This notice is given under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. It stands on its own so you can give specific, informed consent for the processing described here.
Last updated: 24 October 2026
Puneet Naliath, an individual / sole proprietor operating Custom 3D Statue at custom3dstatue.com (no registered company), is the Data Fiduciary for personal data collected through this website. Questions about this processing: support@custom3dstatue.com.
We process personal data to take and fulfil custom 3D statue orders from photos, including design proofs, payment, production, delivery, support, remakes, and legally required records.
Itemised personal data and purposes:
Consent is free, specific, informed and given by a clear tick. You can withdraw it as easily as you gave it, using the form below, the cookie banner, or email. Withdrawal of order or photo consent may stop us completing an unfinished order; we will tell you the consequence before we act.
Photos are stored in a private object-storage bucket. Upload and read access uses short-lived signed URLs. Upload tokens are held in your browser session and are not placed in public page URLs. Photos are not used in marketing without a separate, explicit permission.
Reference photos are deleted 90 days after the order is delivered or closed (including cancelled or abandoned unpaid drafts), unless they are needed for an active dispute or you separately consent to longer retention. A daily scheduled job performs that deletion.
Order contact, address, payment references and processing logs are kept as needed to fulfil, support and remake the order, to meet tax or other legal duties, and for at least one year where Rule 8 of the DPDP Rules, 2025 requires processing logs to be retained, then erased unless a longer legal retention applies.
A child is a person under 18. We do not offer the site for a child to use on their own. If a photo includes a person under 18, a parent or guardian must give verifiable consent before upload. Before photo upload and again at checkout you must tick: “I have permission from the people in these photos (parent/guardian for under-18) and agree to the Privacy Policy”. That confirmation is stored with your order, together with your identity details.
We do not track children, carry out behavioural monitoring of children, or target advertising at children. Optional analytics tags load only after an adult accepts them and are not used to profile a child. If we learn we processed a child's data without parental consent, we will delete it.
We use these processors for the minimum personal data each needs. Some processing may occur outside India, subject to any restrictions the Central Government specifies under the Act.
Google Analytics, Google Ads, Meta Pixel and first-party visit logs (anonymous browser and session IDs, page path, referring domain, campaign labels) run only after you accept analytics in the cookie banner. They are off by default. We do not store IP addresses or raw URL query strings in the first-party analytics log. You can reject or withdraw analytics consent at any time through Cookie settings in the footer, without affecting your ability to order.
We use access control, private storage, hashed upload tokens, signed URLs, HTTPS, and processor contracts as reasonable security safeguards under Rule 6. No method of transmission or storage is completely secure.
If we become aware of a personal data breach, we will, to the best of our knowledge and without delay, inform affected Data Principals in clear language of the nature, extent and timing of the breach, likely consequences, measures we are taking, steps you can take, and a contact for questions (support@custom3dstatue.com).
We will also intimate the Data Protection Board of India without delay with a description of the breach, and provide the detailed intimation required by Rule 7 of the DPDP Rules, 2025 within 72 hours of becoming aware of the breach, or within a longer period the Board allows.
You may exercise these rights by the form below or by emailing support@custom3dstatue.com. Identify yourself with the email and, if you have one, the order number used on the site.
Contact for grievance redressal and questions about processing:
Use this form or email support@custom3dstatue.com. Both routes are available so withdrawal is as easy as the tick-box used to give consent.
Return to Create Yours or Contact if you need help with an order rather than a rights request.
