Privacy Policy

Overview

Your privacy matters to us. This Privacy Policy explains what personal data Gems Mart Jewellers collects when you use our website, why we collect it, how we use it, and the rights you have over it. This policy is written to be consistent with the Digital Personal Data Protection Act, 2023 (DPDPA), which governs the processing of personal data in India.

Gems Mart Jewellers ("we," "us") is the data fiduciary responsible for your personal data under this policy. You ("you," the "data principal") are the person whose data we process.

What we collect

We try to collect only what we need. Specifically:

Information you provide directly. Your name, phone number, email address, and any preferences or notes you share when you submit an inquiry, request a callback, schedule a visit, or place an order. If you share a wishlist, the pieces in it.
Order and payment information. The pieces you order, any related notes, and your delivery preferences. For payments processed via Stripe, your card details are handled by Stripe directly; we receive only a transaction reference and the payment status.
Wishlist data. When you add a piece to your wishlist, we store the wishlist association locally in your browser via a cookie. The pieces are linked to an anonymous identifier — not your name or email — unless you separately reach out to us.
Device and usage information. Standard server logs (IP address, browser type, pages viewed) and analytics events that help us understand how the site is used and improve it. We do not use behavioural advertising tracking.
Communications. Records of our conversations with you via WhatsApp, email, or phone, to the extent needed to serve you.

Why we collect it

We collect personal data for these purposes:

To respond to your inquiries and serve you as a customer.
To process and fulfil orders, including arranging delivery.
To operate, secure, and improve the website.
To comply with legal and tax obligations.
To communicate with you about your order or, with your consent, about new collections or services.

We do not sell your personal data. We share it only with parties who help us run the business:

Stripe — for payment processing on curated links where you choose to pay online.
Resend — for sending you transactional emails (order confirmations, inquiry receipts).
Shipping and courier partners — for delivery, if applicable.
Google — through Google Tag Manager for site analytics, and through Google Business Profile for our store listing.
Government authorities and law enforcement — only when legally required.

We do not transfer your personal data outside India for marketing purposes. Some of our service providers (Stripe, Resend, Google) are based outside India; data shared with them is processed in accordance with their published practices and applicable cross-border transfer rules under the DPDPA.

How long we keep it

Inquiry and order records — retained for the duration of our relationship with you and for as long as required for tax, accounting, and warranty purposes (typically up to 7 years for financial records, per Indian law).
Wishlist data — the wishlist cookie expires 90 days after your last visit; the underlying records are pruned over time.
Server logs — retained for a short rolling window (typically 30–90 days) for security and debugging.
Communication records — retained for the duration of our relationship and a reasonable period thereafter for reference and dispute resolution.

Your rights

Under the DPDPA, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or outdated personal data.
Erase your personal data when it is no longer needed for the purposes for which it was collected, subject to legal retention requirements.
Withdraw consent at any time, where our processing relies on your consent. Withdrawal will not affect processing that occurred before the withdrawal.
Nominate another individual to exercise your rights in the event of your incapacity or death.
Lodge a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, please contact us at contact@gemsmartjewellers.com. We will respond within a reasonable timeframe.

Cookies

We use a small number of cookies:

A wishlist identifier cookie (anonymous, 90-day expiry, refreshed on use) so your wishlist persists between visits.
A tutorial-dismissal cookie that remembers you've seen the wishlist tutorial.
Cookies set by Google Tag Manager and any analytics or measurement tools loaded through it. These help us understand site usage; you can manage them through your browser settings.

We do not use cookies for behavioural advertising.

Children's data

Our Service is not directed to children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

Security

We take reasonable technical and organisational measures to protect your personal data, including encryption in transit, access controls, and regular review of our practices. No method of transmission or storage is perfectly secure; we'll notify you and the relevant authorities promptly in the event of a personal data breach that materially affects you.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be highlighted on the site.

Grievance Officer

For privacy-related questions or to exercise any of your rights, please contact:

Gems Mart Jewellers 5 Mehar Chand Market, Lodhi Road, New Delhi, India Email: contact@gemsmartjewellers.com

We aim to acknowledge grievances within a reasonable period and resolve them as promptly as we can.