Privacy Policy

How we collect, use, and protect your personal information.

Last updated: June 2025

Who We Are

LayerPop ("we", "us", "our") is an Indian D2C brand selling handcrafted 3D-printed home decor, nameplates, and personalised gifts. Our website is www.layerpop.in.

What Data We Collect

We collect the following personal data when you interact with us:

  • Name, phone number (+91), email address — provided when you submit a custom order request.
  • Delivery address — collected via WhatsApp during order confirmation.
  • Custom order description — the idea or design details you submit via the Custom Order form.
  • Browsing and device data — collected automatically via Google Analytics 4 (page views, session duration, device type, approximate location).

We do not collect payment card details. Payment is handled via WhatsApp-coordinated UPI / bank transfer.

Why We Collect It

  • To confirm and fulfil your order.
  • To respond to your custom order request.
  • To share order updates, tracking information, and customer support via WhatsApp or email.
  • To analyse website traffic and improve the user experience (GA4).

Third Parties We Share Data With

  • Google Analytics (GA4) — analytics data is sent to Google servers in the USA. Google's Privacy Policy applies.
  • Amazon Web Services (AWS S3 / CloudFront) — product images and media files are stored on AWS servers (region: ap-south-1, India). Some data may be replicated globally by the CDN.
  • WhatsApp (Meta) — order conversations are conducted via WhatsApp. Meta's privacy policy applies to messages sent on their platform.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

Data Retention

  • Order data (name, address, items) is retained for 3 years as required under GST and accounting laws.
  • Custom order form submissions are retained until the request is resolved and then for 1 year thereafter.
  • Analytics data retention follows Google Analytics default settings.

Your Rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request erasure of your data (subject to legal retention obligations).
  • Withdraw consent for analytics (by clearing cookies / using a browser that blocks GA4).

Cookies & Analytics

Our website uses cookies set by Google Analytics to understand how visitors use the site. No personally identifiable information is stored in these cookies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Security

Our website is served over HTTPS (SSL/TLS encrypted). Data stored in our database is hosted on MongoDB Atlas with access controls. We take reasonable precautions to protect your data but cannot guarantee absolute security of internet transmissions.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.