Version 2026-07-14
Privacy at The Melons' Studio
We collect the least we can, we tell you exactly what we do with it, and you can take it back at any time. This page is the plain-English version and the formal notice at once.
What we collect, and why
To give you an account: your name, email, and password. Without these there is no account.
To take a booking or an order: what you booked or bought, when, and the payment reference. Your card details never touch our servers — Razorpay handles the payment and only tells us whether it succeeded.
If you choose to: a profile picture, what you do, a short bio, your hobbies and your Instagram handle. Every one of these is optional and you can delete them at any time.
We do not collect anything "just in case". If a field is not needed for something we actually do, we do not ask for it.
Who sees it
Our staff, only to run the studio — to check you into a workshop, fix an order, answer a question.
Other members see your profile only if you switched that on. It is off by default, and your email and phone are never shown to them.
Our payment provider (Razorpay) and our email provider process data on our behalf, under contract. We do not sell your data, and we never will.
How long we keep it
Your account details: as long as you have an account. Close it and we erase them.
Payment and booking records: eight years after the transaction, because tax law requires us to keep books of account. After you close your account these records remain, but stripped of anything identifying you.
Dormant accounts: if you have not signed in for three years we will email you, and if we still hear nothing we erase the account.
Your rights
See it — download everything we hold about you as a file, from your account settings.
Correct it — edit your details yourself at any time.
Withdraw consent — turn off anything optional in your privacy settings. It takes effect immediately, and switching something off is exactly as easy as switching it on.
Erase it — close your account and your personal details are destroyed. We answer any request within 30 days.
If something goes wrong
If we ever suffer a data breach that puts you at risk, we notify the regulator within 72 hours and tell you directly.
If you are unhappy with how we handle your data, write to our privacy officer below. We respond within 30 days. You also have the right to complain to the Data Protection Board of India, or to your local supervisory authority if you are in the EU or UK.
You must be 18 or older to hold an account. We do not knowingly collect data about children.
Questions, or a complaint?
Write to our privacy officer. We reply within 30 days.