Privacy Policy

1) Who we are

As required under Rule 5(9) of the SPDI Rules and Section 13 of the DPDP Act, you may contact our Grievance Officer for any queries or complaints regarding data handling.

• Legal name: thecodencanvas
• Email: thecodencanvas@gmail.com
• Phone: +91 81601 23021

2) What information we collect

We collect the following categories of personal information, depending on how you use our Services:

a) Website enquiries

When you contact us through the enquiry form on this website, we collect the details you choose to share: your name, email address, phone/WhatsApp number, company name, the services you are interested in, your budget range, timeline and message. We use this only to respond to your enquiry and discuss your project. Enquiries are stored securely with our hosting provider and may be delivered to our inbox through an email service provider.

b) Customer information

• Name, mobile number, email address (if provided)
• Order details (items, quantity, price, time and location of purchase)
• Payment metadata received from payment service providers (PSPs) such as PhonePe: transaction reference/ID, masked Virtual Payment Address (VPA) or UPI ID, payment status, amount, and timestamp
• Device and usage data (IP address, browser type, operating system, approximate location, cookies, app analytics)

c) WhatsApp interactions

We do not store full card numbers, CVV, UPI PIN, or other sensitive payment credentials.

• Your WhatsApp number and message content when you contact our WhatsApp business account
• Opt-ins/consents for notifications or promotions

3) How we use your information

We use personal information for the following purposes:

• Order processing – to create, manage, and fulfil your orders; display status to stall vendors.
• Payments – to initiate, verify, and reconcile payments through UPI and our PSP partners (e.g., PhonePe); to receive and record webhook/callback updates.
• Customer support – to respond to queries on WhatsApp, email, or phone.
• Security and fraud prevention – to detect, prevent, and investigate fraud or misuse, including verification of transaction IDs with PSPs.
• Service improvement – to analyse usage, fix issues, and enhance performance at high-traffic events.
• Legal compliance – to comply with applicable laws, taxation, and audit requirements.

4) Sharing of information

We share information only as necessary:

• Payment service providers / banks (e.g., PhonePe and their acquiring partners) to process UPI payments and verify status.
• Vendors/Stall owners to fulfil your order at the specific stall you choose.
• Service providers (hosting, analytics, customer communication/WhatsApp API providers) under confidentiality obligations.
• Authorities when required by law, regulation, legal process, or to protect our rights and users.

5) Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase data where legally permissible
• Withdraw consent for marketing at any time

6) Security practices

We implement reasonable security practices as required under the IT Act and SPDI Rules, including:

• Encryption of payment credentials and vendor keys at rest and in transit
• Access controls, role-based permissions, and audit logging
• Regular backups and infrastructure hardening
• Webhook signature verification and HTTPS across our Services

Despite our efforts, no system is completely secure. We encourage users to protect their devices and accounts.

7) Cookies and similar technologies

We use cookies and local storage to:

• Keep you signed in (for vendors and site administrators)
• Remember stall/event preferences
• Improve site performance

You can manage cookies via your browser settings. Disabling cookies may impact certain features.

8) Third-party links

Our Services may contain links to third-party websites or payment services (such as PhonePe). Their privacy practices are governed by their own policies; please review them separately.

9) Updates to this policy

We may update this Privacy Policy from time to time. We will post the latest version on our website and update the “Last Updated” date above. Continued use of the Services after changes constitutes acceptance of the updated policy.

10) Contact & grievances

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:

• Email: thecodencanvas@gmail.com
• Phone: +91 81601 23021

We will acknowledge and resolve grievances within the timelines prescribed under applicable law.

Annexure: Disclosures specific to PhonePe / UPI payments

• We share order and payment metadata (amount, transaction reference, timestamps, masked VPA/UPI ID) with PhonePe and/or acquiring banks solely for processing and verifying payments.
• We do not collect or store your UPI PIN or other sensitive authentication data.
• In case of payment disputes, we may use the transaction reference/ID to liaise with PhonePe/banks to resolve the issue.
• Refunds (if applicable) are processed to the original payment instrument in accordance with our Refund & Cancellation Policy.