Privacy Policy (GDPR & IT Act, India Compliant)
At Giggles Gallery, we are committed to safeguarding your personal information and respecting your privacy. This policy is framed in accordance with applicable data protection laws, including the Information Technology Act, 2000 and its allied rules and, where applicable, the General Data Protection Regulation (GDPR).
Legal Basis for Data Processing
We collect and process personal data only when there is a lawful basis to do so, including:
Your consent
Performance of a contract (order processing and delivery)
Compliance with legal obligations
Our legitimate business interests, provided they do not override your rights
Sensitive Personal Data (India Compliance)
As per the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we:
Collect only necessary personal data
Do not store payment card or banking information
Use secure, industry-standard safeguards
Restrict access to authorized personnel only
GDPR Rights (Where Applicable)
If you are a resident of the European Economic Area (EEA), you have the right to:
Access your personal data
Request correction or erasure
Restrict or object to processing
Request data portability
Withdraw consent at any time
Requests can be made by contacting us via the Contact Us page.
Data Retention
We retain personal information only for as long as necessary to:
Fulfil orders
Meet legal and accounting obligations
Resolve disputes and enforce agreements
Once no longer required, data is securely deleted or anonymized.
Cross-Border Data Transfers
Your information may be processed or stored on servers located outside India through trusted service providers. We ensure such transfers comply with applicable data protection standards and contractual safeguards.
Grievance Officer (India – IT Act Compliance)
In accordance with the Information Technology Act, 2000, any grievances relating to data protection or privacy may be addressed to our designated grievance contact.
📩 Grievance Contact:
Details available on the Contact Us page
We aim to resolve all concerns within a reasonable timeframe.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in legal, regulatory, or operational requirements. Continued use of the website constitutes acceptance of the updated policy.