Effective Date: August 12, 2026 — Last Updated: August 12, 2026

This Privacy Policy describes how Jaipur Gems (“Jaipur Gems,” “we,” “us,” or “our”), operating the Jaipur Gems Platform and the website jaipurgems.org (collectively, the “Platform”), collects, uses, discloses, and protects the personal data of individuals who visit our website, purchase our products, or communicate with us — including through WhatsApp Business Messaging.

This Policy is drafted to comply with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its rules, and, to the extent applicable, aligns with globally recognized principles under the General Data Protection Regulation (GDPR). It also satisfies the disclosure requirements of Meta Platforms, Inc. for businesses using the WhatsApp Business Platform / WhatsApp Business API.

By using our Platform, purchasing our products, or messaging us on WhatsApp, you agree to the collection and use of information in accordance with this Policy.

1. Who We Are

Jaipur Gems is a jewelry business operating the Jaipur Gems Platform, an e-commerce and customer engagement platform for fine jewelry (including gold, diamond, and gemstone products), based in India.

Data Fiduciary / Data Controller: Jaipur Gems
Website: https://jaipurgems.com/pages/contact
Contact / Grievance Officer email: customer.service@jaipurgems.com

2. Information We Collect

We collect the following categories of personal data:

2.1 Information You Provide Directly

• Identity data: Name, date of birth (for certain high-value or KYC-linked purchases), gender.
• Contact data: Phone number (including WhatsApp number), email address, shipping and billing address.
• Account data: Username, password (encrypted), account preferences, wishlists.
• Order and transaction data: Products purchased, order history, invoice details, payment method type (we do not store full card numbers — these are processed by our PCI-DSS compliant payment partners), gold/diamond certification and hallmarking preferences.
• Communication data: Messages, images, documents, and voice notes you send us via WhatsApp, email, live chat, or contact forms; records of consent (opt-in/opt-out) for WhatsApp and marketing communications.
• Customer support data: Details of complaints, exchange/return requests, warranty claims, and appraisal requests.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, device identifiers, operating system, pages visited, time spent, referral URLs, and general location (city/region level) via cookies and similar technologies.
• Cookies: See Section 9 (Cookies) below.

2.3 Information Collected via WhatsApp Business Messaging

When you message us on WhatsApp, initiate a chat via a “Click to WhatsApp” ad or website widget, or receive order/marketing messages from us on WhatsApp, we (and our WhatsApp Business Solution Provider, via Meta Platforms, Inc.) process:

• Your WhatsApp phone number and profile name.
• The content of messages exchanged (text, images of jewelry references, order queries, appointment requests).
• Message delivery/read status and timestamps.
• Your opt-in and opt-out status for WhatsApp notifications and marketing messages.

This data is used solely to respond to your queries, send order updates (order confirmation, shipping, delivery, appraisal appointment reminders), and, where you have opted in, send promotional communications. Meta's own Privacy Policy (available at https://www.whatsapp.com/legal/business-policy) governs Meta's processing of data on WhatsApp's infrastructure; we are the data controller for the business content of our communications with you.

2.4 Information from Third Parties

• Payment gateways and financial partners (for fraud checks and payment confirmation).
• Logistics and courier partners (for delivery tracking).
• Advertising platforms (Meta/Google) for analytics on ad campaign performance, on an aggregated basis.

3. How We Use Your Information

We use personal data for the following purposes, consistent with the principle of purpose limitation under the DPDP Act:

• Order fulfilment: Processing purchases, hallmarking/certification, shipping, delivery, returns/exchanges.
• Customer service: Responding to queries on WhatsApp, email, or chat; handling complaints and warranty claims.
• Account management: Creating and maintaining your account, authentication, wishlist.
• Transactional notifications: Order confirmations, shipping updates, appointment reminders via WhatsApp, SMS, or email.
• Marketing (opt-in only): New collection launches, festive offers, personalized jewelry recommendations — only where you have given explicit consent.
• Security and fraud prevention: Verifying high-value transactions, preventing fraudulent orders.
• Legal and compliance: Maintaining records required under Indian tax, consumer protection, BIS hallmarking, and anti-money-laundering regulations.
• Platform improvement: Analytics to improve website and WhatsApp service quality (in aggregated/anonymized form where possible).

We do not use your data for automated decision-making that produces legal or similarly significant effects on you without human oversight.

4. Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of:

• Your explicit consent (e.g., for WhatsApp marketing messages, newsletters, promotional offers) — which you may withdraw at any time (see Section 8).
• Legitimate use for performance of a contract (e.g., fulfilling an order you placed).
• Compliance with legal obligations (e.g., tax invoicing, hallmarking records, consumer protection law).

Where GDPR principles apply (e.g., to EU-based customers), the applicable lawful bases are: consent, contractual necessity, and legitimate interest.

5. WhatsApp-Specific Consent (Opt-In / Opt-Out)

• We only send you WhatsApp messages if you have opted in — by messaging us first, submitting your number via a website form with consent checked, or verbally/in-store consent recorded digitally.
• Every marketing message sent via WhatsApp includes a clear way to opt out (e.g., replying “STOP” or using an in-chat opt-out option).
• Transactional messages (order confirmations, shipping updates) related to a purchase you made may be sent without separate marketing consent, as they are necessary to fulfil your order.
• You can withdraw WhatsApp consent at any time by messaging “STOP” to our WhatsApp number, or emailing customer.service@jaipurgems.com.

6. Sharing and Disclosure of Information

We do not sell your personal data. We may share it with:

• Meta Platforms, Inc. — as the provider of WhatsApp Business Platform infrastructure, to enable message delivery. Meta processes this data under its own Business Messaging Policy.
• Our WhatsApp Business Solution Provider (BSP) — the technology vendor that connects our systems to the WhatsApp Business API.
• Payment processors and banks — to complete and verify transactions.
• Logistics and courier partners — to deliver your order.
• Hallmarking, certification, and insurance partners — where relevant to your jewelry purchase (e.g., BIS hallmarking centers, gemological certification labs).
• Professional advisors and regulators — where required by law, court order, or to protect our legal rights.
• Service providers acting on our behalf under contractual confidentiality obligations (e.g., cloud hosting, CRM, analytics providers) — who are prohibited from using your data for their own purposes.

We require all third parties to respect the security of your data and treat it in accordance with the law.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements:

• Order and transaction records: Retained for the period required under Indian tax and consumer protection law (typically up to 8 years).
• WhatsApp communication logs: Retained for up to 3 years from the last interaction, or as required to resolve disputes/warranty claims, unless deletion is requested earlier under Section 8.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence compliance.
• Account data: Retained while your account remains active, and deleted or anonymized within 90 days of account closure, subject to legal retention requirements.

8. Your Rights

Under the DPDP Act (and GDPR principles where applicable), you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Erasure — request deletion of your personal data (see our separate Data Deletion Policy for the WhatsApp-specific process).
• Withdraw consent for any consent-based processing (e.g., WhatsApp/email marketing) at any time.
• Grievance redressal — raise a complaint with our Grievance Officer, and if unresolved, escalate to the Data Protection Board of India.
• Nominate another individual to exercise your rights in the event of death or incapacity (as provided under the DPDP Act).

To exercise any of these rights, contact us at customer.service@jaipurgems.com or write to our Grievance Officer at the address in Section 13. We will respond within 30 days, or as otherwise required by applicable law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Keep you logged in and remember your cart/wishlist.
• Understand site usage and improve performance (analytics cookies).
• Show relevant advertising (with your consent, where required).

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of sensitive data in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Our servers and service providers (including WhatsApp/Meta infrastructure) may process data outside India. Where we transfer personal data internationally, we ensure appropriate safeguards consistent with the DPDP Act and, where applicable, GDPR-standard contractual clauses.

12. Children's Privacy

Our Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we learn we have inadvertently collected such data, we will delete it promptly.

13. Grievance Officer / Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

Grievance Officer
Jaipur Gems
Email: customer.service@jaipurgems.com
Website: https://jaipurgems.com/pages/contact

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The “Last Updated” date at the top indicates the most recent revision. Material changes will be notified via our website or, where appropriate, via WhatsApp/email.