01
Scope and operator
This policy applies to monumentpatron.world, the Monument Patron visual diary, its digital bookplate checkout and related support email. Monument Patron is the controller of information handled directly through this service.
Questions and privacy requests can be sent to info@monumentpatron.world. Razorpay separately controls information it handles through its payment platform under its own privacy policy.
02
Information we collect
When you browse
The server may process an IP address, request time, requested page, browser or device information, referral information and security or error events. This is ordinary technical information used to deliver the site, limit abusive requests and diagnose faults.
When you begin or complete a bookplate purchase
- Your chosen public patron name and any optional website or logo URL.
- The monument and plate, price, currency, checkout time and purchase status.
- Razorpay order, payment, customer and webhook identifiers.
- Contact and transaction details returned by Razorpay, which may include an email address, phone number and payment-method metadata.
Card numbers, bank credentials, UPI credentials and one-time passwords are entered directly into Razorpay Checkout. Monument Patron does not ask you to enter those credentials into its own forms and does not receive full payment credentials.
When you contact us
We receive the sender address, message, attachments and any information you choose to include. Do not send payment credentials, passwords or identity documents unless they are specifically and securely requested.
03
How and why we use information
- To create a payment order, verify that payment was captured and place the purchased bookplate.
- To send transaction or confirmation messages and answer support requests.
- To keep an accurate purchase ledger, prevent duplicate fulfilment and identify payments that require a refund review.
- To protect the service, investigate errors, enforce request limits and prevent fraud or misuse.
- To comply with accounting, tax, payment, legal and regulatory duties and resolve disputes.
Depending on where you live, these activities rely on performance of a contract, steps requested before entering a contract, legal obligations, consent for optional public details, and legitimate interests in operating and securing the service. We do not use purchase information for unrelated advertising or sell it as a data product.
There is no behavioural profiling or automated decision-making with legal or similarly significant effects. Automated checks only confirm technical facts such as whether a plate is available, a signature is valid and a payment amount, currency and captured status match the order.
04
What becomes public
A completed bookplate is intentionally public. It displays the patron name, monument, plate number, held date and, when supplied, the patron website or logo. This information also appears in the recent-patrons overview. Do not use a name, website or logo that you do not want visitors to see.
Email addresses, phone numbers, provider identifiers and payment metadata are not shown on the public bookplate. A verified patron may request a correction or removal of optional public information by contacting us. Transaction records may still need to be retained as described below.
07
How long information is kept
- Public bookplate and completed purchase records are kept while the bookplate service is maintained and for any longer period needed for transaction history, accounting, tax, fraud prevention, disputes or legal obligations.
- Abandoned or failed checkout records are kept only as long as reasonably needed for payment reconciliation, fraud prevention and operational diagnosis.
- Support correspondence is kept until the request is resolved and while reasonably needed to document the outcome or meet legal obligations.
- Technical and security logs are retained according to operational and security needs, then deleted or de-identified unless they are needed to investigate an incident.
When information is no longer required for a stated purpose or legal duty, it is deleted, de-identified or isolated from routine use.
08
How information is protected
We use measures appropriate to the service, including HTTPS in production, restricted administrative access, signed administrator sessions, one-time login codes, payment-signature and webhook verification, server-side price checks, database access controls and security logging. Payment credentials are handled in Razorpay's hosted checkout rather than by this website.
No internet service can guarantee absolute security. If you believe your information or a bookplate has been misused, contact us promptly without including sensitive payment credentials.
09
Your choices and privacy rights
Subject to applicable law, you may ask to access, correct, update or delete personal information; restrict or object to processing; withdraw consent; obtain portable information; nominate another person where the law provides; or complain about how a request was handled.
Email info@monumentpatron.world with “Privacy request” in the subject and describe the request. We may ask for enough information to verify your identity and protect the record from unauthorised changes. Withdrawing consent does not affect earlier lawful processing, and some transaction information may be retained where law or legitimate record-keeping requires it.
You may also complain to the privacy or data-protection authority available in your country. Where applicable in India, this includes the Data Protection Board of India; residents of the EEA or UK may contact their local supervisory authority.
10
International processing
The website is available internationally. Service providers may process information in India or other countries where they or their infrastructure operate. Where applicable law requires it, transfers are made using an accepted legal mechanism and appropriate contractual or technical safeguards.
11
Children's privacy
Bookplate purchases are intended for adults and the service is not directed to people under 18. We do not knowingly ask a child to purchase a plate or submit personal information. A parent or guardian who believes a child has supplied information should contact us so the situation can be reviewed.
12
Changes and contact
This policy may change when the service, providers or legal requirements change. The effective date above will be updated, and material changes will be presented through an appropriate notice where required.
For privacy questions or rights requests, email info@monumentpatron.world. For other help, visit Contact Us.