Privacy policy
Last updated: September 2026. We try to write this in plain English. If something here is unclear, write to hello@bricknpapers.com.
Who we are
Brick N Papers ("we", "us") is operated by Brick N Papers Studio LLP, registered in Gandhinagar, Gujarat, India.
What we collect
- ✦Contact details you give us, name, email address, phone number, and shipping/billing address. Phone number is required on all forms (contact, custom commission, trade enquiry, account creation, and saved addresses) so we can reach you about your order or enquiry.
- ✦Sign-in via Google, if you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We use only these fields; we do not request access to your Gmail, Drive, contacts, or any other Google service.
- ✦Order history, what you bought, when, where it shipped.
- ✦Site analytics, anonymised page views, device, country (we use Vercel Analytics + PostHog).
- ✦Communication you initiate, emails, contact-form submissions, WhatsApp messages.
- ✦WhatsApp data, if you message us or share your number for order updates: your WhatsApp phone number, profile name, the messages and media you send us and we send you, and delivery/read status.
How we use your information
- ✦Create and manage your account (including accounts created via Google Sign-In).
- ✦Fulfil and ship your orders.
- ✦Send order confirmations and shipping notifications (transactional email and WhatsApp).
- ✦Reply to your enquiries, quotations and support requests on WhatsApp, and keep a record of those conversations in our internal CRM.
- ✦Send our fortnightly studio dispatch, only if you've opted in.
- ✦Improve the site, what works, what's confusing, what's slow.
- ✦Comply with legal/tax obligations (Indian GST, KYC for certain payment methods).
WhatsApp and Meta
We use the WhatsApp Business Platform, provided by Meta Platforms, Inc. and its affiliates ("Meta"), to talk to customers. We also run an internal CRM, built on Meta's WhatsApp Business API, that stores WhatsApp conversations alongside your order or enquiry so our team can reply quickly and consistently.
- ✦We message you on WhatsApp only if you have messaged us first, or have given us your number and agreed to receive WhatsApp messages (for example at checkout or on an enquiry form).
- ✦We use WhatsApp for order confirmations, shipping and delivery updates, quotations, support replies, and, only where you have opted in, occasional studio news and offers.
- ✦You can opt out at any time by replying STOP on WhatsApp or by emailing hello@bricknpapers.com. We will stop marketing messages promptly; we may still send essential messages about an order you have placed.
- ✦Message content passes through Meta's servers, which may be located outside India. Meta processes it under its own terms and privacy policy. WhatsApp messages to businesses are not end-to-end encrypted from the business's side once received by our systems.
- ✦We store WhatsApp conversation data in our Supabase database, protected by access controls and available only to authorised staff. We do not sell it, share it with advertisers, or use it to train AI models.
- ✦We keep WhatsApp conversations for up to 24 months after the last message, or longer only where they relate to an order we must keep records of (see Data retention).
See WhatsApp Business Terms and WhatsApp Privacy Policy for how Meta handles data. To have your WhatsApp data deleted, follow the steps on our data deletion page.
Google Sign-In, limited use
When you sign in with Google, the information we receive (name, email address, profile picture) is used solely to create and authenticate your account on bricknpapers.com. We do not use this data to serve advertising, we do not share it with third parties for their own purposes, and we do not use it for any purpose other than operating your account. This use complies with Google's API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time via Google Account Permissions. Revoking access will not delete your Brick N Papers account or order history; to delete those, contact us directly.
What we don't do
We don't sell your data to anyone. We don't use it to retarget you across the open web. We don't transfer Google user data to third parties except the processors listed below, and only to the extent necessary to operate your account and fulfil your orders.
Who sees your data
- ✦Vercel, hosts the website and edge functions.
- ✦Supabase, stores your account data, order records, and authentication tokens (including tokens issued after Google Sign-In).
- ✦The payment processor (Razorpay), receives card details directly; we never see them.
- ✦Shipping carriers (Blue Dart, DHL, India Post), receive only the address fields.
- ✦Email service (Resend), sends transactional and newsletter email.
- ✦Meta / WhatsApp (WhatsApp Business Platform), delivers WhatsApp messages between you and us, so it processes your phone number and message content.
- ✦Analytics, Vercel Analytics (cookieless), PostHog (events, no personal identifiers).
Data retention
We keep your account data for as long as your account is active. Order records are kept for 7 years to comply with Indian tax law. Analytics data is retained for 12 months. WhatsApp conversations are retained as described in the WhatsApp and Meta section. If you ask us to delete your account, we will remove your personal data within 30 days, except where retention is required by law.
Your rights
Under the Digital Personal Data Protection Act (India, 2023), you can request a copy of your data, ask us to correct it, or ask us to delete it. Email hello@bricknpapers.com with "Data request" in the subject line; we'll respond within 7 working days. To delete your data, including WhatsApp conversations, see how to request data deletion.
Cookies
We use a session cookie to remember what's in your bag and one for authentication. Analytics cookies are anonymised. No third-party advertising trackers. By using the site you consent to these.
Security
Account authentication (including Google Sign-In) is handled by Supabase, which uses industry-standard encryption in transit and at rest. We do not store Google account passwords. Payment card data is handled entirely by Razorpay and never touches our servers.
Children's privacy
Our services are not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.
Changes to this policy
If we change anything material, we'll email anyone with an account and post a note at the top of this page for 30 days. Continued use of the site after changes take effect constitutes acceptance.
Contact
Brick N Papers Studio LLP · A-74, Electronics Estate GIDC, Sector 25, Gandhinagar, Gujarat 382016 · hello@bricknpapers.com
Who we are
Brick N Papers ("we", "us") is operated by Brick N Papers Studio LLP, registered in Gandhinagar, Gujarat, India.
What we collect
- ✦Contact details you give us, name, email address, phone number, and shipping/billing address. Phone number is required on all forms (contact, custom commission, trade enquiry, account creation, and saved addresses) so we can reach you about your order or enquiry.
- ✦Sign-in via Google, if you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We use only these fields; we do not request access to your Gmail, Drive, contacts, or any other Google service.
- ✦Order history, what you bought, when, where it shipped.
- ✦Site analytics, anonymised page views, device, country (we use Vercel Analytics + PostHog).
- ✦Communication you initiate, emails, contact-form submissions, WhatsApp messages.
- ✦WhatsApp data, if you message us or share your number for order updates: your WhatsApp phone number, profile name, the messages and media you send us and we send you, and delivery/read status.
How we use your information
- ✦Create and manage your account (including accounts created via Google Sign-In).
- ✦Fulfil and ship your orders.
- ✦Send order confirmations and shipping notifications (transactional email and WhatsApp).
- ✦Reply to your enquiries, quotations and support requests on WhatsApp, and keep a record of those conversations in our internal CRM.
- ✦Send our fortnightly studio dispatch, only if you've opted in.
- ✦Improve the site, what works, what's confusing, what's slow.
- ✦Comply with legal/tax obligations (Indian GST, KYC for certain payment methods).
WhatsApp and Meta
We use the WhatsApp Business Platform, provided by Meta Platforms, Inc. and its affiliates ("Meta"), to talk to customers. We also run an internal CRM, built on Meta's WhatsApp Business API, that stores WhatsApp conversations alongside your order or enquiry so our team can reply quickly and consistently.
- ✦We message you on WhatsApp only if you have messaged us first, or have given us your number and agreed to receive WhatsApp messages (for example at checkout or on an enquiry form).
- ✦We use WhatsApp for order confirmations, shipping and delivery updates, quotations, support replies, and, only where you have opted in, occasional studio news and offers.
- ✦You can opt out at any time by replying STOP on WhatsApp or by emailing hello@bricknpapers.com. We will stop marketing messages promptly; we may still send essential messages about an order you have placed.
- ✦Message content passes through Meta's servers, which may be located outside India. Meta processes it under its own terms and privacy policy. WhatsApp messages to businesses are not end-to-end encrypted from the business's side once received by our systems.
- ✦We store WhatsApp conversation data in our Supabase database, protected by access controls and available only to authorised staff. We do not sell it, share it with advertisers, or use it to train AI models.
- ✦We keep WhatsApp conversations for up to 24 months after the last message, or longer only where they relate to an order we must keep records of (see Data retention).
See WhatsApp Business Terms and WhatsApp Privacy Policy for how Meta handles data. To have your WhatsApp data deleted, follow the steps on our data deletion page.
Google Sign-In, limited use
When you sign in with Google, the information we receive (name, email address, profile picture) is used solely to create and authenticate your account on bricknpapers.com. We do not use this data to serve advertising, we do not share it with third parties for their own purposes, and we do not use it for any purpose other than operating your account. This use complies with Google's API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time via Google Account Permissions. Revoking access will not delete your Brick N Papers account or order history; to delete those, contact us directly.
What we don't do
We don't sell your data to anyone. We don't use it to retarget you across the open web. We don't transfer Google user data to third parties except the processors listed below, and only to the extent necessary to operate your account and fulfil your orders.
Who sees your data
- ✦Vercel, hosts the website and edge functions.
- ✦Supabase, stores your account data, order records, and authentication tokens (including tokens issued after Google Sign-In).
- ✦The payment processor (Razorpay), receives card details directly; we never see them.
- ✦Shipping carriers (Blue Dart, DHL, India Post), receive only the address fields.
- ✦Email service (Resend), sends transactional and newsletter email.
- ✦Meta / WhatsApp (WhatsApp Business Platform), delivers WhatsApp messages between you and us, so it processes your phone number and message content.
- ✦Analytics, Vercel Analytics (cookieless), PostHog (events, no personal identifiers).
Data retention
We keep your account data for as long as your account is active. Order records are kept for 7 years to comply with Indian tax law. Analytics data is retained for 12 months. WhatsApp conversations are retained as described in the WhatsApp and Meta section. If you ask us to delete your account, we will remove your personal data within 30 days, except where retention is required by law.
Your rights
Under the Digital Personal Data Protection Act (India, 2023), you can request a copy of your data, ask us to correct it, or ask us to delete it. Email hello@bricknpapers.com with "Data request" in the subject line; we'll respond within 7 working days. To delete your data, including WhatsApp conversations, see how to request data deletion.
Cookies
We use a session cookie to remember what's in your bag and one for authentication. Analytics cookies are anonymised. No third-party advertising trackers. By using the site you consent to these.
Security
Account authentication (including Google Sign-In) is handled by Supabase, which uses industry-standard encryption in transit and at rest. We do not store Google account passwords. Payment card data is handled entirely by Razorpay and never touches our servers.
Children's privacy
Our services are not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.
Changes to this policy
If we change anything material, we'll email anyone with an account and post a note at the top of this page for 30 days. Continued use of the site after changes take effect constitutes acceptance.
Contact
Brick N Papers Studio LLP · A-74, Electronics Estate GIDC, Sector 25, Gandhinagar, Gujarat 382016 · hello@bricknpapers.com