Last updated: 19 October 2026
This Privacy Policy describes how Things & Pieces ("we", "our", "us") collects, uses, stores, discloses and protects personal data of people visiting riyakumari.com, the website Things & Pieces is hosted on, and our shop at store.riyakumari.com, and of the Pinterest account connected to our Pinterest app. It is written to comply with India's Digital Personal Data Protection Act, 2023 and other applicable data protection laws, including the GDPR for visitors in Europe.
1. Definitions
Personal Data is any information that identifies or relates to an identifiable individual. Processing includes collecting, storing, using, disclosing and deleting it.
2. Information We Collect
Website visitors. riyakumari.com is an art portfolio with no accounts, forms or advertising. On it, and when browsing the shop, we collect only:
- Technical data that our hosting provider, Cloudflare, processes to serve and secure the sites, such as IP address, browser type and pages requested.
- Anonymous, aggregated visit statistics (pages viewed, referring site, country, device type), if we use Cloudflare Web Analytics, which does not use cookies.
- Anything you choose to send us by email, such as your name, email address and message.
Shop customers. When you place an order at store.riyakumari.com, we collect:
- Your mobile number, which we verify with a one-time code sent by SMS and use to sign you in to see your orders.
- Your name and delivery address.
- What you ordered, the amount, and the order and payment status.
- Payment references from Razorpay, our payment provider. Your card, UPI or bank details are entered on Razorpay's checkout and are never seen or stored by us.
Pinterest app. Our app connects only to our own Pinterest account, which we authorise through Pinterest's official sign-in. Through the Pinterest API it accesses:
- Basic account information (username and profile details).
- Our boards and Pins, so that it can create boards and publish Pins of our artwork and products.
- Analytics for our account and Pins, such as impressions, saves and clicks.
- An access token issued by Pinterest, so the app can act on our account.
The app does not access, collect or store data about other Pinterest users, their boards or their Pins.
3. Legal Basis of Processing
We process data to fulfil your order (contractual necessity), on the basis of consent (for example, when you email us or we authorise the app), for legitimate interests (running and securing the sites and promoting our artwork and products), and to meet legal obligations such as tax and accounting records.
4. Purpose of Data Collection
We use data to process, pack, ship and support your orders, verify your phone number, operate and secure the sites, reply to messages, prevent fraud, understand which artwork and products people find interesting, publish and schedule our own Pins, and measure how those Pins perform. We do not use it for advertising, profiling or automated decision-making.
5. Cookies and Tracking
Neither site sets advertising or tracking cookies. The shop stores your cart, your sign-in session and a list of your recent orders in your browser's local storage so they are still there when you come back; you can clear them in your browser settings. Some project pages on riyakumari.com embed YouTube videos; YouTube may set cookies when you play one, under Google's privacy policy. Razorpay's checkout may use cookies to process payments securely, under Razorpay's privacy policy.
6. Data Sharing and Disclosure
We do not sell or rent personal data. We share data only with the service providers that run the sites, shop and app, who process it for us:
- Cloudflare (hosting, security and analytics).
- Supabase (our database and phone sign-in).
- Razorpay (payments).
- Fast2SMS and Twilio (sending verification codes by SMS).
- Resend (order notification emails).
- Courier partners (your name, phone and address, to deliver your order).
- Google (email and embedded YouTube videos).
- Pinterest (the account the app connects to).
We may also disclose data when the law requires it.
7. International Data Transfers
Our service providers may process data outside India, including in the United States and the European Union. Where this happens, we rely on the providers' safeguards, such as standard contractual clauses.
8. Data Retention
We keep order records, including your name, phone number and address, for as long as Indian tax and accounting law requires. We keep emails for as long as we need them to reply to you and keep a record of our correspondence. Pinterest analytics are kept for as long as they are useful for planning our Pins. The Pinterest access token is kept only while the app is connected and is deleted when access is revoked.
9. Your Rights
You may ask to access, correct, delete, restrict or move your personal data, or withdraw your consent, by emailing riya.kumari1999@gmail.com. We may need to keep order records the law requires us to keep. If you are in Europe, you may also complain to your local data protection authority.
Access for the Pinterest app can be revoked at any time in Pinterest under Settings → Security and logins → Apps. Doing so stops all access, and we delete the stored token.
10. Data Security
We protect data with technical and organisational safeguards. All traffic is encrypted (HTTPS); order data is only accessible to you, when signed in with your verified phone number, and to us. Payment details are handled by Razorpay. Pinterest access tokens and API keys are kept in private configuration and are never published in the sites' code.
11. Children's Data
Our sites, shop and Pinterest app are not intended for individuals under 18, and we do not knowingly collect their personal data.
12. Policy Updates
We may update this Privacy Policy from time to time. The date at the top shows when it last changed. Continued use of the sites after a change means you accept the updated policy.
13. Contact Information
For questions or requests, contact Things & Pieces at riya.kumari1999@gmail.com.