Privacy Notice
What personal data we collect, why, who sees it, how long we keep it, and how you can see, correct or erase it.
In short. We use your name, mobile number, email and address to deliver your order and keep you updated about it. Our payment, courier, messaging and hosting partners get only what they need for that. Analytics runs only if you choose "Accept all". We never sell your data. You can download or delete your account data from My Account, or ask us anything through the request form.
1. Who is responsible for your data
Saubhagya Jewellery, a sole proprietorship of Dayasingh Chauhan, Shop/Gala Premises, upper floor, Lokmanya Chawl Committee, opp. Vishwakarma Mandir, Tanaji Nagar Road, Wadarapada Road 1, Hanuman Nagar, Akurli Cross Road, Kandivali East, Mumbai 400101, Maharashtra, India, is the Data Fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023.
Questions about your data are answered by Dayasingh Chauhan: [email protected] · +91 99870 08435 (also WhatsApp) · Monday to Saturday, 11:00 to 19:30 IST. He is also our Grievance Officer.
2. What we collect, why, and on what basis
We collect only what the purpose needs. Where the law lets us use data you give us for the purpose you gave it (section 7(a) of the Act, for example your address to deliver your order), we say so. Where we need your consent, we ask for it separately, with a clear action by you, and you can take it back.
| Data | What we use it for | Basis |
|---|---|---|
| Name, mobile number, email, delivery address, PIN code | To take, pack, ship and deliver your order; to send the order confirmation, invoice, shipping and delivery updates by WhatsApp and email; to verify Cash on Delivery orders; to answer you about the order. | You provide it to place the order (s.7(a)). The invoice is also required by GST law (s.7(d)). |
| Order details: pieces, amounts, payment method, payment reference, courier tracking number, delivery status | To fulfil the order, handle cancellations, defects and refunds, keep tax records. | s.7(a); GST law. |
| Saved address | To fill in your address next time. | Consent, given by ticking "Save this address" at checkout. The box is never pre-ticked. |
| Mobile number and one-time code for sign-in | To create your account and sign you in without a password. | You request sign-in (s.7(a)). |
| Account: name, mobile, email, favourites, order history | To show your orders and favourites in My Account. | s.7(a). |
| Review, star rating, review photo, the name you show | To publish your review on the product page after moderation. | Consent, given when you submit a review. |
| Messages, complaints and requests you send us | To record, investigate and answer them, and to give you a copy as recorded. | s.7(a); Consumer Protection (E-Commerce) Rules. |
| Browser notification subscription (a technical address for your browser, no name) | To send notifications about new arrivals and festive offers. | Consent: your browser asks you first and you must allow it. |
| Pages viewed, clicks, device and browser type, approximate location, session recordings with typed text masked | To understand which pages work and fix the ones that do not. | Consent: only after you choose "Accept all" on the cookie banner. See the Cookie Policy. |
| Technical logs: IP address, time, the page or action requested, sign-in and verification events | Security: to stop abuse, detect and investigate unauthorised access, keep the site running. | Required by the DPDP Rules, 2025 (rules 6 and 8(3)). |
We do not collect your card number, UPI PIN or bank login (you give those to Razorpay, never to us), your Aadhaar, PAN, date of birth, or your phone's contacts. We do not sell personal data, and we do not use it for any decision made purely by automated means.
3. Who we share it with
Each of these partners processes personal data for us only for the purpose shown, under their terms of service and data-processing terms.
| Partner | Why | What they receive | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the website, database, image storage and backups; blocks bots at sign-in (Turnstile) | All data on this page | Database and storage in Cloudflare's Asia-Pacific region; delivered through its global network |
| Razorpay Software Pvt Ltd | Online payments | Order amount, name, email, mobile; you enter card or UPI details on Razorpay | India |
| ShipPrime and its courier partners (such as Delhivery) | Pickup and delivery, Cash on Delivery collection | Name, mobile, delivery address, order contents, weight, amount to collect | India |
| Meta Platforms (WhatsApp Business Platform) | Sign-in codes and order updates on WhatsApp | Mobile number, name, order number and status | Global |
| Resend, Inc. | Order and service emails | Email address, name, order details | United States |
| Geoapify GmbH | Address suggestions as you type at checkout | The address text you type, not your name or number | European Union |
| Google LLC (Analytics, Tag Manager) and Microsoft (Clarity) | Site measurement, only after "Accept all" | Usage data listed in section 2, not linked to your account | United States / global |
| Google LLC (Customer Reviews) | Only if you tick Google's own opt-in after an order: Google emails you a short survey | Email, order number, delivery country and expected delivery date | Global |
| Discord, Inc. | Sends the private staff alert that a new order has come in | Order number, customer name, city, amount and piece (no phone, email or street address) | United States |
We also disclose personal data where Indian law requires it, for example to tax authorities or on a lawful order of a court or government agency. Your browser also contacts Google Fonts, YouTube (product videos) and Google Maps (on the Contact page) when those pages load; they receive your IP address and browser details, as with any website that shows them. If you buy from us on Amazon, Amazon handles your details under its own privacy notice, and we use anything Amazon shares with us only to fulfil that order.
4. Where your data is stored
Our database, image storage and backups are hosted by Cloudflare in its Asia-Pacific region, and several partners above process data outside India. The Act (section 16) allows personal data to be processed outside India unless the Central Government restricts transfer to a particular country, and we follow any such restriction. No restriction currently applies to where our data is held.
5. How long we keep it
| Data | Kept for |
|---|---|
| Orders and invoices | As long as GST law requires us to keep accounts: 72 months from the due date of the annual return for that financial year. Kept even if you delete your account, but unlinked from it and used for nothing else. |
| Account, favourites, reviews | Until you delete your account or ask us to erase them. |
| Saved addresses | Until you delete your account or ask us, and erased automatically if unused for three years. |
| Sign-in sessions | 30 days from sign-in. |
| One-time codes and verification links | The code itself is wiped as soon as it is used or expires. The record that a sign-in or verification happened is kept one year, as the DPDP Rules require, then erased. |
| Complaints and requests | One year after they are resolved. |
| Security and access logs | One year, then erased. |
| Browser notification subscription | Until you switch notifications off in your browser, and erased if unused for three years. |
| Backups | A rolling 30 days. |
| Analytics and session recordings | As set out in the Cookie Policy. |
6. Your rights, and how to use them
- See what we hold, what we do with it, and who we have shared it with (section 11). Signed in: Download my data.
- Correct, complete, update or erase your data (section 12). Signed in: Delete my account. We keep only what the law makes us keep, as described above.
- Withdraw a consent at any time, as easily as you gave it (section 6(4)): cookies through Cookie settings (also in the footer); notifications in your browser's site settings; a saved address, a review or anything else through the request form. Withdrawing does not affect what was done before, and an order you have already placed will still be delivered.
- Nominate someone to use these rights for you if you die or become unable to (section 14). Send us their name and contact through the request form.
- Complain to us (section 13), and, if you are not satisfied, to the Data Protection Board of India.
How to ask: use the request form, email [email protected] or WhatsApp +91 99870 08435. Tell us your registered mobile number or email, and your order number if the request is about an order: these are what we use to find your data. To protect you, we reply only to that mobile number or email.
When: we acknowledge within 48 hours and respond within 30 days. Every reply includes our contact details.
Complaint to the Board: once you have used our grievance process, you may complain to the Data Protection Board of India, which works as a digital office. Its details are published by the Ministry of Electronics and Information Technology at meity.gov.in.
7. How we protect it
Every connection to this site is encrypted. Our hosting provider encrypts stored data. Only the proprietor can open customer records in the shop's admin system, through a personal login with automatic session expiry and lock-out after repeated failed attempts, and each time customer records are opened it is logged. We keep backups so an order is never lost, limit what each partner receives to what they need, and never see or store card or UPI credentials.
If a personal data breach happens, we will tell you without delay, through the mobile number or email you gave us: what happened, what it means for you, what we are doing about it, what you can do to protect yourself, and whom to contact. We will report it to the Data Protection Board as the law requires.
8. Children
Our shop is meant for adults. You must be 18 or older to create an account or place an order. If you are under 18, please ask a parent or guardian to order for you. We do not knowingly collect personal data from children, and we do not track, monitor the behaviour of, or target advertising at children. If you believe a child has given us personal data, tell us and we will erase it.
9. Language
This notice is available on this page in English, Hindi and Marathi. If you would like it in another language listed in the Eighth Schedule to the Constitution, write to us and we will provide it.
10. Changes
If we change how we use your personal data, we will update this notice, change its version and date, and where the change matters to you, tell you by email or WhatsApp before it applies.
गोपनीयता सूचना (हिन्दी)
सौभाग्य ज्वेलरी (प्रोप्राइटर: दयासिंह चौहान), कांदिवली पूर्व, मुंबई 400101, डिजिटल व्यक्तिगत डेटा संरक्षण अधिनियम, 2023 के तहत आपके व्यक्तिगत डेटा के लिए ज़िम्मेदार है। संपर्क: [email protected], +91 99870 08435.
हम कौन-सा डेटा लेते हैं और क्यों
- नाम, मोबाइल नंबर, ईमेल, डिलीवरी पता, पिन कोड: आपका ऑर्डर पैक करने, भेजने और पहुँचाने के लिए; WhatsApp और ईमेल पर ऑर्डर की जानकारी भेजने के लिए; कैश ऑन डिलीवरी ऑर्डर की पुष्टि के लिए; और GST कानून के अनुसार बिल रखने के लिए।
- सेव किया गया पता: केवल तभी, जब आप चेकआउट पर "Save this address" पर खुद टिक करते हैं।
- साइन-इन के लिए मोबाइल नंबर और OTP, आपकी समीक्षा और फ़ोटो (आपकी सहमति से), आपकी शिकायतें और अनुरोध।
- साइट उपयोग की जानकारी (एनालिटिक्स): केवल तब, जब आप कुकी बैनर पर "Accept all" चुनते हैं।
- सुरक्षा लॉग (IP पता, समय, साइन-इन की घटनाएँ): दुरुपयोग रोकने के लिए, एक वर्ष तक।
यह डेटा केवल ज़रूरी हिस्से के रूप में हमारे भुगतान (Razorpay), कूरियर (ShipPrime, Delhivery), WhatsApp (Meta), ईमेल (Resend), पता सुझाव (Geoapify) और होस्टिंग (Cloudflare) साझेदारों को जाता है। हम आपका डेटा कभी नहीं बेचते। कार्ड या UPI की जानकारी हम तक नहीं आती।
आपके अधिकार
- अपना डेटा देखना, सुधारना, अपडेट करना या मिटवाना; साइन इन करके My Account से डेटा डाउनलोड या अकाउंट डिलीट कर सकते हैं।
- अपनी सहमति कभी भी उतनी ही आसानी से वापस लेना: कुकी के लिए Cookie settings।
- अपनी मृत्यु या असमर्थता की स्थिति में अपने अधिकारों के लिए किसी व्यक्ति को नामित करना।
- शिकायत करना: अनुरोध फ़ॉर्म, ईमेल या WhatsApp पर अपना पंजीकृत मोबाइल नंबर या ईमेल और ऑर्डर नंबर बताएँ। हम 48 घंटे में प्राप्ति की सूचना देंगे और 30 दिन में जवाब देंगे। संतुष्ट न होने पर आप भारतीय डेटा संरक्षण बोर्ड में शिकायत कर सकते हैं (जानकारी: meity.gov.in)।
हमारा डेटाबेस Cloudflare के एशिया-प्रशांत क्षेत्र में होस्ट है; अधिनियम की धारा 16 इसकी अनुमति देती है। 18 वर्ष से कम आयु के व्यक्ति कृपया माता-पिता या अभिभावक से ऑर्डर करवाएँ। पूरी जानकारी ऊपर अंग्रेज़ी सूचना में है।
गोपनीयता सूचना (मराठी)
सौभाग्य ज्वेलरी (प्रोप्रायटर: दयासिंह चौहान), कांदिवली पूर्व, मुंबई 400101, ही डिजिटल वैयक्तिक डेटा संरक्षण अधिनियम, 2023 अंतर्गत तुमच्या वैयक्तिक डेटासाठी जबाबदार आहे. संपर्क: [email protected], +91 99870 08435.
आम्ही कोणता डेटा घेतो आणि का
- नाव, मोबाइल नंबर, ईमेल, डिलिव्हरीचा पत्ता, पिन कोड: तुमची ऑर्डर पॅक करून पाठवण्यासाठी आणि पोहोचवण्यासाठी; WhatsApp आणि ईमेलवर ऑर्डरची माहिती देण्यासाठी; कॅश ऑन डिलिव्हरी ऑर्डरची खात्री करण्यासाठी; आणि GST कायद्यानुसार बिल जतन करण्यासाठी.
- सेव्ह केलेला पत्ता: फक्त तुम्ही चेकआउटवर "Save this address" वर स्वतः टिक केल्यासच.
- साइन-इनसाठी मोबाइल नंबर आणि OTP, तुमचे रिव्ह्यू आणि फोटो (तुमच्या संमतीने), तुमच्या तक्रारी आणि विनंत्या.
- साइट वापराची माहिती (अॅनालिटिक्स): फक्त तुम्ही कुकी बॅनरवर "Accept all" निवडल्यास.
- सुरक्षा लॉग (IP पत्ता, वेळ, साइन-इनच्या नोंदी): गैरवापर रोखण्यासाठी, एक वर्षापर्यंत.
हा डेटा फक्त आवश्यक तेवढाच आमच्या पेमेंट (Razorpay), कुरिअर (ShipPrime, Delhivery), WhatsApp (Meta), ईमेल (Resend), पत्ता सूचना (Geoapify) आणि होस्टिंग (Cloudflare) भागीदारांना दिला जातो. आम्ही तुमचा डेटा कधीही विकत नाही. कार्ड किंवा UPI ची माहिती आमच्यापर्यंत येत नाही.
तुमचे अधिकार
- तुमचा डेटा पाहणे, दुरुस्त करणे, अद्ययावत करणे किंवा पुसून टाकणे; साइन इन करून My Account मधून डेटा डाउनलोड करता येतो किंवा खाते डिलीट करता येते.
- तुमची संमती कधीही तितक्याच सहजपणे मागे घेणे: कुकीसाठी Cookie settings.
- तुमच्या मृत्यूनंतर किंवा असमर्थतेच्या वेळी तुमचे अधिकार वापरण्यासाठी एखाद्या व्यक्तीला नामनिर्देशित करणे.
- तक्रार करणे: विनंती फॉर्म, ईमेल किंवा WhatsApp वर तुमचा नोंदणीकृत मोबाइल नंबर किंवा ईमेल आणि ऑर्डर नंबर कळवा. आम्ही 48 तासांत पोच देऊ आणि 30 दिवसांत उत्तर देऊ. समाधान न झाल्यास तुम्ही भारतीय डेटा संरक्षण मंडळाकडे तक्रार करू शकता (माहिती: meity.gov.in).
आमचा डेटाबेस Cloudflare च्या आशिया-पॅसिफिक प्रदेशात होस्ट केलेला आहे; अधिनियमाचे कलम 16 याला परवानगी देते. 18 वर्षांखालील व्यक्तींनी कृपया पालक किंवा संरक्षकांमार्फत ऑर्डर करावी. संपूर्ण माहिती वरील इंग्रजी सूचनेत आहे.