Privacy policy
Privacy Policy
Last updated: September 2, 2026
The Sirius Studio operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). The Sirius Studio is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
For the purposes of the General Data Protection Regulation (GDPR) and the Indian Digital Personal Data Protection (DPDP) Act, The Sirius Studio is the Data Controller of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified.
In the preceding 12 months, we have collected, processed, and disclosed the following categories of personal information for business purposes, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
-
Contact details including your name, address, billing address, shipping address, phone number, and email address.
-
Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
-
Account information including your username, password, security questions, preferences, and settings.
-
Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
-
Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
-
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
-
Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
Personal Information Sources
We may collect personal information from the following sources:
-
Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
-
Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
-
From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
-
From our partners or other third parties.
How We Use Your Personal Information (and our Lawful Basis)
Depending on how you interact with us or which of the Services you use, we process your personal information based on the following legal grounds and for the following purposes:
-
To Provide, Tailor, and Improve the Services (Contractual Necessity & Legitimate Interest). We use your personal information to perform our contract with you, process payments, fulfill orders, arrange for shipping, facilitate returns, and manage your account. We also use this data based on our legitimate interest to tailor the Services, remember your preferences, and create a customized shopping experience.
-
Marketing and Advertising (Consent & Legitimate Interest). With your explicit consent, or where permitted under our legitimate interest, we use your personal information to send marketing, advertising, and promotional communications by email, text message, or postal mail. We also use it to show you online advertisements based on items you previously purchased or added to your cart.
-
Security and Fraud Prevention (Legitimate Interest). We use your personal information to authenticate your account, provide a secure payment experience, detect and investigate fraudulent, illegal, or malicious activity, and secure our services.
-
Communicating with You (Contractual Necessity & Legitimate Interest). We use your personal information to provide customer support, be responsive to you, and maintain our business relationship.
-
Legal Reasons (Legal Obligation). We use your personal information to comply with applicable tax, accounting, and consumer protection laws, to respond to valid legal processes, and to enforce our terms or policies.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:
-
With Service Providers: Such as Shopify, IT management, payment processors, data analytics, customer support, cloud storage, fulfillment, and shipping partners.
-
With Business and Marketing Partners: To provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising. Under certain US state laws, this type of targeted advertising may be considered "sharing" or "selling" data (see the "US State Privacy Rights" section below for your opt-out rights).
-
At Your Request: When you direct, request, or consent to our disclosure of certain information to third parties, such as through social media widgets or login integrations.
-
Corporate Affiliates: With our affiliates or otherwise within our corporate group.
-
Legal & Business Transactions: In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations, or to protect our rights and the rights of our users.
Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to operate our website and tailor our advertising. Depending on your location (such as the EU/UK), we will ask for your explicit consent before dropping non-essential cookies on your device. You can withdraw your consent or update your cookie preferences at any time by clearing your browser cookies or utilizing the cookie banner provided on our website.
Relationship with Shopify
The Services are hosted by Shopify. Information you submit to the Services will be transmitted to and shared with Shopify to provide and improve the Services. Shopify may use personal information collected about your interactions with our store, along with other merchants, to provide enhanced features. In these circumstances, Shopify is responsible for processing your personal information. To learn more about how Shopify uses your personal information, visit the Shopify Consumer Privacy Policy.
US State Privacy Rights (CCPA/CPRA)
If you are a resident of California or other US states with applicable privacy laws, you have specific rights regarding your personal information:
-
Right to Know and Access: You can request details about the categories and specific pieces of personal data we have collected about you over the past 12 months.
-
Right to Delete and Correct: You can request the deletion or correction of your personal data.
-
Right to Opt-Out of the "Sale" or "Sharing" of Data: We do not sell your data for direct monetary profit. However, our use of third-party advertising cookies may be considered "sharing" or "selling" under US law. You have the right to direct us not to sell or share your personal information. To exercise this right, please click the "Do Not Sell or Share My Personal Information" link in our website footer, or email us at hello@thesiriusstudio.in.
-
Non-Discrimination: We will not discriminate against you for exercising any of these rights.
European Privacy Rights (GDPR)
If you reside in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:
-
Right of Access: To receive a copy of your personal data.
-
Right to Rectification: To request correction of inaccurate data.
-
Right to Erasure (Right to be Forgotten): To request the deletion of your personal data.
-
Right to Restrict Processing: To request a halt on processing your data under certain conditions.
-
Right to Data Portability: To receive your data in a structured, commonly used format.
-
Right to Object: To object to our processing of your data, particularly for direct marketing purposes.
-
Right to Withdraw Consent: Where we rely on consent to process your data, you can withdraw it at any time.
Indian Privacy Rights (DPDP Act 2023)
For users residing in India, we collect and process your digital personal data in compliance with the Digital Personal Data Protection Act, 2023. You have the right to access your data, seek correction or erasure, and nominate an individual to exercise your rights in the event of death or incapacity. We rely on clear consent for marketing communications and only process data for legitimate operational uses. Any grievances can be directed to our appointed Grievance Officer (listed in the Contact section below).
Security and Retention of Your Information
We implement reasonable security measures to protect your personal information. However, no security system is impenetrable, and we cannot guarantee perfect security. We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this policy. For example, we retain transaction records for up to 7 years to comply with financial, tax, and legal reporting obligations, after which it is securely deleted or anonymized.
Children's Data
The Services are not intended to be used by children. We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us to request its deletion.
International Transfers
Please note that we may transfer, store, and process your personal information outside the country you live in, including in India, the United States, and Canada. If we transfer your personal information out of the European Economic Area or the UK, we rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or equivalent UK mechanisms, unless the destination country provides an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by posting the updated Privacy Policy on this website, updating the "Last updated" date, and where legally required, we will send an email notification.
Contact & Grievance Officer
Should you have any questions about our privacy practices, this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:
-
Email: hello@thesiriusstudio.in
-
Phone: +91 9867744693
-
Address: 1503, Solus, Hiranandani Estate, Godhbunder Road, Thane West, 400607 Thane MH, India
Grievance Officer (For India DPDP Compliance): Abhirama Kanekar customercare@thesiriusstudio.in