Privacy Policy

1. Who we are

PortraitKart is a sole proprietorship owned by Jatin Tarai, selling hand-drawn portraits across India. We are the data fiduciary for the information described on this page.

Registered address: [PENDING: registered address + pin code]
Contact: hello@portraitkart.com · +91 97760 15090

2. What we collect

• Your name, phone number and delivery address — to make and deliver the portrait.
• Your WhatsApp conversation with us — the order brief, approvals and corrections all live in that chat, so we keep it as the record of your order.
• The photographs you send us — covered separately in section 3 below.
• Payment reference numbers — the UPI reference or transaction ID. We never see or store your card number, UPI PIN, bank login or account credentials. Payments are made directly through your own bank or UPI app.
• Website usage — pages viewed, buttons clicked, device and browser type, and an approximate location derived from your IP address.

3. Your photographs

This is the part that matters most, so it is stated plainly:

• Your photographs are used only to draw your portrait.
• They are never sold, shared or licensed to anyone, for any purpose.
• They are retained for 12 months after delivery, in case you ask for a reprint or a second copy, and are then deleted.
• They are deleted sooner on request — just ask on WhatsApp and we will confirm when it is done.
• They are seen only by the artist assigned to your order, and by Jatin.

We publish a finished portrait on our website or social media only with your explicit permission. We will ask you, in writing, on WhatsApp. If you say no — or say nothing — it is not published. Permission can be withdrawn at any time and we will take it down; where a post has already been shared onward by others, we cannot always control those copies, and we will say so honestly rather than promise otherwise.

4. Cookies and tracking

We use the following, and nothing else:

• Google Tag Manager — loads the two tools below.
• Google Analytics 4 — how many people visit, which pages they read, where they leave.
• Google Ads conversion tracking — tells us which advertisement led to an enquiry.
• Two first-party cookies, pk_gclid and pk_ref — set for 90 days. They record which advertisement or link brought you here, so that when you message us on WhatsApp we can connect that enquiry back to the ad that produced it. They hold no personal details and are not used to build a profile of you.
• No embedded video players. The short video of the artist on our home page is hosted on our own site, so watching it tells YouTube, or anyone else, nothing about you.

You can block or delete cookies in your browser settings. The site works fine without them.

WhatsApp conversations are handled by WhatsApp under its own privacy policy, over which we have no control.

5. Who we share with

• Google — website analytics and advertising, as described above.
• Courier partners — your name, delivery address and phone number only. Never your photographs.
• The artist assigned to your order — the photograph and the brief. Artists work under an obligation of confidentiality.

Nobody else. We do not sell your data, and we do not share it for anyone else's marketing. We may disclose information where the law requires it.

6. Your rights

You can ask us to show you what we hold about you, correct anything that is wrong, or delete it. Email hello@portraitkart.com or message us on WhatsApp. We respond within 30 days.

Some records — invoices and payment references — must be kept for tax and accounting purposes even after a deletion request. We will tell you if that applies.

7. Security

Being honest rather than impressive: your photographs and messages sit in the business WhatsApp account and in cloud storage, both protected by passwords and two-factor authentication, on devices that are password-locked. Access is limited to Jatin and the artist working on your order.

No system is perfectly secure and we are not going to claim ours is. If information we hold is ever exposed, we will tell the people affected.

8. Children

We do not knowingly collect data from anyone under 18. Portraits of children are commissioned by an adult, who provides the photograph and the delivery details. If you believe a child has sent us information directly, tell us and we will delete it.

9. Changes to this policy

Any change is posted on this page with a revised "Last updated" date. If a change materially affects how we handle your photographs, we will tell existing customers on WhatsApp rather than expecting you to notice it here.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, the Grievance Officer for PortraitKart is:

[PENDING: Grievance Officer name, designation, email, phone]

Complaints are acknowledged within 48 hours and resolved within 30 days.