Privacy Policy

Last updated: 5 November 2026

This policy explains what personal data Priyora Foundry (“we”, “us”, “the studio”) collects, why we collect it, who we share it with, and what you can ask us to do with it. It applies to this website, to enquiries, and to client projects we run.

We are the data controller for the information described here. You can reach us at hello@priyorafoundry.com.

1. What we collect

• Contact details — name, email address, phone or WhatsApp number, business name, when you enquire or engage us.
• Project information — briefs, brand assets, product photographs, copy, logins you give us to do the work, and message history.
• Billing information — invoice details, GST or tax number, billing address.
• Usage data — page views, referring source, device type, approximate location derived from IP. This site does not run advertising or cross-site tracking pixels of our own.
• Payment data — handled entirely by our payment processor. We receive the transaction outcome (paid, failed, refunded) and the last four digits of the instrument. We never see or store full card numbers.

2. Why we use it

• To answer an enquiry and prepare a quote.
• To deliver the work you have paid for, including passing briefs and assets to the people doing it.
• To invoice, collect payment, and meet accounting and tax obligations.
• To keep a record of what was agreed, so scope is not argued later.
• To send occasional service updates — always with an unsubscribe link, never with your data sold on.

3. Our lawful basis

Where Indian law applies, we process data under the Digital Personal Data Protection Act, 2023: on the basis of your consent when you contact us, and on the basis of the contract when we work for you, or to meet legal obligations for tax records. Where the GDPR applies, our bases are consent, performance of a contract, legitimate interests in running the studio, and legal obligation.

4. Who we share it with

• Payment processors — to collect fees.
• Hosting and email providers — this website and our mailboxes run on third-party infrastructure.
• Platform partners — Meta, Google, Shopify, Amazon, Flipkart, WhatsApp or similar, only when a project requires access to your accounts.
• AI and design tools — models used to draft and generate creative work. We send only what the brief requires; client product photographs and brand assets are not used to train third-party models.
• Professional advisers — accountant or legal counsel, where necessary.

We do not sell personal data, and we do not rent contact lists.

5. How long we keep it

Enquiries that do not become projects: 12 months. Project records and invoices: 8 years, because tax law requires it. Access credentials you share for a project are deleted or handed back within 30 days of the project closing, unless you ask us to keep maintaining the account.

6. Where it lives

Our servers and service providers may store data outside the country you are writing from. Standard measures are used to protect it: encrypted transport (HTTPS), access restricted to the people doing the work, and credentials stored rather than shared in message threads.

7. Your rights

You can ask to see the personal data we hold about you, correct it, delete it, restrict how we use it, or withdraw consent. Write to hello@priyorafoundry.com and we respond within 30 days. If you are in the EU or UK you may also complain to your local supervisory authority; if you are in India, to the Data Protection Board.

8. Cookies

This site uses a single local preference — the currency you picked (INR or USD) — stored in your browser. No advertising cookies, no cross-site profiling. If analytics are added later, this policy will say so before they are switched on.

9. Children

The studio sells to businesses. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us personal data, tell us and we will delete it.

10. Changes

If this policy changes materially, the date at the top changes and clients with an active project are told by email.