Last updated: 24 October 2026
This website is run by The Jai Zharotia Foundation on behalf of the holders of the estate of the artist Jai Zharotia (“the Foundation”, “we”, “us”). This page explains what personal information we collect through the website, why, how we keep it safe, who we share it with, and what you can ask us to do with it.
In short: we collect only what we need to answer you, to run memberships and private viewings, and to authenticate and record works by Jai Zharotia. We do not sell your information, we do not show advertising, and we never publish the names of collectors or owners.
Who is responsible
The Jai Zharotia Foundation, A-11 Kaladham, Knowledge Park 2, Greater Noida 201310, Uttar Pradesh, India. For anything about your information, write to ajayhzharotia@jaizharotia.com or use the contact page.
What we collect, and why
If you simply visit
You can look at the website without telling us who you are. Like every website, our server records technical information about each visit (such as your internet address, browser and the pages requested) in its logs, to keep the site working and secure. We do not use advertising or tracking cookies, and we do not run analytics that follow you across other websites.
If you write to us
When you use the contact or enquiry forms we receive your name, email address, phone number if you give it, and your message, so that we can reply.
If you become a member
Membership needs your name, email address, a password and a few words about yourself. Membership is approved by the Foundation. If you choose to sign in with Google, Apple or Microsoft, that service tells us your name and email address; we never see your password for it. We use this information to run your account, to show you what has been shared with you, and to write to you about it.
If you ask for a private viewing
We receive your name, email, phone, the kind of buyer or institution you represent, your organisation, city, the subjects and mediums you are interested in, and anything else you tell us. We use it to prepare a selection of works for you and to contact you.
If you apply for authentication, register a work, or ask for a certificate to be transferred
We receive your name and contact details, details of the work (title, medium, size, condition, approximate value), where and when it was acquired and from whom, photographs of the work, and documents such as invoices, letters, earlier certificates, gift deeds or wills. We use them to examine and record the work, to give you an estimate, to issue, transfer or revoke certificates, and to keep the Foundation’s record of the work of Jai Zharotia (the catalogue raisonné) and its history of ownership.
Payments for authentication are made directly to the Foundation, outside this website. The website does not take or store card or bank details.
If you check a certificate
When a certificate is checked, we record the date and time, the certificate number and a scrambled code made from the visitor’s internet address (not the address itself). This helps us notice when copies of a certificate may be in use. Repeated wrong attempts from one address are briefly blocked.
What is public and what is not
- The check page shows only the details of a certificate and photographs of the work: number, date, title, medium, size, year, signature and, where we hold one, a security seal number. It never shows the name of the owner or applicant, or where the work is kept.
- Photographs and documents you send us are kept in a private store on our server, outside the public media library, and can be opened only by members of the Foundation’s team.
- We will not publish or reproduce a photograph of a work you own without asking you first.
Who we share it with
Your information is seen only by the Foundation’s trustees and the people who work with them on the website and the archive, each with access only to what their work needs. We do not sell or rent it. We share it outside the Foundation only:
- with the services that run the website for us: our web hosting provider; Google (Gmail), which sends and receives the website’s emails; the CAPTCHA service (Cloudflare Turnstile or Google reCAPTCHA) that checks forms are sent by people and not robots; and Google, Apple or Microsoft if you choose to sign in with them;
- when the law requires it, for example at the request of a court or the police, or to protect the Foundation, the estate or the public against fraud, such as the sale of fakes;
- with your agreement, for example when you ask us to confirm a certificate to a gallery or auction house.
Some of these services may process information outside India. We use well-established providers that protect it.
Cookies
The website uses only the cookies it needs: to keep you signed in, to remember that you have entered a private room or preview, and for security. The CAPTCHA service may set its own cookie when you send a form. The site’s fonts are loaded from Google Fonts, which receives your internet address in the normal way when your browser asks for them. We do not use advertising cookies.
How long we keep it
- Messages and enquiries: for as long as needed to deal with them, and then for up to three years.
- Member accounts: until you ask us to close your account.
- Private viewing requests: for up to three years after the last contact.
- Authentication, registration and certificate records, with their photographs, documents and ownership history: permanently, because a certificate must remain checkable for as long as the work exists, and because the record of an artist’s work is kept for the future. If you ask us to delete your personal details from such a record, we will remove or reduce what we can while keeping what is needed to stand behind a certificate.
- Server logs and certificate-check records: for a limited time, normally up to one year.
How we keep it safe
The website uses an encrypted (https) connection. Private files are stored outside public folders, and only signed-in members of the team can open them. Team members have their own accounts with only the access they need. No system is perfectly secure, but we take reasonable care and will tell you if something goes wrong that affects you.
Your rights
Under the law of India, including the Digital Personal Data Protection Act, 2023, you may ask us:
- what personal information we hold about you, and to have a copy of it;
- to correct or complete it;
- to delete it, or to stop using it, where we do not need to keep it (see “How long we keep it”);
- to withdraw your consent, for example to close your membership;
- to name someone to act for you if you are unable to.
Write to ajayhzharotia@jaizharotia.com. We will reply within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Children
This website is not meant for children to sign up or send forms. Membership, private viewings, authentication and registration are for adults (18 and over).
Changes to this page
We may update this page from time to time. The date at the top shows when it last changed. If we make an important change that affects members, we will tell them by email.
See also: Copyright and permissions.