Privacy Policy

Posterwa Privacy Policy

Last Updated: 11/07/2025

Introduction

Posterwa (“we,” “us,” or “our”) is committed to protecting the privacy of our users (“you” or “your”). This Privacy Policy outlines how we collect, use, share, and safeguard your personal information when you visit our website or make a purchase. By using the Posterwa website or services, you agree to the practices described in this policy. We comply with all applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and India’s data privacy laws (such as the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023). Posterwa currently ships merchandise only within India, but this Privacy Policy applies to all users of our site, regardless of location. We may update this policy from time to time, and any changes will be posted on this page. We encourage you to review this policy periodically for updates.

Information We Collect

We collect personal information and usage information to provide and improve our services. This includes:

  • Information You Provide Directly: When you create an account or place an order, we collect information such as your name, username, email address, telephone number, shipping address, billing address, and payment details. For example, if you place an order on our site, you will be asked to provide contact details and payment information for billing and shipping purposes. We also collect any other information you voluntarily provide, such as preferences, product reviews, or the contents of inquiries and correspondence you send us (e.g. feedback or customer support requests). We do not intentionally collect sensitive personal data (such as financial account passwords or government IDs) unless necessary for payment processing, and we will obtain your consent if we ever need to collect such data as required by law.
  • Payment Information: Posterwa uses trusted third-party payment gateways for processing payments. When you make a purchase, your credit/debit card number, UPI or other payment details are collected directly by our payment processor (for example, our store is powered by Shopify and its payment system) and not stored on our servers. We do not see or save your full card number or CVV. All payment transactions adhere to Payment Card Industry Data Security Standards (PCI-DSS) for security. (If you choose cash-on-delivery where available, you will provide only the necessary contact and address information for delivery.)
  • Information Collected Automatically: When you visit our site, we automatically collect certain data about your device and browsing actions (“Device Information”). This includes your IP address, browser type, operating system, date and time of visits, the pages or products you view, and the webpage that led you to our site. We collect this through cookies, log files, scripts, and similar tracking technologies:
    • Cookies: small data files stored on your browser to remember your preferences and activity. For example, we use cookies to keep you logged in, remember items in your cart, and understand how you use our site. Cookies may also be used to provide you with a personalized experience and relevant ads. (See Cookies & Tracking Technologies below for details.)
    • Log Files: records of events on our website, which log data such as IP address, browser type, Internet Service Provider, referring/exit pages, and timestamps for each action on our site.
    • Web Beacons/Pixels: small electronic tags (including Meta Pixel (Facebook Pixel) and similar technologies) that help us track usage and the effectiveness of our advertisements by recording, for instance, when you open a page or email.

We may combine this automatically collected usage information with any personal information you provide, to analyze and improve our services. We also may receive certain information if you interact with our content on social media or use social login features (for example, if you log in via Facebook/Google, we might receive your public profile information such as name or email from those services).

Note: Posterwa does not knowingly collect personal data from children. Our website and services are intended for users above the age of 18 (or the age of majority in your jurisdiction). If you are under 18, you should use our website only with the involvement of a parent or guardian. We do not knowingly solicit or collect information from minors, and if we become aware that a child has provided us personal data, we will delete it. Parents or guardians should contact us if they believe we have inadvertently collected personal information from a minor so we can remove it.

How We Use Your Information

We use the collected information for the following purposes:

  • To Fulfill Orders and Provide Services: We use your personal information to process and complete your purchases and transactions. This includes processing payments, arranging shipping (providing your name and address to our delivery partners), sending you order confirmations, invoices and updates about your order. We also use your information to provide customer support, such as responding to your inquiries about orders, deliveries or product information. Your contact details are used to notify you of order status or any issues and to facilitate returns or refunds as per our policies.
  • Account Administration: If you create an account, we use your information to maintain your account, authenticate you when you log in, and allow you to save preferences like wishlists or order history. We may also use it to communicate with you about your account and activities on the site (for example, sending password reset emails or informing you of changes to our terms or policies).
  • Communication: We may contact you via email, SMS, or phone for transactional reasons (to send order and shipping updates, or to inform you of any service issues). We will also reply to you when you contact us for support or inquiries, using the contact information you provided.
  • Marketing and Promotional Communications: We will only send you marketing emails or newsletters if you have opted-in or otherwise provided consent. With your permission, we may use your email address or phone number to send you promotions, new product announcements, loyalty rewards, or newsletters about our merchandise and offers. You can unsubscribe or opt-out from marketing communications at any time (see Your Rights & Choices below). We may also use information about your past purchases or browsing to tailor the promotions and offers you receive, in order to make them more relevant to your interests.
  • Personalization: We use data about your interactions (e.g. pages visited, items viewed, preferences you set) to personalize your experience on our site. This can include showing you recommendations for products you might like, customizing content, and remembering your cart contents and site preferences.
  • Analytics and Improvements: We use analytics tools (including Google Analytics and Shopify’s analytics) to understand how our customers use our website, which helps us improve our offerings and user experience. For example, we analyze aggregate usage patterns (such as which pages are most visited, how users navigate the site, and any website errors) to improve functionality and design. We also use analytics data to measure the effectiveness of our marketing campaigns and to derive insights into customer preferences and trends. This processing typically uses aggregated or anonymized data that does not directly identify individuals.
  • Fraud Detection and Security: We may use your information (particularly device and order information like IP address and payment info) to screen for fraudulent transactions or suspicious activity on our site. This helps protect our customers and our business from fraud, abuse, or unauthorized use of our services. We also use personal information as necessary to secure our website, network, and systems, including monitoring for and preventing cyber-attacks or identity theft attempts.
  • Legal Compliance: We may process and retain your information as needed to comply with applicable laws and regulations, and to respond to lawful requests by public authorities. For instance, we keep records of transactions for accounting and tax obligations, and we may disclose information as required to meet legal obligations or government requests (such as complying with a court order, subpoena, or regulatory inquiry). Additionally, we may use or disclose your data to enforce our Terms of Service or to establish or exercise our legal rights, or defend against legal claims.
  • Other Purposes with Consent: If we intend to use your personal information for any purpose not covered above, we will explain it to you at the time of collection and, if required, obtain your consent. We will not use or share your personal data for any unrelated purposes without your explicit consent.

We will only retain personal data for as long as necessary to fulfill the purposes above or as required by law. This includes keeping certain transaction records after a purchase to comply with legal, tax and accounting requirements (see Data Retention below for more details).

Cookies & Tracking Technologies

Like most websites, Posterwa uses cookies and similar tracking technologies to enable site functionality, analyze usage, and deliver a better experience to you. Cookies are small text files placed on your device when you visit a website. They allow us to remember your actions and preferences (such as login status, language, or items in cart) so you don’t have to re-enter them whenever you return to the site. We also use cookies to gather information on how users navigate and use our site, which pages are popular, and other analytical information. This helps us improve our website design, content, and offerings over time.

The types of cookies or tracking technologies we may use include:

  • Essential Cookies: These are necessary for the website to function and cannot be switched off. For example, they include session cookies that keep you logged in and remember items in your shopping cart. Without these, basic e-commerce features would not work.
  • Analytics Cookies: These cookies collect information about how visitors use our site (pages visited, time on site, etc.) in order to help us improve the site’s performance and user experience. We use third-party analytics tools like Google Analytics, which set their own cookies, to generate reports on website traffic and usage. The information collected is usually aggregated and does not directly identify individuals. You can opt-out of Google Analytics by installing the [Google Analytics Opt-out Browser Add-on].
  • Advertising Cookies/Pixels: We use tracking pixels and cookies from third parties like Meta (Facebook) and potentially Google Ads to help deliver targeted advertisements to you on external platforms and measure their effectiveness. For example, the Meta Pixel on our site collects anonymous data about your visit (such as pages viewed or products added to cart) which may be used to show you Posterwa ads on Facebook or Instagram. This data may also help us create audiences for our ads and avoid showing ads to users who have already purchased. These advertising cookies work by identifying your browser or device, and they may track your browsing across different websites. For more information on how Facebook/Meta collects and uses data through the Pixel, please see Meta’s Data Policy. You can opt-out of certain targeted ads through your Facebook account ad settings or via industry websites (see “Your Rights & Choices” below).
  • Functional Cookies: These remember choices you make to enhance your experience (e.g., your preferred language or region). They may also enable certain features such as product recommendations or faster checkout by remembering your preferences.
  • Log Files and Web Beacons: As noted, we use log files to record activity and web beacons/tags (including email pixels) to understand engagement with our content. For example, if we send a newsletter, it may contain a tiny invisible image that lets us know if you opened the email, helping us gauge interest in our content.

Cookie Consent & Control: On your first visit to Posterwa, and periodically, we may ask for your consent to non-essential cookies (especially if required by law in your region). You have the right to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline some or all cookies, or to alert you when cookies are being set. Please note that if you disable or reject cookies, some parts of our website (such as staying logged in or retaining your cart between sessions) may not function properly.

Do-Not-Track Signals: Some browsers offer a “Do Not Track” (DNT) feature that lets you tell websites you do not want to be tracked. Currently, there is no universal standard for honoring DNT signals. As a result, our site does not alter its data collection practices in response to DNT signals at this time. We continue to monitor developments around DNT and may adjust our practices if an industry standard is established.

Third-Party Analytics and Ads: We have integrated third-party tools that may use cookies and similar technologies. Notably:

  • Google Analytics: We use Google Analytics to collect information about how users use our site. Google Analytics plants cookies to track user interactions. The information generated (including your truncated IP address) is transmitted to Google’s servers. Google provides us reports on site usage that help us improve our service. Google may also use this data for its own purposes; you can read Google’s Privacy Policy to understand how they handle this information. If you wish to opt-out of Google Analytics tracking, Google provides a browser add-on for that purpose.
  • Meta/Facebook Pixel: As mentioned, we use the Meta Pixel for retargeting and advertising. It allows us to show you ads on Facebook/Instagram related to Posterwa after you visit our site, and to measure ad campaign success. The data collected via the Pixel is anonymized to us, but it may be combined by Meta with your Facebook profile if you have one, per Meta’s terms. You can opt-out of our targeted Facebook ads by adjusting your ad preferences on Facebook (e.g., you can use the “Ad Preferences” settings to disable ads based on website data).

For more information on cookies and how to manage them, you can visit AllAboutCookies.org which provides guidance on how to control cookie settings for various browsers.

Sharing of Personal Information

We do not sell or rent your personal information to third parties for their own marketing purposes. However, we do share your information with certain trusted third parties in the following situations, only to the extent necessary for business operations or as required by law:

  • Service Providers and Business Partners: We share personal data with third-party service providers who perform functions on our behalf to fulfill orders and run our services. This includes, for example:
    • Payment Processors: Your payment details are shared with our payment gateway/provider to process transactions securely. (As noted, these providers handle your payment data directly in compliance with PCI-DSS, and we do not store it ourselves.)
    • Shipping and Logistics Partners: We provide your name, contact number, and delivery address to our courier or shipping companies in order to deliver your orders.
    • E-commerce Platform: Posterwa is hosted on the Shopify platform. Shopify Inc. provides us with the online e-commerce platform that powers our store. When you provide information to us, it is stored on Shopify’s secure servers. Shopify may process your personal data (including order information and analytics data) to help us manage our store. We have ensured that Shopify, as our data processor, meets high security standards and complies with applicable data protection laws. You can refer to [Shopify’s Privacy Policy] for more details on their data practices.
    • Analytics and Advertising Partners: We share certain data with analytics services like Google Analytics (as described above) and advertising networks like Facebook/Meta or Google Ads. This sharing may involve pseudonymous data (e.g., cookie identifiers or hashed email addresses) for advertising targeting and measurement. For instance, we might upload a list of customer email addresses (in hashed form) to Facebook or Google to create a “custom audience” for ads. These partners are not allowed to use your data for purposes other than providing services to Posterwa.
    • Other Vendors: We may also use cloud storage providers, email service providers, customer support tools, or marketing platforms that in the course of providing their services to us may have limited access to personal data. We contractually require all service providers to protect your information and use it only for the purposes we specify.

Our third-party providers are bound by confidentiality obligations and must adhere to industry-standard security practices to protect personal data. They are only given the information needed to perform their specific services. For example, our courier doesn’t get access to your payment information, and our payment processor doesn’t need your shipping address beyond fraud prevention checks.

  • Legal Compliance and Protection: We may disclose personal information when required by law or necessary to respond to valid legal processes. This means we will share data if we in good faith believe such disclosure is needed to comply with a legal obligation, regulation, or government request (for example, responding to a court order, subpoena, or law enforcement inquiry). We may also share information as necessary to enforce our Terms of Service or other agreements, or to protect the rights, property, or safety of Posterwa, our customers, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.
  • Business Transfers: If Posterwa undergoes a business transition such as a merger, acquisition by another company, or sale of all or part of its assets, your personal information may be among the assets transferred to the new owner. The new entity (or combined entity) will continue to honor the applicable terms of this Privacy Policy, unless you’re notified otherwise. Similarly, if we ever seek bankruptcy or restructuring, personal data could be transferred or disclosed in connection with that process subject to applicable law.
  • With Your Consent: In cases other than those above, if we need to share your information for any other purpose, we will obtain your consent. For instance, if we propose to share your details with a partner for their own marketing, we would only do so if you opt-in to such sharing.

Third-Party Websites and Links: Our website might contain links or references to third-party websites (for example, social media plugins, blog links, or partner offers). If you click on those links, you will leave our site and go to a site that we do not control. This Privacy Policy does not apply to third-party sites. Posterwa is not responsible for the privacy practices of external websites or services. We recommend you review the privacy policies of any third-party site you visit. This includes our presence on social media platforms – any information you share via our social media pages (e.g., through comments or messages) is subject to the privacy policies of those platforms.

International Data Transfers: While Posterwa is based in India and targets Indian consumers, the third parties we use (such as Shopify, Google, Facebook) may process or store data on servers located in countries like the United States, Canada or other jurisdictions. If you are located outside India, be aware that your personal information may be transferred to and stored in India or other jurisdictions where our service providers are located. These countries may have data protection laws different from (and possibly less stringent than) those in your country. We take steps to ensure that appropriate safeguards are in place for such transfers, in accordance with applicable privacy laws. For example, when we transfer personal data from the European Economic Area (EEA) or UK to a country not deemed “adequate” under EU/UK law, we rely on approved mechanisms such as Standard Contractual Clauses to protect your information. By using our site or providing us information, you consent to the transfer of your data across borders as described in this policy. Please note that data stored in other jurisdictions may be subject to lawful access requests by courts or law enforcement in those places.

Data Security

Posterwa employs a variety of technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

  • Encryption: Whenever we collect sensitive information (such as payment card data) through our site, we or our payment processors use encryption protocols like Secure Socket Layer (SSL/TLS) to encrypt that data during transmission. For example, credit card numbers entered on the checkout page are encrypted and transmitted securely to the payment gateway. Stored payment tokens are handled in compliance with PCI-DSS requirements.
  • Access Controls: Personal data is accessible only to authorized personnel who require access to perform their job duties (for instance, our customer service team accessing your order details to assist you). Posterwa and its partners maintain strict access controls and authentication measures to prevent unauthorized access to systems where personal data is stored.
  • Secure Infrastructure: We host our website and store data with reputable service providers (like Shopify) that implement strong security measures including firewalls, intrusion detection systems, and regular security audits. We also keep our software, website platform, and plugins up to date to guard against security vulnerabilities.
  • Monitoring and Testing: Our team monitors for potential security threats, and we periodically test and evaluate the effectiveness of our security measures. We also follow industry best practices for secure software development and data handling.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of your data. For example, email communications may not be secure, so please avoid sending sensitive information like passwords or full credit card numbers via email. You are also responsible for maintaining the security of your account credentials (username and password) and for any activity under your account. Please use a strong, unique password for our site and notify us immediately if you believe your account has been compromised.

In the unlikely event of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, and as required or permitted by law. For example, when you place an order, we will maintain your Order Information in our records until it is no longer needed to provide our services and for a reasonable period thereafter. This retention allows us to process returns or warranties, resolve disputes, and enforce our agreements. We may also need to retain certain information for longer periods to comply with legal obligations – for instance, transaction records are typically kept for at least 7-10 years to satisfy accounting, tax, and regulatory requirements.

If you have an account with us, we will keep your account information while your account is active. If you choose to delete your account, we will remove or anonymize personal data associated with your account within a reasonable timeframe, except for information that must be retained for legal or legitimate business purposes.

We periodically review the data we hold and securely delete or anonymize information that is no longer needed. When we dispose of personal data, we use reasonable measures to ensure the information is irrecoverable or irreproducible.

Your Rights & Choices: You have certain rights regarding your personal data, which we describe in the next section. For example, you may request deletion of your information. We will endeavor to honor such requests to the extent we can do so in compliance with legal and contractual obligations.

Your Rights & Choices

Posterwa respects your rights to your personal data. Depending on applicable law and your location (for example, whether you are located in India or the European Union), your rights may include:

  • Access and Portability: You have the right to request a copy of the personal information we hold about you and to obtain information about how we process it. We will provide this in a common digital format. For EU users, this is the right of access under GDPR. For Indian users, under current law you may request a summary of your personal data we maintain.
  • Correction (Rectification): If any of your personal details are inaccurate or incomplete, you have the right to request correction or update of that information. You can also log into your Posterwa account at any time to directly edit certain information like your name, email, password, or shipping addresses. For other corrections, you may contact us and we will rectify errors in your personal data without undue delay.
  • Deletion (Erasure): You can request that we delete your personal information. This is sometimes called the “right to be forgotten.” We will honor deletion requests provided that we do not have a legal obligation or overriding legitimate interest to retain the information. For example, if you ask us to delete your account, we will deactivate it and remove personal details, but we might retain order records in our financial system to comply with legal requirements. When we no longer need your information, we will delete or anonymize it.
  • Withdrawal of Consent: In cases where we rely on your consent to process data (such as sending marketing emails), you have the right to withdraw your consent at any time. For instance, you can opt out of marketing emails by clicking the “unsubscribe” link in any promotional email, or by adjusting your account preferences. If you withdraw consent for a specific processing activity, we will stop that processing for the future. (Note: withdrawal does not affect the legality of processing based on consent before it was withdrawn.) If you withdraw consent or decline to provide certain information, we may not be able to provide a service that requires that information. For example, if you do not allow us to collect an address, we cannot ship a product to you.
  • Objection to Processing: You may have the right to object to certain processing of your data, particularly if we are processing your data based on legitimate interests (or for direct marketing purposes). For example, you can request that we stop using your information for direct marketing. In many cases, we will be able to comply with your request. If we believe we have compelling legitimate grounds to continue certain processing, we will inform you of that decision.
  • Restriction of Processing: You can request that we limit processing of your personal data in certain cases – for instance, while we are verifying or correcting your data or evaluating an objection request.
  • Data Portability: For data that you have provided to us and that we process by automated means on the basis of consent or contract, you can request to receive it in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller where technically feasible.
  • Grievance and Complaint: If you have concerns about how we handle your data, we encourage you to contact us so we can resolve the issue. If you are in the EU/EEA, you have the right to lodge a complaint with your local Data Protection Authority. If you are in India, once the Data Protection Board (under the DPDP Act) is established, you may have the right to raise complaints with that authority. In the meantime, Indian users can use the grievance mechanism described below.

These rights may be subject to certain conditions and exemptions under applicable laws. To exercise any of these rights, please contact us using the information in the Contact Us section. We may need to verify your identity (for example, by confirming ownership of your email address or asking for additional information) before fulfilling certain requests, to ensure that your data is protected from unauthorized access. We will respond to your request within a reasonable timeframe as required by law. For example, GDPR requires us to respond within one month in most cases, and India’s pending rules may specify a similar timeframe.

Opt-Out of Marketing: As noted, you can always opt out of marketing communications. To stop receiving promotional emails from us, click the unsubscribe link in any of our emails or send us a request at our contact email. Even if you opt out of marketing, we may still send you non-promotional messages related to transactions or our ongoing business relations (such as emails about your orders or updates to our terms or this policy).

Cookies Choices: You can manage cookie preferences as described in the Cookies section above. Additionally, many advertising partners are members of industry associations that provide simple ways to opt-out of targeted advertising. For example, users can visit the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page to opt out of interest-based advertising from participating companies. Please note these opt-outs are browser-specific and device-specific, so you may need to set them for each browser on each device you use.

Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify users by posting a prominent notice on our website or by sending an email notification, where required. The “Last Updated” date at the top of this policy indicates when the latest changes were made. Changes will take effect immediately upon being posted on our site unless stated otherwise. Your continued use of the website after any updates constitutes acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact Us (Grievance Redressal)

If you have any questions, concerns, or complaints about this Privacy Policy or how Posterwa handles your personal information, please contact us. We have appointed a Grievance Officer (as per the Information Technology Rules and forthcoming Indian data protection law) who is responsible for addressing user grievances and requests.

  • Email: contact@posterwa.com
  • Postal Address: Grievance Officer – Posterwa, 539 (First Floor), 8th Main 3rd Block HMT Layout Vidyaranyapura Bangalore 560097
  • Phone (for customer support): +918035664381

Please direct any privacy-related inquiries or requests (such as accessing or deleting your data) to the above contact. We will respond to your query or complaint as soon as reasonably possible, and within the timeframe required by applicable law. If you are not satisfied with our response, and applicable law provides, you may escalate the matter to the relevant data protection authority.

Thank you for trusting Posterwa. We value your privacy and are dedicated to safeguarding your personal information.