Privacy Policy

This policy covers mehakcreations.in and the enquiries we receive through it. The business responsible for your data is Mehak Creations (Printers and Advertisers), SCF 1366, Saini Vihar Phase 3, Baltana, Zirakpur, Punjab 140603, GSTIN 03AZHPC2225R1ZF.

In the language of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described here, and you are the Data Principal.

When you send an enquiry. Our contact form asks for your name, phone number, the service you are interested in and your message. Your email address is optional — the form works without it. We do not ask for anything else, and we never ask for payment card details, bank details or identity documents through this website.

When you contact us on WhatsApp or by phone. We receive whatever you choose to send us, including your phone number and your WhatsApp display name.

When you simply browse. Our analytics record which pages you viewed, roughly where you are (city level, derived from your IP address), and basic device and browser details. This is aggregate traffic measurement, not an attempt to identify you personally.

We do not collect sensitive personal data, we do not build advertising profiles, and we do not buy personal data from anyone.

To reply to your enquiry, prepare a quotation, and produce and deliver work you order. That is the whole purpose of the enquiry form, and it is the basis on which you give us the information.

To keep records of orders and invoices, which we are required to do for tax and GST purposes.

To understand which pages and services people actually look for, so the website gets more useful over time.

We do not use your details for unrelated marketing. If we ever want to send you promotional messages beyond the job you contacted us about, we will ask you first and you can say no without it affecting your order.

A small number of service providers process data on our behalf. We do not sell your personal data to anyone, and none of these providers are permitted to use it for their own purposes.

WhatsApp (Meta). Our contact form hands your enquiry to WhatsApp so you can send it to us directly, and the WhatsApp button does the same. Messages you send travel through WhatsApp's systems under Meta's own privacy terms.

FormSubmit. A form-relay service that emails us a backup copy of each enquiry, so nothing is lost if a WhatsApp message does not go through.

Google (Tag Manager and Analytics 4). Traffic measurement, as described above.

Vercel. Our hosting provider. Like any web host, its servers keep short-lived technical logs of requests, including IP addresses.

The only cookies this site sets are Google Analytics cookies, used to tell repeat visits from new ones and to measure traffic. There are no advertising or tracking cookies, and we do not share analytics data with advertising networks.

You can block or delete cookies in your browser settings at any time, or install Google's official Analytics opt-out add-on. The site works normally either way — nothing on it depends on cookies.

Enquiries that do not become orders are kept for 24 months and then deleted, so that we can pick up a conversation if you come back to us.

Records connected to an actual order — quotations, invoices and job files — are kept for as long as tax and company law requires, currently eight years from the end of the relevant financial year.

Analytics data is retained by Google for 14 months and then deleted automatically.

Under the DPDP Act you may ask us for a summary of the personal data we hold about you and what we have done with it; ask us to correct anything inaccurate, incomplete or out of date; ask us to erase data we no longer need; withdraw a consent you previously gave; and nominate another person to exercise these rights on your behalf if you are unable to.

To exercise any of these, contact us using the details in section 10. We will respond within a reasonable period and will not charge you for it.

If you are not satisfied with how we handle your request, you may complain to the Data Protection Board of India.

The website is served over HTTPS, so anything you send through it is encrypted in transit. Enquiry records are held in business accounts protected by passwords and, where the provider supports it, two-factor authentication. Access is limited to the people who need it to quote and produce your work.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that affects your personal data, we will notify you and the Data Protection Board as the law requires.

This is a business-to-business and consumer printing service and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

For any question about this policy, or to exercise any right in section 7, reach us at mehakcreations25@gmail.com or on +91 7355990099, or write to Mehak Creations (Printers and Advertisers), SCF 1366, Saini Vihar Phase 3, Baltana, Zirakpur, Punjab 140603.

Please mark privacy requests clearly so they reach the right person quickly.

If our practices change — a new analytics tool, a different form provider, a new purpose for the data — we will update this page and change the date at the top. We will not quietly start doing something this policy says we do not do.