Our handmade workshop is still warming up the kiln — please hold off on orders for now. Follow @neerami and we'll wave the green flag when we're ready
Last updated: April 2026
Neerami is a handmade resin art e-commerce platform based in Haryana, India. We are committed to protecting the privacy of every visitor and customer. This Privacy Policy explains what personal data we collect, why we collect it, how long we retain it, and the rights you have under the Digital Personal Data Protection (DPDP) Act, 2023.
By using our website, you agree to the practices described in this policy. If you do not agree, please discontinue use of the website immediately.
We collect only the data necessary to operate our store and provide you with a seamless shopping experience:
We use your personal data for the following purposes:
When you request a GST-compliant tax invoice, you provide us with your GSTIN (Goods and Services Tax Identification Number). The GSTIN is a 15-character identifier issued by the GST Network and structurally contains your PAN (Permanent Account Number) at positions 3–12.
What we collect: Your GSTIN, the business name you supply for the invoice, and your billing address.
Why we need it: Rule 46 of the CGST Rules, 2017 requires us to include your GSTIN on the tax invoice for you to claim Input Tax Credit on your purchase. We cannot issue a GST-compliant invoice without it.
How we store it: Your GSTIN is encrypted at rest using AES-256 encryption. It is masked in our admin dashboards (only the last four characters visible). Full GSTIN is visible only within the invoice PDF document itself — which is generated fresh every time you or an administrator requests it, and is never permanently stored outside the encrypted database column.
How long we keep it: We retain the invoice record and associated GSTIN for 72 months (6 years) from the due date of the annual return for the financial year in which the invoice was issued. This retention is mandated by Section 36 of the CGST Act, 2017. After this period, we permanently delete both the invoice record and the GSTIN.
Your rights under the DPDP Act, 2023: You may request access, correction, or a copy of your personal data at any time. You may request deletion of your Neerami account at any time. However, for GST-invoiced orders, we will anonymise your identity but retain the invoice itself until the 72-month legal-retention period expires. We will send you 48-hour advance notice before any data deletion per Rule 8(3) of the DPDP Rules, 2025.
Security incident response: In the event of a data breach affecting your GSTIN, we will notify the Data Protection Board of India within 72 hours and notify you without undue delay, per DPDP requirements.
We retain your data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order records | 6 years | GST Act Sections 35 & 36 (mandatory book-keeping) |
| Analytics sessions | 90 days | Website performance analysis |
| Cart data | 30 days of inactivity | Convenience for returning customers |
| Account data | Until deletion requested | Active account maintenance |
We share your data only with trusted service providers who are necessary to operate our platform. We never sell your personal data to third parties.
Your data is stored on servers located in Singapore (Railway for application hosting, Neon for database hosting). Singapore is not on the list of countries restricted by the Government of India under the DPDP Act, 2023, and data transfer to Singapore is permitted under current regulations.
As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
Our website uses the following categories of cookies:
We do not use any marketing, advertising, or third-party tracking cookies. For more details, see our Cookie Policy.
If you have any questions, concerns, or complaints regarding the processing of your personal data, please contact our Grievance Officer:
Grievance Officer
Email: privacy@neerami.in
Neerami, Haryana, India
We will acknowledge your request within 48 hours and respond within 30 days as required under the DPDP Act, 2023.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered users via email and update the “Last updated” date at the top of this page.
We encourage you to review this policy periodically to stay informed about how we protect your data.