Privacy Policy

1. Who We Are

This Privacy Policy is issued by Be Jeweled ("we", "us", "our"), a luxury jewelry business operating through our website at bejeweled.in (the "Website") and via WhatsApp-based communication. For the purposes of applicable data protection laws, Be Jeweled is the data controller responsible for your personal data.

Contact for privacy inquiries: bejeweledwithus23@gmail.com

2. Scope of This Policy

This Policy applies to all personal data collected through (a) the Website, including its Progressive Web App (PWA) version, (b) WhatsApp conversations initiated from the Website, (c) our WhatsApp community group, (d) email correspondence, and (e) any other channel through which you interact with us (collectively, the "Services"). It does not apply to third-party websites or services linked from our Website.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Data You Provide Directly

• Contact & Identity Data: Name, email address, phone number, and delivery address shared through WhatsApp conversations or email correspondence when placing orders or making inquiries.
• Review Data: Your name, email address (if provided), star rating, and written comments when you submit a product review through our review link system.
• Transaction Data: Details of orders, product preferences, and payment information exchanged during WhatsApp order conversations.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, time zone, and platform information.
• Usage Data: Pages viewed, time spent on pages, navigation path, referral source, and interaction with Website features.
• Local Storage Data: Your wishlist preferences are stored locally on your device using browser localStorage. This data never leaves your device and is not transmitted to our servers.

4. How We Use Your Personal Data

We process your personal data only where we have a lawful basis to do so. The table below summarises our purposes and legal bases:

5. Third-Party Service Providers

We use the following third-party services to operate the Website. Each provider processes data in accordance with its own privacy policy:

• Google Firebase (Firestore & Authentication): Used for storing product catalogues, customer reviews, and admin authentication. Data may be processed by Google LLC in accordance with the Firebase Privacy Policy.
• Cloudflare R2: Used for hosting product images. Data processed by Cloudflare, Inc. in accordance with its Privacy Policy.
• WhatsApp (Meta Platforms, Inc.): Used as our primary order and customer communication channel. Messages sent through WhatsApp are governed by WhatsApp's Privacy Policy.

We do not sell, rent, trade, or otherwise share your personal data with any third party for their marketing purposes.

6. Cookies & Local Storage

Our Website uses browser localStorage to persist your wishlist across sessions. This data is stored entirely on your device and is not transmitted to our servers or any third party. You can clear this data at any time through your browser settings.

We may also use essential cookies or similar technologies required for the proper functioning of the Website (e.g., theme preference). We do not use advertising or tracking cookies.

7. Data Retention

• Order & transaction records: Retained for a minimum of 8 (eight) years from the date of the transaction, or such longer period as required by applicable tax and commercial laws.
• Customer reviews: Retained for as long as the review remains published, or until you request its removal.
• Review link tokens: Automatically expire 30 days after generation and are retained for internal audit purposes only.
• WhatsApp conversation data: Retention is governed by WhatsApp's policies. We may retain order summaries from conversations for our internal records.
• Technical/Usage data: Retained in aggregated or anonymised form; identifiable data is deleted within 90 days.

8. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal data, including:

• HTTPS/TLS encryption for all data transmitted between your browser and our Website.
• Firebase Security Rules restricting database access to authorised operations only.
• Admin access protected by email-and-password authentication with Firebase Auth.
• Cloudflare R2 server-side access keys stored securely and never exposed to the client.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

Subject to applicable law (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, as amended), you may have the following rights:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Withdraw Consent: Where processing is based on consent (e.g., reviews), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Grievance Redressal: Lodge a complaint with the relevant data protection authority if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at bejeweledwithus23@gmail.com. We will respond within 30 days.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such data.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated by posting the revised Policy on this page with an updated "Last Updated" date. We encourage you to review this page periodically. Your continued use of the Services after any modifications indicates your acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: bejeweledwithus23@gmail.com
• WhatsApp: Via the chat link on our Contact Us page