Privacy Policy
1. Who we are
PlayPersona is a brand of Playpersona LLP, a limited liability partnership registered in India. We design and manufacture 3D embossed skins and sculptural models for gaming consoles, controllers and gaming spaces, and sell them directly to customers in India through playpersona.com.
For the purposes of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, Playpersona LLP is the Data Fiduciary responsible for your personal data, and you are the Data Principal. In plain terms: we decide what data is collected and why, and we are answerable to you for it.
| REGISTERED OFFICEPlaypersona LLPPlot No. 19, Parwani Bhawan, Railway Mains Colony,Ajay Nagar, Ajmer, Rajasthan – 305001, Indiasupport@playpersona.com • +91 96606 37025 |
2. What this policy covers
This policy applies to personal data we collect when you:
● browse playpersona.com or any of its subdomains;
● create an account, place an order, or start a checkout you do not finish;
● upload artwork or reference images for a custom-made product;
● contact us by email, phone, WhatsApp, Instagram or any other channel;
● subscribe to updates, enter a giveaway, or respond to one of our advertisements.
It does not cover the independent practices of third parties whose platforms you may reach us through — for example Instagram, Meta or a payment provider. Those parties have their own privacy policies, and we link to them in Section 6 where relevant.
We sell and ship within India only. We do not knowingly offer our products to customers outside India, and this policy is written under Indian law.
3. The personal data we collect
We collect only what a specific purpose requires. The table below is the complete, itemised list.
| Category | What it includes | Why we need it |
| Identity and contact | Name, email address, mobile number, and WhatsApp number where you contact us there | To identify you, confirm your order, and reach you about it |
| Delivery | Shipping address, billing address, PIN code, city, state, and any delivery instructions or landmark you give us | To manufacture the correct dispatch label and get the parcel to you |
| Order and transaction | Products ordered, variants, quantity, order value, coupon or discount used, payment method chosen, order and invoice numbers, dispatch and delivery status, returns and refunds | To fulfil the order, issue a tax invoice, and handle returns or warranty claims |
| Payment | A transaction reference and payment status only. We do not collect or store your card number, CVV, UPI PIN, netbanking credentials or bank account details. | To confirm that payment succeeded and to reconcile our accounts |
| Custom design material | Artwork, photographs, reference images, text, names or numbers you supply for a personalised or made-to-order product, and any measurements or console details you give us | To produce the item you have designed |
| Order confirmation records | The outcome of our confirmation call or WhatsApp message on a Cash on Delivery order, and notes our team makes on it | To confirm you want the order before we dispatch it, and to reduce refused deliveries |
| Support and communications | Your messages to us and our replies, across email, WhatsApp, phone and social media, including photographs or videos you send us for a damage or warranty claim | To resolve your query and keep a record of what was agreed |
| Account | Username, password in encrypted form, saved addresses, order history, wishlist | To let you sign in and re-order without re-entering everything |
| Device and usage | IP address, approximate location derived from it, browser and device type, operating system, referring page, pages viewed, time on page, and the actions you take on the site | To keep the site secure and working, and to understand which pages and products need improvement |
| Marketing and advertising identifiers | Cookie identifiers, advertising identifiers, and events such as “viewed product”, “added to cart” or “purchased” as described in Section 8 | To measure whether our advertising works and to show you relevant advertisements |
| Fraud and risk signals | Patterns across orders, addresses and phone numbers, previous refused deliveries, and repeated cancellations | To detect fraudulent and malicious orders, which are a real and material problem for us |
Data we do not ask for
We do not ask for, and you should never send us, your Aadhaar number, PAN, passport number, card number, CVV, any banking password or OTP, or any health information. If you send any of this to us unprompted, we will delete it.
4. How we collect it
● Directly from you — when you fill in a checkout or contact form, create an account, upload design files, speak to us on a call, or message us on WhatsApp or Instagram.
● Automatically — through cookies and similar technologies when you use the site, as described in Section 8.
● From our service providers — for example, a courier partner tells us that a parcel was delivered or refused; a payment provider tells us that a payment succeeded or failed.
● From advertising platforms — in aggregate, non-identifying form, when you reach us by clicking one of our advertisements.
5. Why we process it
We process your personal data for the following purposes, and for no others:
● To take and fulfil your order — manufacturing, quality checking, packing, invoicing, dispatch and delivery.
● To confirm a Cash on Delivery order before dispatch, by phone or WhatsApp.
● To keep you informed about your order status, dispatch and tracking.
● To provide customer support, including returns, replacements, warranty claims and damage claims.
● To comply with the law — GST invoicing, tax and accounting records, and responding to lawful requests from authorities.
● To prevent fraud and abuse, including screening orders that show clear signals of being fraudulent.
● To operate and improve the site — security, performance, analytics and fixing what is broken.
● To market our products — sending you updates you have asked for, and advertising to audiences likely to be interested in what we make.
The basis on which we process it
Under the Digital Personal Data Protection Act, 2023, we rely on two bases:
● Your consent, which you give at the point of collection — at checkout, when you subscribe, or when you upload custom design material. Consent is specific to the purpose we state, and you may withdraw it at any time under Section 11.
● Certain legitimate uses permitted by the Act, which cover the data you voluntarily give us for a purpose you have asked us to carry out, and data we must process to comply with a legal obligation or a court order.
Where we want to use your data for a new purpose that is not listed above, we will ask you again.
6. Who we share it with
We share personal data only with the service providers that make our business work, and only the fields each one actually needs. Every provider listed below is bound by contract to use your data solely for the service it provides to us.
| Provider | Role | What it receives |
| Razorpay | Payment gateway for prepaid orders | Name, email, phone, order value. Card, UPI and bank details go to them directly and never reach us. |
| GoKwik | Checkout and Cash on Delivery verification | Name, phone, email, address, order value, and risk signals used to decide whether COD is offered |
| NimbusPost | Courier aggregator — assigns and manages shipments | Name, full delivery address, phone number, order value, parcel weight and dimensions |
| Velocity | Additional courier aggregator | The same delivery fields as above, for shipments routed through it |
| Delivery partners | The individual courier company assigned to your parcel, and its delivery agent | Name, delivery address, phone number, and the COD amount to collect |
| Meta Platforms | Advertising and measurement on Facebook, Instagram and WhatsApp | Website browsing and purchase events via the Meta Pixel, used to measure and improve our advertising |
| Advertising and website analytics | Cookie and device identifiers, pages viewed, and conversion events | |
| Metorik | Order, customer and sales reporting for our store | Order and customer records synced from our store, used by us for internal reporting only |
| Cloudflare | Content delivery, caching and protection against attacks | IP address and request metadata |
| Hosting and email providers | Running the website and our email | Data stored on our systems, as their infrastructure requires |
| Professional advisers | Our accountants and, where needed, legal counsel | Invoices and transaction records required for tax, audit or a dispute |
| Authorities | Courts, tax authorities, law enforcement | Only what we are legally required to disclose, and only on a valid request |
We may also disclose personal data in connection with a merger, acquisition or restructuring of our business, in which case the receiving party will be bound by this policy or one at least as protective, and we will tell you.
7. What we do not do
Stated plainly, so there is no ambiguity:
● We do not sell your personal data, and we do not rent or trade it.
● We do not share your personal data with third parties for their own advertising or their own products.
● We do not store your card number, CVV, UPI PIN, netbanking credentials or bank account details — we never receive them.
● We do not publish your custom artwork, photographs or designs on our website or social channels without asking you first.
● We do not send marketing messages to anyone we know to be under 18.
● We do not use your support conversations for advertising.
8. Cookies and tracking
Cookies are small files a website stores on your device. We use four kinds.
| Type | What it does | Can you refuse it? |
| Strictly necessary | Keeps you signed in, remembers your cart through checkout, and protects against attacks and fraud | No — the site cannot function without these |
| Functional | Remembers preferences such as your saved address or recently viewed products | Yes |
| Analytics | Tells us, in aggregate, which pages and products people look at and where they drop off | Yes |
| Advertising | Set by Meta and Google. Records events such as a product view, add to cart, checkout start or purchase, so we can measure our advertising and show you relevant ads, including reminders about items you left behind. | Yes |
How to control them
● On our site, use the cookie preferences control in the website footer to accept or refuse functional, analytics and advertising cookies at any time.
● In your browser, you can block or delete cookies through its settings. Blocking strictly necessary cookies will break checkout.
● On Meta, you can limit ad personalisation in your Facebook and Instagram Ad Preferences.
● On Google, you can limit personalisation through Google Ads Settings.
We do not respond to browser “Do Not Track” signals, because there is no agreed standard for how to honour them.
9. How long we keep it
We keep personal data only as long as the purpose it was collected for is still being served, and then we erase it. Where the law sets a minimum period, that period governs.
| Data | How long | Why |
| Order, invoice and tax records | 8 years | Minimum period required under Indian tax, GST and company law |
| Delivery and courier records | 3 years | To resolve delivery, loss and damage disputes |
| Custom design material | 12 months after delivery | To reproduce the item if you need a replacement, then deleted |
| Support conversations | 3 years | To handle warranty claims and repeat issues |
| COD confirmation records | 2 years | To resolve disputes about whether an order was confirmed |
| Account data | Until deletion, or 3 years of inactivity | After 3 years with no login and no order we will notify you and then delete the account |
| Marketing contact data | Until you unsubscribe | Removed promptly once you withdraw consent |
| Abandoned checkout data | 90 days | To send you a reminder and to understand where checkout fails |
| Website and security logs | 12 months | Minimum log retention expected of a Data Fiduciary, and needed to investigate incidents |
| Fraud and risk records | 5 years | To recognise repeat fraudulent activity |
Where we must keep a record for legal reasons but no longer need to identify you within it, we anonymise it instead of retaining your identity.
10. How we protect it
We maintain reasonable security safeguards appropriate to the data we hold:
● Encryption in transit — the entire site is served over HTTPS, and passwords are stored only as cryptographic hashes.
● Access control — only the team members whose work requires it can reach customer data, each with their own credentials, and access is removed when someone leaves.
● Data minimisation — we share the narrowest set of fields each provider needs, rather than a full customer record.
● Logging and monitoring — we retain access and processing logs for at least twelve months so that an incident can be investigated.
● Protection at the edge — traffic is filtered for malicious activity before it reaches our store.
● Vetted providers — we work with established providers and require them by contract to protect your data and to use it only for the service they provide us.
No system is perfectly secure, and we will not claim otherwise. What we commit to is this: sensible safeguards, honest disclosure if something goes wrong, and prompt action to contain it.
You have a part in it too. Keep your account password private, do not reuse it elsewhere, and never share an OTP or payment credential with anyone who claims to be from PlayPersona — we will never ask you for one.
11. Your rights
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights over your personal data.
| Right | What you can ask for |
| Access | A summary of the personal data we hold about you, what we are doing with it, and the identities of the parties we have shared it with |
| Correction and updating | That we correct anything inaccurate, complete anything incomplete, and update anything out of date |
| Erasure | That we delete your personal data, except where we are legally required to keep it — tax and invoice records being the main example |
| Withdraw consent | That we stop processing on the basis of a consent you previously gave. Withdrawing it is as easy as giving it, and does not affect processing already carried out. |
| Opt out of advertising | That we stop using your data for personalised advertising and remove you from marketing communications |
| Nominate | That we recognise a person you nominate to exercise these rights on your behalf, in the event of your death or incapacity |
| Grievance redressal | A readily available means of raising a complaint with us, set out in Section 12 |
How to exercise a right
Email support@playpersona.com from the address associated with your order or account, with the subject line “Data Request”, and tell us which right you are exercising. If you have an account, you can also edit your details and addresses yourself by signing in.
We may ask you to verify your identity before we act, so that we do not disclose your data to someone else. We will respond within 30 days for ordinary requests, and in no case later than the 90-day outer limit set by the DPDP Rules, 2025. There is no charge.
Two honest caveats. First, if you ask us to erase your data while an order is in transit, we will not be able to complete the delivery. Second, if you withdraw consent for order-related communication, you will stop receiving dispatch and tracking updates.
You also have a duty under the Act not to make a false or frivolous request, and not to supply false particulars or impersonate another person when exercising these rights.
12. Grievance redressal
If you are unhappy with how we have handled your personal data, or with any part of your experience with us, raise it with our Grievance Officer. You do not need to go through customer support first.
| GRIEVANCE OFFICERAryan ShrivastavPlaypersona LLPPlot No. 19, Parwani Bhawan, Railway Mains Colony,Ajay Nagar, Ajmer, Rajasthan – 305001, Indiasupport@playpersona.com+91 96606 37025 • Monday to Saturday, 10:00 to 19:00 IST |
Confirm before publishing: grievance@playpersona.com is created and forwards to Aryan.
We will acknowledge your complaint within 48 hours of receiving it, and resolve it within one month, in line with the Consumer Protection (E-Commerce) Rules, 2020.
If we do not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India once it is accepting complaints, or to the appropriate consumer forum under the Consumer Protection Act, 2019.
13. Children and guardians
PlayPersona products are designed to appeal to gamers of all ages, including children. Where the customer is under 18, we ask that a parent or lawful guardian create the account and complete the purchase.
We do not currently run an age-check at checkout, so this depends on it being followed in good faith. Where our order review or Cash on Delivery confirmation call gives us reason to think an order was placed by a child without a parent or guardian involved, we may pause it and ask a parent or guardian to confirm before we process payment or dispatch.
We do not knowingly collect personal data from a child under 18 outside of a parent or guardian’s involvement in the order, and we do not track the behaviour of, or direct targeted advertising at, anyone we know to be a child.
If you believe a child has given us personal data without a parent or guardian’s involvement, write to our Grievance Officer and we will delete it.
14. If there is a data breach
If personal data we hold is lost, accessed without authorisation or otherwise compromised, we will:
● notify every affected person without delay, describing in plain language what happened, what data was involved, the likely consequences, what we are doing about it, and what you should do to protect yourself;
● report the incident to the Data Protection Board of India within 72 hours of becoming aware of it, with the detail the Rules require; and
● record the incident and the remedial measures taken.
We will tell you directly. We will not bury it in a website update.
15. Where your data is processed
Your personal data is primarily stored and processed in India.
Some of our service providers — notably our advertising, analytics, reporting and content delivery partners — operate infrastructure outside India, so limited data may be processed abroad. Where that happens, we rely on providers that offer contractual data protection commitments, and we transfer only to countries not restricted by the Government of India under the Digital Personal Data Protection Act, 2023.
We do not transfer your personal data outside India for any purpose other than those listed in Section 5.
16. Links to other websites
Our site and our social channels link to third-party websites — payment pages, courier tracking pages, our Instagram profile, creator content. Once you follow such a link, that site’s own privacy policy governs. We are not responsible for their practices, and we encourage you to read their policies before giving them your data.
17. Changes to this policy
We may update this policy as our products, our service providers or the law change. The “Last updated” date at the top of this page always reflects the current version.
If a change materially affects how we use your personal data, we will not rely on a quiet update — we will notify you by email or by a prominent notice on the site, and where the law requires it, ask for your consent again.
Earlier versions are available on request from our Grievance Officer.
18. How to reach us
| GENERAL AND ORDER SUPPORTsupport@playpersona.com • +91 96606 37025Monday to Saturday, 10:00 to 22:00 IST |
| PRIVACY, DATA REQUESTS AND COMPLAINTSAryan Shrivastav, Grievance Officersupport@playpersona.com |
| BY POSTPlaypersona LLP, Plot No. 19, Parwani Bhawan,Railway Mains Colony, Ajay Nagar,Ajmer, Rajasthan – 305001, India |