1. Introduction & Legal Entity
At M/S SHUBH JEWELLERS, we recognise that acquiring bespoke gold, silver, and diamond ornaments involves deep personal sentiment and mutual trust. In our motto "Trust Shines Forever", safeguarding our patrons' private financial and personal details is of paramount importance.
This Privacy Policy explains how M/S SHUBH JEWELLERS collects, stores, processes, protects, and discloses personal data in full compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Data Fiduciary Particulars:
- Entity Name: M/S SHUBH JEWELLERS
- GSTIN: 09AHIPV8272A1Z0
- Registered Office: Shop No. 4, Lodhi Market, Suggamau, Indira Nagar, Lucknow, Uttar Pradesh, PIN 226015
- Designated Privacy Email: sales@shubhjewellers.com
- Direct Lines: +91 98396 87555 | +91 93369 88180
- Showroom Hours: Monday – Sunday, 10:30 AM – 8:30 PM
Legal Forum: All privacy-related disputes are subject to the exclusive jurisdiction of the competent courts in Lucknow, Uttar Pradesh, India.
2. Definitions
For the purpose of this Privacy Policy:
- "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of DPDPA 2023.
- "Data Principal" means the individual to whom the personal data relates (i.e., you, the customer).
- "Data Fiduciary" means M/S SHUBH JEWELLERS, which alone or in conjunction with other persons determines the purpose and means of processing personal data.
- "Data Processor" means any person who processes personal data on behalf of the Data Fiduciary.
- "Sensitive Personal Data" means passwords, financial information, health data, and biometric data as defined under the IT (SPDI) Rules, 2011.
- "Consent" means the free, specific, informed, unconditional, and unambiguous agreement of the Data Principal to the processing of their personal data.
- "KYC" means Know Your Customer verification mandated under PMLA 2002.
3. Scope & Consent
This Privacy Policy applies to all personal data collected by M/S SHUBH JEWELLERS through:
- Our official website and any associated web pages or microsites.
- In-store showroom visits, custom order bookings, and appraisal appointments.
- WhatsApp, phone calls, SMS, email, or any other electronic communication.
- Third-party platforms, including delivery partners, payment gateways, and gemological labs.
By visiting our showroom, using our website, contacting us via WhatsApp, or providing KYC documents for a transaction, you provide your free, informed, and specific consent to the data practices described in this Policy.
4. Information We Collect
We only collect information essential for fulfilling high-jewellery commissions, generating certified tax invoices, and meeting statutory compliance requirements in India.
| Category | Data Elements | Source |
|---|---|---|
| Identity Data | Full name, title, gender, date of birth (for anniversary offers) | Direct client submission |
| Contact Data | Billing / shipping address, email, primary WhatsApp, alternate phone | Direct submission / KYC form |
| KYC Data (PMLA) | PAN, masked Aadhaar (last 4 digits), Passport, Voter ID, Driving Licence | KYC form / In-store verification |
| Financial Data | Bank account number, IFSC, UPI ID, payment gateway transaction ID | Payment gateway / Bank statement |
| Bespoke Preferences | Ring / bangle sizes, CAD designs, reference sketches, name engravings, purity choices | Order booking / Karigari appointment |
| Technical Data | IP address, device ID, browser type, geo-location (city-level), cookies | Automatic (website visit) |
What We Do NOT Collect: Full credit/debit card numbers, CVV, banking PINs, biometric data beyond permitted KYC, or any data from children under 18.
5. How We Use Your Information
M/S SHUBH JEWELLERS processes personal data solely on lawful grounds — customer consent, contract performance, and legal obligation:
- Order Book Execution & Karigari: To translate your custom designs into physical ornaments, assign booking tokens, calibrate weight tolerances, and deliver finished pieces.
- Statutory Tax Invoicing & Hallmarking: Generating lawful GST-compliant invoices bearing GSTIN 09AHIPV8272A1Z0 and registering unique BIS 6-digit HUID numbers.
- Secure Concierge Communications: Providing real-time WhatsApp and SMS tracking on your jewellery manufacturing stages, polishing schedules, and dispatch statuses.
- Lifetime Buyback & Warranty Authentication: Storing tamper-proof records of purity cards and diamond lab dossiers (IGI / GIA) to facilitate future exchange and buyback claims.
- Fraud Prevention: Verifying KYC, flagging suspicious transactions, and complying with FIU-IND reporting.
- Service Improvement: Analysing aggregated, anonymised data to refine our website experience and showroom service.
6. Statutory Bullion KYC Compliance
Purchase and trade of bullion and precious jewellery in India are closely regulated under the Prevention of Money Laundering Act, 2002 (PMLA) and Section 269ST & 206C of the Income Tax Act, 1961.
Mandatory PAN & Identity Verification Thresholds:
- Single Transactions Exceeding ₹2,00,000: Provision of a valid PAN Card or Form 60 is legally mandatory for both cash and digital payment modes.
- Aadhaar Redaction: Patrons are requested to provide a Masked Aadhaar where only the last 4 digits are visible, per UIDAI circulars.
- Cash Limit: Cash transactions exceeding ₹2,00,000 are not accepted, in compliance with RBI and CBDT norms.
- Non-Disclosure: All KYC documents are kept in an encrypted, air-gapped vault accessible only to authorised compliance officers and are never commercialised.
7. Payment Security & Financial Data Safeguards
When you book custom jewellery or settle an invoice through our payment gateways:
Zero Raw Card Storage
M/S SHUBH JEWELLERS never records or processes full credit/debit card numbers, CVVs, expiry dates, or banking PINs. All web transactions route directly through PCI-DSS Level 1 compliant payment gateways.
Secure UPI & Bank Transfers
RTGS / NEFT / IMPS transfers and verified UPI QR payments process via bank-to-bank tokenised authentication, protecting account credentials from third-party interception.
OTP Warning: Never share OTPs, UPI PINs, or bank passwords with anyone claiming to be from Shubh Jewellers. We will never request them via call, SMS, or WhatsApp.
8. Third-Party Disclosures & Transit Partners
We do not sell, rent, monetise, or trade client personal records to any telemarketers or advertising brokers. Data is disclosed exclusively under strict non-disclosure obligations to:
- Armoured Logistics Carriers: Specialised insured couriers (Sequel Logistics, BVC Logistics) receive only name, delivery address, and contact for PIN-verified delivery.
- Gemological Laboratories: IGI and GIA receive piece specifications for certification, without client names.
- Payment Gateways: RBI-licensed processors receive transaction data for payment authorisation.
- Cloud Service Providers: AWS / Azure with data stored in Indian data centres, bound by DPDPA-compliant processor agreements.
- Statutory Authorities: GST Department, Income Tax, FIU-IND, and law enforcement on lawful summons.
10. WhatsApp Communications & Customer Consent
WhatsApp is a primary communication channel for custom orders, live gold rate broadcasts, and video consultations:
- Express Opt-In: By clicking the floating WhatsApp button, initiating a chat
at
+91 98396 87555or+91 93369 88180, or requesting a digital order estimate, you authorise our atelier team to exchange messages regarding your enquiry. - Zero Spam Commitment: We strictly refrain from automated bulk marketing blasts or non-consensual promotional calls.
- Revocation: You can opt out of WhatsApp rate broadcasts at any point by sending the word "STOP" or "UNSUBSCRIBE" to our official number.
- Message Retention: WhatsApp business chats are retained for 24 months for order reference and dispute resolution.
11. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law:
| Data Category | Retention Period | Statutory Basis |
|---|---|---|
| GST Invoices & Tax Records | 8 Financial Years | CGST Act 2017 |
| KYC / PMLA Documents | 5 Years post-transaction | PMLA 2002 Rule 10 |
| Lifetime Buyback Records | Lifetime of the article | Contractual obligation |
| Marketing / WhatsApp Subscriptions | Until opt-out | Consent-based |
| Website Analytics | 12 Months | Cookie consent |
| Customer Support Chats | 24 Months | Dispute resolution |
12. Your Rights as a Data Principal (DPDPA 2023)
In accordance with Sections 11-14 of the DPDPA 2023, you hold the following statutory rights:
Right to Access (Sec 11)
Request a summary of personal data we process, the identity of all Data Processors, and any prior sharing with third parties.
Right to Correction (Sec 12)
Request correction of inaccurate or misleading personal data, and completion of incomplete data.
Right to Erasure (Sec 12)
Request erasure of personal data, unless retention is mandated by law (e.g., GST, PMLA, Income Tax).
Right to Grievance Redressal (Sec 13)
Lodge a complaint with our DPO; escalate to the Data Protection Board of India if unresolved.
Right to Nominate (Sec 14)
Nominate another individual to exercise your rights in case of death or incapacity.
Right to Withdraw Consent
Withdraw consent at any time, though this may prevent us from continuing services that depend on the data.
How to exercise: Email sales@shubhjewellers.com with subject "DPDPA Data Request" or visit our showroom. We will respond within 30 days of verified receipt.
13. Security Measures We Deploy
We implement reasonable security practices and procedures aligned with the IT (SPDI) Rules, 2011 and DPDPA 2023 requirements:
- 256-bit TLS Encryption for all data in transit on our website.
- AES-256 Encryption at rest for all KYC and financial data.
- Access Controls: Role-based access with multi-factor authentication for staff handling customer data.
- Regular Vulnerability Assessments and periodic third-party audits.
- Incident Response Plan: Notification of personal data breaches to the Data Protection Board of India and affected principals as mandated under Sec 8(6) of DPDPA 2023.
- CERT-In Compliance: Adherence to CERT-In incident reporting protocols.
14. Children's Privacy
Our services are intended for individuals aged 18 and above. Under Section 9 of the DPDPA 2023, we do not process personal data of children (below 18) except with verified consent of a parent or lawful guardian, and never for tracking, behavioural monitoring, or targeted advertising.
- Minor's KYC for gifting or educational purchases is processed only with a parent/guardian's verified consent.
- If we become aware that a child's data was inadvertently collected, we will delete it within 7 business days.
- To request deletion, email sales@shubhjewellers.com with subject "Minor's Data Erasure".
15. International Users & NRI Clients
We primarily serve patrons within India, but also welcome NRI customers and international orders:
- All personal data of international clients is stored on servers located in India, in line with DPDPA 2023 requirements.
- Cross-border transfers (if any) are made only to jurisdictions notified by the Central Government as permissible under Sec 16 of DPDPA 2023.
- International clients are responsible for compliance with their local data protection laws (e.g., GDPR, CCPA) alongside this Policy.
- For international KYC, we accept a valid Passport along with an overseas address proof.
16. Grievance Redressal & Data Protection Officer
Under Section 8(9) of the DPDPA 2023 and Rule 5(9) of the IT (SPDI) Rules, 2011, the details of our designated Grievance & Data Protection Officer are:
Designated Data Grievance Officer:
Executive Office — M/S SHUBH JEWELLERS
Shop No. 4, Lodhi Market, Suggamau, Indira Nagar, Lucknow, UP 226015
Redressal Timeline:
Acknowledgment: Within 24 business hours.
Resolution: Within 30 days of receipt of complaint.
Escalation: Unresolved complaints may be filed with the Data Protection Board of India.
In-Person: Mon-Sun, 11:00 AM – 7:30 PM at our Indira Nagar showroom (prior appointment).
17. External Reference & Regulatory Authorities
Direct links to the official portals of Indian regulatory bodies and international standards organisations referenced in this Policy:
Manage Your Privacy Settings
We respect your right to privacy. Customise your cookie and communication preferences, or download a copy of this charter for your personal records.