Last updated: 12 September  2026

Welcome to Swarnaz. This Privacy Policy explains how Swarnaz Jewellers, trading as Swarnaz Jewellers ("Swarnaz", "we", "us" or "our"), collects, uses, shares and protects your personal data when you visit www.swarnaz.com (the "Website"), shop with us online, contact us on WhatsApp or social media, or visit our showroom in Bakerganj, Patna.

We handle your personal data in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (as and when their provisions come into force), and the Consumer Protection (E-Commerce) Rules, 2020.

By using our Website or giving us your details, you agree to this Privacy Policy. If you do not agree, please do not use the Website.

1. Who we are

For the purposes of Indian data protection law, Swarnaz is the "Data Fiduciary" for the personal data described in this policy.

2. Personal data we collect

2.1 Data you give us

• Account and order details: your name, mobile number, email address, billing and delivery address, and order history.
• Product preferences: ring size, bangle size, wishlist items, and any notes you add to an order.
• Communication: messages you send us through the contact form, email, WhatsApp, Instagram, Facebook or phone, including photos or videos you share (for example, an unboxing video for a delivery complaint).
• Marketing sign-ups: your email address or phone number when you join our list for offers, new arrivals or "back in stock" alerts.
• Reviews: ratings, reviews and photos you choose to post about our products.
• GST details: your business name and GSTIN, if you ask for a GST invoice.

2.2 Data collected automatically

• Device and browser information, IP address, approximate location (city or state), pages viewed, products added to cart, and the website or ad that brought you to us.
• Cookies and similar technologies (see Section 8).

2.3 Payment information

All online payments are processed by our payment partners on their own secure, PCI-DSS compliant systems. We do not see or store your full card number, CVV, UPI PIN, or net-banking password. We only receive a payment confirmation, a transaction reference and, in some cases, the last few digits of the card used.

2.4 Data from others

We may receive limited data from courier partners (delivery status), payment partners (payment status and fraud checks) and social media or advertising platforms (for example, when you message us or interact with our ads).

3. How we use your personal data

We process your data either because you have given us consent, or for a "legitimate use" allowed by law, such as completing a purchase you asked for or meeting a legal obligation.

4. Who we share your data with

We do not sell or rent your personal data. We share only what is needed, and only with:

• Our e-commerce platform: our online store runs on Shopify, which stores and processes store data on our behalf.
• Payment partners: payment gateways and banks that process your payment.
• Courier and logistics partners: your name, phone number and address, so they can deliver your order.
• Messaging and email services: providers we use to send order updates and, with your consent, marketing messages (for example, WhatsApp Business and email services).
• Analytics and advertising partners: such as Google and Meta, which may receive device and browsing data through cookies and pixels.
• Professional advisers: chartered accountants, auditors and lawyers, under a duty of confidentiality.
• Government and law-enforcement authorities: where required by law, court order or a lawful request.
• A new owner: if our business is sold, merged or restructured, your data may pass to the new owner under the same protections.

Our partners may only use your data to provide services to us, and must keep it secure.

5. Storage outside India

Some of our service providers, including our e-commerce platform, may store or process data on servers located outside India. Where this happens, we transfer data only as allowed under Indian law and expect these providers to protect it with appropriate security measures.

6. How long we keep your data

• Order, invoice and payment records: for as long as required under GST, income-tax and other applicable laws.
• Account data: while your account is active. If you ask us to delete your account, we will delete or anonymise your data, except records we are legally required to keep.
• Marketing data: until you unsubscribe or withdraw consent.
• Support messages and unboxing videos: for as long as needed to resolve your query or claim, and a reasonable period after that.

7. How we protect your data

We use reasonable security practices to protect your personal data, including encrypted (HTTPS) connections, secure payment gateways, access controls so that only authorised staff can see customer data, and trusted service providers. No method of transmission over the internet is 100% secure, but we work to protect your data and will act promptly if a breach occurs. Where required by law, we will inform you and the relevant authorities about a personal data breach.

8. Cookies

Cookies are small files stored on your device. We use them to:

• Make the Website work (essential): keep items in your cart, keep you logged in, and complete checkout.
• Remember your preferences: such as recently viewed products.
• Understand usage (analytics): see which pages and designs are popular.
• Show relevant ads (marketing): through tools like the Meta Pixel and Google tags.

You can block or delete cookies through your browser settings. If you block essential cookies, the cart and checkout may not work properly.

9. Marketing messages

We will send you promotional emails, SMS or WhatsApp messages only if you have opted in. You can stop them at any time by clicking "unsubscribe" in an email, replying STOP on WhatsApp/SMS, or contacting us. You will still receive order-related messages, such as order confirmations and delivery updates.

10. Your rights

Subject to applicable law, you have the right to:

• Access: ask for a summary of the personal data we hold about you and how we use it.
• Correction and update: ask us to correct inaccurate or incomplete data. You can also edit most details in your account.
• Erasure: ask us to delete your data, unless we must keep it by law.
• Withdraw consent: withdraw consent you have given (for example, for marketing) at any time. Withdrawal does not affect processing already done.
• Grievance redressal: raise a complaint with our Grievance Officer (Section 12).
• Nominate: nominate another person to exercise your rights in case of your death or incapacity.

To use any of these rights, contact us using the details below. We may need to verify your identity before acting on your request. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational for such complaints.

11. Children

Our Website is meant for users aged 18 and above. We sell jewellery for kids, but these purchases must be made by a parent or guardian. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared personal data with us, please contact us and we will delete it.

12. Third-party links

Our Website may link to Instagram, Facebook, YouTube, WhatsApp, payment pages and other third-party sites. We are not responsible for their privacy practices. Please read their privacy policies before sharing your data with them.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page with the "Last updated" date. If we make important changes, we may also notify you by email or a notice on the Website.

14. Contact us

Swarnaz Jewellers
36/37, Bakerganj, Patna, Bihar – 800004
WhatsApp / Phone: +91 82103 67749
Showroom hours: 11:00 AM – 8:30 PM