Privacy Policy — Unsent Studio

Introduction

Unsent Studio is an independent creative studio. We publish original stories and books, and we are building towards artwork, digital content, apparel and limited edition merchandise. This policy explains what happens to your personal data when you visit unsentstudio.in, join our mailing list, or buy something from us.

We have written this in plain English rather than legal boilerplate, because a policy nobody can read protects nobody. Where a section describes something we do not offer yet, we say so clearly rather than implying otherwise.

This policy is written to meet India's Digital Personal Data Protection Act, 2023, and takes account of the GDPR for visitors in the UK and European Economic Area.

Information We Collect

We collect two kinds of information: what you hand us deliberately, and what your browser reports automatically just by loading a page.

Information You Provide

You only give us this when you choose to. Nothing here is collected silently.

Email address — when you join the mailing list or ask to be told when a book goes on sale.
Name — when you buy something, or when you write to us and sign your message.
Message content — anything you write to us by email or through a form.
Order details — what you bought, when, and the amount paid.
Delivery address — only if you order a physical item, once physical items exist.

Automatically Collected Information

Like every website, ours receives some technical information from your browser. We use it to keep the site working and secure, not to build a profile of you.

IP address, in a shortened or anonymised form where our providers support it
Browser type, operating system and screen size
Pages viewed, time on page, and the link that brought you here
Approximate location at city level, inferred from your IP address
Server logs generated by our host for security and error diagnosis

We do not attempt to identify individual visitors from this data, and we do not combine it with your email address unless you have bought something and we need to investigate a problem with that specific order.

Cookies & Tracking Technologies

Cookies are small files a website stores in your browser. Similar technologies include pixels, local storage and tags. Where the law requires consent, we ask before setting anything that is not strictly necessary, and you can decline without losing access to the site.

Analytics

Which pages people read, how they arrived, and where they stop reading. Used to improve the site, in aggregate.

Website performance

Load times, errors and broken pages, so we can find and fix what is slow or failing.

Advertising

Measuring whether an advert led to a visit or a purchase, and avoiding showing you the same advert repeatedly.

Personalisation

Remembering small preferences so the site behaves consistently when you return.

Google Analytics

Where enabled, Google Analytics tells us how many people visited, which pages held attention and which did not. We configure it to anonymise IP addresses and we do not use it to identify anyone individually. Google processes this data under its own privacy terms. You can opt out across all sites using Google's browser add-on.

Google Ads

If we advertise, Google Ads conversion tracking lets us see whether an advert resulted in a visit or a purchase. It may also allow us to show you a reminder about a book or product you looked at. You can control this through your Google Ads settings at any time.

Meta Pixel

Because our community lives largely on Instagram, we may use the Meta Pixel to measure whether a post or advert brought someone to the site, and to reach people with similar interests. Meta processes this under its own data policy, and you can adjust what Meta uses in your Instagram or Facebook ad preferences.

Current status

At the date above, Unsent Studio runs no analytics, advertising or tracking cookies of any kind. The site sets nothing beyond what is strictly necessary to serve the page. The three sections above describe tools we may introduce as we grow. If and when we do, we will update the date at the top of this page and ask for consent where the law requires it.

You can block or delete cookies in your browser settings at any time. Doing so will not stop you reading anything on this site.

Email Communication

We send two kinds of email, and we treat them differently. Transactional emails — an order confirmation, a download link, a reply to your question — are part of something you asked for, so you receive them regardless. Marketing emails only ever go to people who asked for them.

Newsletter

When you enter your email address on this site, you are consenting to hear from us about new work — a book going on sale, a new chapter, a release. We store your address and the date you gave it, so we can demonstrate that consent was given.

Every marketing email carries a one-click unsubscribe link. We do not ask why, and we do not send a follow-up trying to change your mind. You can also simply write to us and ask to be removed.

Account Creation Not yet available

The site does not currently offer accounts, and you do not need one to buy anything. If we introduce accounts — for a library of purchases, or early access to a drop — we would store your email address, a securely hashed password, and your order history. We would never store a password in a readable form, and you would be able to delete the account at any time.

Ecommerce Purchases In preparation

We are preparing to sell directly from this site — books first, then artwork, apparel and limited edition pieces. This section describes how that will work, so that it is published before the first order rather than after.

Payment Information

We never see, handle or store your card, UPI or banking details. Payments are processed by a regulated payment gateway. Your payment details go directly to them, encrypted, and are never transmitted to us.

What we receive back is limited to: your name, your email address, the amount, the date, a transaction reference, and whether the payment succeeded or failed. That is all we need to send you what you bought and to keep proper accounts.

Shipping Information

Digital products need no address — they are delivered by email. For physical items such as apparel, prints or collectibles, we will collect a delivery name, postal address and phone number, and share them with the courier for the sole purpose of delivering your parcel.

Couriers receive only what is needed to complete the delivery. They do not receive your order history, and we do not authorise them to use your details for anything else.

Third Party Services

Running a small studio means relying on a handful of specialist providers. Each receives only the minimum it needs, and each is bound by its own privacy obligations.

Hosting — serves the pages and keeps server logs for security.
Payment gateway — processes payments and holds the payment details we never see.
Email delivery — sends order confirmations, download links and newsletters.
Storage — holds order records and digital files in access-controlled storage.
Couriers — deliver physical orders, once physical orders exist.

Our site also links to external platforms such as Instagram. Once you follow a link away from this site you are subject to that platform's privacy policy, not ours.

We do not sell your personal data. We do not rent it, trade it, or share it for another company's advertising. We disclose data only to the providers listed above, or where a law or a valid legal order requires it.

Data Security

Our strongest security measure is restraint: we hold very little, so there is very little worth stealing. Alongside that:

All traffic is encrypted in transit over HTTPS
Order records sit in access-controlled storage, not in public folders
Digital files are served through expiring links, never permanent public URLs
Payment data never touches our systems at all
Access is limited to the people who genuinely need it

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affected your personal data, we would notify you and the relevant authority without undue delay, and tell you plainly what happened.

Data Retention

We keep personal data only as long as it serves a purpose, then we delete it.

Mailing list — until you unsubscribe, after which your address is removed.
Order and tax records — for as long as Indian tax and accounting law requires. We cannot delete these earlier even if asked, because keeping them is a legal obligation.
Download links — expire automatically. Only the fact that a download occurred is retained with the order.
Correspondence — kept while a matter is open and for a reasonable period afterwards.
Server logs — held briefly for security and diagnosis, then rotated out.

Children's Privacy

This site is intended for adults. We do not knowingly collect personal data from anyone under 18, and we do not direct advertising at children.

Under India's DPDP Act, processing a child's personal data requires verifiable parental consent, and behavioural advertising to children is prohibited outright. We comply by not knowingly collecting such data at all.

If you are a parent or guardian and believe a child has given us personal data, write to us and we will delete it promptly.

International Users

Unsent Studio operates from India, and our digital work is available worldwide. If you visit or buy from outside India, your data will be processed in India and potentially in other countries where our providers operate their infrastructure.

Data protection law differs between countries. By using this site you understand that your data may be handled outside your own jurisdiction. Where we transfer personal data internationally, we use providers who commit to appropriate safeguards, including the European Commission's standard contractual clauses where relevant.

Visitors in the UK and European Economic Area keep their GDPR rights, including access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority.

Your Privacy Rights

Your data belongs to you. You may exercise any of the following by writing to us — there is no form to complete and no fee to pay.

Access your data

Ask what personal data we hold about you, and we will tell you in full.

Update your information

Have anything inaccurate or out of date corrected.

Request deletion

Have your data erased, except records we are legally required to retain.

Withdraw consent

Stop marketing email at any time, without affecting anything you already bought.

Port your data

Receive a copy of what you gave us in a common, machine-readable format.

Nominate someone

Under the DPDP Act, appoint a person to exercise these rights if you die or become incapacitated.

We respond to every request within 30 days. We may need to confirm your identity first, so that nobody else can request your data. If you are unsatisfied with our response, you may complain to the Data Protection Board of India, or to your local supervisory authority if you are in the UK or EEA.

How to Contact Us

For anything in this policy — to see your data, correct it, delete it, or simply ask a question — write to us. A person reads every message.

Email vihaan@unsentstudio.in

Phone +91 80909 11689

Instagram @unsentstudio.in

Address Unsent Studio
K-704, World Bank Barra
Kanpur, Uttar Pradesh 208027
India

Response Within 30 days, usually far sooner

Unsent Studio is operated by Harshit Bajpai. Written correspondence about your personal data may be sent to the address above, though email reaches us fastest.

Changes to This Privacy Policy

This policy will change as Unsent Studio grows — when the store opens, when accounts arrive, when we introduce analytics. Each time it does, we update the date at the top of this page.

If a change materially affects how we handle data you have already given us, we will tell subscribers by email rather than quietly editing this page. Where a change requires fresh consent under the law, we will ask for it.

Continuing to use the site after an update means you accept the revised policy.