Privacy Policy

Effective Date: [23 June, 2026] | Last Updated: [23 June, 2026]


This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you visit, browse, or transact through www.[insert website URL][1]  (the “Website”). We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and other applicable laws of India, as amended from time to time.
By accessing or using the Website, providing your personal data, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy. Where the law requires your consent, we will collect and process your personal data only after obtaining it.


1. Who We Are (Data Fiduciary)
Under the DPDP Act, the person who determines the purpose and means of processing your personal data is the “Data Fiduciary.” For this Website, the Data Fiduciary is:

  • Name: Seema Kohli Studio
  • Contact email: [insert email address]
  • Address: [insert correspondence address]

If you have any questions about this Policy or how your data is handled, you may contact us using the details in the “Grievance Redressal” section below.


2. Scope of This Policy
This Policy applies to all personal data we collect through the Website, including when you:

  • Purchase a book or make any other purchase through the Website;
  • Contact us through the “Get in Touch” section regarding workshops, collaborations, talks, or other queries;
  • Subscribe to our newsletter; or
  • Otherwise browse or interact with the Website.

The Website primarily showcases Seema Kohli’s upcoming, ongoing, and past exhibitions, workshops, talks, works, and projects.
Please note: if you wish to enquire about or acquire Seema Kohli’s artworks, you will be directed to connect with the affiliated galleries. Any personal data you share with such galleries is governed by the privacy practices of those galleries and not by this Policy.


3. Personal Data We Collect
We collect only the personal data that is necessary for the specific purpose for which you interact with us. The categories of data we collect are described below.


3.1 Purchases (Store / Checkout)
When you make any purchase through the Website, we may collect:

  • Name;
  • Address (billing and/or shipping);
  • Email ID;
  • Phone number;
  • Payment-related information required to complete the purchase. Payment information is collected and processed directly by our third-party payment gateway partner, not by us.We do not store your card number, CVV, UPI credentials, net-banking passwords, or other sensitive payment details on our servers.
  • Transactional details (such as order number, items purchased, amount, date of transaction, and delivery status), which we retain to fulfil your order and to process returns or refunds, if any.
  • Verification details — at the time of billing/checkout, you may be required to complete a one-time password (OTP) verification (sent to your email and/or phone number) to confirm your identity and authorise the transaction. We use the OTP only to verify and secure the transaction and do not store it after verification.[2] 


3.2 “Get in Touch” Enquiries
When you contact us through the “Get in Touch” section, we may collect:

  • Name;
  • Email ID;
  • Phone number;
  • Any other information you voluntarily share in the message/text box (for example, details of your enquiry, workshop, or collaboration proposal).

Please share only the information that is necessary for your enquiry, and avoid including sensitive personal information in the free-text message box.


3.3 Newsletter Subscription
If you choose to subscribe to our newsletter, we collect:

  • Email ID.

Subscription is voluntary, and you may unsubscribe at any time (see “Your Rights” below).


3.4 Technical and Usage Data
Like most websites, we (or our service providers) may automatically collect limited technical information such as your IP address, browser type, device and network information, operating system, approximate location (such as city or region derived from your IP address), and pages visited, through cookies or similar technologies, to operate, secure, and improve the Website. Where required by law, such collection will be subject to your consent. See the “Cookies” section for more details.


3.5 Information About Other Individuals
If you provide us with personal data about another individual (for example, by naming a third party or sharing their contact details in a “Get in Touch” message or a delivery address), you confirm that you are authorised to share that information and that you have informed that individual about this Privacy Policy. Such individuals have the same rights under this Policy as you do.


4. Sources of Your Personal Data
We collect personal data from the following sources:

  • Directly from you — when you make a purchase, contact us through the “Get in Touch” section, subscribe to the newsletter, or otherwise communicate with us.
  • Automatically — technical and usage data collected when you browse the Website, through cookies and similar technologies.
  • From our service providers — our payment gateway, logistics/delivery partners, hosting and newsletter platforms may provide us with limited information (such as confirmation of payment status or delivery) to help us operate the Website and fulfil your requests.


5. How and Why We Use Your Data
We process your personal data for the following purposes and on the lawful bases described below:

  • To process and fulfil purchases — to complete your order, arrange delivery, send order confirmations, and process returns or refunds. Basis: performance of your purchase/contract and your consent.
  • To verify your identity and secure transactions — including through one-time password (OTP) verification at the time of billing/checkout, to confirm your identity, authorise payments, and prevent fraud. Basis: performance of your purchase/contract and our legitimate interest in security.
  • To respond to enquiries — to reply to messages submitted through the “Get in Touch” section regarding workshops, collaborations, talks, or other queries. Basis: your consent / the legitimate purpose of responding to you.
  • To send the newsletter — to share updates about exhibitions, workshops, talks, works, and projects, where you have subscribed. Basis: your consent.
  • To maintain records — to keep transactional records for accounting, tax, returns, refunds, and dispute resolution. Basis: compliance with legal obligations and our legitimate purposes.
  • To secure and improve the Website — to operate, maintain, protect, and enhance the Website and prevent fraud or misuse. Basis: legitimate purposes permitted under applicable law.

We will not use your personal data for any purpose that is incompatible with those listed above without informing you and, where required, obtaining your consent.


6. Consent
Where we rely on consent, you provide it through a clear, affirmative action — for example, by ticking a consent checkbox, submitting the “Get in Touch” form, subscribing to the newsletter, or completing a purchase. Your consent is free, specific, informed, unconditional, and unambiguous, and is limited to the purposes notified to you.

You may withdraw your consent at any time by contacting us at the email address provided in the “Grievance Redressal” section, or by using the unsubscribe link in our newsletter. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent that is necessary for a particular service (for example, to fulfil an order), we may be unable to provide that service.


7. How We Share Your Data
We do not sell or rent your personal data. We share your personal data only as necessary and with appropriate safeguards, including with:

  • Payment gateway partner — a third-party payment service provider who processes and is responsible for all payment-related information in order to complete your transaction. Your payment data is governed by that provider’s own privacy policy and security standards.
  • Logistics and delivery partners — to deliver books or other purchased items to your address.
  • Service providers — such as website hosting, email/newsletter platforms, and IT support, who process data on our behalf and under confidentiality obligations.
  • Affiliated galleries — where you choose to be connected to a gallery in relation to an artwork enquiry. Once connected, the gallery handles your data under its own privacy practices.
  • Legal and regulatory authorities — where required to comply with applicable law, a court order, or a lawful request, or to protect our rights, safety, or property.
  • In a business transfer — if Seema Kohli’s business or relevant assets are involved in a merger, acquisition, reorganisation, or sale, your personal data may be transferred to the relevant party, subject to this Policy and applicable law.

We do not sell, trade, or rent your personal data to third parties. We require our service providers to use your personal data only for the purposes for which it is shared and to maintain appropriate security measures.


8. Payment Information
All payments made through the Website are processed by a third-party payment gateway[3] . Seema Kohli Studio does not collect or store your full payment credentials. The payment gateway is responsible for the collection, processing, and security of all payment-related information in accordance with applicable laws and industry security standards (such as PCI-DSS, where applicable). We retain only limited transactional details (such as order number, amount, and date) necessary to manage your order and to handle returns or refunds, if any. We encourage you to review the privacy policy of the payment gateway at the time of checkout.


9. Advertising and Tracking
The Website is intended to showcase Seema Kohli’s work and to support enquiries, the newsletter, and purchases. We do not display third-party advertising on the Website and do not use your personal data for third-party behavioural or targeted advertising, nor do we sell your data to advertisers. If this changes in the future, we will update this Policy and, where required, obtain your consent.


10. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to provide the services you requested, to comply with legal, accounting, or tax obligations, and to resolve disputes or enforce our agreements. Specifically:

  • Purchase and transactional data — retained for the period required to process returns/refunds and to meet accounting and tax record-keeping requirements under applicable law (typically up to 8 years for tax/accounting records).[4] 
  • “Get in Touch” enquiries — retained for as long as needed to respond to and manage your enquiry, and a reasonable period thereafter.
  • Newsletter data — retained until you unsubscribe or withdraw your consent.

When personal data is no longer required, we will delete, erase, or anonymise it in accordance with applicable law.


11. Data Security
We implement reasonable security practices and procedures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These may include access controls, secure hosting, and use of reputable third-party processors. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential.
In the event of a personal data breach, we will take appropriate action and provide notifications to you and to the Data Protection Board of India as required under the DPDP Act.


12. Your Rights (Data Principal Rights)
Subject to applicable law, you (as a “Data Principal”) have the following rights in relation to your personal data:

  • Right to be informed — to be informed about how we collect and process your personal data, which we provide through this Policy.
  • Right to access — to obtain a summary of the personal data we process about you and the processing activities undertaken.
  • Right to correction and updation — to have inaccurate or incomplete data corrected, completed, or updated.
  • Right to erasure — to request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to legal retention requirements.
  • Right to data portability — to request, where applicable, a copy of the personal data you provided to us in a commonly used, machine-readable format.
  • Right to withdraw consent / object — to withdraw consent at any time, and to object to or request that we restrict certain processing of your personal data, as described in the “Consent” section.
  • Right to grievance redressal — to a readily available means of registering a grievance with us (see below).
  • Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us using the details in the “Grievance Redressal” section. We may need to verify your identity before acting on your request. We will respond to and action valid requests within the timelines prescribed under applicable law (and, where feasible, within 7 days for correction or deletion requests).


13. Children’s Data
The Website is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children except in accordance with the DPDP Act. In the event we process the personal data of a child, we will obtain verifiable consent from a parent or lawful guardian and will not undertake any processing that is likely to cause a detrimental effect on the well-being of the child, nor engage in tracking, behavioural monitoring, or targeted advertising directed at children.


14. Cookies and Similar Technologies
The Website may use cookies and similar technologies to enable core functionality, remember your preferences, analyse traffic, and improve your experience. You can manage or disable cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Website. Where required by law, non-essential cookies will be used only with your consent.[5] 


15. Third-Party Links and Services
The Website may contain links to third-party websites or services, including affiliated galleries and the payment gateway. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party websites you visit.


16. Transfers of Data
Your personal data is generally stored and processed in India. Where any service provider processes data outside India, we will do so only in accordance with applicable law, including any restrictions notified by the Government of India under the DPDP Act, and with appropriate safeguards.[6] 


17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last Updated” date. We encourage you to review this Policy periodically. Continued use of the Website after changes are posted constitutes your acknowledgement of the updated Policy.


18. Grievance Redressal
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the handling of your personal data, or if you wish to exercise your rights, you may contact our Grievance Officer / point of contact:

  • Name: [insert name of Grievance Officer]
  • Email: [insert grievance email address]
  • Address: [insert address]


How to lodge a complaint: we recommend that you submit your grievance in writing to the contact above, providing specific details of the issue and any information needed to verify your identity. We will acknowledge receipt of your grievance promptly and endeavour to investigate and resolve it within a reasonable timeframe and within the timelines prescribed under applicable law.
If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India in accordance with the DPDP Act.


19. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of India. Subject to applicable law, the courts at New Delhi shall have exclusive jurisdiction over any disputes arising out of or in connection with this Policy or the processing of your personal data.