Privacy Policy

Last updated: 2026

This policy explains what personal data UMA Civil Arch Studio collects when you use this website or buy from us, why we collect it, and what rights you have over it.

1. What we collect

When you buy:

• Your name
• Your email address
• Your phone number
• A payment reference / order ID
• Billing details you enter, if you request a GST invoice

We never see or store your card number, UPI PIN, CVV or bank credentials. Those are entered on Cashfree’s own secure checkout and handled entirely by them.

When you browse:

• Standard technical data — IP address, browser type, device type, pages viewed
• Advertising and analytics identifiers, if you arrived from an ad

2. Why we use it

• To deliver your Google Drive link and confirm your order
• To provide support and honour our refund policy
• To issue invoices and meet Indian tax and accounting obligations
• To measure which ads and pages lead to purchases
• To detect and prevent fraud, chargeback abuse and link sharing

3. Who we share it with

We share data only with service providers who need it to run this business:

• Cashfree Payments — processes payments, stores payment details, sends your receipt. Subject to Cashfree’s own privacy policy.
• Google (Drive & Fonts) — hosts the preset folder you receive, and serves the typefaces used on this site.
• Our hosting provider — serves this website and keeps standard server logs.
• Meta Platforms — if you reached us via an Instagram or Facebook ad and advertising pixels are active, Meta receives conversion data.

We do not sell your personal data, and we do not share it with unrelated third parties for their own marketing.

4. Cookies and tracking

This site itself sets no marketing cookies. Embedded third parties — principally the payment checkout and, where enabled, advertising pixels — may set their own. You can block cookies in your browser settings; the checkout may not function correctly if you block all of them.

5. How long we keep it

• Order and invoice records: 8 years, as required by Indian tax law.
• Support correspondence: up to 3 years after the conversation ends.
• Server and analytics logs: typically 12 months.

6. How we protect it

This site is served over HTTPS. Payment data is handled by a PCI-DSS compliant processor and never touches our systems. Access to order records is limited to people who need it to fulfil orders and provide support. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold.

7. Your rights

You can ask us to:

• Tell you what personal data we hold about you
• Correct anything that is wrong
• Delete your data, where we are not legally required to keep it
• Stop sending you marketing messages

Email and we will respond within 30 days. Note that deleting your order record also ends our ability to verify your purchase for support or refunds.

8. Children

This site is not directed at children under 18, and we do not knowingly collect their personal data.

9. Changes

We may update this policy. Material changes will be reflected in the date at the top of this page.

10. Contact

Privacy questions or requests: , or via our contact page.