1.Who we are
Adishakti Jewellery we respects your privacy and is committed to protecting your personal information. This Privacy Policy governs the collection, processing, and protection of personal data in accordance with the Digital Personal Data Protection Act, 2023, and other applicable Indian laws.
By accessing our website or engaging our services, you acknowledge and consent to the practices described in this Policy. Our website address is: https://adishaktijewellery.com
2. SCOPE AND APPLICATION
This Policy applies to:
- All users of our website and digital platforms
- Customers purchasing our products and services
- Individuals engaging in custom design consultations
- Subscribers to our marketing communications
3. DATA COLLECTION
3.1 Personal Data Categories
Identity and Contact Information:
- Full name, contact numbers, email addresses, residential/billing addresses
Transactional Data:
- Purchase orders, payment information, transaction history, billing records
Custom Design Data:
- Design specifications, consultation records, creative briefs, reference materials
Technical Data:
- IP addresses, browser specifications, device identifiers, usage analytics
3.2 Collection Methods
- Direct provision during account registration and transactions
- Automated collection through website interaction
- Communication via email, phone, or WhatsApp
- Third-party integrations with payment and logistics providers
4. DATA PROCESSING AND USAGE
4.1 Primary Processing Purposes
- Order Management: Processing purchases, inventory management, fulfillment
- Customer Service: Providing support, handling inquiries, resolving disputes
- Custom Manufacturing: Executing bespoke jewelry design and production
- Payment Processing: Transaction execution, fraud prevention, financial reconciliation
4.2 Secondary Processing Purposes
- Marketing Communications: Product promotions, seasonal collections, industry updates
- Business Intelligence: Performance analytics, market research, service optimization
- Legal Compliance: Regulatory reporting, audit requirements, dispute resolution
5. LEGAL BASIS FOR PROCESSING
Our data processing activities are justified under
- Contractual Necessity: Essential for service delivery and order fulfillment
- Legitimate Business Interest: Operational efficiency, fraud prevention, service improvement
- Legal Obligation: Compliance with taxation, consumer protection, and business regulations
- Explicit Consent: Marketing communications and optional service features
6. DATA SECURITY AND STORAGE
6.1 Security Infrastructure:
- Encryption Standards: Industry-standard SSL/TLS encryption for data transmission
- Access Controls: Role-based permissions and multi-factor authentication
- Network Security: Firewalls, intrusion detection, and monitoring systems
- Regular Auditing: Quarterly security assessments and vulnerability testing
6.2 Data Localization:
Personal data is stored within Indian territory on certified cloud infrastructure, ensuring compliance with data residency requirements.
6.3 Retention Schedule:
- Transactional Records: Seven (7) years from transaction completion
- Marketing Data: Until consent withdrawal or account closure
- Technical Logs: Twenty-four (24) months with subsequent anonymization
7. THIRD-PARTY INTEGRATIONS
7.1 Service Categories:
- Payment Processors: Licensed financial service providers for transaction processing
- Logistics Partners: Courier and delivery services for order fulfillment
- Technology Providers: Analytics, communication, and infrastructure services
7.2 Data Sharing Framework
Third-party access is governed by strict contractual agreements ensuring:
- Purpose limitation and data minimization
- Security standards equivalent to our own
- Compliance with applicable privacy regulations
- Regular monitoring and audit requirements
8. DATA SUBJECT RIGHTS
8.1 Individual Rights
You are entitled to:
- Access: Request confirmation and copies of your personal data
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion subject to legal retention requirements
- Portability: Receive data in structured, machine-readable format
- Objection: Withdraw consent for marketing communications
- Restriction: Limit processing under specific circumstances
8.2 Rights Exercise Procedure
Submit requests to our Data Protection Officer with:
- Valid identification documentation
- Specific description of your request
- Preferred communication method for response
Response Timeline: Acknowledgment within 72 hours, resolution within 30 calendar days.
9. COOKIES AND TRACKING TECHNOLOGIES
9.1 Cookie Categories
- Strictly Necessary: Essential for website functionality and security
- Performance: Analytics and usage optimization
- Functional: User preference and customization features
- Targeting: Personalized advertising and content delivery
9.2 Cookie Management
Users may configure cookie preferences through browser settings or our cookie consent manager. Note that disabling essential cookies may impact website functionality.
10. COMMUNICATION CHANNELS
10.1 WhatsApp Business Integration
We utilize WhatsApp Business API for:
- Order status notifications and updates
- Customer service and technical support
- Custom design consultations and approvals
- Promotional communications (with explicit consent)
Users may opt-out of WhatsApp communications at any time without affecting service delivery.
11. CROSS-BORDER DATA TRANSFERS
Any international data transfers are conducted under appropriate safeguards including:
- Standard Contractual Clauses approved by Indian authorities
- Adequacy decisions for destination countries
- Corporate binding rules for intra-group transfers
12. DATA BREACH RESPONSE
Incident Management:
In case of security incidents affecting personal data:
- Immediate containment and impact assessment
- Notification to regulatory authorities within 72 hours
- User notification for high-risk breaches
- Implementation of remedial and preventive measures
13. POLICY UPDATES AND AMENDMENTS
This Policy may be revised to reflect:
- Changes in applicable privacy legislation
- Evolution of our business practices
- Enhancement of security measures
- User feedback and regulatory guidance
Significant changes will be communicated via email and website notification with adequate notice period.
Service Standards: Acknowledgment within 48 hours, resolution within 30 calendar days.
14. REGULATORY COMPLIANCE
This Policy ensures compliance with:
- Digital Personal Data Protection Act, 2023
- Information Technology Act, 2000
- Consumer Protection Act, 2019
- Goods and Services Tax regulations
- Reserve Bank of India guidelines for payment systems
15. GOVERNING LAW AND JURISDICTION
This Privacy Policy is governed by the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts in Uttar Pradesh, India.
© 2025 Adishakti Jewellery. All rights reserved.
This document constitutes a legally binding agreement between you and Adishakti Jewellery regarding the processing of your personal information.