Privacy
What we collect, why we have it, who else sees it, and how to make us delete it. Written to be read, not to be survived.
Sections
The short version
What do you actually collect?
Your name, delivery address, email, phone number, and what you ordered. That is nearly all of it. We also see basic information your browser sends every website — device type, rough location from your IP address, which pages you looked at.
Do you see my card details?
No. Payments go through Shopify's checkout and the payment provider. Your card number never reaches us and we could not retrieve it if we tried.
Do you sell my data?
No. We do not sell it, rent it, or trade it. We have no advertising business and no reason to.
How do I get it deleted?
Write to sales@orivajewels.in and ask. We will delete what we are allowed to delete and tell you plainly what we must keep and why — tax law requires us to hold invoice records for eight years.
Who do I complain to?
Us first, at sales@orivajewels.in. If we do not resolve it, you can take it to the Data Protection Board of India under the Digital Personal Data Protection Act 2023.
What we collect
When you place an order
Your name, billing and delivery address, email address, phone number, the pieces you bought, and the amount paid. We need all of it to make the piece, ship it, and issue a compliant invoice.
When you write to us
Whatever you put in the message, plus your email address or phone number so we can reply. If you send photographs of a piece for repair, we keep those with the job.
When you create an account
Your email address and password. The password is stored hashed by Shopify — we cannot read it.
When you just browse
Your IP address, device and browser type, which pages you opened and for how long, and the site that sent you here. This arrives automatically. It is how any website works.
When you subscribe
Your email address, and the date you gave it. Nothing else.
What we do not collect
We do not ask for your date of birth, your income, your PAN, your Aadhaar, or anything about your health or beliefs. If a form ever asks you for one of those, it is not ours.
Why we hold it
To make and send your order
The obvious one. A piece cannot be cast, hallmarked, insured and delivered without a name and an address.
To talk to you about it
Order confirmations, dispatch notices, tracking, and answers when you ask a question.
To honour the exchange
Our exchange terms run for the life of the piece. Keeping a record of what you bought is how we can honour that in ten years without asking you to prove anything.
To meet the law
GST invoices, hallmarking records and company accounts all carry statutory retention periods. We keep those whether we want to or not.
To send you email, if you asked
Only if you subscribed. Every message carries an unsubscribe link that works immediately.
To keep the shop working
Spotting fraud, fixing faults, and understanding which pages people cannot find.
Who else sees it
Shopify
Our shop runs on Shopify, so Shopify processes everything that passes through it. Their servers are outside India. They publish their own privacy terms at shopify.com/legal/privacy.
Payment providers
They handle the transaction and see the payment details we never do.
The courier
Your name, address and phone number, so the piece can be delivered and signed for.
Our workshop
The piece, the size and the specification — not your payment details.
Anyone the law requires
A court order, a tax authority, a lawful police request. We will tell you if this happens unless we are legally barred from doing so.
Nobody else
In particular, no data brokers, no list rental, no selling to other jewellers.
How long we keep it
Order and invoice records
Eight years from the end of the financial year, because GST law requires it.
Your account
Until you ask us to close it.
Marketing consent
Until you unsubscribe, then a record that you did, so we do not email you again by mistake.
Enquiries that did not become orders
Two years, then deleted.
Website analytics
Aggregated after fourteen months, so it stops being about you.
Your rights
See what we hold
Ask, and we will send you a copy within thirty days.
Correct it
Tell us what is wrong and we will fix it. You can also edit most of it yourself in your account.
Have it erased
Ask, and we will erase what we are not legally required to keep. We will tell you exactly what remains and under which law.
Withdraw consent
Unsubscribe from any email, or write to us. Withdrawing consent does not undo what we did while it was given.
Nominate someone
Under the DPDP Act you may nominate a person to exercise these rights on your behalf if you cannot. Write to us and we will record it.
Complain
To us first. Then to the Data Protection Board of India if we have not put it right.
Cookies
What we use
Cookies that keep you logged in and remember your cart — the shop does not function without them. Cookies that count visits so we can see which pages are being read.
What we do not use
We do not run third-party advertising cookies or retargeting pixels.
Turning them off
Your browser can block or clear cookies. Block the essential ones and checkout will stop working, which is a limitation of how carts work rather than a choice we made.
Security, children, and changes
How it is protected
The site runs over HTTPS. Access to customer records is limited to people who need it. Payment details never reach us. No system is perfect and we will not pretend otherwise — if something goes wrong that affects you, we will tell you.
Children
Our shop is not intended for anyone under eighteen, and we do not knowingly collect their information. If you believe a child has given us data, write to us and we will remove it.
Data leaving India
Shopify and our email provider hold data on servers outside India. That is unavoidable when running a shop on Shopify, and we are telling you rather than burying it.
If this policy changes
We will update this page and change the date at the bottom. If a change materially affects your rights, we will email anyone with an account.
Contact
Who to write to
sales@orivajewels.in, or call +91 98196 65350 between 9.00 am and 7.30 pm, Monday to Sunday.
Grievance Officer
Under the Digital Personal Data Protection Act 2023 and the IT Rules, complaints about your personal data go to our Grievance Officer at sales@orivajewels.in. We will acknowledge within 24 hours and resolve within 15 days.
Registered office
602 Abrol Windsor, Upper Govind Nagar, Malad East, Mumbai MH 400097, India.
Workshop
1st Flr, 54/B Bhagvatigvati Estate, Kohinoor Road, Varachha Road, Surat 395006, Gujarat.
Governed by the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000. Last updated 9 September 2026.
