Privacy Policy
Last updated 28 September 2026
This policy explains how The Design Shop (“we”) handles personal data when you use thedesignstack.co.in. We follow India’s Digital Personal Data Protection Act 2023 and Information Technology Act 2000 and rules, and we give visitors from other countries, including the EU and UK, the rights described below.
1. Who is responsible for your data
- The Design Stack is a brand of The Design Shop, a proprietorship registered as an MSME (Udyam), owned by Satyam Dubey.
- Udyam registration: UDYAM-MP-23-0072332
- Address: 04, Iris Leaf, Talawali Chanda, behind Laurels International School, Indore, Madhya Pradesh 453771, India
- Email: hello@thedesignstack.co.in
2. What we collect and why
| Data | What | Why |
|---|---|---|
| Account | Your email address and a random account ID. | To sign you in and keep your copies and purchases linked to you. |
| Usage | Which items you copied or downloaded, and when. | To give you your free copies and enforce the limit fairly. |
| Purchases | Name, email, country, amount, product and order ID, sent to us by Dodo Payments. We never see or store your card details. | To give you access to what you bought, and for tax and accounting records. |
| Security | IP address, browser and device details, and timestamps. Our own database keeps only a scrambled (hashed) form of your IP address. | To stop abuse, fraud and bots, and to keep the site running. |
| Marketing cookies | Cookie IDs and page events set by the Meta Pixel, only if you accept them. | To measure our ads and show them to people likely to be interested. |
We do not sell your personal data, and we do not collect more than we need for the purposes above.
3. Legal basis
We process account, usage, purchase and security data because it is necessary to provide the service you asked for and to meet legal obligations such as tax records. Marketing cookies are used only with your consent, which you can withdraw at any time from the cookie banner link in the footer.
4. Cookies
- Essential: cookies and browser storage that keep you signed in and protect the sign-in form from bots (Cloudflare Turnstile). The site cannot work without them, so they do not need consent.
- Marketing (Meta Pixel): loaded only after you click “Accept” on the cookie banner. If you decline, they are never set.
5. Who we share data with
We use these service providers to run the site. They may only use your data to provide their service to us.
- Supabase: Sign-in, database and file storage (servers in Mumbai, India)
- Dodo Payments: Payments, invoices and tax (merchant of record)
- Resend: Sending sign-in emails from our domain
- Cloudflare: Bot check (Turnstile) on the sign-in form, and storage for template file downloads (R2)
- Bluehost: Website hosting
- Meta Platforms: Ad measurement (Meta Pixel), only with your consent
We may also disclose data when the law requires it, or to protect our rights, users or the public.
6. Transfers outside India
Some providers store data outside India, for example in the EU or the US. Where this happens, we rely on their contractual and security safeguards, and we do not transfer data to any country the Government of India has restricted.
7. How long we keep it
- Account and usage data: while your account is open, and up to 90 days after you close it.
- Purchase records: 8 years, as Indian tax and accounting law requires.
- Security logs: up to 180 days.
8. Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct or complete it;
- delete it, unless we must keep it by law;
- withdraw consent you gave, such as for marketing cookies;
- nominate someone to exercise these rights if you die or become unable to (India);
- object to or restrict processing, or move your data (EU and UK visitors).
Email hello@thedesignstack.co.in from the address on your account. We reply within 30 days. You may also complain to the Data Protection Board of India, or to your local data protection authority.
9. Security
We use encrypted connections (HTTPS), one-time sign-in links instead of passwords, access controls on our database and file storage, and rate limits against abuse. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Age
The site is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn that we have, we delete it.
11. Grievance Officer
Satyam Dubey, hello@thedesignstack.co.in. We acknowledge complaints within 48 hours. More details are on the Contact page.
12. Changes
We will post any change here with a new date. If a change affects how we use data you already gave us, we will email you first.