Privacy policy

ELIZPARIS is the online store of Star Creations India, of SCO 47, Second Floor, Omaxe World Street, Sector 79, Faridabad, Haryana, India - 121004. Star Creations India is the Data Fiduciaryfor the personal data described below, and in this notice “we” and “us” mean Star Creations India.

We collect only what an order actually needs, and we tell you what it is at the point we ask for it.

• Order and delivery details — your name, email address, phone number and delivery address. Needed to take payment, ship the goods and issue a GST invoice.
• Order history — what you bought, when, for how much, and its status. Needed for support, returns and statutory accounting records.
• A display name you may enter when entering the 3D showroom, used only to greet you during that visit.
• Technical data — IP address, browser and device type, and pages visited, in ordinary server logs. Needed for security, fraud prevention and diagnosing faults.

We do notcollect your card number, UPI PIN or bank credentials. Those are entered on the payment provider’s own page and never reach us — see clause 4.

The watch try-on tool uses your device camera to place a watch on your wrist. Camera frames are processed entirely on your own device and are never uploaded to us or to anyone else. No image, video or measurement is transmitted, stored or retained.

The tool does download its hand-tracking model files from the third-party CDN cdn.jsdelivr.net, so that provider can observe your IP address when the tool starts, exactly as it would for any file your browser fetches. You can revoke camera permission at any time in your browser settings; the rest of the store continues to work without it.

We process your data on the basis of your consent, given when you submit an order or enter your details, and for the legitimate uses the DPDP Act permits — principally fulfilling an order you have voluntarily placed, and complying with the law.

Consent is specific to the purposes listed in clause 1. You may withdraw it at any time, and doing so must be as easy as giving it: write to sachin@starcreationsindia.com and we will stop processing on that basis. Withdrawal does not affect processing already carried out, and we may still need to keep records the law requires us to keep (clause 7). If you withdraw consent for data we need to fulfil an order in progress, we may not be able to complete that order.

We share your data only with parties who need it to complete your order:

• Payment providers— Razorpay, and Shopify’s hosted checkout for some orders. They collect your payment details directly and process them under their own privacy policies as independent controllers of that data.
• Shopify — our commerce platform, which stores catalogue and order records.
• Delivery partners — your name, address and phone number, so they can deliver the parcel.
• Our hosting provider, which operates the servers this site runs on.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

Some of these providers operate outside India. Where data is transferred abroad, it is done for the purposes above and subject to any restrictions the Central Government notifies under the DPDP Act.

The DPDP Act gives you the following rights. All of them are free to use.

• Right to access — a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
• Right to correction and erasure — have inaccurate or incomplete data corrected or completed, and have data erased once it is no longer needed for the purpose it was collected for, unless we are required by law to keep it.
• Right to grievance redressal — a readily available means of complaining to us, which we must answer (clause 9).
• Right to nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Right to withdraw consent — as described in clause 3.

To exercise any of these, write to sachin@starcreationsindia.com from the email address on your order. We acknowledge requests within 48 hours and respond substantively within 30 days. We may ask you to verify your identity first, so that nobody else can obtain or delete your data.

You also have a duty under the Act not to impersonate anyone else, not to suppress material information, and not to file false or frivolous complaints.

Under the DPDP Act a childis anyone under 18. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

This store is intended for adults placing their own orders. If you believe a child has given us personal data, write to sachin@starcreationsindia.com and we will delete it.

We keep personal data only for as long as the purpose it was collected for still applies, and then erase it — except where a law requires us to keep it for longer.

• Order, invoice and tax records — retained for the period Indian tax and companies legislation requires, which is longer than the purpose itself.
• Digital invoice links — expire automatically, and can be revoked earlier on request.
• Server and security logs — retained for 90 days, then deleted, unless a specific log is being kept for an ongoing security or fraud investigation.
• Data you asked us to erase — removed once no legal obligation to keep it remains.

We apply reasonable security safeguards to prevent a personal data breach. Administrator passwords are stored only as salted scrypt hashes and never in readable form; administrator sessions are held in signed, HTTP-only cookies that expire; the admin console is closed to unauthenticated visitors; payment credentials never touch our systems at all; and digital invoices require both a private link and the phone number on the order, with a limited number of attempts.

No system is perfectly secure. If a personal data breach occurs, the DPDP Act requires us to notify both the Data Protection Board of India and every affected Data Principal, and we will do so in the form and timeframe the Act prescribes.

You have the right to complain to us first, and we are required to give you a straightforward way to do it. Complaints about your personal data are handled by our Grievance Officer, whose business contact details are published below for the purposes of section 13 of the DPDP Act:

• Designation: Grievance Officer, Star Creations India
• Email: sachin@starcreationsindia.com
• Address: SCO 47, Second Floor, Omaxe World Street, Sector 79, Faridabad, Haryana, India - 121004
• Response time: acknowledged within 48 hours of receipt, and resolved within 30 days. If we need longer we will tell you why, and give you a date.

Please write “Grievance” in the subject line so it is routed correctly, and include your order number where the complaint concerns an order.

If we do not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India. The Act expects you to exhaust our own grievance process first.

We use browser storage for things the store cannot work without: keeping your bag between pages, remembering your admin session if you are staff, and remembering small preferences such as your chosen theme and your wishlist.

We set no advertising or cross-site tracking cookies of our own. Some embedded third-party content can set its own — those are listed below. Clearing your browser storage will empty your bag and sign you out, but will not affect an order already placed.

Analytics. We do not run Google Analytics or any comparable analytics, advertising or behavioural-profiling service on this site. There is nothing of that kind to opt out of. If that ever changes we will say so here and offer a way to opt out before turning it on.

Third parties your browser contacts. Some content is served by others, and those providers can see your IP address and may set their own cookies when that content loads:

• YouTube — product videos are embedded from YouTube. Google may set cookies when a video loads, under its own privacy policy. Videos load only when you open one.
• Razorpay — the payment page is served by Razorpay when you check out, and operates under its own privacy policy.
• Google Fonts— a small number of pages fetch a typeface from Google’s font service.
• jsDelivr— the content delivery network that serves the watch try-on’s hand-tracking model files, as described in clause 2.

We do not control what these providers do with the request, and we do not receive any profile or tracking data back from them.

We may update this notice. The version published here on the day you use the store is the one that applies, and material changes will be reflected in the “last updated” date at the top. Where a change requires fresh consent under the DPDP Act, we will ask for it rather than assume it.

For anything in this notice, write to sachin@starcreationsindia.com. For a formal complaint, use the Grievance Officer details in clause 9.

See also our terms and conditions, shipping and returns policy and disclaimer.