Privacypolicy

Pixie Bloom is a handmade resin jewellery shop run from Bhuj in Gujarat, India, by Gangotri. It is not a registered company and it has no staff.

This policy covers this website and the order form on it. It does not cover Instagram, Pinterest or WhatsApp themselves, which are run by their own companies under their own policies. What you send us through them, we treat the way this page describes.

The order form asks for eight things. All of them go into one private spreadsheet that only we can open.

Your name

So we know who we are writing back to, and whose parcel it is.

WhatsApp number

Where we reply, send the price, and send tracking. The courier also needs a number to call on the day.

Email

A second way to reach you if WhatsApp fails.

Instagram handle

Optional. Most orders start in a DM, and this lets us match your message to your form.

The piece you were looking at

Filled in for you when you arrive from a product page.

What you would like made

Kind of piece, how many, and your description. This is the brief.

Time on the page

A number of seconds, recorded to catch bots. It tells us nothing about you.

A reference code and a timestamp

Generated by us, so you and we can find the same order later.

Your delivery address is not on this form. We ask for it in the conversation, after the piece and the price are settled, so it is never sitting in a spreadsheet for an order that never happened.

We never ask for a card number, a UPI PIN, a bank password or an OTP. Nobody from Pixie Bloom will ever ask you for one. If a message claiming to be us does, it is not us.

To answer you, to quote you, to make the right thing, and to get it to your door. That is the whole list.

We do not build profiles, we do not score you, and nothing here is fed to an automated system that decides anything about you. There is no marketing list. If we ever start one you will have to ask to be on it.

Five companies, each for one job, and none of them pay us for your details.

Google

The order form writes to a Google spreadsheet, and our email is Gmail. Google stores it; we read it.

Shiprocket and the courier

Your name, address and phone number, so a parcel can be delivered and tracked. They get nothing about what is inside.

Meta

If you message us on Instagram or WhatsApp, that conversation sits on their servers, as any message does.

Netlify

Hosts this website and keeps ordinary server records of pages being loaded, the way every host does.

Umami

Counts our page visits. Umami is told a page was opened, and nothing about you beyond a browser and a country. It never sees your name, your contact or your order.

How a parcel travels once it leaves us, and what we do when it goes wrong, is set out on the Shipping & Delivery page.

Nobody else. We do not sell your details, rent them, trade them or hand them to anyone for advertising. The only other case is a lawful order from a court or the police, which we would have to follow.

This site sets no cookies and carries no advertising pixel. We do count page visits, using a tool called Umami, so we can see which pieces people actually stop and look at. It is built to be private: it puts nothing on your device, it gives you no ID to be followed by, and it cannot tell that the same person came back tomorrow, let alone recognise you on someone else’s website.

What it records is a page, not a person:

• Which page was opened, and the page or link that sent you to it.
• Your browser, your operating system, and whether you are on a phone or a bigger screen.
• A country and rough region, worked out from your internet address. The address itself is not stored.

That is all of it. No name, no email, no cursor trail, no recording of your screen, and nothing that could be tied back to an order you placed. We read the totals, never a single visit. If you would rather not be counted at all, any tracker-blocking extension or browser setting stops it, and every page here works exactly the same without it.

The fonts are still served from our own site rather than from Google, so opening a page here does not tell Google you were here.

One last thing, and it is not a cookie. When you send the order form, your browser holds a copy of the summary so the confirmation page can show it back to you. It lives in the tab, it never leaves your device, and closing the tab erases it.

Three years from the day your order is delivered, then we delete the row. Enquiries that never became orders are cleared out once a year.

Three years because a customer who comes back after two would rather we still had their address and their spelling than start again. If you would rather we did not, say so and we will delete it now.

Under the Digital Personal Data Protection Act, 2023, you can ask us for any of this, and we will do it. There is no form and no fee.

• Show me what you have. We will send you your rows, in full.
• Fix this. A wrong spelling, a changed number, a new address.
• Delete it. We remove your details, apart from anything we are legally required to keep.
• Stop contacting me. We stop.
• Tell someone else. You can nominate a person to exercise these rights if you cannot.

Email us from the address you ordered with, or send a DM from the account you ordered from, so we know it is you. We reply within 24 hours and finish the job within 30 days.

One thing we cannot undo: a piece already being made with your name on it. Ask us to delete your details mid-order and the order stops with them.

We ask before we post. If you send a photo of your piece, or write something kind, we will not put it on Instagram or on this site until you have said yes to that specific post. Say no and nothing changes about your order.

If you have already said yes and change your mind later, tell us and we will take it down.

The orders spreadsheet sits in a Google account with two-step verification switched on, and this site is served over HTTPS.

Only the people who run Pixie Bloom can open it. It is not shared outside the shop, and there is no office of people who could browse it out of curiosity.

That is the honest answer rather than the reassuring one: this is a small shop, so your details are looked after carefully rather than by a security department. If something ever does go wrong with them, we will tell you what happened and what we did about it, in plain words, rather than hoping you do not notice.

Pixie Bloom is not meant for children. We do not knowingly take an order from anyone under 18 unless a parent or guardian is doing it with them.

If you are a parent and think we have your child’s details, write to us and we will delete them.

If you are unhappy with how we have handled your details, write to Gangotri at pixiee.bloomm@gmail.com. She is the person who answers complaints, because she is the person who runs the shop. We acknowledge inside 48 hours and resolve inside a month.

If we have not sorted it out, you can complain to the Data Protection Board of India under the DPDP Act, 2023.

When this page changes we change the date at the top. If a change affects an order you have already placed, we will message you rather than leave you to find it.