Privacy Policy

Crucible Creations · part of COKUPA FOODS (OPC) PRIVATE LIMITED

Last updated: 2 June 2026

This Privacy Policy explains how COKUPA FOODS (OPC) PRIVATE LIMITED ("we", "us", "our") collects, uses, stores, and shares personal data when you use cruciblecreations.studio and related services for Crucible Creations.

Notice: This policy is provided for transparency. It is not legal advice. For compliance under applicable Indian law (including the Digital Personal Data Protection Act, 2023, where it applies to you), consult a qualified professional.

1. Who is responsible for your data

  • Data fiduciary / controller: COKUPA FOODS (OPC) PRIVATE LIMITED
  • Brand: Crucible Creations
  • GSTIN: 33AAMCC0702C1ZE
  • Address: 10/191, 10th Cross East, Gananm nagar, Thanjavur-613501, India
  • Privacy & grievance contact: contact@cruciblecreations.studio
  • Phone: +91 83440 80302

2. Scope

This policy applies to personal data collected through our website, customer accounts, checkout, contact form, newsletter sign-up, and related communications. It does not apply to third-party websites or services linked from our site.

By using our services, you acknowledge this policy. Where we rely on consent (for example marketing emails), you may withdraw consent as described below.

3. Personal data we collect

Depending on how you use the site, we may collect:

Account and profile

  • Name, email address, password (stored securely by our systems)
  • Profile information from Google when you choose "Sign in with Google" (such as name and email, as permitted by Google)
  • Shipping and billing addresses, phone number

Orders and customisation

  • Order history, products purchased, customisation choices
  • Files you upload for custom products (for example logos), stored to fulfil your order
  • Payment status and transaction references (we do not store full card details)

Contact and support

  • Information you send via our contact form: name, email, optional phone, subject, and message

Marketing

  • Email address when you subscribe to our newsletter or opt in to marketing communications

Technical and usage data

  • Device and browser type, IP address, pages viewed, and interactions (including via cookies and similar technologies)
  • Analytics events such as add-to-cart and purchase (when GA4 is enabled)
  • Cart and session identifiers stored locally in your browser (localStorage / sessionStorage) to operate the shop

4. How we use your data

We use personal data to:

  • Create and manage your account
  • Process orders, payments, shipping, and custom manufacturing
  • Communicate about orders, defects, and customer support
  • Respond to contact form enquiries
  • Send marketing emails where you have subscribed or opted in (you may unsubscribe at any time)
  • Improve our website, products, and security
  • Measure site usage and conversion (GA4, when configured)
  • Comply with law, tax, and enforce our Terms

6. Who we share data with

We do not sell your personal data. We share data only as needed to operate our business:

  • Commerce platform: self-hosted Medusa commerce backend on a VPS in Oracle Cloud (Mumbai region, India) — order, customer, and product data
  • Payment processing: Cashfree — payment initiation and confirmation (card/UPI details are handled by the payment provider)
  • Email delivery: Resend — contact form notifications and operational or marketing emails we send
  • Authentication: Google (sign-in via Medusa OAuth only)
  • Analytics: Google Analytics 4 (GA4) — aggregated and event-based usage data
  • Logistics partners: couriers and shipping providers — name, address, and phone to deliver orders within India
  • Professional advisers or authorities when required by law or to protect rights and safety

Each provider processes data under their own terms and privacy policies. We choose providers that support secure handling of data.

7. Storage location and international transfers

Our primary commerce data is hosted on infrastructure you control in India (Oracle Cloud, Mumbai region). However, Some service providers may process data outside India (for example in the United States or European Union). Providers such as Google, Resend, and analytics or payment partners may store or process data on servers outside India.

Where data is transferred internationally, we take reasonable steps to ensure appropriate safeguards consistent with applicable law.

8. Marketing communications

If you subscribe to our newsletter or opt in to marketing, we use your email to send updates, offers, and news about Crucible Creations. You can unsubscribe using the link in any marketing email or by emailing contact@cruciblecreations.studio.

Order-related and transactional messages (confirmations, shipping) are not marketing and may still be sent when necessary to fulfil your purchase.

9. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your cart, and support checkout. When GA4 is enabled, Google may set analytics cookies or use similar technologies to collect usage data.

A dedicated cookie consent banner may be added later. Until then, you can control cookies through your browser settings; disabling essential cookies may affect site functionality.

10. How long we keep data

We retain personal data while your account remains active, and as needed for legal, tax, or dispute purposes thereafter. Order and account records may be kept longer where required for GST, accounting, or legal claims.

Marketing lists: until you unsubscribe or ask us to delete your details. Contact form correspondence: for as long as needed to handle your enquiry and reasonable follow-up.

11. Your rights and choices

Subject to applicable law, you may:

  • Request access to personal data we hold about you
  • Ask us to correct inaccurate data
  • Request deletion of your account and associated personal data (see below)
  • Withdraw consent for marketing at any time
  • Object to or restrict certain processing where the law allows

To exercise these rights, email contact@cruciblecreations.studio with enough detail for us to verify your identity. We will respond within a reasonable period.

12. Account deletion

To delete your account and associated personal data, email contact@cruciblecreations.studio from the email address linked to your account. We will confirm once deletion is complete or explain if certain records must be retained (for example invoices or tax records).

13. Security

We use reasonable technical and organisational measures to protect personal data, including secure hosting, access controls, and reputable payment and email providers. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

14. Grievance redressal

If you have concerns about how we handle your personal data, contact our grievance channel:

We will endeavour to resolve complaints promptly. You may also have rights to approach relevant authorities under applicable Indian law.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date on this page will change when we do. Material changes may be communicated via the website or email where appropriate.