Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains how Canvasattack ("we", "us") collects, uses and protects your information when you visit our website or place an order. By using the site you agree to this policy.

Information we collect

• Account details: your name, email address, phone number and password (stored encrypted).
• Order details: shipping and billing addresses, the products you order, and any gift or dropship recipient details you enter.
• Photos and text you upload to personalise a product.
• Payment information: payments are processed by our payment partners (Razorpay, and PayPal for international orders). We never see or store your full card number, UPI PIN or bank login.
• Technical data: browser type, device, IP address and pages visited, used to keep the site secure and working.

How we use your information

• To make, ship and deliver your order, and to contact you about it (order updates, artwork questions, delivery).
• To manage your account, saved addresses and reward points.
• To prevent fraud and misuse of the website.
• To send offers and news, only if you have agreed to receive them. You can unsubscribe at any time.

Your photos

Photos you upload are used only to produce your order. We do not sell them, share them publicly or use them in our marketing without your written permission. Our production team may view them to check print quality. Uploaded files are kept for [CONFIRM: e.g. 90 days] after delivery so we can handle reprints, and then deleted.

Who we share information with

We share only what is needed to complete your order with:

• Payment partners (Razorpay, PayPal) to process payments.
• Courier and logistics partners to deliver your order.
• Cloud service providers that host our website, database and image storage.

We do not sell your personal information to anyone. We may disclose information if required by law.

Cookies

We use essential cookies to keep you signed in, remember your cart and your selected country/currency. We do not use third-party advertising cookies [CONFIRM: update if Google Analytics / Meta Pixel are added].

Data security

Passwords are stored encrypted, the site is served over HTTPS, and access to order data is limited to authorised staff.

Your rights

You can view and update your profile and addresses from My Account at any time. To ask for a copy of your data, or to delete your account and personal data, email us at [CONFIRM: support email]. We may keep order records where the law requires us to (for example, for tax purposes).

Children

Our website is not intended for children under 18. Orders must be placed by an adult.

Grievance Officer

In line with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020:

India Name: Yuvraj Address: Universal Art Gallery, Ground Floor, A-31,32 Sanvi Residency, House Road, near Pravin Ramani, Nehru Park Society, Dehgam, Dist. Gandhinagar, Gujarat 382305, India

USA Name: James Email: cs@canvasattack.com Address: [CONFIRM: USA address]

We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.