Legal
Política de privacidad
Your privacy matters to us. This policy explains how we handle your data.
Last updated: March 2026
1. Data Controller
The data controller responsible for processing your personal data is:
Stars In Hands
Wave Estate, Sector-85, 303, 3rd Floor, Tower T
Sohana, SAS Nagar (Mohali), Punjab 140308, India
Email: [email protected]
2. What Data We Collect
We collect and process the following categories of personal data:
Order Information
When you place an order, we collect your name, email, shipping address, billing address, and payment information.
Account Data
If you create an account, we store your name, email, and order history.
Design Data
When you create a star map, we collect the date, time, location, and personalization text.
Analytics & Usage Data
We collect anonymous usage data including pages visited, browser type, and device type.
Communication Data
When you contact us, we store the contents of your message and contact details.
3. How We Use Your Data
We use your data for order processing, shipping notifications, customer support, analytics, marketing (with consent), legal compliance, and fraud prevention.
4. Third-Party Services
We share personal data with the following processors, strictly for the purposes listed: Razorpay and PayPal for payment processing, Gelato and Qikink for order fulfilment and shipping, Brevo for transactional and marketing emails, Google Analytics for traffic measurement, and Meta Pixel for advertising attribution. For transfers of EU resident data outside the EEA, we rely on the European Commission's Standard Contractual Clauses.
5. Your Rights (GDPR)
You have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent.
Contact [email protected] to exercise your rights. We respond within 30 days.
6. Cookies
Our website uses essential, functional, and analytics cookies.
You can manage cookie preferences through your browser settings.
7. Data Security
We implement appropriate technical and organizational measures to protect your data. All data is encrypted using TLS/SSL.
8. Data Retention
Order records are retained for 7 years to comply with Indian tax and GST record-keeping requirements. Account and email marketing preferences are retained until you request deletion. Analytics data is retained for 14 months, after which it is anonymised or deleted.
Derechos de los consumidores de California (CCPA)
Si usted es residente de California, tiene derechos adicionales en virtud de la Ley de Privacidad del Consumidor de California (CCPA) y la CPRA, incluido el derecho a saber qué información personal recopilamos, el derecho a eliminar su información personal y el derecho a rechazar la venta o el intercambio de información personal para publicidad conductual entre contextos.
No vendemos su información personal por dinero. Sí compartimos identificadores publicitarios con Meta Pixel y Google Ads con fines de medición y retargeting; según la CCPA, esto constituye 'intercambio' para publicidad conductual entre contextos. Puede optar por no participar rechazando la categoría Marketing en nuestro banner de cookies, o enviando un correo electrónico a [email protected] con el asunto 'Do Not Sell or Share My Personal Information'.
No recopilamos a sabiendas información personal de niños menores de 16 años.
9. Contact for Privacy Concerns
Contact [email protected] for questions about this policy.
You have the right to lodge a complaint with a supervisory authority.
