Privacy Policy.

1. Age Restriction & Children's Privacy

Under the DPDP Act 2023, anyone under the age of 18 is classified as a child, and the law strictly prohibits the tracking, behavioral monitoring, or targeted advertising of children.

18+ Only: The Site is strictly intended for adults. You must be at least 18 years old to create an account, use our services, or make a purchase.

We do not knowingly collect or process personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will immediately erase it from our records.

2. Information We Collect

We collect personal data that you voluntarily provide to us when you use our Site, create an account, check out as a guest, or make a purchase.

Identity and Contact Data: Name, billing address, shipping address, email address, and telephone number.

Financial Data: We do not store your full credit card or bank details. All domestic and international payments are securely processed through our RBI-licensed payment gateway partner, Razorpay.

Transaction Data: Details about payments to and from you, and other details of jewelry or services you have purchased from us.

Regulatory/KYC Data: For high-value transactions, we may be legally required under the Prevention of Money Laundering Act (PMLA) to collect identity verification documents, such as your PAN card.

Technical & Tracking Data: Internet protocol (IP) address, browser type, time zone setting, and data collected via third-party tracking pixels (detailed in Section 8).

3. How We Use Your Data

We process your personal data based on your explicit consent, and for the following lawful purposes:

Fulfillment: To process and deliver your order via Guest Checkout or your registered account, including sharing necessary details with our logistics partner (Shiprocket).

Payments: To manage transactions via Razorpay.

Operations: To communicate with you regarding your order, including cancellations, tracking, or our 7-day exchange process.

Compliance: To comply with legal, regulatory, and hallmarking record-keeping obligations.

4. Marketing Communications (SMS, WhatsApp, Email)

We utilize SMS, WhatsApp broadcasts, and email to send promotional offers, collection launches, and marketing materials.

Opt-In Required: We will only send you these marketing communications if you have provided clear, affirmative consent to receive them (e.g., ticking an opt-in box).

Right to Opt-Out: Under the DPDP Act, withdrawing your consent must be as easy as giving it. You can opt out of our marketing communications at any time by clicking the "unsubscribe" link in our emails, replying "STOP" to SMS/WhatsApp messages, or updating your account preferences. Opting out of marketing will not affect transactional messages regarding your orders.

5. Third-Party Tracking & Cookies

To provide a customized shopping experience and improve our marketing efforts, our Site uses cookies and third-party advertising trackers (such as Google Analytics and the Meta/Facebook Pixel).

These tools track your browsing behavior on our Site to help us understand user demographics and serve you targeted retargeting advertisements on other platforms.

You will be asked to consent to the use of non-essential tracking cookies via a cookie banner when you first visit our Site. You can modify your browser settings to decline these cookies or manage your preferences through our cookie management tool.

6. Sharing & Cross-Border Data Transfers

We do not sell your personal data. We share your data strictly with trusted third parties to run our business:

Logistics & Payments: Shiprocket and Razorpay.

Marketing & Analytics: Meta and Google (based on your cookie consent).

Legal Authorities: If required by law or government regulations.

As Zarevi supports international shipping and payments, your personal data may be processed or transferred outside India. Any such transfer is conducted in compliance with the provisions of the DPDP Act 2023.

7. Data Retention (Guest vs. Registered Accounts)

We retain your personal data only for as long as necessary:

Registered Accounts: Data is kept as long as your account is active. If you request account deletion, your profile data is erased, retaining only standard transaction data required by law.

Guest Checkout: Data is collected solely for order fulfillment and is retained only as long as required to comply with Indian tax, corporate, and PMLA legal obligations (typically 8 years).

8. Your Rights Under the DPDP Act 2023

As a Data Principal under Indian law, you have the following rights:

Right to Access: Request a summary of the personal data we hold about you.

Right to Correction & Erasure: Request that we correct inaccurate data or delete your personal data (subject to overriding legal retention obligations).

Right to Grievance Redressal: Register a grievance regarding our data practices.

Right to Nominate: Nominate another individual to exercise your privacy rights in the event of your death or incapacity.

Right to Withdraw Consent: Withdraw your consent for data processing at any time.

9. Data Security

We implement robust technical and organizational measures to protect your personal data from unauthorized access, loss, or alteration. All checkout processes and payment data are encrypted using standard security protocols.

10. Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of this policy shall be subject to the exclusive jurisdiction of the courts located in Jodhpur, Rajasthan.

11. Contact Us & Grievance Officer

In compliance with the DPDP Act 2023, we have appointed a Grievance Officer to address your privacy concerns. If you have any questions about this policy or wish to exercise your rights, please contact the details provided on our webpage.

12. Business Transfers and Corporate Changes

In the event that Zarevi is acquired by, merged with, or consolidated into another company, or in the case of a company reorganization or sale of assets, we reserve the right to transfer your Personal Data to the acquiring entity. We will notify you via email or a prominent notice on our Site before your data is transferred and becomes subject to a different privacy policy, ensuring your rights under the DPDP Act remain protected.

13. Publicly Shared Information (Product Reviews)

Any information you voluntarily choose to share publicly on our Site, such as product reviews, testimonials, or comments, becomes publicly accessible. By posting such content, you consent to its public availability. Zarevi is not responsible for how third parties or other users may collect or use this publicly visible information.

14. Third-Party Links and External Resources

Our Site may contain links to external third-party websites, applications, or social media platforms (e.g., Instagram, Facebook). These links are provided for your convenience. Zarevi does not control, endorse, or assume responsibility for the privacy practices, data collection, or content of these external sites. We strongly encourage you to review the individual privacy policies of any third-party websites before sharing your personal information with them.

15. Enhanced Security Measures & Breach Notification

While Section 9 outlines our general security commitment, we specifically employ the following safeguards:

SSL Encryption: All data transmitted between your browser and our Site is protected using Secure Sockets Layer (SSL) encryption.

Access Restriction: Access to your personal data is strictly limited to authorized Zarevi personnel, contractors, and partners who require it to fulfill their job duties.

Breach Notification: In the highly unlikely event of a personal data breach, we have a strict incident response protocol. As mandated by the DPDP Act 2023, we will promptly notify you and the Data Protection Board of India of any breach that compromises your personal data.

16. Limitation of Liability Regarding Data Transmission

Zarevi implements reasonable and legally mandated security safeguards to protect your data. However, no method of data transmission over the Internet or wireless networks is 100% secure. By using our Site, you acknowledge that there are inherent security and privacy risks associated with internet transmissions that are beyond our control. To the fullest extent permitted by applicable law, Zarevi shall not be held liable for any loss, damage, or unauthorized access to your data arising from events outside of our reasonable control.

17. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, technology, or legal requirements (such as amendments to the DPDP Act). Any updates will be posted directly on this page with an updated "Effective Date." For significant material changes regarding how we process your personal data, we will notify you directly via email or a prominent alert on our Site.