Scope

• This policy explains how we collect, use, disclose, and protect your personal information when you visit cheapsheet.in, purchase our products online or offline, contact us, or interact with our marketing.

​

What we collect

• Identity and contact data: Name, phone, email, billing/shipping address.

• Account data: Username, preferences, Wishlist.

• Order and payment data: Order details, amounts, tax/GST info; payment method metadata from our payment partners (we do not store full card details).

• Communications: Emails, chat/WhatsApp messages, support tickets, call recordings (where applicable).

• Device/technical data: IP address, device and browser info, OS, language, approximate location, cookie and pixel identifiers.

• Usage data: Pages viewed, clicks, time on page, referring URLs, campaign/source.

• User content: Reviews, photos, questions you post or send to us.

• Offline/store data: CCTV footage for security, in-store purchase records.

• Social sign-in data: If you log in with Google/Meta etc., we receive basic profile info you authorize.

How we collect it

• Directly from you (checkout forms, account creation, support, contests).

• Automatically via cookies, pixels, SDKs, and similar technologies.

• From third parties (payment gateways, delivery partners, analytics/ads partners) as allowed by law.

Why we use your data

• To provide our services: Create and manage your account, process orders, payments, shipping, returns, refunds.

• Customer support: Respond to queries, complaints, warranty/returns, and product issues.

• Personalization: Remember preferences, recently viewed, recommended designs.

• Marketing: Send offers, new launches, cart/browse reminders, and surveys (email/SMS/WhatsApp/push), with your consent where required.

• Analytics and improvement: Measure performance, fix bugs, prevent fraud, improve site speed and accessibility.

• Legal and compliance: Taxes/invoicing, record-keeping, law enforcement requests, enforcing our Terms.

Our legal bases

• India: Consent and legitimate uses under the Digital Personal Data Protection Act, 2023 (DPDP Act); legacy IT Act/Privacy Rules where applicable.

Cookies and tracking

• We use cookies and similar tech for essential site functions, analytics (e.g., Google Analytics), and advertising (e.g., Meta/Google pixels for interest-based ads).

• Manage cookies: Use our cookie banner/settings or your browser settings. You can opt out of analytics/ads cookies; essential cookies can’t be disabled as they’re needed for the site to work.

Payments

• Payments are processed by third parties (e.g., [Razor pay/PayU/Cash free]). We receive confirmation and limited metadata (e.g., last 4 digits, card brand, tokenized IDs, UPI VPA masked). We do not store full card numbers or CVV.

Sharing your data
We do not sell your personal data. We may share limited data with:

• Service providers (processors): Payment gateways, shipping/courier partners (e.g., Delhivery, Blue Dart, XpressBees, India Post), hosting/CDN (e.g., AWS, Cloudflare), analytics and marketing tools (e.g., Google Analytics, Meta Ads), customer support/chat (e.g., Freshdesk/Zendesk/Tawk), email/SMS/WhatsApp platforms, and risk tools.

• Business partners: If you use offers or bundled services with partners (only as needed).

• Authorities: To comply with law, legal process, or to protect rights, safety, and security.

• Corporate events: In case of a merger, acquisition, or sale of assets, subject to confidentiality.

​

Data retention

• We keep data only as long as needed for the purposes above:

  • Orders, invoices, tax records: typically 7–8 years.

  • Accounts and marketing preferences: until you delete/withdraw consent or after inactivity per our retention schedule.

  • CCTV (offline stores): typically 15–45 days unless required longer for investigations.

Security

• We use administrative, technical, and physical safeguards, including encryption in transit (HTTPS), access controls, and periodic reviews. No method is 100% secure; please protect your account credentials.

Your rights and choices

• Access/Correction: Request a copy, correction, or update of your data.

• Deletion: Ask us to delete your data, subject to legal retention requirements.

• Consent withdrawal: You can withdraw marketing consent at any time (unsubscribe links, STOP for SMS/WhatsApp, or email us).

• Opt-outs: You can disable analytics/ads cookies or use platform tools (Google Ad Settings, YourAdChoices).

• DPDP Act (India): You have rights to access, correction, erasure, grievance redressal, and to nominate an alternate contact.

Children’s privacy

• Our services are not directed to children under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us for deletion.

Communications

• Transactional: Order updates, delivery, returns—these are necessary.

• Marketing: Email/SMS/WhatsApp/push only with your consent where required. You can opt out at any time.

• WhatsApp: By opting in at checkout or via site prompts, you consent to receive updates/offers over WhatsApp per WhatsApp’s Terms.

User content and reviews

• Content you submit (reviews, photos) may be public on our site and social channels. Do not share private information in public content. We may moderate or remove content that violates our Terms.

Offline stores

• In-store purchases may require phone or email for e-receipts or warranty/returns. Stores may use CCTV for security and audit purposes.

Third-party links

• Our site may link to third-party sites or apps we don’t control. Their privacy practices govern your use of those services.

Content and IP notice (important for our art)

• The artwork sold on cheapsheet.in includes fan art, AI-generated art. It is not purported to be official or licensed merchandise unless clearly indicated.

• If you have questions or concerns about any artwork, please write to cheapsheet.in@gmail.com. We review and address such notices promptly.

Do Not Track and Global Privacy Control

• Some browsers send “Do Not Track” or GPC signals. We honor consent where legally required via our cookie settings and will continue improving our handling of such signals.

Changes to this policy

• We may update this Privacy Policy from time to time. We’ll post the updated version with a revised “Last updated” date. Material changes will be highlighted on this page or via email where feasible.