Privacy Policy
Effective 3 September 2026. Issued by Gireeja Jewels (GSTIN 10BZVPS1962C1ZA), trading as Innocence, Bageshwari Bhawan, S.K. Puri, Boring Road, Patna – 800001, Bihar, India.
3.1 Information We Collect
Account details: Your name, email address and mobile number, collected depending on how You authenticate. Where You sign in using a one-time password, We store Your mobile number; where You sign in using Google, We store the account identifier provided by Google together with the associated name and email address. Where You set a password, it is stored only as an irreversible bcrypt hash and is never accessible to Us in plain text. Shopping activity: the contents of Your cart and wishlist, saved addresses, order history, appointment bookings, loyalty programme points, and records of any savings-scheme enrolment or old-gold exchange transaction associated with Your account. In-store purchases: where You transact at a physical counter, the resulting bill is linked to Your customer record. In accordance with Rule 114B of the Income-tax Rules, 1962, We are required to record Your Permanent Account Number (PAN) in respect of purchases of ■2,00,000 or more, and We retain this information solely for that statutory purpose. Support and marketing information: notes and tags added to Your record by Our staff in the course of customer service, Your marketing consent status, and personal occasions such as a birthday or anniversary date that You choose to share with Us.
3.2 Information We Do Not Collect
We do not collect or store card numbers, CVVs or UPI PINs; card and UPI payments are processed entirely by Our payment gateway partner, and We retain only that partner's transaction reference and its success/failure status. The Platform does not track Your location in the background, does not access Your contacts, and does not access Your photo library. Camera access is requested solely within the in-store point-of-sale application for the purpose of scanning a product barcode at the counter; no image captured for this purpose is stored or transmitted.
3.3 Purpose of Processing
We process Your personal information to: take and fulfil Your Orders; compute jewellery pricing against the prevailing gold rate; schedule and confirm appointments; administer loyalty and savings schemes You have joined; comply with applicable taxation, hallmarking and other regulatory obligations; respond to Your enquiries and support requests; and, where You have given consent, to communicate offers and promotional content to You.
3.4 Legal Basis and Consent
We process Your personal information on the basis of Your consent, given at the time You create an account, place an Order, or otherwise interact with the Platform, and, where applicable, to perform Our contractual obligations to You or to comply with a legal obligation to which We are subject. You may withdraw consent for marketing communications at any time as described in Section 3.6, without affecting the lawfulness of processing carried out before such withdrawal.
3.5 Disclosure to Third Parties
We do not sell Your personal information to any third party. We disclose personal information only to service providers engaged to operate the Platform and fulfil Your Order, on a strict need-to-know basis, namely: a payment gateway provider to process payment; an SMS/communications provider to send order updates and one-time login codes; a logistics/delivery partner to deliver Your Order; and, where You elect to authenticate using Google, Google LLC in connection with that sign-in method. Each recipient receives only the information necessary to perform its function. We may also disclose information where required to do so by Applicable Law, regulation, court order or governmental authority.
3.6 Your Rights
You may request a copy of the personal information We hold about You, request correction of inaccurate information, or request deletion of Your account as described in Section 7. You may withdraw marketing consent at any time; doing so will not affect transactional communications (such as order and appointment updates) that form part of the service You have requested. To exercise any of these rights, or to raise a complaint regarding the handling of Your personal information, please contact Us using the details in Section 8.
3.7 Children's Privacy
The Platform is intended for use by adults. We do not knowingly create accounts for, or knowingly collect personal information from, individuals under 18 years of age. If We become aware that We have inadvertently collected personal information from a minor, We will take reasonable steps to delete such information.
3.8 Data Security
We maintain reasonable technical and organisational security practices and procedures, consistent with Applicable Law, designed to protect personal information against unauthorised access, alteration, disclosure or destruction. No method of electronic storage or transmission is entirely secure, and while We strive to protect Your personal information, We cannot guarantee absolute security.
3.9 Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in Our practices or Applicable Law. Material changes will be notified to You within the Platform or by email to the address associated with Your account. Your continued use of the Platform following such notification constitutes acceptance of the revised policy.
