Privacy.

Who handles your information

Ruskin Felix Art is operated by Ruskin Felix Barar, at F-2002, Lodha Bel Air, Jogeshwari West, Andheri, Mumbai - 400102, Maharashtra, India. The owner is responsible for the personal information described here. Email rfb@ruskinfelix.com for privacy questions, requests or concerns.

Account information and saved addresses

When you create a collector account, we collect your name, email address, any telephone number you provide and a securely hashed password, together with account timestamps and your acceptance of the applicable terms. Passwords are stored as salted Argon2id hashes, not readable text. Private account information is held in Cloudflare's hosted database and is not placed in your browser's local storage.

An address you choose to save can include the recipient, street address, city, state or region, postal code, country and delivery contact details. We use it for the delivery arrangements you request. Purchase records, when a purchase occurs, may include the selected work, agreed price, order status, delivery information and related correspondence. An empty order history means no recorded orders; an enquiry or cart selection is not a payment.

A delivery quote request stores your selected paintings and the address you have saved, its status, approved delivery amount and validity. The studio uses these details to check suitable delivery services and prepare your quote. A carrier may receive the delivery information needed to assess service and cost. A quote does not automatically enrol you for newsletters, charge you or reserve a painting.

Enquiries and collection updates

An enquiry includes the information you choose to supply, such as your name, email, location, painting of interest and message. The painting enquiry form prepares a draft in your email app; it does not send automatically. You decide whether to send it. Your provider handles that email under its own policy. Once it reaches the studio, we use it to respond and manage the conversation.

Collection-update subscriptions store your email, subscribed or unsubscribed status, consent version and relevant timestamps. Subscription is a separate, explicit choice. An account, address or enquiry does not automatically enrol you. Newsletter campaigns are not currently being sent; a sign-up records your choice for future collection updates. No email-address verification is implied by registration or subscription.

Why we use your information

We use account details to provide and secure your account; addresses to prepare delivery arrangements at your request; enquiry information to answer you; and purchase records to manage an agreed sale, delivery or complaint. Relevant records may also be used to prevent misuse, investigate an issue and meet legal or accounting obligations. Collection updates use only the separate subscription choice.

We do not sell your personal information, use private enquiries to advertise other businesses, or ask you to include card details, banking passwords, identity documents or other unnecessary sensitive information in an enquiry.

Essential cookies and browser storage

Signing in sets an essential account-session cookie for up to 14 days. It is marked Secure, HttpOnly and SameSite=Lax. It contains a random session token; the account database stores its hash and expiry rather than the raw token. Signing out ends the session. Blocking essential cookies can prevent account functions from working.

Your cart requires sign-in. Selected painting identifiers and their selection dates are stored in the account database, with a quantity of one for each original. Selections remain until you remove or clear them, or your account is closed. Signing out hides your cart; another account does not inherit it. An Add to cart request before sign-in can carry a painting identifier through the login or signup redirect so it can be added after authentication. This does not reserve a painting or create an order. Display theme and your selected currency may be saved locally; account and cart details are not stored in browser local storage. Cloudflare can infer your country from the network connection to choose a default currency. We do not request GPS or precise device location.

Language is reflected in the page URL. Language preferences are saved in a first-party cookie for up to one year and in browser local storage until cleared. Cloudflare may use the country inferred from your connection to choose a default language. India and countries without a mapped default use English. Changing language does not change your account data, saved delivery address, selected currency or payment amount.

Hosting services may use essential security measures to serve the website and prevent abuse. We do not currently use advertising cookies or behavioural advertising trackers.

Unsubscribing and other choices

You can withdraw a collection-update subscription through your account's subscription control, or email rfb@ruskinfelix.com with the subject “Unsubscribe”. Any future campaign will offer an unsubscribe method. A limited opt-out record may remain so your preference is honoured. Necessary account, purchase and complaint messages are separate from marketing.

You can request access to information you have shared, correction of inaccurate details, deletion of information no longer needed, account closure or withdrawal of consent where processing relies on consent. Email the studio; we may request limited information to confirm the request is yours. We will explain if an obligation or unresolved claim requires a record to remain. Closing an account does not remove existing purchase rights or obligations.

Service providers and international processing

Cloudflare supplies hosting, website security and the account database. Our account database is configured in the Asia-Pacific region; Cloudflare's network operates globally. Hosting services may process ordinary request information, including IP addresses, browser details and infrastructure logs. Studio email providers handle correspondence. For an agreed purchase, the carrier receives only the recipient and delivery details needed for fulfilment.

Providers may process information outside India. Disclosures are limited to the services needed, your instructions or applicable legal requirements. External websites and Razorpay have their own privacy notices. When you open Checkout, your saved account name, email and available contact number prefill the payment window, and Razorpay receives the transaction amount, currency and payment order identifier.

Payments

Checkout clearly identifies whether it uses live payments or simulated test payments. Our site stores the selected works, agreed price breakdown, transaction currency, contact and delivery details at checkout, payment status and provider order/payment identifiers for the signed-in account. These order snapshots remain separate from later changes to your profile or address. Signed provider notifications help verify and recover payment confirmation. Test records are labelled and create no physical purchase or shipment. The payment window is provided by Razorpay; our application does not store card numbers, CVVs, banking passwords or UPI PINs. Only verified captured provider payments are confirmed in account history. Never send payment credentials in an enquiry.

Retention and security

Account information remains while your account is active, until deletion is requested or otherwise necessary. Sessions stop working at expiry; expired records are removed during later sign-in activity. Newsletter information remains until you unsubscribe; a minimal opt-out record can be kept to respect that choice. Correspondence is kept while needed for the conversation or relevant record keeping. Actual purchase and complaint records may need to remain for accounting, legal obligations or an unresolved dispute, even after account closure.

The application's abuse-prevention records use hashed IP or email identifiers rather than raw IP addresses. Their enforcement windows last no more than 24 hours; expired records are cleared during subsequent sign-in activity. Hosting-provider infrastructure logs are handled separately by that provider. Limited backup or security records can remain until their normal replacement or deletion. We delete or de-identify information when it is no longer needed for its applicable purpose.

Secure connections, password hashing, access controls and restricted handling help protect information. No online service can guarantee absolute security. Use a unique password and contact us promptly if you believe your account or information has been misused.

Children, rights and policy changes

Collector accounts and purchase requests are intended for adults aged 18 or over. We do not knowingly seek personal information from children. A parent or guardian who believes a child has supplied information can contact us about removal.

Statutory privacy rights apply to the extent the relevant law is in force and applies to the processing concerned. This notice does not limit a right to approach a competent authority. We may update it when services or information practices change; the effective date identifies the current version. A material new use requiring your choice will be explained before it begins.

Contact and complaints

Privacy and consumer contact: Ruskin Felix Barar, owner of Ruskin Felix Art, F-2002, Lodha Bel Air, Jogeshwari West, Andheri, Mumbai - 400102, Maharashtra, India. Email rfb@ruskinfelix.com. Describe the concern without passwords or payment credentials. Consumer complaints are acknowledged within 48 hours and we seek resolution within one month, without postponing an earlier obligation under applicable law.

Related policies: Terms, Shipping and Returns & refunds.