Section 01
Introduction
Link2Trade Ventures LLP, operating as Auria Art House ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our online art marketplace platform ("Platform").
By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy.
Legal Compliance
This Privacy Policy complies with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Registered Office
Link2Trade Ventures LLP, 270, 5th Main, 3rd Cross, H Block, Ramakrishnanagar, Mysore, Karnataka – 570002, India
Section 02
Information We Collect
Personal Information You Provide
| Category |
Examples |
| Account |
Full name, email, phone number, date of birth, username and password |
| Payment |
Billing address, shipping address, payment method details (processed by third-party processors), GST/tax identification numbers |
| Artist-Specific |
Legal and business name, government-issued ID, bank account details, portfolio, professional credentials |
| Transactions |
Purchase history, artwork listings, buyer/seller communications, reviews and ratings |
| Profile |
Preferences, profile picture, bio, social media links |
Information Automatically Collected
- IP address, browser type and version, device information, and operating system
- Access times, pages viewed, click-stream data, and referring/exit pages
- Session cookies, persistent cookies, analytics cookies, and similar tracking technologies
Information from Third Parties
- Payment processor confirmation data
- Social media profile data (if you connect accounts)
- Shipping carrier tracking information
- Fraud prevention and analytics provider data
Section 03
How We Use Your Data
To Provide Our Services
- Process transactions, payments, returns, and refunds
- Create and manage user accounts
- Display artwork listings and facilitate buyer–artist communication
- Provide customer support and dispute resolution
To Improve Our Services
- Analyse usage patterns and conduct research and development
- Personalise your experience and optimise platform performance
- Develop new features and improve existing ones
To Communicate with You
- Transactional (cannot opt out): order confirmations, shipping updates, payment receipts
- Service updates: important platform announcements and policy changes
- Marketing (opt-out available): newsletters, new artwork alerts, events, and promotions
For Security & Legal Compliance
- Prevent fraud and unauthorised activity
- Enforce our Terms of Service
- Comply with legal obligations and respond to government requests
- Protect the rights, property, and safety of our users and platform
Marketing Opt-Out
We do not sell your personal information to third parties for marketing purposes. You may unsubscribe from promotional emails at any time using the link in any such email, or through your account settings.
Section 04
How We Share Your Data
With Other Users
Artist profiles, portfolios, artwork listings, public reviews, and usernames are visible to all platform users. For completed transactions, buyers receive artist contact information and artists receive buyer shipping details — only what is necessary to fulfil the order.
With Service Providers
| Provider Type |
Purpose |
Examples |
| Payment Processors |
To process transactions securely |
Razorpay |
| Shipping Carriers |
To deliver artworks |
Shiprocket, Delhivery, Blue Dart |
| Cloud Hosting |
To store data securely |
AWS, Google Cloud |
| Analytics |
To understand platform usage |
Google Analytics |
| Email Services |
To send communications |
SendGrid, Mailchimp |
| Fraud Prevention |
To detect fraudulent activity |
Third-party fraud detection tools |
All service providers are contractually obligated to protect your data and access only what is necessary to perform their services.
Other Circumstances
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may transfer. You will be notified in advance.
- Legal requirements: To comply with court orders, subpoenas, or government requests; to protect rights, property, or safety; or to prevent fraud.
- With your consent: For any other purpose with your explicit, informed consent.
Section 05
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse.
Security Measures
- Encryption: SSL/TLS encryption for all data in transit
- Access Controls: Data accessible only to authorised personnel on a need-to-know basis
- Secure Storage: Data stored on secured, regularly audited servers
- Authentication: Strong password requirements and optional two-factor authentication
- Monitoring: Continuous monitoring for suspicious or anomalous activity
Payment Security
- We do not store full card numbers on our servers
- All payment processing is handled by PCI-DSS compliant processors (Razorpay)
- Transactions are encrypted and tokenised end-to-end
Important Limitation
No method of transmission over the internet or electronic storage is 100% secure. While we use industry-standard safeguards, we cannot guarantee absolute security. Please use a strong, unique password for your account.
Section 06
Data Retention
We retain your personal information for as long as your account is active, for as long as is necessary to provide our services, or as required by applicable Indian law or regulation — including for resolving disputes and enforcing agreements.
When personal information is no longer needed, we securely delete or anonymise it. Some information may be retained in encrypted backups for a limited period, and certain transaction records may be retained for legal, tax, and accounting purposes even after account deletion.
Section 07
Your Rights & Choices
Under Indian data protection law, you have the following rights regarding your personal information:
A
Access
Request a copy of the personal information we hold about you.
C
Correction
Update or correct inaccurate or incomplete information at any time.
D
Deletion
Request deletion of your data, subject to legal obligations and ongoing transactions.
O
Objection
Object to certain uses of your information, including for marketing.
P
Portability
Request your information in a structured, portable format.
W
Withdraw Consent
Withdraw consent for marketing communications at any time.
How to Exercise Your Rights
- Update profile information and email preferences directly in your account settings
- Click "unsubscribe" in any promotional email to opt out of marketing
- Adjust browser settings to manage or refuse cookies
- Contact us at privacy@auriaart.com for access, deletion, or portability requests
- To delete your account entirely, contact our customer support team
Section 08
Children's Privacy
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover we have inadvertently collected data from a child, we will promptly delete it.
Parents & Guardians
If you believe we have collected your child's personal information, please contact us immediately at
privacy@auriaart.com so we can take prompt action.
Section 09
Third-Party Links
The Platform may contain links to third-party websites, services, or applications — including payment gateways, social media platforms, and external artist websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Section 10
International Data Transfers
Your information may be transferred to and processed in countries other than India, for example by our cloud hosting or analytics providers. When we transfer data internationally, we ensure appropriate contractual and technical safeguards are in place to protect your information in accordance with this Privacy Policy and applicable Indian law.
Section 11
Specific Provisions
Google Analytics
We use Google Analytics to understand how users interact with our platform. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. You may opt out by installing the Google Analytics Opt-out Browser Add-on.
Social Media Integration
If you connect social media accounts to your Auria Art House profile, we may access your basic profile information from those platforms. Your social media privacy settings control what information those platforms make available to us. We encourage you to review those settings regularly.
Cookies
We use session cookies (cleared when you close your browser), persistent cookies (remain on your device), and analytics cookies to improve your experience. You may adjust your browser settings to refuse or delete cookies, though some platform features may not function correctly without them.
Section 12
Grievance Officer
In compliance with the Information Technology Act, 2000 and rules made thereunder, we have designated a Grievance Officer to address privacy-related complaints. All concerns will be acknowledged within 48 hours and resolved within one month of receipt.
Designated Grievance Officer
Vidyashankar
Role
Grievance Officer – Auria Art House
Phone
+91-XXXXXXXXXX
Address
270, 5th Main, 3rd Cross, H Block, Ramakrishnanagar, Mysore, Karnataka – 570002
Hours
Monday – Saturday, 10:00 AM – 6:00 PM IST
If your complaint is not resolved within 30 days, you may approach the appropriate authority under the Information Technology Act, 2000 or the Consumer Protection Act, 2019.
Section 13
Policy Updates
We may update this Privacy Policy from time to time to reflect legal changes, new features, or revised practices. Changes are effective upon posting, with the "Last Updated" date updated accordingly.
For material changes, we will notify registered users by email and display a prominent notice on the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
Section 14
Definitions
Personal Information
Any information relating to an identified or identifiable natural person.
Sensitive Personal Data or Information (SPDI)
Includes passwords, financial information, health data, sexual orientation, biometric information, and other categories defined under the IT (SPDI) Rules, 2011.
Cookies
Small text files stored on your device by websites you visit, used to remember preferences and track usage.
Processing
Any operation performed on personal information, including collection, storage, use, disclosure, and deletion.
Platform
The Auria Art House website, mobile application, and all associated services operated by Link2Trade Ventures LLP.