Privacy Policy

Ekkayi Atelier LLP ("the studio", "we") designs and makes sculptural furniture, lighting and objects from 703, Shivalik Satyamev, Ambli Bopal Road, near Vakil Saheb Bridge, Ambli, Ahmedabad, Gujarat 380058. This policy covers the website at ekkayi.com and the ways it collects personal information. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 with the rules made under it.

Browsing the website collects nothing about you that we keep. There are no analytics and no advertising trackers on any page, and the only cookies are the ones the shop needs to work, listed in the Cookie Policy. The website asks for personal information only when you choose to give it:

• When you buy an object, the checkout asks for your email address, mobile number and delivery address, and optionally a gift note. We keep these with the order: what you bought, the price, the payment method and the order's progress.
• When you sign in to an account, which needs only your email address and a one-time code, we keep that email address and anything you add to the account: your name, mobile number, saved addresses and saved pieces. Orders placed with the same email address are shown in the account.
• Your bag is kept against a random number in a cookie, so it is still there when you come back. Once you give your email address at checkout, it is kept with the bag, and if you leave without ordering we may send one reminder about it (see below).
• If you review a piece you bought, through the link we email once your order is delivered, we keep your rating, what you write and the name you sign it with. Once the studio has read it, the rating, the words, that name and the month are shown on the piece's page for anyone to see. Write to us to have a review taken down.
• The enquiry form asks for your name and email address, and optionally a telephone number, the kind of enquiry, a timeline, an investment band, the pieces you are interested in and a message. Name and email are the only required fields.
• The WhatsApp buttons open WhatsApp on your own device with a message already typed. Nothing reaches us until you press send there, and what you send is then handled by WhatsApp under its own privacy policy as well as by us.
• If you email, call or write to us directly, we hold what you send us.

The server that runs the website records, as every web server does, the internet address your request came from, the page requested, the time and the browser used. We use these records only to keep the site running and secure. When a page fails, the website also records what went wrong and on which page, with email addresses, numbers and anything after the question mark in the address removed, and tells our developer. To stop abuse, the website counts how often one internet address, mobile number or email address signs in, changes a bag or places an order; it keeps only a scrambled form of the address or number (a keyed hash), which cannot be read back, and clears the counts within a day.

We use the information you give us for these things and nothing else:

• To answer your enquiry, and to carry on the conversation you started.
• To prepare, make, deliver and support a piece you decide to acquire or an object you buy, including the tax invoice and the emails about your order.
• Once an order is delivered, to send one email asking how it arrived and inviting a review, and to show a review you choose to write on the piece's page.
• If you give your email address at checkout and leave pieces in your bag without ordering, to send one reminder about that bag, a few hours later. It is sent once per bag, never if you have since ordered, and every reminder has a link that stops them for good.
• To keep a record of that conversation and that piece, so it can be identified, matched or serviced years later.

We do not send newsletters or marketing messages, and we will not add you to any list without asking you first. Emails about an order you placed, sign-in codes you asked for, the single reminder about a bag you left at checkout and the one review invitation after delivery are not marketing. We do not sell, rent or trade personal information, and we do not profile visitors.

We process what you send through the form, WhatsApp, the checkout or your account because you have chosen to send it to us for a purpose you have specified, which is consent in the sense the Digital Personal Data Protection Act gives the word. You may withdraw that consent at any time by telling us; we will then stop, except where we need to keep a record to complete an order or a piece already commissioned or to meet a legal obligation, such as keeping tax invoices.

An enquiry submitted through the form is sent by email to the studio's inbox and is not stored on the website itself. That means it passes through, and is held by, our email provider (Google) under its own terms. Accounts, bags and orders are stored in the shop's database, run for us by a database provider (Neon), and order emails pass through the same email provider. Our web hosting provider (Vercel) processes the server records described above. None of these providers may use the information for anything other than providing its service to us.

Online payments are taken by our payment gateway (Razorpay) in its own secure checkout window. Your card, UPI or bank details go to the gateway and never reach us; we receive only whether the payment succeeded and its reference.

We share personal information with nobody else, except where a court or authority in India lawfully requires it, or where a courier delivers your order, in which case the courier receives your name, address, telephone number and, for cash on delivery, the amount to collect, and nothing more.

Our email and hosting providers may store data outside India. Where they do, they do so under contracts that require them to protect it, and we rely on those contracts.

• An enquiry that does not lead to a piece: for as long as the conversation is live, and then for up to two years in case you come back to it, after which it is deleted.
• A conversation that leads to a piece: for as long as the piece exists, because the record is how we identify, match and service it. Accounting records are kept for the period Indian tax law requires.
• An order and its tax invoice: for the period Indian tax law requires, even if you later delete your account. Deleting an account removes your saved addresses and saved pieces and unlinks your orders from it.
• An account: until you delete it, which you can do yourself from the account's Security page.
• Server records: no longer than ninety days.

Under Indian law you may ask us, at any time, to:

• Tell you what personal information of yours we hold, and where it came from.
• Correct it, complete it or update it.
• Delete it, subject to the retention above.
• Withdraw a consent you gave.
• Nominate someone to exercise these rights for you if you are unable to.

Write to the address at the end of this page. We will answer within thirty days. If you are not satisfied with our answer you may complain to the Data Protection Board of India.

Complaints about how the website handles personal information go to the studio's Grievance Officer, care of Ekkayi Atelier LLP at the postal address below or by email to grievance@ekkayi.com with the subject line "Grievance". Complaints are acknowledged within twenty-four hours and resolved within fifteen days.

The website is served over an encrypted connection. Every form checks what it receives on our server before using it, and limits how often one address can submit. Accounts have no passwords to steal: signing in needs a one-time code sent to your email. Prices, stock and totals are always worked out on our server, never taken from your browser. Email, once it leaves our servers, is as secure as email is; if you would rather not put something in a form or an email, telephone us.

The website is not directed at anyone under eighteen and we do not knowingly collect information from them. If you believe a child has sent us something, tell us and we will delete it.

If the website starts doing something this policy does not describe, such as using analytics, the policy will be updated first and the date at the top of the page changed. Where the change affects how we use what you have already given us, we will tell you before it takes effect.

This website was designed and built by Tosh Tech as a contractor to Ekkayi Atelier LLP. Tosh Tech's work is the software: the pages, their code and their hosting set-up.

Everything the website says and shows is Ekkayi Atelier LLP's. All text, photographs, drawings, renders, product names, specifications, availability and prices were supplied by Ekkayi Atelier LLP and are published on its instruction. Ekkayi Atelier LLP alone is responsible for their accuracy, their lawfulness and for any promise they make. Tosh Tech has not verified them, makes no representation about them, and accepts no liability to any visitor or customer in respect of them.

Any personal information collected through the website is collected by and for Ekkayi Atelier LLP, which decides why and how it is used. Tosh Tech does not receive, hold or use that information for its own purposes.

Questions about this document, or about anything on the website, go to Ekkayi Atelier LLP directly: by email at team@ekkayi.com, by telephone on +91 89057 25005, or by post to 703, Shivalik Satyamev, Ambli Bopal Road, near Vakil Saheb Bridge, Ambli, Ahmedabad, Gujarat 380058. Every message is read by one of the founders.