Privacy policy

Privacy Policy

Last updated: 19 July 2026

Monolith & Heart operates this store and website at monolithandheart.com. We are committed to protecting your privacy and handling your personal information with the same care and transparency that goes into every rug we make. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

Information you provide directly:

Contact details — name, email address, shipping address, phone number, and billing address when you place an order or sign up for our newsletter.
Order information — product selections, order history, and transaction details processed through Shopify's secure checkout.
Communications — the content of any messages, emails, or enquiries you send us.
Account information — if you create an account, your login credentials and saved preferences.

Information collected automatically:

Device and browsing data — IP address, browser type, operating system, device identifiers, and pages visited, collected through cookies and similar technologies.
Usage analytics — how you navigate and interact with our site, collected via Google Analytics 4 (GA4) and Shopify's built-in analytics.
Location data — approximate location derived from your IP address, used to display relevant currency, shipping options, and content.

How We Use Your Information

We use your personal information to:

Process and fulfil your orders, including shipping and returns.
Communicate with you about your orders, deliveries, and any customer service enquiries.
Send you marketing emails and updates through Klaviyo, our email platform, where you have consented to receive them.
Improve our website, products, and services through analytics and behavioural data.
Detect, prevent, and address fraud, security issues, and other malicious activity.
Comply with our legal obligations under Indian and international law.

Cookies and Tracking Technologies

We use cookies and similar technologies to recognise your device, remember your preferences, measure traffic, and personalise content. The types of cookies we use include:

Essential cookies — required for the website to function correctly, including checkout and cart functionality.
Analytics cookies — used by GA4 and Shopify Analytics to understand how visitors use our site.
Marketing cookies — used by Klaviyo and advertising platforms (such as Meta and Pinterest, where applicable) to measure campaign effectiveness and show relevant ads.
Preference cookies — remember your settings such as currency, language, and region.

You can control cookies through your browser settings. Where required by applicable law, we will seek your consent before placing non-essential cookies. You can also opt out of targeted advertising through the data sharing opt-out page at monolithandheart.com/pages/data-sharing-opt-out.

We do not sell your personal information. We share it only with trusted third parties who help us operate our business:

Shopify — our ecommerce platform, which processes payments, hosts our store, and provides analytics. Shopify's privacy practices are available at shopify.com/legal/privacy.
Klaviyo — our email and SMS marketing platform, used to send you communications where you have consented.
Google (GA4) — for website analytics. Google's privacy practices are available at policies.google.com/privacy.
Shipping and fulfilment partners — to deliver your orders, we share your name, address, and contact details with our courier and third-party logistics providers.
Payment processors — Shopify Payments and other payment gateways process your transactions securely. We do not store your full card details.
Legal and regulatory authorities — where required by law, court order, or to protect our rights and safety.

Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted checkout via SSL, restricted internal access, and regular reviews of our data handling practices. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As an India-based business shipping globally, your information may be processed in India and in other countries where our service providers (such as Shopify, Klaviyo, and Google) operate. We rely on standard contractual clauses and provider-level safeguards to ensure appropriate protection when your data is transferred internationally. By using our website, you acknowledge that your information may be processed in countries with different data protection laws than your country of residence.

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate or incomplete information.
Deletion — request that we delete your personal information, subject to legal retention obligations.
Opt-out of marketing — unsubscribe from our emails at any time using the link in any marketing email, or by contacting us directly.
Opt-out of data sharing — exercise your right to opt out of the sale or sharing of your personal data for targeted advertising via our opt-out page.
Restriction and objection — request that we limit or stop certain processing of your data.
Data portability — receive your personal information in a structured, machine-readable format.

To exercise any of these rights, please contact us at contact@monolithandheart.com. We will respond within 30 days, or as required by applicable law.

Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

Retention of Your Information

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Order information is typically retained for the duration required by Indian tax and accounting law. Marketing data is retained until you unsubscribe or request deletion.

Third-Party Links

Our website may contain links to third-party websites (such as social media platforms and payment providers) that we do not control. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version on this page with a revised "Last updated" date. We encourage you to review this page periodically.

Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at contact@monolithandheart.com, or write to us at Monolith & Heart, 265 House of Owls, Jhunjhunu, Rajasthan 333001, India. For the purpose of applicable data protection laws, we are the data controller of your personal information.