Privacy Policy - Manvaya Jewels

Effective Date: 29 July 2026
Last Updated: 29 July 2026

This Privacy Policy explains how Manvaya Jewels collects, uses, stores, shares and protects personal information when customers visit the website, create an account, place an order, communicate with the business or interact through its official sales and marketing channels.

This draft is intended to align with the privacy framework presently applicable under the Information Technology Act, 2000 and the Sensitive Personal Data or Information Rules, 2011, while preparing for the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force. Most substantive provisions of the DPDP Act are scheduled to commence 18 months after 13 November 2025.

By using the website or providing personal information to Manvaya Jewels, you acknowledge that you have read this Privacy Policy.

1. About Manvaya Jewels

Business name: Manvaya Jewels
Legal structure: Sole proprietorship
Proprietor: Vishal Saklani

Business address:
Shop No. 36, Indirapuram
Ghaziabad, Uttar Pradesh – 210001
India

Website: https://manvayajewels.com/
Customer-support email: care@manvayajewels.com
Phone/WhatsApp: +91 98765 43211
Business hours: Monday to Saturday, 11:00 AM to 8:00 PM IST

For the purposes of this Privacy Policy, references to “Manvaya Jewels,” “we,” “us,” or “our” mean the sole proprietorship operated by Vishal Saklani.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through:

The Manvaya Jewels website
Website accounts and checkout pages
Official email and customer-support channels
Official WhatsApp and Instagram accounts
Direct telephone orders
Product reviews and testimonials
Exhibitions and pop-up events
Marketing campaigns and advertisements
Surveys, contests and promotional activities
Other direct sales channels operated by Manvaya Jewels

Third-party marketplaces may process personal information under their own privacy policies. Manvaya Jewels may receive limited order and customer information from those marketplaces to fulfil orders and provide support.

3. Meaning of personal information

In this Policy, personal information means information relating to an identified or reasonably identifiable individual.

This may include information that identifies you directly, as well as information that may identify you when combined with other information.

The DPDP Act defines personal data as data about an individual who is identifiable by or in relation to that data.

4. Information we may collect

Depending on how you interact with Manvaya Jewels, we may collect the following categories of information.

4.1 Identity information

Full name
Username or account name
Recipient name
Age confirmation
Date of birth, where voluntarily provided
Gender or style preference, where voluntarily provided

4.2 Contact information

Email address
Mobile number
WhatsApp number
Billing address
Delivery address
City, state and postcode
Landmark and delivery instructions

4.3 Order and transaction information

Products viewed or purchased
Order number
Product quantity and value
Discounts and promotional codes
Payment status
Refund or exchange history
Shipping and tracking information
Cash on Delivery verification
Invoice and tax information
Wishlist and cart contents

4.4 Payment-related information

We may receive limited payment information such as:

Payment method
Transaction reference
Payment status
Amount paid
Refund status
Masked card details
UPI payment reference

Payments may be processed by authorised banks, payment gateways or payment-service providers.

Manvaya Jewels does not intend to directly store complete card numbers, card PINs, CVVs, UPI PINs, internet-banking passwords or OTPs.

4.5 Account information

If customer accounts are enabled, we may collect:

Account login identifier
Encrypted password or authentication record
Saved addresses
Wishlist
Order history
Communication preferences
Account activity

Customers are responsible for keeping their login information confidential.

4.6 Customer-support information

When you contact us, we may retain:

Email correspondence
WhatsApp messages
Call notes
Complaint details
Return or cancellation requests
Photographs and videos
Unboxing videos
Product-condition evidence
Refund and grievance records

Telephone calls may be recorded only where appropriate notice is provided.

4.7 Reviews and user-generated content

We may collect content voluntarily submitted by customers, including:

Product reviews
Ratings
Testimonials
Photographs
Videos
Social-media posts
Styling images
Survey responses

We will seek appropriate permission before using identifiable customer photographs or videos in advertising beyond the context in which they were submitted.

4.8 Technical and device information

When you use the website, certain information may be collected automatically, including:

Internet Protocol address
Browser type
Device type
Operating system
Referring website
Pages viewed
Time spent on pages
Click and navigation activity
Approximate location derived from an IP address
Session and cookie identifiers
Website error and performance information

4.9 Marketing information

Where you subscribe or otherwise lawfully agree to receive communications, we may record:

Email, SMS or WhatsApp subscription status
Campaign engagement
Links opened or clicked
Product interests
Marketing preferences
Unsubscribe or opt-out history

4.10 Offline and exhibition information

At exhibitions or pop-up events, we may collect:

Name
Contact number
Email address
Delivery information
Payment confirmation
Invoice information
Product preference
Consent to receive future promotional communications

We will not treat participation in a sale as automatic consent to unrelated marketing where separate consent is required.

5. How we collect personal information

We may collect information:

Directly from you

For example, when you:

Create an account
Place an order
Enter delivery details
Contact customer support
Submit a review
Join a mailing list
Participate in a promotion
Request a return, refund or exchange
Attend an exhibition
Communicate through WhatsApp or Instagram

Automatically

Information may be collected through:

Cookies
Website logs
Analytics tools
Advertising pixels
Session technologies
Security and fraud-detection systems

From third parties

We may receive information from:

Payment gateways
Banks and payment providers
Courier and logistics partners
E-commerce platforms
Marketplaces
Advertising and analytics providers
Customer-support tools
Social-media platforms
Fraud-prevention providers

6. Why we use personal information

We may use personal information for the following purposes.

6.1 Processing and fulfilling orders

This includes:

Confirming an order
Verifying payment
Packaging and dispatch
Arranging delivery
Sharing tracking updates
Issuing invoices
Processing cancellations, returns and refunds

6.2 Providing customer support

We may use information to:

Respond to enquiries
Resolve complaints
Investigate product concerns
Verify order details
Arrange exchanges
Process grievances
Communicate resolution updates

6.3 Managing customer accounts

We may use information to:

Create and maintain an account
Authenticate login attempts
Save addresses
Display previous orders
Manage wishlists
Process account-deletion requests

6.4 Personalising the shopping experience

Where appropriate, we may use information to:

Remember product preferences
Recommend relevant collections
Display recently viewed products
Maintain shopping-cart contents
Improve website navigation

6.5 Marketing

Subject to applicable consent and opt-out requirements, we may use information to send:

New-arrival announcements
Collection launches
Offers and promotional codes
Abandoned-cart reminders
Back-in-stock notifications
Festival campaigns
Styling content
Customer surveys

6.6 Website analytics and improvement

We may analyse website use to:

Understand customer behaviour
Improve page design
Identify technical errors
Measure campaign performance
Improve product discovery
Reduce checkout abandonment
Protect website functionality

6.7 Fraud prevention and security

We may process information to:

Verify suspicious transactions
Prevent payment fraud
Detect account misuse
Investigate false delivery or refund claims
Prevent promotion abuse
Protect customers and the business
Maintain website and payment security

6.8 Legal and regulatory compliance

Information may be used to:

Maintain accounting and tax records
Respond to lawful government requests
Comply with consumer-protection obligations
Resolve legal disputes
Enforce agreements
Protect legal rights
Report suspected unlawful activity

7. Grounds for processing

Depending on the circumstances and the law applicable at the relevant time, we may process personal information:

With your consent
To fulfil an order or take steps requested by you
To provide customer support
For permitted legitimate uses
To comply with a legal obligation
To prevent fraud or protect network security
To establish, exercise or defend legal claims
To respond to an emergency involving safety
For another lawful purpose disclosed to you

Where consent is the basis for processing, consent should be free, specific, informed, unconditional and capable of being withdrawn.

Withdrawal of consent will not ordinarily affect processing already lawfully completed before the withdrawal.

8. Information required to complete an order

Certain information is necessary to process an order, including:

Customer or recipient name
Contact number
Delivery address
Product selection
Payment or COD confirmation

If required information is not supplied, we may be unable to accept, fulfil or deliver the order.

We will not require personal information that is unrelated or unnecessary for the stated purpose merely as a condition of making a purchase.

9. Consent and withdrawal

Where we rely on consent, you may withdraw it through:

The unsubscribe link in an email
The opt-out method provided in an SMS
A WhatsApp message requesting that marketing stop
Your account-preference settings, where available
Emailing care@manvayajewels.com

Withdrawal may prevent us from providing optional services such as promotional messages or personalised recommendations.

Withdrawal will not prevent us from retaining or using information where retention is required for:

Order fulfilment
Tax or accounting obligations
Fraud prevention
Complaint handling
Legal claims
Another lawful requirement

10. Payment processing

Payments may be processed through third-party payment gateways and banking partners.

Payment providers may independently collect and process information according to their own terms and privacy policies.

Manvaya Jewels may receive:

Payment confirmation
Transaction reference
Amount
Payment method
Masked payment information
Refund status

Customers must never send us:

Card PIN
CVV
UPI PIN
Internet-banking password
OTP
Full card credentials

Manvaya Jewels will not request these details to issue a refund or resolve a customer complaint.

11. Cookies and similar technologies

Cookies are small files or identifiers that may be placed on a device when a customer visits the website.

We may use the following categories.

Essential cookies

These support:

Website security
Checkout
Shopping-cart functionality
Account login
Fraud prevention
Language or session preferences

Disabling essential cookies may prevent parts of the website from functioning.

Preference cookies

These may remember:

Saved preferences
Recently viewed products
Display choices
Wishlist or cart activity

Analytics cookies

These may help us understand:

Number of website visitors
Popular pages
Customer navigation
Website performance
Errors and abandoned checkouts

Advertising cookies

Where enabled and consented to as required, these may be used to:

Measure advertising effectiveness
Limit repeated advertisements
Create relevant advertising audiences
Understand whether an advertisement led to a purchase

Customers may manage non-essential cookies through the cookie banner, browser settings or preference centre where available.

12. Analytics and advertising tools

For this demo draft, the website may be configured to use services such as:

Google Analytics
Google Ads
Meta Pixel
Instagram and Facebook advertising tools
E-commerce platform analytics
Website-performance or session-analysis tools

These providers may collect technical identifiers, device information and activity data according to their own privacy practices.

Before publishing this Policy, the actual website should be audited and only the services genuinely installed should be listed.

13. Email, SMS and WhatsApp marketing

We may send promotional messages where:

You have subscribed;
You have expressly requested an update;
The communication is otherwise permitted by law; or
You are an existing customer and the communication relates to similar products, subject to applicable requirements.

Promotional communications should clearly identify Manvaya Jewels and provide a practical method to opt out.

Transactional communications may continue after marketing opt-out where necessary to provide:

Order confirmation
Payment information
Dispatch updates
Delivery information
Return or refund updates
Safety or account notices

14. Abandoned-cart communications

Where legally permitted and supported by your communication preferences, we may contact you regarding products left in your shopping cart.

Abandoned-cart reminders may use:

Email
SMS
WhatsApp
Website notifications
Advertising retargeting

You may opt out of promotional reminders at any time.

15. When we share personal information

We may share information only where reasonably necessary with the following categories of recipients.

E-commerce and hosting providers

To host the website, manage orders and maintain website functions.

Payment providers

To collect payments, confirm transactions and process refunds.

Courier and logistics partners

To dispatch, track and deliver orders.

Information shared may include:

Recipient name
Delivery address
Mobile number
Order value
COD amount
Delivery instructions

Communication providers

To deliver email, SMS, WhatsApp or support communications.

Analytics and advertising providers

To measure performance, understand website use and deliver permitted advertising.

Professional advisers

Information may be disclosed to:

Accountants
Auditors
Lawyers
Tax advisers
Insurance providers

where reasonably necessary.

Government and regulatory authorities

We may disclose information where required by:

Law
Court order
Government direction
Regulatory request
Law-enforcement investigation
Tax or consumer authority

Business successors

Information may be transferred as part of:

Business restructuring
Sale of business assets
Merger
Acquisition
Change in ownership

Any successor should process the information in accordance with applicable law and the purposes for which it was collected.

16. Data processors and service providers

Some third parties process personal information on our behalf.

We aim to engage providers that offer appropriate privacy and security protections and use the information only for authorised purposes.

However, certain providers, such as payment gateways, marketplaces or social-media platforms, may also act independently regarding information collected directly through their systems.

Customers should review the applicable third party’s privacy terms when using those services.

17. Sale of personal information

Manvaya Jewels does not intend to sell or rent customers’ personal information to advertisers or unrelated data brokers.

Information may nevertheless be shared with advertising and analytics providers for permitted marketing measurement or audience-related activities, subject to applicable notice and consent requirements.

Such service-provider sharing is not intended to constitute a sale of customer databases.

18. Processing outside India

Some website, cloud, analytics, communication or advertising providers may process information using infrastructure located outside India.

Where personal information is transferred or processed outside India, we will seek to do so in accordance with applicable legal restrictions and contractual safeguards.

The DPDP Act permits the Central Government to restrict transfers to notified countries or territories and preserves stricter requirements under other applicable laws.

19. How long we retain information

We retain personal information only for as long as reasonably necessary for the stated purpose, legal compliance, dispute resolution, fraud prevention and enforcement of agreements.

The following provisional schedule is used for this demo website:

Information category	Provisional retention period
Order, invoice and transaction records	Up to 8 years
Customer account	While active and up to 3 years after closure
Customer-support records	Up to 3 years after resolution
Grievance records	Up to 5 years after closure
Return and refund evidence	Up to 3 years
Marketing information	Until opt-out or withdrawal
Marketing suppression record	As needed to honour the opt-out
Abandoned-cart data	Up to 90 days
Website and security logs	Approximately 180 days to 2 years
Reviews and published content	While published and for a reasonable period thereafter
Fraud-prevention records	For as long as reasonably necessary

Information may be retained for a longer period where necessary for:

Legal proceedings
Tax requirements
Government directions
Unresolved disputes
Fraud investigations
Enforcement of rights

The DPDP Act provides that personal information should be erased when consent is withdrawn or the specified purpose is no longer being served, unless retention is necessary for legal compliance.

20. Security measures

We use reasonable administrative, organisational and technical safeguards appropriate to the nature of the information processed.

These may include:

Access controls
Password protection
Encryption in transit
Secure checkout providers
Restricted administrative access
Software updates
Security monitoring
Data backups
Employee or contractor confidentiality
Fraud-detection measures
Limited access based on operational need

No internet transmission or storage system can be guaranteed to be completely secure. Customers should use strong passwords, avoid sharing OTPs and report suspicious account activity promptly.

The DPDP framework requires a data fiduciary to take reasonable safeguards to prevent a personal-data breach.

21. Personal-data breaches

A personal-data breach may involve unauthorised access, disclosure, alteration, loss or destruction of personal information.

If a breach occurs, Manvaya Jewels may:

Investigate the incident
Contain the exposure
Change credentials or access controls
Coordinate with affected service providers
Preserve relevant evidence
Notify affected individuals
Notify the appropriate authority
Recommend protective action

Notifications will be made where and in the manner required by applicable law.

The DPDP Act provides for notification to affected individuals and the Data Protection Board in the event of a qualifying personal-data breach, in the prescribed manner.

22. Your privacy rights

Subject to the law in force and applicable limitations, you may request to:

Obtain information about personal data being processed
Obtain a summary of processing activities
Correct inaccurate or misleading information
Complete incomplete information
Update personal information
Request erasure
Withdraw consent
Opt out of marketing
Raise a privacy grievance
Request account closure
Nominate another person to exercise rights in circumstances recognised by law

The DPDP Act provides rights relating to access, correction, completion, updating, erasure, grievance redressal and nomination.

These rights may be provided voluntarily by Manvaya Jewels before every corresponding statutory provision becomes fully operational.

23. Limitations on privacy requests

A request may be limited or refused where:

The information must be retained by law
Retention is required for an unresolved transaction
The information is necessary for a legal claim
Disclosure would affect another person’s rights
The request cannot be reasonably verified
The request is fraudulent or abusive
An applicable exemption permits continued processing
Erasure would prevent completion of an active order or refund

Where appropriate, we will explain why a request cannot be completed in full.

24. How to exercise your rights

Send a request to:

Email: care@manvayajewels.com

Recommended subject line:

Privacy Request – [Access/Correction/Deletion/Consent Withdrawal]

Please provide:

Full name
Registered phone number
Registered email address
Relevant order number, where applicable
Nature of the request
Information needed to locate the relevant record

Do not send confidential passwords, PINs, CVVs or OTPs.

25. Verification of requests

Before giving access to, correcting or deleting information, Manvaya Jewels may take reasonable steps to verify the requester’s identity.

Verification may involve:

Confirmation through the registered email address
Confirmation through the registered mobile number
Order-related information
A transaction reference
Another proportionate verification method

We will not request more information than reasonably necessary to verify the request.

A representative may submit a request on behalf of a customer where appropriate authorisation is supplied.

26. Account deletion

Where customer accounts are enabled, a customer may request account closure by contacting customer support.

Closing an account may remove access to:

Saved addresses
Wishlists
Account order history
Account preferences
Saved shopping information

Certain records may remain in restricted archives where required for:

Tax and accounting
Order history
Refunds
Fraud prevention
Consumer complaints
Legal claims

Account deletion does not automatically cancel an active order or pending payment obligation.

27. Accuracy of personal information

Customers should provide accurate and current information.

You may contact us to update:

Name
Phone number
Email address
Delivery address
Account information
Marketing preferences

Address corrections requested after dispatch may not be technically possible.

Manvaya Jewels may retain a record of certain corrections where necessary for security, fraud prevention or legal compliance.

28. Children’s information

The website and products are intended primarily for adult customers.

A person below the age legally capable of entering a binding purchase contract should use the website only under the supervision of a parent or lawful guardian.

We do not knowingly:

Create customer accounts for children without appropriate authorisation
Direct targeted advertising towards children
Conduct behavioural monitoring specifically directed at children
Collect children’s information unnecessarily

Where legally applicable, processing a child’s information may require verifiable consent from a parent or lawful guardian. The DPDP Act also restricts processing that is likely to harm a child and prohibits targeted advertising and behavioural monitoring directed at children, subject to prescribed exceptions.

If you believe a child has provided personal information without appropriate authorisation, contact us so that the matter can be reviewed.

29. Reviews, photographs and social-media content

When you publish a review or submit content for publication, certain information may become visible to other users.

Public information may include:

Display name
Review
Rating
Photograph
Video
Social-media username

Do not include sensitive information, personal addresses, payment details or another person’s information in a public review.

Manvaya Jewels may contact you separately before using identifiable content in paid advertisements, packaging or promotional campaigns beyond the original submission context.

30. Third-party links

The website may contain links to:

Social-media websites
Payment gateways
Courier tracking pages
Marketplaces
Other third-party websites

Manvaya Jewels does not control the privacy practices of independent third parties.

Visiting an external website is subject to that provider’s privacy policy and terms.

Customers should review those policies before submitting personal information.

31. Marketplace orders

When an order is placed through a third-party marketplace:

The marketplace independently collects customer information.
The marketplace may share information required for fulfilment.
Manvaya Jewels may receive recipient, address, contact and order details.
Refunds and customer-support communications may occur through marketplace systems.
The marketplace’s privacy policy also applies.

Manvaya Jewels should not use marketplace customer information for unrelated direct marketing unless permitted by law and the relevant marketplace conditions.

32. Fraud prevention and order verification

To protect customers and the business, we may review:

Unusual transaction patterns
Repeated COD refusals
Multiple accounts
Delivery disputes
Duplicate refund claims
Payment reversals
Suspicious IP or device activity
Misuse of promotional codes

This information may be used to:

Verify an order
Restrict COD
Request prepaid payment
Prevent duplicate refunds
Protect accounts
Investigate fraud
Preserve evidence

A customer will not be denied a genuine consumer remedy merely because fraud-prevention checks are conducted.

33. Automated tools

The website may use automated tools for:

Fraud indicators
Product recommendations
Advertising audiences
Website personalisation
Spam filtering
Security monitoring

For this demo website, Manvaya Jewels does not intend to make solely automated decisions that produce a significant legal effect on a customer without meaningful review.

Where an automated fraud check affects an order, a customer may contact support for manual assistance.

34. Privacy grievances

A privacy grievance may relate to:

Unauthorised marketing
Incorrect information
Difficulty unsubscribing
Suspected disclosure
Account security
Failure to complete a privacy request
Use of photographs without permission
Improper sharing
Deletion or correction requests

Privacy grievances should be sent to:

Privacy and Grievance Contact: Vishal Saklani
Designation: Proprietor and Grievance Officer
Email: care@manvayajewels.com
Phone/WhatsApp: +91 98765 43211

Postal address:
Shop No. 36, Indirapuram
Ghaziabad, Uttar Pradesh – 210001
India

Recommended subject line:

Privacy Grievance – [Brief Description]

We aim to acknowledge a privacy grievance within 48 hours and seek to resolve it within one month, subject to the nature and complexity of the matter.

The DPDP Act recognises a right to readily available grievance redressal and requires the individual to use the data fiduciary’s grievance mechanism before approaching the Data Protection Board, once the relevant provisions apply.

35. Legal disclosures

We may preserve or disclose information where reasonably necessary to:

Comply with applicable law
Respond to a lawful court order
Cooperate with regulatory authorities
Address consumer complaints
Prevent or investigate fraud
Protect safety
Enforce our agreements
Establish or defend legal claims
Protect Manvaya Jewels, customers or the public

We will not voluntarily disclose more information than reasonably necessary for the relevant lawful purpose.

36. Changes to this Privacy Policy

Manvaya Jewels may update this Privacy Policy to reflect changes in:

Website features
Technology providers
Payment methods
Marketing practices
Sales channels
Legal requirements
Business operations

The updated Policy will display a revised “Last Updated” date.

Where a material change affects the manner in which existing personal information is used, we may provide additional notice through:

Email
Website notice
Account notification
Another appropriate communication method

37. Contact us

For privacy questions, consent withdrawal or personal-information requests:

Manvaya Jewels
A sole proprietorship owned by Vishal Saklani

Shop No. 36, Indirapuram
Ghaziabad, Uttar Pradesh – 210001
India

Website: https://manvayajewels.com/
Email: care@manvayajewels.com
Phone/WhatsApp: +91 98765 43211
Business hours: Monday to Saturday, 11:00 AM to 8:00 PM IST