

• Data portability, receive your data in a portable format

• Withdraw consent at any time, where we rely on consent

• Not be subject to decisions based solely on automated processing that significantly affect you (we do not currently carry out this kind of automated decision-making)

To exercise any of these rights, contact us using the details in Section 15. We will respond within one month, as required by law. If you are unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority if you are in the EU/EEA.

11. Children's Data

Our Services are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, restricted access, and secure hosting. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Third-Party Links

Our Site may link to third-party websites, including our partner organisations. We are not responsible for the privacy practices of these third parties and encourage you to review their own privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post any changes on this page and update the "Last updated" date above. Please check back periodically.

15. Contact Us

If you have questions, requests or complaints about this Privacy Policy or how we handle your personal data, contact:

• Dharohar Arts

• Email: [heritage@dharohararts.com]

• Address: [registered address], Leicester, United Kingdom

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.