Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy is issued by MAYERI Jewels ("MAYERI", "we", "us", "our"), whose office is at MAYERI Jewels, C-Scheme, Jaipur, Rajasthan 302001 (GSTIN: 08NCGPS9919M1ZB). It applies to personal data we collect through this website, our customer-care channels (email, WhatsApp and phone), our social media pages and any order you place with us.

It is written to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023. By using the website or placing an order you agree to the practices described here.

2. Information we collect

We collect information in three ways: what you give us, what your device shares automatically, and what our partners pass back to us to complete an order.

• Identity and contact details — your name, mobile number, email address and delivery / billing address.
• Account details — your login credentials (never your password in readable form), Google sign-in profile where you choose it, saved addresses, wishlist and bag contents.
• Order details — the pieces you buy, prices paid, coupons used, payment method (never full card numbers, CVV or UPI PIN), delivery status and return, exchange or Forever Wardrobe history.
• Communications — messages you send us by email, WhatsApp or through the website, and reviews or photographs you submit.
• Identity documents — a government photo ID and, where the law requires it, PAN details, collected only for buy-back or high-value transactions.
• Technical data — IP address, device and browser type, pages viewed, referring site and cookie identifiers, collected automatically when you browse.

3. How we use your information

We process your personal data for the following purposes and on the following lawful bases.

• To accept, fulfil and deliver your order, process your payment and issue an invoice (performance of a contract).
• To send transactional messages about your order — confirmation, dispatch, delivery, returns and refunds — by email, SMS and WhatsApp (performance of a contract).
• To run your account, wishlist, bag and the Forever Wardrobe, including calculating exchange credit (performance of a contract).
• To answer your questions, handle complaints and resolve disputes (legitimate interest and legal obligation).
• To comply with tax, accounting, consumer-protection and hallmarking law and to respond to lawful requests from authorities (legal obligation).
• To detect and prevent fraud, chargeback abuse and misuse of offers (legitimate interest).
• To send you offers, new-collection previews and reminders, only where you have opted in, and with an unsubscribe option in every message (consent).
• To understand how the website is used and improve it, using aggregated analytics (legitimate interest).

4. Who we share it with

We do not sell, rent or trade your personal data. We share it only with service providers who need it to complete your order or run the website, under written contracts that require them to keep it confidential and use it solely for our instructions.

• Delivery partners and their courier networks — your name, address and mobile number, so a parcel can reach you.
• Payment gateways and banks — to authorise payments and process refunds. They handle card and UPI data under their own PCI-DSS obligations.
• Communication providers — for order emails, SMS one-time passwords and WhatsApp notifications.
• Cloud hosting, analytics and error-monitoring services that run this website.
• Google, where you choose to sign in with your Google account, under Google's own privacy policy.
• Auditors, professional advisers and government or law-enforcement bodies where the law requires disclosure.

5. Cookies and similar technologies

This website uses cookies and browser storage to keep your bag and wishlist intact between visits, keep you signed in, remember your preferences, measure how the site is used and, with your consent, show you relevant offers.

Essential cookies cannot be switched off without breaking core functions such as sign-in, your bag and checkout. You may block or delete non-essential cookies in your browser settings at any time; doing so may affect personalisation.

6. How long we keep your data

Order, invoice and payment records are retained for eight years after the financial year of the transaction, as required by Indian tax and company law. Buy-back identity records are kept for the period required under anti-money-laundering rules.

Account data is kept while your account is active and for 24 months after your last sign-in, unless you ask us to delete it sooner. Marketing preferences are kept until you withdraw consent. Technical logs are retained for up to 12 months.

7. How we protect your data

All traffic between your browser and our servers is encrypted with TLS. Passwords are stored as salted hashes, and payment credentials never touch our servers. Access to personal data is restricted to staff who need it to serve you, and is logged.

No method of transmission or storage is completely secure. If we become aware of a breach that is likely to cause you harm we will inform you and the relevant authority as the law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the following rights in respect of your personal data. To exercise any of them, write to us at the address in Clause 12 with enough detail for us to verify your identity.

• Access — a summary of the personal data we hold about you and how it has been processed.
• Correction and updating — fix inaccurate or incomplete details; you can also do this from your account.
• Erasure — deletion of your data where we no longer need it for a purpose or legal obligation described above.
• Withdrawal of consent — stop marketing messages at any time using the unsubscribe link or by writing to us. Transactional messages for an open order will continue.
• Grievance redressal — raise a complaint with our Grievance Officer, and if unresolved, with the Data Protection Board of India.
• Nomination — nominate a person to exercise these rights on your behalf in the event of death or incapacity.

9. Children

The website is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Third-party links

Our website may link to social platforms, payment gateways and other websites. Those services have their own privacy policies, over which we have no control, and this policy does not apply to them.

11. Changes to this policy

We may update this policy to reflect changes in law, technology or our services. The revised version takes effect when published here, and the date at the top of the page is updated accordingly. Where a change materially affects how we use your data we will notify you by email or a notice on the website.

12. Grievance Officer and contact

Questions, requests and complaints about your personal data may be sent to our Grievance Officer at Info@mayerihoj.com, or by post to MAYERI Jewels, C-Scheme, Jaipur, Rajasthan 302001. Please mention "Privacy" in the subject line.

We acknowledge every request within 48 working hours and respond in full within 30 days, as required under applicable law.