Noor Gold Studio

Privacy Policy

This policy explains how Noor Gold Studio collects, uses, stores and shares your personal data, in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India.

Last updated: October 18, 2026

About this policy

Noor Gold Studio operates this store and website, including all related content, features, tools, products and services (the “Services”). Our Services are powered by Shopify, which enables us to provide them to you.

This policy explains how we collect, use, store and share your personal data when you visit our website, place an order or contact us. Please read it carefully. By using our Services, you confirm that you have read and understood it.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal data.

Personal data we collect

Depending on how you use our Services, we may collect or process the following types of personal data:

  • Contact details: your name, billing and shipping address, phone number and email address.
  • Payment information: transaction details, payment status and confirmation. Payments are handled by secure third-party payment providers, and we do not store your full card, UPI or net banking details.
  • Account information: your username, password and preferences, if you create an account.
  • Order information: items you view, add to your cart or wishlist, purchase, cancel or return.
  • Personalization content: photos, names, text and other details you share so we can make your personalized portrait, frame or gift.
  • Communications: messages you send us, for example when you contact customer support.
  • Device and usage information: your IP address, browser, device identifiers, and how and when you use our website.

How we collect your data

  • Directly from you when you place an order, create an account, fill in a form or contact us.
  • Automatically through your device and through cookies and similar technologies when you use our website.
  • From our service providers, such as payment gateways and courier partners, when they process data on our behalf.
  • From our partners and other trusted third parties, where permitted by law.

How we use your personal data

We use your personal data for the following purposes:

  • To provide our Services: to process payments, make and personalize your order, arrange shipping, handle cancellations, returns and exchanges, and manage your account.
  • To communicate with you: to send order updates and respond to your questions and requests.
  • For marketing: to share offers, new collections and updates by email, SMS or WhatsApp, and to show you relevant advertisements. You can opt out at any time.
  • For security and fraud prevention: to verify accounts, secure payments and detect or prevent unlawful or harmful activity.
  • To improve our Services: to understand how our website is used and to make it better.
  • To comply with the law: to meet legal, tax and accounting requirements and to respond to valid requests from authorities.

Consent and lawful use

We process your personal data with your consent, or for certain legitimate uses permitted under the Digital Personal Data Protection Act, 2023, such as fulfilling an order you placed or complying with the law.

You may withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing done before the withdrawal, and it may limit our ability to provide some Services to you.

Who we share your data with

We share your personal data only as needed, for example:

  • With Shopify and other service providers who help us run our store, such as payment gateways, courier and logistics partners, cloud storage, analytics and customer support tools.
  • With marketing and advertising partners, to show you relevant offers. They use your information under their own privacy notices.
  • When you ask us, or agree, to share information with a third party, for example to ship you a product.
  • With our affiliates, or in connection with a business transfer such as a merger or sale.
  • With courts, government or law enforcement authorities when we are required to do so by law, or to protect our rights and users.

Shopify and transfers outside India

Our website is hosted by Shopify, which collects and processes personal data about how you access and use the Services in order to provide and improve them. Shopify is responsible for the processing it carries out for its own purposes. You can learn more in the Shopify Consumer Privacy Policy at privacy.shopify.com.

Your personal data may be stored and processed on servers outside India, including by Shopify and other service providers. We take reasonable steps to make sure your data is handled with appropriate protection, in line with applicable Indian law.

Cookies and similar technologies

We use cookies and similar technologies to keep your cart working, remember your preferences, understand how our website is used and show relevant advertising.

You can control or delete cookies through your browser settings. Please note that turning off some cookies may affect how parts of the website work.

Third-party websites and links

Our Services may link to websites or platforms run by third parties, including social media. We do not control these sites and are not responsible for their privacy or security practices. Please review their policies before sharing your information.

Children’s data

Our Services are not meant for children under 18 years of age, and we do not knowingly collect personal data about children without the verifiable consent of a parent or lawful guardian.

If you are a parent or guardian and believe your child has given us personal data, please contact us and we will delete it.

Security and retention

We use reasonable security safeguards to protect your personal data. However, no system is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive information, such as card details or passwords, through unsecure channels like chat or email.

We keep your personal data only for as long as it is needed for the purposes described in this policy, or as required by law, for example for tax and accounting records. After that, we delete it or make it anonymous.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Ask for a summary of the personal data we hold about you and how we process it.
  • Ask us to correct, complete or update your personal data.
  • Ask us to erase your personal data, unless we need to keep it for a legal reason.
  • Withdraw your consent at any time.
  • Nominate another person to exercise your rights if you die or become unable to do so.
  • Use the grievance process below if you have a concern.

To opt out of marketing emails, use the unsubscribe link in any email. We may still send you non-promotional messages about your orders or account. We may need to verify your identity before acting on a request.

Grievance officer and complaints

If you have a question, request or complaint about how we handle your personal data, please contact our Grievance Officer. We will acknowledge your complaint within 48 hours and aim to resolve it within one month.

If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the Digital Personal Data Protection Act, 2023.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, or for legal or operational reasons. We will post the updated policy on this page and change the “Last updated” date. Please check back from time to time.