Privacy policy

Last updated: 17 August 2026

Soma Studio (“Soma Studio”, “we”, “us”, or “our”) operates this website and online store, including its content, features, tools, products, and services (collectively, the “Services”). Our store is powered by Shopify, which provides the technology and infrastructure that enables us to operate the Services.

This Privacy Policy explains what personal information we collect, how we use it, when we share it, how we protect it, and the choices and rights available to you when you visit our website, place an order, create an account, request a custom product, submit information to us, or otherwise communicate with us.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent in the manner required by law.

1. Who We Are

Soma Studio is an Indian e-commerce business offering 3D-printed products, including decor, collectibles, cosplay props, keychains, custom products, and related items.

Email: support@somastudio.in
Business Address: Blerone Building, Sundar Lane, Orlem, Malad West, Mumbai, Maharashtra, 400064, India

For privacy-related questions, requests, or complaints, you can contact us using the details above.

2. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you, as applicable under relevant law.

Depending on how you interact with our Services, we may collect or process the following information.

A. Contact and identity information

This may include:

  • Full name
  • Email address
  • Phone or mobile number
  • Billing address
  • Shipping or delivery address
  • Information needed to verify or fulfill an order

B. Account information

If you create an account, we may collect:

  • Email address or username
  • Password or authentication information
  • Account preferences
  • Saved addresses and settings
  • Order history and related account activity

We do not generally have access to your password in readable form.

C. Order and transaction information

We may collect information relating to your transactions, including:

  • Products viewed or purchased
  • Products added to your cart
  • Order number and order history
  • Transaction amount
  • Payment status
  • Returns, refunds, exchanges, or cancellations
  • Shipping and delivery information
  • Customer-service communications relating to an order

D. Payment information

Payments may be processed through Shopify and/or third-party payment processors or gateways.

Depending on the payment method used, these providers may process information such as card, UPI, bank-account, wallet, or other payment details required to complete the transaction.

We generally do not store complete payment credentials such as your full card number, CVV, UPI PIN, or banking password where these are handled directly by the applicable payment provider.

E. Communications

When you contact us, submit an enquiry, request customer support, or communicate with us through the website or other channels, we may collect the information contained in those communications.

F. Custom-printing and design information

If you request a custom product or custom 3D-printing service, we may collect information that you voluntarily provide for the purpose of fulfilling the request, including:

  • STL or other 3D model files
  • Reference images
  • Design files
  • Dimensions and measurements
  • Names, text, logos, or personalization details
  • Product specifications
  • Printing preferences
  • Instructions and other information relating to your project

You should only provide files, images, logos, designs, or other materials that you are legally permitted to submit and have used for the requested purpose.

G. Device and usage information

When you use our website, certain information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Operating system
  • Device type
  • Network information
  • Pages and products viewed
  • Search activity
  • Referring pages or links
  • Date and time of visits
  • Interactions with website features
  • Other technical and usage information

Shopify also processes certain information about visitors and customers in connection with providing its commerce platform and related services.

3. How We Collect Information

We may collect personal information from the following sources:

Directly from you

For example, when you:

  • Create an account
  • Place an order
  • Enter information during checkout
  • Contact us
  • Subscribe to communications
  • Submit a review
  • Request a custom product
  • Upload an STL file or reference material

Automatically through the Services

We and our service providers may automatically collect certain device, technical, and usage information through cookies and similar technologies.

From service providers and business partners

We may receive information from service providers that help us operate our store, including payment processors, shipping providers, fraud-prevention providers, analytics providers, customer-support services, and Shopify.

4. How We Use Personal Information

We use personal information only for purposes reasonably connected with operating our business, providing the Services, fulfilling customer requests, or otherwise permitted by applicable law.

These purposes may include:

Providing and fulfilling orders

We may use your information to:

  • Process and complete orders
  • Process payments
  • Manufacture and prepare products
  • Arrange shipping and delivery
  • Provide order updates
  • Handle returns, refunds, exchanges, and replacements
  • Provide customer support

Custom products and services

We may use files, designs, measurements, instructions, and other information you provide to:

  • Evaluate a custom request
  • Prepare a quotation
  • Produce your requested item
  • Communicate with you about the project
  • Make reasonable technical adjustments required for production
  • Fulfil and deliver the completed order

Operating and improving the Services

We may use information to:

  • Maintain and improve the website
  • Remember preferences
  • Improve product selection and presentation
  • Understand website usage
  • Diagnose technical issues
  • Develop and improve our products and services
  • Improve customer experience

Security and fraud prevention

We may use information to:

  • Authenticate accounts
  • Detect suspicious or fraudulent transactions
  • Prevent abuse or unauthorized activity
  • Protect our website, systems, customers, and business
  • Investigate potential security incidents

Marketing and communications

Where permitted by applicable law, we may use your contact information to send promotional communications about Soma Studio.

You can unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication, where available.

We may continue sending non-promotional communications necessary to fulfil an order, provide customer support, or manage your account.

Legal and compliance purposes

We may process personal information where necessary to:

  • Comply with applicable laws or regulations
  • Respond to lawful requests from authorities
  • Establish, exercise, or defend legal claims
  • Enforce our Terms or policies
  • Investigate fraud, misuse, or violations
  • Protect our rights, customers, property, or Services

5. Consent and Other Lawful Grounds

Where applicable, we may process personal information based on:

  • Your consent;
  • The need to provide a product or service you requested;
  • Compliance with a legal obligation;
  • Other grounds permitted under applicable law.

Where consent is required, we aim to provide clear information about the purpose of processing and obtain consent through an appropriate affirmative action.

Where processing is based on consent, you may withdraw that consent subject to applicable law and any consequences that may reasonably result where the information is necessary for a requested service.

Withdrawal of consent does not affect processing that was lawfully completed before withdrawal.

India’s Digital Personal Data Protection framework requires consent and notices to be appropriately specific and understandable when those provisions apply.

6. Cookies and Similar Technologies

Our website, Shopify, and third-party service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies.

These technologies may be used to:

  • Keep the website functioning correctly
  • Maintain shopping carts and sessions
  • Remember preferences
  • Understand website traffic and usage
  • Measure website performance
  • Improve our Services
  • Prevent fraud and abuse
  • Measure marketing performance
  • Deliver or personalize advertising where applicable

Some cookies may be necessary for essential website functionality. Other cookies may depend on the services and applications we use.

You can control or restrict certain cookies through your browser settings and, where available, through privacy controls provided on our website. Disabling some cookies may affect website functionality.

7. How We Share Personal Information

We may share personal information with third parties where reasonably necessary to operate our Services, fulfil your requests, or comply with applicable law.

These parties may include:

Shopify

Our store is hosted and powered by Shopify. Shopify processes information in connection with providing the ecommerce platform, checkout, hosting, security, analytics, and other features that support our Services.

Shopify may process information on our behalf and may also process certain information independently for purposes described in its own privacy documentation.

You can review Shopify’s privacy practices through Shopify’s Consumer Privacy Policy.

Payment providers

Payment processors and gateways may process information required to authorize and complete payments, prevent fraud, and comply with legal requirements.

Shipping and logistics providers

We may share information such as your name, delivery address, phone number, and order information with courier and logistics providers so your order can be delivered.

Technology and service providers

We may use third parties for purposes including:

  • Website technology
  • Hosting and infrastructure
  • Analytics
  • Fraud prevention
  • Customer support
  • Email and communications
  • File storage
  • Order fulfilment
  • Marketing and advertising
  • Reviews and customer feedback

These providers may process information only as reasonably necessary to provide their services or as otherwise permitted by applicable law.

Business and marketing partners

Where applicable, we may use third-party advertising or marketing services that process information to help us measure, personalize, or deliver marketing.

Where applicable law provides you with a right to opt out of a particular type of processing or sharing, we will provide the applicable mechanism.

Legal and business purposes

We may disclose information where reasonably necessary to:

  • Comply with applicable law or lawful requests;
  • Protect our rights or property;
  • Prevent fraud or abuse;
  • Protect the security of our Services;
  • Resolve disputes; or
  • Facilitate a business transaction such as a merger, acquisition, restructuring, or sale of assets.

We do not sell your personal information as a standalone business activity.

8. Shopify and Third-Party Privacy Policies

Because our Services use Shopify and other third-party services, those providers may independently process personal information under their own privacy policies and terms.

For example, Shopify may process customer information in connection with services it provides directly or through its infrastructure.

We encourage you to review the privacy policies of relevant third-party providers when you interact with their services.

9. International Processing and Transfers

Some service providers we use, including Shopify and other technology providers, may store or process information in countries outside India.

Where personal information is transferred, stored, or processed outside India, we will take reasonable steps and use service providers appropriate to the purposes for which the information is processed, subject to applicable law.

Indian data-protection requirements concerning transfers and processing outside India may apply differently depending on the nature of the processing, the applicable provisions in force, and any restrictions or requirements imposed by law. We will comply with applicable requirements.

10. Data Security

We use reasonable technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These may include:

  • Access controls
  • Account-security measures
  • Secure payment processing through appropriate providers
  • Shopify security controls
  • Restricted access to personal information
  • Service-provider controls
  • Monitoring and maintenance of our systems

However, no electronic transmission or storage system can be guaranteed to be completely secure.

You should avoid sending sensitive information through unsecured or inappropriate communication channels.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary to:

  • Fulfill orders
  • Provide customer support
  • Maintain accounts
  • Handle returns, refunds, and disputes
  • Maintain business, tax, and accounting records
  • Comply with legal or regulatory obligations
  • Prevent fraud or misuse
  • Establish or defend legal claims
  • Enforce our agreements and policies

Retention periods may differ depending on the type of information and the purpose for which it is processed.

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal or regulatory requirements.

12. Your Privacy Rights and Choices

Depending on applicable law and your circumstances, you may have rights relating to your personal information, including rights to:

  • Request information about the personal data we process;
  • Request correction or updating of inaccurate or incomplete information;
  • Request deletion or erasure where legally applicable;
  • Withdraw consent where consent is the basis of processing;
  • Raise a grievance regarding our handling of your information;
  • Request assistance in exercising applicable rights; and
  • Exercise any additional rights available under applicable law.

The DPDP framework provides rights relating to access to information about processing, correction/erasure, grievance redressal, and nomination, subject to the applicable provisions and commencement dates.

These rights are not absolute and may be subject to legal exceptions, limitations, verification requirements, and other conditions under applicable law.

We may ask for reasonable information to verify your identity before processing certain requests.

13. How to Exercise Your Rights or Make a Privacy Request

To make a privacy request, ask a question, or raise a complaint, contact us at:

Email: support@somastudio.in

Please provide enough information for us to understand and verify your request, such as:

  • Your name
  • Email address
  • Relevant order number, if applicable
  • The nature of your request

We will review and respond to requests within the timeframe required by applicable law.

If applicable law provides additional grievance or regulatory remedies, you may also use those remedies.

14. Children's Privacy

Our Services are intended for a general audience and are not knowingly directed toward children in circumstances where collection of their personal data would require additional safeguards or consent under applicable law.

If you are a parent or legal guardian and believe that we have collected personal information from a child in circumstances where such collection was not appropriate, please contact us at support@somastudio.in

Where applicable law imposes specific requirements concerning children's personal data, we will comply with those requirements.

15. Third-Party Websites and Links

Our Services may contain links to third-party websites, social-media platforms, payment services, marketplaces, or other external services.

We do not control those third-party services and are not responsible for their privacy practices, security, content, or policies, except to the extent required by applicable law.

You should review the privacy policy and terms of any third-party service before providing information to it.

16. Customer Reviews, Images, and Public Content

If you choose to post a review, photograph, video, or other content publicly through our Services or voluntarily send such material to us for publication, some of that information may become visible to other users.

Please avoid posting sensitive personal information in public reviews or submissions.

We may use customer-submitted photographs, reviews, or other content for legitimate business and promotional purposes only where we have the appropriate permission or lawful basis to do so.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our products or Services;
  • Shopify or other technology providers;
  • Cookies or analytics;
  • Our information-handling practices;
  • Applicable laws or regulations.

When we make changes, we will update the “Last updated” date at the top of this policy and provide any additional notice required by applicable law.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, our data practices, or your personal information, contact:

Soma Studio
Email: support@somastudio.in
Business Address: Blerone Building, Sundar Lane, Orlem, Malad West, Mumbai, Maharashtra, 400064, India

Soma Studio
Where Ideas Take Shape.