Legal

Privacy policy.

Last updated: 24 October 2026.

Who we are

This website is operated by Drape Theory Studios Private Limited, Saroornagar, Hyderabad, Telangana 500035, India (“Drape Theory Studios”, “we”). We are the data fiduciary for the personal data described here, under India’s Digital Personal Data Protection Act, 2023.

What we collect and why

Contact and delivery details (name, email, mobile number, address) to process, deliver and support your order.
Account details if you create an account: your name, email, mobile number, saved addresses, wishlist and your choices about WhatsApp updates and offers.
Order and payment status. Card, UPI and bank details are handled by our payment partner, Razorpay; we never see or store them.
Sign-in codes and security data. One-time codes are stored only in scrambled (hashed) form, expire after 10 minutes and are deleted after 30 days. We keep a scrambled form of your IP address to stop abuse.
Messages you send us by WhatsApp, phone or email, to help you.
Newsletter subscriptions. We save your email after you request a subscription and send a confirmation link. You receive the newsletter only after confirming. We record consent and you can unsubscribe.
Stock alerts. We save your email and chosen colour to send the one-time back-in-stock email you request. Each alert email includes a cancellation link.
Reviews and photos. Reviews are linked to a delivered purchase. Only your display name, rating, review and approved photos are shown publicly. Photos are held privately in Cloudflare R2 and served only while the review is approved. Image metadata is removed during processing.

Cookies and storage on your device

A sign-in cookie keeps you signed in for up to 30 days on that device.
Your bag and, before you sign in, your wishlist are saved in your browser so they don’t disappear between visits.
Cloudflare Turnstile checks that sign-in requests come from a person, not a bot.
We don’t use advertising cookies. If we add website analytics, we’ll ask for your consent first.

Who processes your data for us

Razorpay (payments), Resend and Brevo (order and sign-in emails), Cloudflare (website security and image hosting) and Google (only if you choose to sign in with Google).
Delivery partners receive your name, address and phone number to deliver your order.
We don’t sell your data or share it for anyone else’s advertising.

How long we keep it

Account details: until you delete your account.
Orders and invoices: as long as tax law requires, even after an account is deleted.
Sign-in codes: 30 days.

Your rights

You can access, correct or erase your personal data and withdraw consent. Signed in, use My Account › Profile to edit your details, download a copy of your data or delete your account. You can also contact our Grievance Officer.

Contact

[email protected] · Drape Theory Studios Private Limited, Saroornagar, Hyderabad, Telangana 500035, India