Privacy Policy

Bombay Jewellery and Cosmetics respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, share, retain and protect personal information when you:

  • Visit https://bombayjewelleryhp.in;
  • Create or use a customer account;
  • Purchase through guest checkout;
  • Place or receive an order;
  • Make a payment;
  • Contact customer care;
  • Submit a cancellation, return, guarantee or exchange request;
  • Submit a review, photograph or video;
  • Raise a grievance; or
  • Interact with our advertisements and marketing communications.

1. Business and Privacy Contact

The website is operated by:

Legal business name: Bombay Jewellery and Cosmetics
Brand name: Bombay Jewellery
Proprietor: Mr. Vikas Gupta
Legal structure: Proprietorship
GSTIN: 02DJAPG5753C1ZT
Registered address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002
Website: https://bombayjewelleryhp.in
Privacy email: vikasgupta@bombayjewelleryhp.in
Phone/WhatsApp: +91 78278 00726

For applicable data-protection purposes, Bombay Jewellery and Cosmetics determines why and how personal information collected through the website is processed.

2. Scope of This Policy

This Policy applies to personal information collected through:

  • Our website;
  • Customer accounts;
  • Guest checkout;
  • Email;
  • Telephone;
  • WhatsApp;
  • Customer-support communications;
  • Order and delivery processes;
  • Return, guarantee and exchange requests;
  • Reviews and customer submissions; and
  • Our online advertising activities.

Independent websites and services linked from our website operate under their own privacy policies.

3. Information We May Collect

A. Identity and contact information

We may collect:

  • Full name;
  • Email address;
  • Phone or WhatsApp number;
  • Billing address;
  • Shipping address;
  • City;
  • State;
  • PIN code;
  • Country; and
  • Recipient information for gift deliveries.

B. Account information

If you create an account, we may collect or maintain:

  • Username;
  • Protected account credentials;
  • Saved addresses;
  • Account preferences;
  • Wishlist;
  • Shopping-cart information;
  • Order history;
  • Account activity; and
  • Customer-service history.

Customers may also be able to purchase through guest checkout without creating an account.

C. Order information

We may collect:

  • Products ordered;
  • Quantity;
  • Size;
  • Colour or variation;
  • Customization instructions;
  • Order number;
  • Invoice details;
  • Payment status;
  • Delivery status;
  • Tracking information;
  • Cancellation records;
  • Return and refund records;
  • Guarantee claims; and
  • Lifetime 50% Exchange records.

D. Customized-product information

For customized or personalized jewellery, we may collect information voluntarily provided by the customer, including:

  • Name or initials;
  • Size;
  • Measurement;
  • Preferred design;
  • Colour;
  • Length;
  • Photographs or references;
  • Special instructions; and
  • Approval communications.

Customers should provide only the information reasonably necessary to fulfil the customization request.

E. Payment information

Payments may be processed by Razorpay, banks, UPI providers, card networks or another payment option displayed at checkout.

We may receive limited information such as:

  • Payment status;
  • Payment method;
  • Transaction reference;
  • Amount;
  • Masked payment details;
  • Refund status; and
  • Fraud or risk indicators.

We do not intend to directly collect or store complete card numbers, CVVs, UPI PINs, OTPs, ATM PINs or internet-banking passwords.

Customers must never send these credentials through email, telephone, WhatsApp or a support form.

F. Delivery information

We may collect or receive:

  • Recipient name;
  • Delivery address;
  • Phone number;
  • PIN code;
  • Courier tracking number;
  • Delivery status;
  • Delivery attempts;
  • Delivery proof;
  • Return-to-origin information; and
  • Communications relating to delivery.

G. Technical and usage information

When you visit the website, we or our technology providers may collect:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Website pages viewed;
  • Date and time of visits;
  • Referring website or advertisement;
  • Approximate location derived from technical information;
  • Cookie and advertising identifiers;
  • Shopping-cart activity;
  • Website interactions;
  • Error logs; and
  • Website performance information.

H. Communications and claim evidence

We may collect information contained in:

  • Emails;
  • Telephone or WhatsApp communications;
  • Customer-support requests;
  • Reviews and feedback;
  • Product photographs;
  • Parcel-opening videos;
  • Payment screenshots;
  • Invoices;
  • Guarantee claims;
  • Lifetime exchange claims; and
  • Formal grievances.

4. How We Collect Information

We may collect personal information:

  • Directly from you;
  • Through your account or guest checkout;
  • Through website forms;
  • Automatically through cookies or similar technologies;
  • From Razorpay or another payment provider;
  • From DTDC or another courier provider;
  • From Google Analytics;
  • Through Meta Pixel and Meta advertising services;
  • From fraud-prevention or website-security providers;
  • From social-media interactions; and
  • From another person who lawfully places an order for you.

5. Purposes for Which Information Is Used

We may process personal information to:

  • Create and manage customer accounts;
  • Process and confirm orders;
  • Verify COD orders;
  • Receive and verify payments;
  • Issue invoices;
  • Prepare customized products;
  • Arrange packing and delivery;
  • Send order and delivery updates;
  • Provide customer support;
  • Process cancellations;
  • Handle returns, replacements and refunds;
  • Administer the Seven-Day Product Guarantee;
  • Administer the Lifetime 50% Exchange Programme;
  • Prevent fraud and misuse;
  • Maintain website and account security;
  • Respond to complaints and grievances;
  • Comply with tax, accounting and legal obligations;
  • Establish, exercise or defend legal claims;
  • Improve our products and website;
  • Measure website performance;
  • Measure advertising effectiveness;
  • Personalize advertising where permitted; and
  • Send marketing communications where valid consent has been provided.

We will endeavour to collect only information reasonably necessary for the relevant purpose.

6. Lawful Processing and Consent

Depending on the context and applicable law, personal information may be processed:

  • With your free, specific, informed and affirmative consent;
  • To process an order or provide a service requested by you;
  • For a purpose for which you voluntarily provided the information;
  • To comply with a legal obligation;
  • To prevent fraud or secure transactions;
  • To respond to a grievance;
  • To enforce or defend legal rights; or
  • For another purpose permitted under applicable Indian law.

Where processing depends on consent, you may withdraw consent using the contact details in this Policy.

Withdrawal will not affect processing already lawfully completed before withdrawal. It may also not prevent processing necessary to complete an existing order or comply with law.

7. Transactional Communications

When you place an order or request a service, we may send necessary communications about:

  • Order confirmation;
  • Payment status;
  • COD verification;
  • Customization approval;
  • Dispatch;
  • Tracking;
  • Delivery attempts;
  • Cancellation;
  • Return or reverse pickup;
  • Replacement;
  • Refund;
  • Guarantee claim;
  • Lifetime exchange; and
  • Customer-service or grievance matters.

These communications are required to administer the transaction and may continue even if you opt out of promotional marketing.

8. Marketing Communications

Promotional WhatsApp messages, SMS and emails will be sent only where you have opted in or otherwise provided valid consent.

Marketing may include:

  • New product announcements;
  • Offers and discounts;
  • Festive collections;
  • Back-in-stock notifications;
  • Styling ideas; and
  • Other promotional updates.

You may withdraw marketing consent at any time by:

Withdrawing marketing consent will not stop essential transactional communications.

9. Cookies and Similar Technologies

Our WordPress website may use cookies, pixels, tags and similar technologies.

Essential cookies

These may be necessary for:

  • Website operation;
  • Security;
  • Account access;
  • Shopping-cart functions;
  • Checkout;
  • Payment processing; and
  • Remembering privacy choices.

Functional cookies

These may remember:

  • Preferences;
  • Saved selections;
  • Location;
  • Language; and
  • Website settings.

Analytics cookies

These may help us understand:

  • Website traffic;
  • Popular pages;
  • Navigation;
  • Performance;
  • Errors; and
  • General visitor behaviour.

Google Analytics may be used for these purposes.

Advertising cookies and pixels

Meta Pixel and related technologies may be used to:

  • Measure Facebook and Instagram advertising;
  • Understand advertisement interactions;
  • Measure completed actions;
  • Build campaign audiences; and
  • Support personalized advertising where permitted.

Where required, non-essential cookies and advertising technologies will be activated according to the consent choices presented to the visitor.

10. Managing Cookies

You may manage cookies through:

  • Our cookie-consent tool, where available;
  • Your browser settings;
  • Google advertising controls; and
  • Meta advertising preferences.

Blocking essential cookies may prevent the shopping cart, account, checkout or payment functions from operating correctly.

Withdrawal of cookie consent should be made as easy as providing it, where technically and legally applicable.

11. Google Analytics and Meta Pixel

Google Analytics may process technical, device, cookie and usage information to help us understand website performance.

Meta Pixel may process advertising and interaction information to help us measure Facebook and Instagram campaigns.

Google and Meta may process information under their own privacy terms and may act independently for certain processing purposes.

Customers should review the privacy and advertising controls offered by those providers.

12. Sharing of Personal Information

We may share necessary information with trusted providers, including:

  • Razorpay, banks, UPI providers and card networks;
  • DTDC and other courier providers;
  • WordPress, hosting and website-technology providers;
  • Google Analytics;
  • Meta Pixel and Meta advertising services;
  • Communication providers used for transactional or consent-based messages;
  • Security and fraud-prevention providers;
  • Accountants, auditors, lawyers and professional advisers;
  • Government, tax, regulatory or law-enforcement authorities where legally required; and
  • Courts, Consumer Commissions or dispute-resolution bodies where necessary.

Service providers should receive only information reasonably required to perform their function.

13. No Sale of Personal Information

Bombay Jewellery and Cosmetics does not sell personal information in exchange for money.

Advertising technologies may involve the sharing of limited technical or interaction data with providers such as Google or Meta. Such processing will be handled according to applicable consent requirements and the providers’ privacy terms.

14. Payment Security

Payments made through the website may be processed on systems operated by Razorpay, banks or other displayed payment providers.

We may receive transaction status and limited payment information but do not require complete payment credentials.

Customers must protect their:

  • OTP;
  • UPI PIN;
  • ATM or card PIN;
  • CVV;
  • Banking password; and
  • Account credentials.

Suspected unauthorized payment activity should be reported promptly to the relevant bank or payment provider and to our customer care.

15. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Complete transactions;
  • Fulfil orders;
  • Provide customer support;
  • Process cancellations and returns;
  • Administer guarantees and lifetime exchanges;
  • Maintain invoices and tax records;
  • Prevent fraud;
  • Resolve disputes;
  • Maintain security records; and
  • Comply with legal obligations.

Because the Lifetime 50% Exchange Programme requires verification of the original invoice and previous use of the benefit, relevant invoice and exchange records may need to be retained for an extended period.

Information that is no longer required will be deleted, anonymized or securely restricted, subject to legal retention duties, operational requirements and technical limitations.

16. Account Deletion

A customer may request closure or deletion of their website account.

Deleting an account may not require us to delete information that must be retained for:

  • Tax and accounting;
  • Existing orders;
  • Refunds;
  • Fraud prevention;
  • Guarantee or exchange records;
  • Dispute resolution; or
  • Compliance with law.

Where deletion is appropriate, we will take reasonable steps to delete or anonymize eligible information.

17. Data Security

We use reasonable administrative, technical and organizational safeguards intended to protect personal information against:

  • Unauthorized access;
  • Unlawful use;
  • Accidental loss;
  • Alteration;
  • Disclosure;
  • Destruction; and
  • Other reasonably foreseeable risks.

Safeguards may include:

  • Access controls;
  • Protected credentials;
  • Secure payment processing;
  • Website security measures;
  • Backups;
  • Monitoring;
  • Restricted access; and
  • Service-provider safeguards.

No website, internet transmission or electronic-storage system can be guaranteed completely secure.

18. Personal-Data Breach

If we become aware of a personal-data breach, we will take reasonable steps to:

  • Contain the incident;
  • Assess its nature and scope;
  • Limit potential harm;
  • Investigate the cause;
  • Implement corrective measures; and
  • Provide notifications required by applicable law.

Where legally required, affected individuals and the appropriate authority will be informed in the prescribed manner and within the applicable period.

19. Privacy Rights

Subject to applicable law and reasonable identity verification, you may request:

  • Information about personal data being processed;
  • Access to eligible personal information;
  • Correction of inaccurate or misleading information;
  • Completion of incomplete information;
  • Updating of outdated information;
  • Erasure of information no longer required;
  • Withdrawal of consent;
  • Withdrawal from marketing;
  • Account deletion; and
  • Redressal of a privacy grievance.

Requests may be submitted to:

Email: vikasgupta@bombayjewelleryhp.in
Phone/WhatsApp: +91 78278 00726

Certain information may be retained despite an erasure request where necessary for legal compliance, tax records, fraud prevention, unresolved transactions, guarantees, lifetime exchanges or legal claims.

20. Identity Verification

Before providing access to, correcting or deleting personal information, we may request reasonable information to verify the requester’s identity.

This protects customer information from unauthorized disclosure or modification.

Verification information will be limited to what is reasonably necessary for the request.

21. Customer Responsibilities

Customers must:

  • Provide accurate and current information;
  • Avoid submitting another person’s information without authority;
  • Protect their account credentials;
  • Avoid sharing payment authentication details;
  • Inform us when important information changes;
  • Avoid submitting unnecessary sensitive information; and
  • Report suspected unauthorized account activity.

If you provide information about another person, such as a gift recipient, you confirm that you are authorized to provide it for the relevant transaction.

22. Children and Minors

The website is not intended to invite children to independently enter commercial transactions.

A person under 18 may browse only under the supervision of a parent or legal guardian. An order intended for a minor must be placed and accepted by the parent or guardian.

We do not knowingly direct personalized advertising at children.

Where verifiable parental consent is required under applicable law, we will take reasonable steps to obtain it before processing a child’s personal data.

If you believe that a child has provided personal information without appropriate authorization, contact us so we can review and take appropriate action.

23. Customer Reviews, Photographs and Videos

If you voluntarily submit a review, photograph or video, we may process it to:

  • Assess a product or service issue;
  • Verify a return or guarantee claim;
  • Respond to feedback; or
  • Publish customer feedback with appropriate permission.

We will not use an identifiable customer photograph or video for advertising without obtaining appropriate permission.

Parcel-opening videos and claim evidence will ordinarily be used for verification, customer support, fraud prevention and dispute resolution.

24. External Links

The website may contain links to payment services, social-media platforms or other independent websites.

Those services operate under their own terms and privacy policies. We are not responsible for an independent provider’s privacy practices, except to the extent responsibility cannot lawfully be excluded.

Customers should review the relevant third party’s privacy notice before providing information.

25. Processing Outside India

Some hosting, analytics, advertising, payment or technology providers may process information using infrastructure located outside India.

Where personal information is processed outside India, such processing will remain subject to applicable Indian law and any transfer restrictions notified by the Government of India.

26. Business Transfer

If the business is reorganized, transferred, merged or sold, relevant personal information may be transferred as part of that transaction.

Any such transfer will be subject to applicable law, reasonable confidentiality protections and continued handling of information for legitimate purposes.

27. Privacy Grievances

For privacy questions, requests or complaints, contact:

Privacy contact: Mr. Vikas Gupta
Email: vikasgupta@bombayjewelleryhp.in
Phone/WhatsApp: +91 78278 00726
Address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002

For formal escalation:

Grievance Officer: Mrs. Minkal Gupta
Email: minkalg04@gmail.com
Phone: +91 90150 00814
Address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002

We aim to acknowledge a formal grievance within 48 hours and resolve it within one month, subject to its nature and complexity.

28. Changes to This Privacy Policy

We may update this Policy to reflect legal, regulatory, technical or operational changes.

The updated version will be published on the website with a revised date. Where required, we will provide additional notice or seek fresh consent for a materially different processing purpose.

29. Applicable Law

This Privacy Policy is governed by applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent their relevant provisions are in force and applicable.

Nothing in this Policy restricts a privacy or consumer right that cannot legally be excluded.

30. Contact Details

Bombay Jewellery and Cosmetics
Brand: Bombay Jewellery
Proprietor: Mr. Vikas Gupta
GSTIN: 02DJAPG5753C1ZT
Address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002
Website: https://bombayjewelleryhp.in
Email: vikasgupta@bombayjewelleryhp.in
Phone/WhatsApp: +91 78278 00726

Scroll to Top