Privacy Policy

Effective Date: January 1, 2026

At LoveCraft, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

1. Information We Collect

1.1 Information You Provide Directly

When you use LoveCraft, you may provide:

• Names: Your name and your partner's name (for personalized greetings)
• Email Address: For order confirmation and delivery
• Phone Number: Optional, for customer support
• Messages & Content: Personal messages you create for greetings, cards, or letters
• Preferences: Themes, occasions, and design choices

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Device Information: Browser type, operating system, device type
• IP Address: For security and fraud prevention
• Usage Data: Pages visited, time spent, clicks
• Cookies: Session cookies for functionality (see Cookie Policy below)

1.3 Payment Information

Important: LoveCraft does NOT store your credit card, debit card, or banking information. All payment processing is handled securely by Razorpay, a PCI DSS compliant payment gateway. Your payment data is encrypted and transmitted directly to Razorpay.

2. How We Use Your Information

We use your information solely for the following purposes:

2.1 Service Delivery

• Create and deliver personalized digital products
• Generate custom greetings, cards, bouquets, letters, and maps
• Provide access links to your purchased content

2.2 Order Processing & Communication

• Process your payments through Razorpay
• Send order confirmations via email
• Provide customer support
• Send important service updates (only when necessary)

2.3 Security & Fraud Prevention

• Detect and prevent fraudulent transactions
• Monitor for suspicious activity
• Protect against unauthorized access

2.4 Service Improvement

• Analyze usage patterns to improve our products
• Fix technical issues and bugs
• Develop new features based on user needs

3. How We Store and Protect Your Data

3.1 Data Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data transmission uses HTTPS/SSL encryption
• Secure Servers: Data stored on secure, access-controlled servers
• Regular Backups: Automated backups to prevent data loss
• Access Controls: Limited employee access on a need-to-know basis
• No Credit Card Storage: Payment details never stored on our servers

3.2 Data Retention

• Order Data: Retained for 30 days to allow access to purchased products
• Personal Content: Stored as long as you have access to your greeting/product
• Transaction Records: Kept for tax and legal compliance (as per Indian law)
• Account Data: Deleted upon request (see Your Rights below)

4. Third-Party Services

We use the following trusted third-party services:

4.1 Razorpay (Payment Processing)

• Purpose: Secure payment processing for all transactions
• Data Shared: Payment amount, order details, email
• Privacy Policy: razorpay.com/privacy
• Compliance: PCI DSS Level 1 certified

4.2 Netlify (Hosting)

• Purpose: Website hosting and delivery
• Data Shared: Website usage data, IP addresses
• Privacy Policy: netlify.com/privacy

5. Cookies and Tracking

5.1 What Cookies We Use

Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for basic website functionality (login, cart)
• Session Cookies: Temporary cookies that expire when you close your browser
• Security Cookies: To prevent fraud and ensure secure access

5.2 What We Don't Use

• ❌ Third-party advertising cookies
• ❌ Social media tracking pixels (unless you explicitly share)
• ❌ Cross-site tracking cookies

5.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

6. Your Rights (Under Indian Law)

Under the Information Technology Act, 2000 and related regulations, you have the following rights:

6.1 Right to Access

You can request a copy of all personal data we hold about you.

6.2 Right to Rectification

You can update or correct inaccurate personal information.

6.3 Right to Deletion

You can request deletion of your personal data, subject to legal retention requirements.

6.4 Right to Data Portability

You can request your data in a structured, machine-readable format.

6.5 Right to Withdraw Consent

You can withdraw consent for data processing at any time (may affect service availability).

6.6 How to Exercise Your Rights

Email us at lovecraftwebin@gmail.com with your request. We will respond within 30 days.

7. Data Sharing and Disclosure

7.1 We DO NOT Sell Your Data

LoveCraft never sells, rents, or trades your personal information to third parties for marketing purposes.

7.2 When We May Share Data

We may share your information only in these limited circumstances:

• Service Providers: With Razorpay and Netlify (as described above)
• Legal Compliance: When required by law, court order, or government request
• Protection of Rights: To protect our legal rights, prevent fraud, or ensure safety
• Business Transfer: In case of merger, acquisition, or asset sale (you will be notified)

8. Children's and Teens' Privacy

8.1 Age Requirements

We understand that teenagers and young people use our services to express love to partners, parents, friends, and family. Our age policy is:

• Ages 13-17: May use our services WITH parental or guardian consent
• Ages 18+: May use our services freely
• Under 13: Not permitted to use our services

8.2 Parental Consent

If you are between 13-17 years old:

• Please ask a parent or guardian before making any purchase
• Ensure your parent/guardian approves of the greetings or content you create
• Payment information should be provided by an adult (parent/guardian)
• We may request verification of parental consent for purchases

8.3 What We Collect from Teens

For users aged 13-17, we collect only the information necessary to provide our service:

• Names (for personalized greetings)
• Email address (for delivery - can be parent's email)
• Payment information (handled by parent/guardian through Razorpay)
• Messages and content created

8.4 Parental Rights

Parents and guardians of users under 18 have the right to:

• Review all personal information we have about their child
• Request deletion of their child's data
• Refuse further collection or use of their child's information
• Contact us to exercise these rights at: lovecraftwebin@gmail.com

8.5 Children Under 13

We do NOT knowingly collect personal information from children under 13 years of age. If we discover that we have inadvertently collected data from a child under 13, we will delete it immediately.

If you are a parent or guardian and believe your child under 13 has used our service, please contact us immediately at lovecraftwebin@gmail.com.

9. International Data Transfers

Your data is primarily stored and processed in India. If data is transferred outside India (e.g., to third-party services), we ensure adequate protection through:

• Standard contractual clauses
• Privacy Shield or equivalent frameworks
• Service provider compliance certifications

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.

If we make significant changes, we will notify you via email (if provided) or through a prominent notice on our website.

11. Your Consent

By using LoveCraft, you consent to this Privacy Policy and our collection, use, and processing of your information as described herein.

12. Compliance with Indian Law

This Privacy Policy complies with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection Act, 2019

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: