Privacy Policy | Shilpkar

1. Who we are

Shilpkar is a solo art business operated by Shilpi Jain, based in Ebbsfleet Valley, Kent, UK. When we refer to "Shilpkar", "we", "us", or "our" in this policy, we mean Shilpi Jain trading as Shilpkar.

Contact: hello@shilpkar.co.uk

2. What data we collect

Contact & enquiry data: name, email address, phone number, and any message you send via our contact or event enquiry forms.
Class booking data: parent name, child name, child's age, and payment information (processed securely via Stripe).
Commission requests: contact details, artwork description, reference images, and budget information.
Account data: email address and password hash if you create a Shilpkar account (stored securely via Supabase).
Usage data: anonymous analytics via standard web server logs (IP address, browser type, pages visited).

3. How we use your data

To respond to enquiries and process bookings.
To send class reminders, payment notifications, and studio updates (only if you opt in).
To process payments securely via Stripe.
To improve our website and services.

We do not sell or share your personal data with third parties for marketing purposes.

4. Data retention

We retain enquiry and booking data for up to 3 years to comply with tax and business record-keeping obligations. You may request deletion of your data at any time by contacting us.

5. Cookies

Our website uses only essential cookies required for authentication and security. We do not use tracking or advertising cookies.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to processing of your data.
Lodge a complaint with the ICO (ico.org.uk).

To exercise any of these rights, please email us at hello@shilpkar.co.uk.

7. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page indicates when it was last revised.