Privacy Policy

The short version

We ask for the details needed to send you jewellery and nothing else. We do not sell your data, we do not share it with advertisers, and we do not run third-party tracking or advertising pixels on this site. We do count how the shop is used, in a way that cannot identify you, described below.

What we collect

When you place an order

• Your name, delivery address, phone number and email address
• What you ordered and what you paid
• A payment reference from our payment provider

We never see or store your card or UPI details. Payments are handled entirely by our payment provider on their own systems. We receive only a confirmation that payment succeeded and a reference number.

When you simply visit

Our hosting provider, Cloudflare, tells us which country your network appears to be in so we can show prices in a sensible currency. We do not store your IP address, we do not profile you, and we do not build an advertising identity for you.

How we count what happens on the shop

We record simple events, a page being viewed, a piece being added to a basket, a checkout being started or abandoned, so we know which jewellery people actually like and where the shop is confusing.

This is measured by us, on our own servers. There is no Google Analytics, no Meta pixel and no third-party script of any kind. Each event is tagged with a random number generated when you open the tab, which is erased the moment you close it. It is not a cookie, it is not stored on your device afterwards, and it cannot be linked to you, to a previous visit or to anything you do on other websites.

We store the country your network reports and, where you arrived from another site, that site's domain name, never the full address you came from, which can contain search terms.

Cookies

We use two, both strictly functional, both set only by this site:

• jbd-currency, remembers the currency you picked
• jbd-world, remembers whether you prefer the Indian or Western range

Neither identifies you, and there are no analytics or advertising cookies. That is why this site has no cookie banner: there is nothing to consent to.

Why we are allowed to hold it

We process order details because they are necessary to perform the contract you entered into when you bought something. We keep order records for as long as Indian tax and accounting rules require, and delete what we no longer need.

Who else touches your data

• Our payment provider, to take payment securely
• Our delivery partners, the name, address and phone needed to deliver
• Cloudflare, hosts the site and protects it from attack

Nobody else. We do not sell, rent or trade your details to anyone, for any amount.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you may ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw consent. Email privacy@jewelsbydiksha.com and we will reply within 30 days. If you are in the UK or EU, the equivalent GDPR rights apply and we honour them the same way.

Children

This shop is not intended for children under 18, and we do not knowingly collect their data.

Security

The shop's own staff login is rate limited. To do that we store a salted, one-way hash of the address attempting to sign in, for one hour, and nothing else. It cannot be turned back into an address, it is deleted automatically, and it is only ever created by someone trying the staff login, never by browsing or buying.

The site is served only over HTTPS, we hold no card details at all, and access to order records is limited to the people who pack and post your order. If we ever suffered a breach affecting you, we would tell you and the relevant authority promptly.

Contact

Questions, or want your data deleted? Email privacy@jewelsbydiksha.com.