Last updated · April 2026
Privacy.
Karuneya Crafts (the “studio”) treats privacy the way it treats a maker's signature — with care and on the record.
What we collect. Email address (when you subscribe to the next-drop list or place an order), shipping address (when you order a piece), the cart and wishlist you save in your browser, and your account profile if you sign in. Browser-side data lives in your localStorage — we never see it unless you place an order.
What we don't collect. Cookies for advertising. Tracking pixels. Behavioural analytics that follow you around the internet. We use Cloudflare Web Analytics, which is cookie-free and aggregate-only.
Who we share with. Razorpay (to process your payment), DHL Express (to ship your parcel), our cluster facilitators (so the maker knows their piece is going to a specific city), and our email service provider (for order confirmations). Nobody else, ever.
DPDPA 2023. Email hello@karuneya.in with the subject “DPDPA request” and we will respond within 7 calendar days. Mira is the Data Protection Officer (no separate hat for this in our team).
Retention. Order records — 7 years (statutory). Subscriber emails — until you unsubscribe. Cart, wishlist, and account profile — only on your device, until you clear browser storage.
Auto-translation. When you view a product description in a non-original language, the translation is generated by an automated service. We don't send your account data with the translation request — only the maker's description text.