Privacy Policy

Last Updated: September 7, 2026

1. Introduction

Bavane Jewellers ("we", "us", "our") operates from Kodoli, Tal. Panhala, Dist. Kolhapur, Maharashtra, India — 416114. We are committed to protecting and respecting your privacy in accordance with the applicable provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) as notified from time to time, the Information Technology Act, 2000, and all applicable Indian laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, visit our physical stores, or communicate with us through any medium including WhatsApp, phone, or email.

2. Information We Collect

2.1 Personal Information You Provide

• Contact Details: Name, email address, phone number, postal address
• Communication Data: Messages sent via WhatsApp, email, or contact forms
• Order Information: Product preferences, custom design requests, purchase history
• Identity Verification: PAN card details (only where required for high-value purchases as per RBI/Income Tax regulations)
• Payment Data: UPI ID, bank account details (processed through secure payment gateways — we do not store card numbers)

2.2 Information Collected Automatically

• Device Data: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent on pages, referral sources
• Location Data: Approximate location based on IP address
• Cookies: See our Cookie Policy for details

3. Purpose of Data Collection

We collect and use your personal data for the following purposes:

• To process and fulfil your orders, including custom jewellery designs
• To communicate with you regarding enquiries, orders, and after-sales service
• To comply with legal obligations (e.g., GST invoicing, Income Tax Act requirements for transactions above ₹2,00,000)
• To send promotional communications (only with your explicit consent)
• To improve our website, products, and customer experience
• To prevent fraud and ensure security

4. Legal Basis for Processing (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent: Where you have given explicit consent for a specific purpose
• Legitimate Uses: Where processing is necessary for the performance of a contract (e.g., fulfilling your purchase order)
• Legal Obligation: Where processing is necessary to comply with Indian law (e.g., tax regulations, KYC norms)

5. Data Sharing & Disclosure

We do not sell or rent your personal data. We may share your information only in the following cases:

• Service Providers: Third-party payment gateways, delivery/logistics partners, website hosting providers
• Legal Requirements: When required by law, court order, or government authorities (Income Tax Department, GST authorities, etc.)
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit permission

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Purchase Records: 8 years (as per the Income Tax Act and GST regulations)
• Communication Records: 3 years from the last interaction
• Marketing Preferences: Until you withdraw consent
• Website Analytics: 26 months

7. Your Rights (Under DPDP Act, 2023)

As a Data Principal, you have the following rights:

• Right to Access: Request a summary of your personal data being processed
• Right to Correction & Erasure: Request correction of inaccurate data or deletion of data no longer needed
• Right to Withdraw Consent: Withdraw consent at any time for data processing based on consent
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all website communications
• Secure payment processing through PCI-DSS compliant gateways
• Access controls limiting data access to authorised personnel only
• Regular security assessments and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Google Maps, social media platforms). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, the details of our Grievance Officer are:

We shall address your grievance within 30 days of receiving it.

13. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts of Panhala, District Kolhapur, Maharashtra.