Privacy Policy

This Privacy Policy describes how TapCraft Studio (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from tapcraft.shop (the “Site”) or otherwise communicate with us.

Please read this policy carefully. By using our Site you agree to the collection and use of information in accordance with this policy.

What We Collect

We collect different types of information depending on how you interact with us:

Information You Provide Directly

• Contact details: name, email address, phone number, mailing address
• Order information: billing and shipping address, payment details, products purchased
• Account information: username, password, security questions (if you create an account)
• Customer support: any information you include in communications with us

Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and your visit, including:

• Device data: browser type, operating system, IP address, device identifiers, and language preferences
• Usage data: pages viewed, links clicked, browsing times, referring URLs, and site interaction data
• Location data: general geographic location based on your IP address

We collect this data using cookies, pixels, and similar technologies. See the “Cookies” section below for more detail.

Information From Third Parties

We may receive information about you from third parties, including business partners, marketing partners, social media platforms, data aggregators, and payment service providers. This may include your name, email address, mailing address, phone number, purchase history, or other information relevant to your engagement with our services.

How We Use Your Information

• Providing products & services: processing orders, managing your account, arranging shipping, facilitating returns and exchanges
• Marketing & advertising: sending promotional emails you’ve opted in to, displaying relevant ads, and identifying you across sessions for marketing purposes (you can opt out at any time)
• Security & fraud prevention: detecting and preventing fraudulent transactions and other illegal activities, protecting rights of users and third parties
• Communication: responding to enquiries, sending order confirmations, shipping updates, and policy changes
• Improving our Site: analysing usage patterns and performance, troubleshooting bugs, and conducting internal research

Cookies

A cookie is a small file placed on your device. We use the following types of cookies:

• Essential cookies: required for the Site to function (e.g. cart, login sessions)
• Analytics cookies: help us understand how visitors use the Site (e.g. Google Analytics)
• Advertising cookies: used to deliver personalised advertising and measure campaign performance

Most browsers let you block or remove cookies through their settings. Note that blocking essential cookies may affect Site functionality.

How We Share Your Information

We may share your personal information with:

• Service providers: companies that help us operate our business — hosting, payment processing, shipping, analytics, email marketing, etc.
• Business partners: where necessary for promotions, affiliate programs, or co-branded offerings
• Legal & compliance: when required by law, regulation, legal process, or governmental request
• Business transfers: in connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

Third-Party Services & Shopify

Our online store is hosted on Shopify. Shopify provides us with the e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

Payment: If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may want to read Shopify’s Terms of Service or Privacy Statement.

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Right of access: request a copy of the personal information we hold about you
• Right to correction: request we update inaccurate or incomplete data
• Right to deletion: request we erase your personal information (subject to legal obligations)
• Right to portability: receive your data in a structured, machine-readable format
• Right to withdraw consent: where processing is based on consent, withdraw it at any time
• Right to object: object to processing for direct marketing or legitimate interest grounds

To exercise any of these rights, email us at nikhilgupta@tapcraft.shop. We will respond within 30 days.

European Users (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). We process personal data lawfully under the following bases:

• Performance of a contract (e.g. fulfilling your order)
• Legitimate interests (e.g. improving our services, fraud prevention)
• Consent (e.g. marketing emails — withdrawable at any time)
• Legal obligations

If you wish to lodge a complaint, you have the right to do so with your local data protection authority.

Data Retention

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our policies. When your data is no longer needed, we securely delete or anonymise it.

Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Minors

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. We encourage you to review this page periodically. Your continued use of the Site constitutes acceptance of the updated policy.