Privacy Policy

1. Personal Data We Collect

a) Information you provide directly:

• Name, email address, mobile number;
• Billing and shipping addresses;
• Order details and purchase history;
• GSTIN and business name (for business purchases requesting a GST invoice);
• Communications with us (emails, chat, support tickets, reviews, photographs submitted with return claims);
• Customisation details you provide (e.g., names or messages for engraving).

b) Payment information:

Payments are processed by RBI-authorised third-party payment aggregators. We do not collect or store your card numbers, CVV, banking passwords, or UPI PINs. We receive only transaction confirmation, masked card details, and payment reference IDs.

c) Information collected automatically:

• Device and browser type, IP address, operating system;
• Pages viewed, products browsed, time spent, referral source;
• Cookies and similar technologies (see Section 7).

d) Information from third parties:

Delivery status from logistics partners; analytics and advertising data from service providers, where you have permitted such collection.

We do not knowingly collect data from children under 18. Purchases may only be made by adults.

2. Purposes of Processing

We process your personal data to:

1. Create and manage your account;
2. Process, pack, insure, ship, and deliver your orders, including OTP-based delivery verification for high-value silver items;
3. Process payments, refunds, and returns;
4. Issue GST-compliant invoices and maintain records required under tax, company, and consumer protection laws;
5. Provide customer support and resolve grievances;
6. Verify transit-damage claims (including reviewing unboxing videos/photographs you submit);
7. Prevent fraud, unauthorised transactions, and abuse of our policies;
8. Send order updates and service communications (SMS/email/WhatsApp);
9. Send marketing communications and personalised recommendations, only with your consent, which you may withdraw at any time;
10. Improve our Website, catalogue, and services through analytics.

We process your data on the basis of your consent and, where applicable, for legitimate uses recognised under the DPDP Act (such as voluntary provision of data for a specified purpose, and compliance with law).

3. Sharing of Personal Data

We do not sell your personal data. We share it only with:

• Logistics and courier partners — name, address, phone number, and COD amount, to deliver your order;
• Payment aggregators and banks — to process payments and refunds;
• Transit insurers — order and consignment details, for insuring high-value shipments;
• IT, cloud hosting, analytics, and communication service providers — under contractual obligations of confidentiality and security;
• Artists or partner workshops — customisation details strictly necessary to fulfil made-to-order items (never your full contact details unless required for direct fulfilment);
• Government authorities, courts, or regulators — where required under applicable law, or to enforce our legal rights;
• Successor entities — in connection with a merger, acquisition, or restructuring, subject to this Policy.

All third parties are required to use your data only for the stated purpose and to maintain reasonable security safeguards.

4. Data Retention

We retain personal data only as long as necessary for the purposes stated above:

• Order, invoice, and payment records: retained for 8 years as required under tax and company law;
• Account data: until you delete your account or request erasure;
• Support and grievance records: [3 years] from resolution;
• Marketing preferences: until consent is withdrawn.

Upon expiry of the retention period, data is deleted or anonymised, unless retention is required by law.

5. Your Rights

Under the DPDP Act and applicable law, you have the right to:

1. Access — obtain a summary of your personal data and processing activities;
2. Correction and updation — correct inaccurate or incomplete data;
3. Erasure — request deletion of your data, subject to legal retention requirements;
4. Withdraw consent — at any time, with the same ease with which it was given (withdrawal does not affect processing already carried out);
5. Grievance redressal — through our Grievance Officer (Section 9);
6. Nominate — a person to exercise your rights in the event of death or incapacity.

To exercise these rights, write to [privacy@website.com] from your registered email. We will verify your identity before acting on a request and respond within the timelines prescribed by law.

You may opt out of marketing communications at any time via the “unsubscribe” link in emails, by replying STOP to SMS, or by writing to us. Service and transactional messages will continue for active orders.

6. Data Security

We implement reasonable security practices and procedures as contemplated under the SPDI Rules and the DPDP Act, including:

• SSL/TLS encryption for data in transit;
• Encrypted storage and access controls on a need-to-know basis;
• PCI-DSS compliant payment processing through our payment partners;
• Periodic security reviews of our systems and vendors.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act.

7. Cookies

We use cookies and similar technologies to:

• Keep you signed in and remember your cart;
• Understand how visitors use the Website (analytics);
• Show relevant offers and measure campaigns (advertising), only where permitted.

You can manage or block cookies through your browser settings. Disabling essential cookies may affect Website functionality (e.g., cart and checkout).

8. Third-Party Links

The Website may contain links to third-party sites (e.g., social media, artist pages). We are not responsible for the privacy practices or content of such sites. Please review their policies before sharing information.

9. Grievance Officer / Data Protection Contact

In accordance with the Information Technology Act, 2000, the SPDI Rules, and the DPDP Act, 2023:

Grievances will be acknowledged within 48 hours and resolved within the timelines prescribed under applicable law. If you are not satisfied with our response, you may approach the Data Protection Board of India in accordance with the DPDP Act.

10. Cross-Border Transfer

Your personal data is primarily stored on servers located in [India / specify]. Where data is transferred outside India (e.g., to cloud or analytics providers), such transfer will be made only to jurisdictions not restricted by the Central Government under the DPDP Act, with appropriate contractual safeguards.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via the Website or email. The “Last Updated” date at the top reflects the latest revision. Continued use of the Website after changes constitutes acceptance of the updated Policy.

12. Contact Us