Effective 26/10/26
1. Who we are
Noble Graphic (“we”, “us”) is a printing business in Nashik, Maharashtra, that runs this website. We decide why and how your personal data is used, which makes us the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
- Address: Shop no 1 & 2, 409, Rapscos Bhavan, Ghankar Ln, Raviwar Peth, Raviwar Karanja, Panchavati, Nashik, Maharashtra 422011
- Email: sales@noblegraphic.in
- Phone: 086982 65253 (11 AM to 6 PM, Monday to Saturday)
2. What personal data we collect and why
| When | What we collect | Why we use it |
|---|---|---|
| You send an enquiry through the contact form | Name, email, phone (if given), message | To reply to your enquiry |
| You subscribe to the newsletter | Email address (and name, if given) | To send you updates about products and offers |
| You place an order | Name, billing and shipping address, email, phone, order details, GSTIN and business name (if you give them for a GST invoice), payment status and transaction reference | To process and deliver your order, issue invoices, handle refunds and complaints, and meet tax and accounting laws |
| You create an account | Name, email, phone, address, password (stored in encrypted form) | To save your details, speed up checkout and show your order history |
| You send us files for printing | Artwork, photos, names or ID details in your files | To produce your print job |
| You browse the site | IP address, browser type, device, pages viewed, approximate location | To keep the site secure and working; and, only if you accept, for analytics and advertising measurement (see section 4) |
We use your data only for the purposes above. If we want to use it for something new, we will ask you first.
3. Why we may use your data
We use your personal data with your consent, or where you have voluntarily given it to us for a specific purpose (for example, giving your address to receive an order), or where the law requires it (for example, tax records).
4. Cookies, analytics and advertising tools
When you first visit, a banner lets you accept or reject analytics and marketing cookies. They stay off until you accept. You can change your choice at any time using “Cookie settings” in the footer.
| Type | Tools | What they do | When they run |
|---|---|---|---|
| Essential | WordPress, WooCommerce, our consent record | Keep you logged in, remember your cart and checkout, remember your cookie choice | Always (the shop cannot work without them) |
| Analytics | Google Analytics 4, Microsoft Clarity | Show us how visitors use the site. Clarity records clicks, scrolling and page views; we mask form and checkout fields | Only after you accept |
| Marketing | Meta Pixel | Measure how our ads perform and show relevant ads | Only after you accept |
Login cookies last two days (two weeks if you choose “Remember me”), and screen-option cookies last one year. Google, Microsoft and Meta may process this data outside India.
5. Who we share your data with
We do not sell your personal data. We share only what is needed with:
- Razorpay, to process your payment (we do not store your card details)
- Courier and logistics partners Delhivery/Shiproket, to deliver your order
- Our hosting provider Milesweb and email delivery provider [name], to run the website and send emails
- Our backup storage provider Updraft and Milesweb
- Our accountant, for bookkeeping and tax filing
- Google, Microsoft and Meta, but only if you accept analytics or marketing cookies
- Government or legal authorities, where the law requires it
These providers may only use your data to provide their service to us.
6. How long we keep your data
| Data | How long |
|---|---|
| Orders, invoices and payment references | As long as tax and accounting law requires [period] |
| Customer accounts | While the account is active, or until you ask us to delete it. If an account is unused for [2 years], we will email you and delete it a few days later unless you log in |
| Contact form enquiries | 12 months after our last reply, longer only if they lead to an order |
| Newsletter email | Until you unsubscribe or withdraw consent |
| Print files you send | Artwork and design files: kept so we can reprint your order, until you ask us to delete them. Files with personal data for ID cards (photos, names, ID numbers): deleted 180 days after delivery unless you ask us to keep them for reorders. |
| Analytics and advertising data | According to the settings we choose with each provider [GA4: 14 months] |
| Security logs | At least one year, as the law requires |
| Backups | Rotated out within 90 days; deleted data may remain in backups until then |
If the law requires us to keep something longer, we will keep only what is needed and tell you.
7. How we protect your data
We use HTTPS, limit access to people who need it, protect admin logins with two-factor authentication, keep the site and plugins updated, keep secure backups and keep security logs. Payments are handled by Razorpay. No system is completely secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
8. Your rights
You can ask us to:
- Give you a summary of the personal data we hold and who we have shared it with
- Correct, complete or update your data
- Erase your data (we may have to keep some records, such as invoices, because the law requires it, and we will tell you if so)
- Address a grievance
- Nominate another person to exercise these rights for you if you die or cannot act for yourself
You can also withdraw your consent at any time. This is as easy as giving it: use the unsubscribe link in any email, “Cookie settings” in the footer, or write to us. Withdrawing does not affect what we did before. It may mean we cannot provide some services (for example, we cannot deliver an order without an address).
To make a request, email sales@noblegraphic.in with the subject “Privacy request”. We may ask you to confirm your identity. We aim to acknowledge your request within 14 days and respond within 30 days.
9. Complaints
Please contact our grievance contact first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children
This website is for adults. We do not knowingly collect personal data of anyone under 18 without verifiable consent from a parent or guardian. If you think a child has given us data, please contact us and we will delete it. For ID card orders placed by schools or organisations, the organisation is responsible for getting permission from parents or guardians, and we use the files only to produce the print job.
11. Language
This notice is available in English.
12. Changes
We may update this notice. The version and date at the top will change, and if a change affects how we use your data, we will tell you and ask for consent again where needed.