Privacy Policy (DPDP Act 2023)

Draft — pending legal/CA review. Based on the current website's policies, extended for Indian e-commerce rules. Not legal advice; items marked [to be provided] need the client's details.

Who we are

This website is operated by Nevan Pearls & Jewellers [to be provided], Belvedere by UKn, Bengaluru, Karnataka 562110 (“we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described below.

Personal data we collect

Order details: name, email, phone number and delivery address you give at checkout.
Account details (if you create one): login email or mobile number, saved addresses, wishlist and preferences.
Messages you send us by email, WhatsApp or the contact form.
Reviews you submit (name, city and review text).
Technical data: basic browser storage to remember your cart.

We do not store your card, UPI or bank details — payments are handled by Razorpay.

Why we use it

To process, deliver and support your order (including invoices required by GST law).
To respond to your questions and requests.
To send order and shipment updates.
To send marketing emails only if you have opted in — you can unsubscribe at any time.

We process personal data on the basis of your consent, or for legitimate uses permitted by Section 7 of the DPDP Act (such as completing a purchase you asked for, or meeting a legal obligation).

Who we share it with

Only with service providers who help us run the store, under contract: payment gateway (Razorpay), courier partners (for delivery), our email and hosting providers. We never sell your data.

How long we keep it

Order and invoice records are kept for as long as tax and accounting laws require [retention period to be confirmed by CA]. Other personal data is erased when it is no longer needed for the purpose it was collected for, or when you withdraw consent, unless the law requires us to keep it.

Security

Payments are protected by Razorpay's PCI-DSS compliant checkout and all pages are served over HTTPS. We take reasonable security safeguards to prevent personal data breaches, and will notify affected users and the Data Protection Board as the DPDP Act requires.

Your rights

Access a summary of the personal data we hold about you.
Correct, complete, update or erase your personal data.
Withdraw consent at any time (as easily as you gave it).
Nominate another person to exercise your rights in case of death or incapacity.
Have your grievance redressed — contact our grievance officer below. If you are not satisfied, you may complain to the Data Protection Board of India.

Children

Our store is meant for adults. We do not knowingly process personal data of children (under 18) without verifiable consent of a parent or lawful guardian.

Cookies & browser storage

We use browser storage (localStorage) to remember your cart and preferences. No advertising cookies are used.

Grievance Officer / contact for privacy requests

Name: [to be provided]
Designation: Grievance Officer
Email: [to be provided]
WhatsApp: [to be provided]
Address: Belvedere by UKn, Bengaluru, Karnataka 562110
Response time: Acknowledged within 48 hours; resolved within 30 days

Changes

We will post any changes on this page with a new “last updated” date.