Privacy Policy

Privacy Policy

House of AshVed
Last updated: 20 August 2026

The short version

We collect only what we need to sell you a work of art, deliver it safely, and stay in touch if you want us to. We never sell your data. We treat the fact that you collect art — and what you collect — as private information, and we do not disclose it to anyone, including the artist, without your permission. You can ask us at any time to show you what we hold, correct it, or delete it.

The longer version below explains all of that precisely, because you deserve precision as well as reassurance.

1. Who we are

House of AshVed is operated by [Legal Entity Name], registered at [Registered Address], GSTIN [GSTIN].

Under India's Digital Personal Data Protection Act, 2023 and the rules made under it, we are the Data Fiduciary for the personal data you share with us, and you are the Data Principal. In plain terms: we are responsible for what happens to your information, and you have rights over it that we are obliged to honour.

You can reach our privacy contact at privacy@houseofashved.com.

2. What we collect

What you give us directly

  • Your name, email address, phone number and, if you create an account, a password.
  • Delivery and billing addresses — yours, and those of anyone you ask us to send a work to.
  • What you tell us in an enquiry, a WhatsApp message, an Instagram DM, or a conversation with our curator: the room you're furnishing, the palette you're drawn to, the art forms you're exploring, the budget range you have in mind.
  • Your PAN, where a transaction requires it (see Section 8).
  • Your responses to surveys, and any review or photograph you choose to send us.

What we generate when you buy

  • Order history, invoices, shipping records, and the provenance record for each work you acquire — which artwork, which artist, when, and at what price.
  • Payment status and the last four digits and card network of the instrument used. We never see or store your full card number, CVV, UPI PIN or net-banking credentials.

What we observe when you browse

  • Device type, browser, approximate location derived from IP address, pages viewed, and how you arrived at our site.
  • Cookies and similar technologies, described in Section 13.

What others tell us

  • Confirmation from our payment gateway that a payment succeeded or failed.
  • Delivery status and, where relevant, proof of delivery from our logistics partners.
  • Basic profile information from Instagram or Meta if you contact us through those platforms, governed by their policies as well as ours.

We do not collect data about your race, caste, religion, political views, health, or any comparable category. If you volunteer such information in conversation, we do not record it.

3. Why we use it

What we do Why
Process your order, take payment, raise an invoice To perform our contract with you
Pack, insure, ship and deliver the work To perform our contract with you
Maintain provenance and authenticity records Our legitimate interest, and yours — this record is what protects the work's value over decades
Answer questions, share images, advise on a purchase At your request
Send you news of new arrivals, exhibitions and artist stories Only with your consent, withdrawable at any time
Detect fraud, chargebacks and misuse Our legitimate interest and legal duty
Keep tax, GST and statutory records Legal obligation

We do not run automated profiling that makes decisions about you, and we do not sell, rent or trade your personal data to anyone. Ever. We have no advertising business, and no interest in building one.

4. Your privacy as a collector

This section matters more to our clients than any other, so we have set it out separately.

  • We do not disclose who owns what. If a journalist, another collector, a gallery, an auction house or an artist asks whether you own a particular work, we do not confirm it. We will pass a genuine enquiry on to you and let you decide.
  • We do not use your name. Your name, your firm's name and your photograph will not appear in our marketing, press coverage, social media or investor materials without your specific written permission for that specific use.
  • We do not photograph your home. If we install a work at your residence or office, any photograph is taken only with your permission, remains yours, and is used only in the way you agree to in writing.
  • We do not tell artists where their work went. Artists are told that a work has sold and are paid accordingly. Your identity and address are shared with an artist only if you ask us to make that introduction — which many collectors do, and which we're delighted to arrange.
  • We do not publish prices against names. Our records of what you paid exist for your invoice, your insurance and your provenance file. They are not shared, aggregated or published.

If you would like the strictest handling — no marketing, minimal records, delivery arranged through your office rather than your home — tell us, and we'll set that up on your account.

The one limit on all of this. Where a court, a tax authority or a law enforcement agency compels disclosure, we must comply. We will disclose only what is legally required, and we will tell you that it happened unless the law forbids us from doing so. We would rather state this limit openly than let you assume a protection we cannot deliver.

5. Consent, and how to change your mind

Where we rely on your consent — chiefly for marketing — you give it by a clear, deliberate action, never by a pre-ticked box. You can withdraw it at any time by using the unsubscribe link in any email, replying STOP on WhatsApp, or writing to [privacy@houseofashved.com]. Withdrawal is as easy as giving consent, takes effect promptly, and does not affect anything we lawfully did beforehand.

Withdrawing marketing consent does not stop transactional messages — order confirmations, dispatch notices, delivery updates — which we must send to fulfil your order.

If you would like this notice in any language listed in the Eighth Schedule to the Constitution of India, write to us and we'll provide it.

6. Who we share it with, and why

We share the minimum necessary, with parties bound to confidentiality:

  • Logistics and fine-art handling partners — recipient name, address, phone, and the physical characteristics of the consignment.
  • Payment gateways and banks — to process payment and refunds. They receive your payment credentials directly; we do not.
  • Our technology platform and hosting providers — who store site and order data on our instruction.
  • Our chartered accountants and auditors — for statutory filings.
  • Framers, conservators and installers — only where you have asked us to arrange that service.
  • Government authorities, courts and regulators — where we are legally required to disclose, and only to the extent required.

We do not share your data with artists, other collectors, advertisers, data brokers or "partner brands".

7. Payments and card security

Payments are processed by RBI-authorised payment gateways over encrypted connections. Where you choose to save a card for future use, it is stored as a token issued under the Reserve Bank of India's card-on-file tokenisation framework — a substitute number that is useless anywhere else. We do not hold your card number.

For large-value works we may offer bank transfer or a secure payment link instead of card checkout, which many of our clients prefer.

8. PAN, tax records and payment source

Indian tax law requires us to collect and quote PAN for certain transactions, including sales above ₹2,00,000. Where that threshold applies, we will ask for your PAN, use it only for tax reporting, and store it securely.

Separately, and for the protection of both parties: we accept payment only from a bank account or card held in the name of the buyer named on the invoice, and we do not accept cash of ₹2,00,000 or more in aggregate for a single transaction, in line with Section 269ST of the Income Tax Act. If a corporate entity is paying for a work being delivered to an individual, tell us in advance and we'll structure the invoice correctly.

9. Where your data lives

Our site, order records and communications are hosted on servers that may be located outside India, and our payment and messaging providers may process data in other countries. Where data leaves India, we transfer it only to providers who commit contractually to protect it to the standard described here and as required by applicable law.

If you are in the European Union or the United Kingdom, we will additionally honour the rights available to you under the law that applies to you.

10. How long we keep it

  • Enquiries that don't become orders: up to 24 months, then deleted.
  • Marketing contacts: until you withdraw consent, and for a short period afterwards to record that withdrawal.
  • Account data: while your account is active, and for 12 months after you ask us to close it.
  • Invoices, GST records and tax documents: eight years, as required by law.
  • Provenance and authenticity records: indefinitely. This is deliberate. A work's ownership history is what allows it to be authenticated, insured, lent to an exhibition or resold decades from now. We keep the record; we do not publish it.

Where we are approaching the end of a retention period and hold your data under consent, we will give you advance notice before erasure so you can ask us to keep it.

11. Your rights

Under the DPDP Act you may:

  • Ask what we hold about you and how it has been used or shared.
  • Correct or complete anything inaccurate — including the spelling of your name on a certificate of authenticity, which matters more than it sounds.
  • Ask us to erase your data where the purpose we collected it for has been served, subject to records we must keep by law.
  • Nominate someone to exercise these rights on your behalf if you die or become incapable of exercising them yourself. For collectors, this is worth doing: it lets a family member reach us about the works you own.
  • Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.

Write to privacy@houseofashved.com. We acknowledge within one working day and respond substantively within 30 days, and sooner wherever we can. We may ask you to verify your identity first — for a business built on discretion, that step protects you.

12. Children

Our site and services are intended for adults. We do not knowingly collect data from anyone under 18, and where the law requires verifiable parental consent, we will obtain it before processing a child's data. We never use a child's data for tracking or targeted advertising. If you believe a child has given us data, write to us and we'll delete it.

13. Cookies, analytics and messaging apps

We use cookies that are necessary for the site to work — keeping you signed in, remembering your cart — and, with your consent, analytics cookies that tell us which artworks are being viewed so we can curate better. You can decline non-essential cookies through the banner on our site or your browser settings; the site will still work.

If you contact us on WhatsApp or Instagram, those conversations are stored on those platforms as well as ours and are subject to their privacy policies. For anything sensitive — payment details, identity documents, addresses — please use email.

14. Security, and what happens if something goes wrong

We protect your data with encryption in transit, access controls limiting who on our team can see what, and regular review of the vendors we work with. No system is perfect, and we won't pretend otherwise.

If a personal data breach occurs, we will notify the Data Protection Board of India as required, and inform affected individuals within 72 hours of becoming aware — telling you plainly what happened, what data was involved, what we are doing about it, and what you should do. You will hear it from us, not from someone else.

15. Changes to this policy

We will update this page as our business and the law evolve. The date at the top always reflects the current version. For any change that materially affects your rights, we will email registered clients rather than relying on you to notice.

16. Talk to us

Privacy queries: privacy@houseofashved.com
Grievance Officer: Harish Tamboli, grievance@houseofashved.com, +91 9998011315
Post: 502 Sector 12 Kharghar Panvel MH 410210

We acknowledge every grievance within one working day and resolve it within 30 days. If we cannot, we'll tell you why and by when we will. Our working days are [Monday to Saturday]; messages received on a Sunday or public holiday are answered the next working day.

— Not for publication: complete before going live — Legal entity name · registered address · GSTIN/CIN · privacy and grievance email addresses · named Grievance Officer and phone · cookie banner live on Shopify · confirm hosting and gateway locations for Section 9.