Privacy Policy

How Craftora collects, uses, shares and protects your personal data—including the cookies and advertising technologies we use on this website.

Effective date: 28 October 2026 · Last updated: 28 October 2026

1. Who we are

This website, craftorastudio.in, is operated by Craftora ("Craftora", "we", "us", "our"), a digital design and engineering studio based in India providing website design and development, branding, Shopify and e-commerce development, CRM and lead systems, and related services to clients in India and internationally.

Craftora is the data fiduciary / data controller for personal data collected through this website. You can reach us at hello@craftorastudio.in or +91 80884 36325.

2. Personal data we collect

Information you give us

  • Enquiry and proposal forms: full name, business email, company name, country, service required, estimated budget, project timeline, project priorities, project description, and your marketing preference.
  • Direct communication: details you share when you email, call, message us on WhatsApp, or book a discovery call.
  • Advertising lead forms: information you submit through lead forms on Meta (Facebook and Instagram) or Google, described in section 6.
  • Client projects: business and contact information needed to deliver services we have agreed with you.

Information collected automatically

  • Device and usage data: IP address, browser type, device type, operating system, pages viewed, time spent, referring URL, and approximate location derived from your IP address.
  • Cookie and pixel data: identifiers and events set by cookies, pixels and tags (such as page views, form submissions and button clicks), described in section 4.
  • Advertising data: information about the ad you clicked (such as a click identifier) so we can measure which campaigns lead to enquiries.

We do not knowingly collect sensitive personal data (such as health, financial account or biometric data) through this website, and we ask that you do not submit it in our forms.

3. How we use your data

PurposeLegal basis
Respond to enquiries, prepare proposals and follow upYour consent; steps prior to entering a contract
Deliver, manage and support client projectsPerformance of a contract
Record leads in our CRM and manage our sales pipelineYour consent; legitimate interests
Operate, secure and improve this websiteLegitimate interests
Analytics, conversion measurement and advertising, including remarketingYour consent (where required by law)
Send updates and insights about our servicesYour consent, which you can withdraw at any time
Comply with legal obligations and resolve disputesLegal obligation

We do not sell your personal data.

4. Cookies, pixels and similar technologies

Cookies are small text files stored on your device. Pixels and tags are small pieces of code that send information to a service provider when a page loads or an action takes place. We use the following categories:

  • Strictly necessary: required for the website to function and stay secure (for example, remembering form progress). These cannot be switched off.
  • Analytics: such as Google Analytics, to understand how visitors use the website so we can improve it.
  • Advertising and conversion tracking: such as the Meta Pixel and the Google tag (Google Ads conversion tracking and remarketing), used to measure the effectiveness of our ads and to show relevant ads to people who have visited our website.

Where the law requires it—for example, for visitors in the European Economic Area or the United Kingdom—we only use analytics and advertising cookies after you have given consent, and we use Google Consent Mode to respect your choice. You can change your choices at any time by clearing cookies in your browser or using the options in section 12.

5. Advertising on Meta and Google

We advertise our services on platforms including Facebook, Instagram, Google Search, YouTube and the Google Display Network. In connection with this advertising:

Meta (Facebook and Instagram)

  • We use the Meta Pixel and may use the Meta Conversions API. These share information with Meta Platforms, Inc. and Meta Platforms Ireland Ltd. about your actions on our website—such as pages visited and enquiries submitted—together with technical identifiers such as your IP address, browser information and cookie identifiers.
  • Meta may use this information to measure ad performance, to show you our ads on Facebook and Instagram (remarketing), and to find people with similar interests (lookalike audiences), in accordance with the Meta Privacy Policy.
  • Third parties, including Meta, may use cookies, web beacons and similar technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and target ads.

Google

  • We use the Google tag for Google Ads conversion tracking and remarketing, and Google Analytics. Google may set cookies and collect information about your visit, including your IP address and browsing activity on our website.
  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other sites on the internet.
  • We may use Google Ads remarketing to show our ads to people who have previously visited our website, and may use enhanced conversions, which share hashed (encrypted) contact information you have submitted in our forms with Google to measure conversions accurately.
  • Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Customer lists and audiences

Where you have given us your contact details and the required consent, we may upload them in hashed (encrypted) form to Meta (Custom Audiences) or Google (Customer Match) to show you relevant ads, or to exclude you from ads you no longer need to see. The platforms match hashed data against their own users and delete unmatched data. You can opt out of this at any time by contacting us.

6. Lead forms on Meta and Google

If you submit a lead form within a Facebook or Instagram ad (Meta Lead Ads) or a Google lead form asset, the information you provide—such as your name, email address, phone number, company and project details—is shared with Craftora. We use it only to respond to your request, follow up about our services, and manage the enquiry in our CRM, as described in this policy. The platform's own privacy policy also applies to information processed by that platform.

7. Who we share your data with

We share personal data only as needed for the purposes above, with:

  • Advertising and analytics providers: Meta Platforms and Google, as described in section 5.
  • Service providers who process data on our behalf: website hosting, CRM and lead management, email and communication services (including WhatsApp), scheduling tools, and cloud storage. They are bound to protect the data and use it only to provide services to us.
  • Professional advisers: accountants, auditors and legal advisers, where necessary.
  • Authorities: where required by law, court order or to protect our rights, safety or property.
  • Business transfers: a successor entity in the event of a merger, acquisition or sale of assets, subject to this policy.

8. International data transfers

We are based in India and work with clients worldwide. Some of our service providers, including Meta and Google, process data in other countries such as the United States. Where we transfer personal data outside your country, we take steps to ensure it is protected, including relying on the service provider's contractual commitments such as Standard Contractual Clauses, and complying with any restrictions notified under Indian law.

9. How long we keep your data

  • Enquiries and leads that do not become projects: up to 24 months from our last contact, unless you ask us to delete them sooner.
  • Client project records: for the duration of the engagement and up to 8 years afterwards to meet tax, accounting and legal requirements.
  • Marketing preferences: until you withdraw consent or unsubscribe.
  • Cookies and pixels: for the periods set by each provider, typically between session length and 24 months.

10. Security

We use reasonable technical and organisational safeguards to protect personal data, including encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected individuals and authorities where required by law.

11. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and obtain a summary of how it is processed;
  • correct, complete or update inaccurate data;
  • request erasure of your data;
  • withdraw consent at any time, without affecting processing that took place before withdrawal;
  • object to or restrict certain processing, including processing for direct marketing;
  • receive your data in a portable format;
  • nominate another person to exercise your rights in the event of death or incapacity (India);
  • opt out of the "sale" or "sharing" of personal data for cross-context behavioural advertising, and of targeted advertising (certain US states, such as California); and
  • lodge a complaint with a data protection authority, including the Data Protection Board of India, or your local supervisory authority in the EEA or UK.

To exercise any of these rights, contact us using the details in section 15. We will respond within the time required by applicable law and may need to verify your identity first. We will not discriminate against you for exercising your rights.

12. Your advertising and cookie choices

Opting out of personalised advertising does not mean you will stop seeing ads; the ads you see will be less relevant to you.

13. Children

This website and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time, for example when we adopt new tools or when the law changes. We will post the updated version on this page with a new "Last updated" date and, where changes are significant, take reasonable steps to notify you.

15. Contact us and grievance officer

For questions, requests to exercise your rights, or complaints about how we handle personal data, please contact our grievance officer:

Grievance officerCraftora Privacy Team
Phone / WhatsApp+91 80884 36325

We aim to acknowledge requests within 72 hours and to resolve them within 30 days, or sooner where the law requires.