⭐Privacy Policy (DPDPA-Compliant)

DerSegen ("we", "our", "us") is an online art marketplace that enables emerging artists to showcase and sell their artworks. As a trusted platform for artwork for sale, we are committed to protecting the personal data of our users (collectively "you" / "Users"), including buyers, artists, and visitors.

This Privacy Policy is prepared in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), and explains how we collect, use, store, share, and safeguard your Personal Data.

By accessing or using our Platform, you consent to the terms of this Privacy Policy.

• Personal Data: Any data about an identifiable individual.
• Data Principal: The individual to whom the personal data relates (you).
• Data Fiduciary: DerSegen, determining the purpose and means of processing your data.
• Processing: Any operation performed on personal data (collection, storage, sharing, etc.).

A. Data provided directly by you:

• Name, mobile number, email address (used for facilitating artwork for sale transactions)
• Delivery address, billing address (required for shipping art paintings for sale)
• Payment details (UPI, transaction IDs — we do not store card/bank numbers)
• Artist profile information (biography, artwork details, social media links featured on our online art galleries Delhi section)
• Identity documents (PAN, GST, bank details for payouts to artists selling artwork for sale)
• Any communication via WhatsApp, email, or contact forms related to art paintings for sale or gallery inquiries

B. Data collected automatically:

• IP address, device type, browser details
• Cookies and tracking pixels (analytics, preferences, history)
• Platform usage data, pages visited, interactions

C. Data from third parties:

• Payment gateway confirmations
• Courier partners (tracking details)
• Social media platforms (if you connect your accounts)

We process your data for the following lawful purposes:

For Buyers:

• Account creation & login
• Order placement, payment processing, delivery coordination
• Customer support and communication
• Fraud detection & security

For Artists:

• Onboarding, verification, KYC
• Listing, marketing, and selling artworks
• Payments, commissions, and settlements
• Communication regarding orders & returns

For All Users:

• Improving website functionality
• Marketing, promotions, newsletters (with consent)
• Legal compliance, dispute resolution

• By using our Platform to explore or purchase artwork for sale, including exclusive art paintings for sale from emerging artists and art galleries Delhi, you provide consent for us to process your personal data.
• You may withdraw consent at any time by contacting our Grievance Officer (details below). This includes consent related to transactions or communications about artwork for sale.
• However, withdrawal may impact your ability to use the Platform or access certain features related to listing and buying art paintings for sale (e.g., closing your account).

• Our Platform is not intended for individuals below 18 years of age.
• We do not knowingly collect or process children's data.

We may share your data with:

• Payment gateways (Razorpay/PayU etc.)
• Courier & logistics providers
• Artists (for fulfilling artwork commissions or enquiries)
• IT service providers, hosting providers
• Legal or regulatory authorities (only when required by law)

We retain your data only for as long as required for the purposes stated or as required by law.

Examples:

• Transactional data → 7–10 years (tax compliance)
• Artist payout records → As required for settlement disputes
• Marketing data → Until consent is withdrawn
• Account data → Until account deletion

We implement reasonable security safeguards, including:

• Encrypted data transfer (HTTPS)
• Secure password storage
• Limited access to sensitive data
• Regular audits and monitoring
• Data minimisation practices

Despite best efforts, no digital platform is 100% secure; however, we take all reasonable measures required under DPDPA.

• Some service providers (hosting, analytics) may store or process data outside India.
• Such transfers occur only under lawful mechanisms permitted by DPDPA.

You have the following rights under DPDPA:

• Right to Access your personal data
• Right to Correction of inaccurate or incomplete data
• Right to Withdrawal of Consent
• Right to Grievance Redressal
• Right to Nominate another individual to exercise rights in the event of incapacity

You may exercise these rights by contacting our Grievance Officer.

As required under DPDPA, DerSegen appoints the following Grievance Officer:

• We may update this Privacy Policy from time to time.
• Revised versions will be posted with an updated "Last Updated" date.
• Continued use of the Platform constitutes acceptance of the revised Policy.

For any privacy-related questions, please contact: