Wood Art
International

Legal

Privacy Policy

Last updated 14 August 2026

Wood Art International respects your privacy. This policy explains what personal data we collect when you use this website, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to this website and to any order, enquiry or message you send us through it.

Data controller

Wood Art International (a sole proprietorship, proprietor Lissy Thomas), Manarcadu, Kottayam, Kerala 686019, India, is the controller of the personal data described here. For any privacy question, write to support@woodartinternational.com.

01

Data we collect

We collect only what we need to run the shop. Specifically:

  • Order details — your name, email address, phone number and delivery address, plus the items, quantities and amounts in your order. Required to fulfil the contract.
  • Payment records — the amount, currency, status, and the payment and order identifiers returned by Razorpay. We do not collect or store your card number, CVV, UPI PIN, or net-banking credentials at any point.
  • Enquiries and messages — the name, contact details and message you submit through our enquiry form, or send us by WhatsApp, email or phone.
  • Newsletter signups — your email address, if you choose to subscribe.
  • Reviews — the display name, rating and review text you submit, together with the order number, phone or email you supply so we can verify the purchase. Your name and review are published; the verification reference is not.
  • Room Visualizer uploads — the room photograph you upload, the style and room type you pick, and the WhatsApp number you provide. See section 4, which you should read before uploading a photo.
  • Wishlist and browsing signals — which products you save to your wishlist, recorded so we can follow up on serious interest.
  • Technical data — standard server and hosting logs such as IP address, browser type and pages requested, generated automatically when you visit.
02

Why we use it, and on what basis

  • To perform our contract with you — processing and delivering your order, taking payment, arranging shipping, providing order tracking and after-sales support.
  • Because you consented — sending newsletters and marketing messages, generating a Room Visualizer render from a photo you uploaded, and contacting you on WhatsApp about an enquiry or a saved wishlist item. You can withdraw consent at any time.
  • For our legitimate business interests — preventing fraud and payment tampering, verifying that a review comes from a genuine purchaser, keeping the site secure and available, and understanding which pieces attract interest.
  • To comply with the law — retaining invoices, tax records and transaction records as required under Indian tax and accounting rules.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

03

Payments and Razorpay

Payments on this site are processed by Razorpay Software Private Limited, an RBI-authorised payment aggregator, on PCI-DSS compliant infrastructure. When you pay, you enter your card, UPI or banking details directly into Razorpay’s checkout — those details never pass through or rest on our servers.

We share with Razorpay only what is needed to raise and reconcile the payment: the order number, the amount, and your name, email and phone number. Razorpay returns a payment identifier and status, which we verify cryptographically on our server before marking an order paid. Razorpay processes this data as an independent controller under its own privacy policy, available at razorpay.com.

04

Room Visualizer — please read before uploading

The Room Visualizer lets you upload a photograph of your room and see our furniture placed in it. To do this, your photograph is sent to Google’s Gemini image model for processing, and both the original photograph and the generated result are saved to our cloud storage so the render can be displayed back to you.

Important

Renders are stored in a bucket that is served over public URLs. Anyone who has the exact link to an image can open it. Links are not listed or indexed anywhere on this site, but please do not upload photographs containing people, documents, or anything else you would not want a stranger to see. Email us at support@woodartinternational.com and we will delete any upload on request.

The WhatsApp number you provide is used to apply the free-generation limit and to let us follow up about the pieces shown in your render. Providing it is optional in the sense that you can simply choose not to use the Visualizer.

05

Who we share data with

We share personal data only with service providers who help us operate the shop, and only to the extent each one needs:

  • Razorpay — payment processing and settlement.
  • Supabase — our database and file storage, where orders, enquiries, reviews and Visualizer images are held.
  • Vercel — website hosting and server logs.
  • Google (Gemini) — image generation for the Room Visualizer only.
  • Couriers and logistics partners — your name, delivery address and phone number, so they can deliver and call ahead.
  • CallMeBot / WhatsApp — used to alert our own team on the owner’s number when an order, enquiry or review comes in. Notification messages may contain your name, the item and your contact number.
  • Our accountants and legal advisers, and government authorities — where required by law or to establish or defend a legal claim.

Some of these providers operate servers outside India. Where your data is transferred abroad, it remains subject to this policy and to the provider’s own contractual and security commitments.

06

Cookies and local storage

We use browser local storage to remember your cart and wishlist between visits, and a service worker to cache pages so the site loads quickly and works on a poor connection. These are functional, stored on your own device, and are not used to track you across other websites. Clearing your browser data removes them — and with them your saved cart and wishlist.

07

How long we keep it

  • Order, invoice and payment records — retained for at least 8 years, as required by Indian tax and accounting law.
  • Enquiries and WhatsApp conversations — up to 3 years after our last exchange with you.
  • Newsletter subscriptions — until you unsubscribe.
  • Reviews — published for as long as the product is listed, unless you ask us to remove yours.
  • Room Visualizer photographs and renders — up to 12 months, or sooner if you ask us to delete them.
  • Server logs — typically 30 to 90 days, per our hosting provider’s retention settings.
08

Security

The site is served entirely over HTTPS. Order totals are recomputed on our servers from our own catalogue prices, so a tampered price in the browser cannot change what is charged, and every payment is verified against Razorpay’s signature server-side before an order is marked paid. Database access is restricted by row-level security, and administrative credentials are held only in server-side environment variables, never exposed to the browser.

No system is perfectly secure. If a breach ever affects your personal data, we will inform you and the relevant authority without undue delay.

09

Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask us to:

  • Give you a copy of the personal data we hold about you.
  • Correct data that is inaccurate, incomplete or out of date.
  • Delete data we no longer have a lawful reason to keep — noting that we must retain invoices and tax records for the statutory period.
  • Stop sending you marketing, or withdraw a consent you previously gave.
  • Nominate another person to exercise these rights on your behalf in the event of death or incapacity.

Write to support@woodartinternational.com and we will respond within 30 days. We may ask you to confirm your identity before acting on a request.

10

Children

This site is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it.

11

Changes to this policy

We may update this policy as our practices or the law change. The revision date at the top of this page always reflects the current version. Material changes will be highlighted on the site.

12

Grievance officer and contact

For any privacy question, request or complaint, contact our grievance officer. We acknowledge within 48 business hours and resolve within 30 days:

See also our Terms & Conditions.

Questions about this policy?

Contact Us →