Privacy policy

• Account: your name, email address and a password (stored only as a one-way hash - we cannot read it).
• Orders: what you bought, your delivery name, phone number and address, and the email for order updates.
• Saved addresses if you choose to save them, including a friend's address.
• Messages you send us through the contact form.
• Your wall photo - only if you tick the box at checkout. The wall preview works entirely on your own device. If you opt in to the thank-you card, a small copy is kept on that order only to print the card, then deleted (see below).

• Your card, UPI or bank details. Payments are handled entirely by Razorpay in their own secure window; we only receive a confirmation.
• Photos you use to try posters on your wall, unless you opt in as described above.

• To process, print, pack, ship and track your order, and to email you about it.
• To answer your messages, returns and feedback.
• To keep the site secure and prevent fraud and abuse.
• To suggest posters you may like in “Surprise Me”, using only the categories you browse or buy - never images.

Only the services needed to run your order: Razorpay (payments), our courier partners (your name, phone and address for delivery), and our email provider (to send order emails). We do not sell your data and we do not share it for advertising.

• Wall photos kept for a thank-you card are deleted once the card is printed, and in any case within 45 days.
• Order records are kept as long as needed for delivery, returns, accounting and the law.
• You can delete saved addresses any time from your account.

To make the site convenient we store small pieces of data in your own browser: your bag, the wall you were designing, your last size and filters, and (if you allow it) delivery details. This stays on your device. Clearing your browser data removes it. Signing in uses a secure cookie that expires after 7 days.

Connections are encrypted (HTTPS); passwords are hashed; the team area needs 2-step login; and access to customer data is limited to the people who need it. No system is perfectly secure, but we take this seriously and review it regularly.

You can ask to see, correct or delete your data at any time by contacting us or emailing heywallora@gmail.com. We will deal with it promptly, apart from records we must keep by law.