PRIVACY POLICY

Last updated: 12 September 2026

Bombay Jewellery and Cosmetics respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:

  • Visit https://bombayjewelleryhp.com;
  • Create or use a customer account;
  • Purchase through guest checkout;
  • Make a payment;
  • Contact customer care;
  • Request cancellation, return, refund, guarantee or exchange services;
  • Submit a review, photograph, video or grievance; or
  • Interact with our advertisements and promotional communications.

1. BUSINESS AND DATA FIDUCIARY

The website is operated by:

Legal business name: Bombay Jewellery and Cosmetics
Brand name: Bombay Jewellery
Proprietor: Mr. Vikas Gupta
Legal structure: Proprietorship
GSTIN: 02DJAPG5753C1ZT
Registered address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002
Website: https://bombayjewelleryhp.com
Privacy and customer-care email: care@bombayjewelleryhp.com
Phone/WhatsApp: +91 78278 00726

For applicable data-protection purposes, Bombay Jewellery and Cosmetics determines why and how personal information collected through the website is processed.

2. INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect the following information.

A. Identity and contact information

  • Full name;
  • Email address;
  • Phone or WhatsApp number;
  • Billing address;
  • Shipping address;
  • State, city, postal code and country; and
  • Recipient information where an order is sent as a gift.

B. Account information

  • Username;
  • Protected account credentials;
  • Saved addresses;
  • Account preferences;
  • Order history;
  • Wishlist or shopping-cart activity; and
  • Account access and activity records.

Customers may also be permitted to purchase through guest checkout without creating an account.

C. Order and transaction information

  • Products ordered;
  • Quantity, size and product variations;
  • Customization instructions;
  • Order number;
  • Invoice details;
  • Payment status;
  • Transaction reference;
  • Shipping and delivery information;
  • Cancellation, return, refund and exchange records; and
  • Customer-service communications.

D. Payment information

Payments may be processed through Razorpay, banks, UPI providers, card networks or other payment service providers displayed at checkout.

We may receive payment-related information such as:

  • Payment status;
  • Payment method;
  • Transaction identification number;
  • Limited or masked payment details;
  • Refund status; and
  • Fraud or risk indicators.

We do not intend to directly store complete card numbers, card PINs, CVVs, UPI PINs, banking passwords or OTPs.

Customers must never send such credentials to us through email, telephone, WhatsApp or another communication channel.

E. COD refund information

Where an approved Cash on Delivery refund cannot be returned to an original electronic payment method, we may collect:

  • Verified UPI ID;
  • Account-holder name;
  • Bank account number;
  • IFSC; and
  • Other information reasonably necessary to complete and verify the refund.

This information will be used only for authorized refund processing, record-keeping, fraud prevention and legal compliance.

F. Technical and usage information

When you use the website, we or our technology providers may collect:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Date and time of access;
  • Pages and products viewed;
  • Referring website or advertisement;
  • Approximate location derived from technical information;
  • Cookie or device identifiers;
  • Shopping-cart activity;
  • Website interactions;
  • Session and performance information; and
  • Security, diagnostic and error information.

G. Communications and submitted content

We may collect information contained in:

  • Emails;
  • Telephone or WhatsApp communications;
  • Customer-support requests;
  • Reviews and feedback;
  • Photographs and videos;
  • Parcel-opening videos;
  • Customization instructions;
  • Guarantee and exchange claims; and
  • Formal grievances.

Calls are not recorded unless you are appropriately informed and recording is otherwise lawful.

3. HOW WE COLLECT INFORMATION

We may collect personal information:

  • Directly from you when you browse, order or contact us;
  • Through your registered account or guest checkout;
  • When another person places an order for you as a recipient;
  • Automatically through cookies and similar technologies;
  • From Razorpay or another payment provider;
  • From DTDC or another courier or logistics provider;
  • From Google Analytics;
  • From Meta Pixel and related advertising services;
  • From fraud-prevention and website-security providers; and
  • From social-media platforms when you interact with our advertisements or pages.

Where another person provides your information for gift delivery, they are responsible for ensuring that they are authorized to provide it for that purpose.

4. PURPOSES OF PROCESSING

We may process personal information to:

  • Create and manage customer accounts;
  • Process and confirm orders;
  • Verify payments;
  • Prepare invoices;
  • Process COD orders;
  • Prepare customized or personalized products;
  • Arrange packing, shipping and delivery;
  • Send order and delivery updates;
  • Provide customer support;
  • Process cancellations, returns and refunds;
  • Administer the Seven-Day Guarantee;
  • Administer the Lifetime 50% Exchange Programme;
  • Resolve complaints and grievances;
  • Prevent fraud, abuse and unauthorized transactions;
  • Maintain website and account security;
  • Comply with tax, accounting and legal obligations;
  • Establish, exercise or defend legal claims;
  • Improve products, website performance and customer experience;
  • Measure website traffic;
  • Measure advertising performance;
  • Personalize advertising where permitted;
  • Publish approved reviews or customer media;
  • Send consent-based promotional communications; and
  • Maintain internal business and transaction records.

We will endeavour to collect only the information reasonably necessary for the relevant purpose.

5. LAWFUL BASIS AND CONSENT

Depending on the context and applicable law, we may process personal information:

  • With your free, specific, informed and affirmative consent;
  • To take steps requested by you before or during a purchase;
  • To process an order or provide a requested service;
  • Where you voluntarily provide information for a specified purpose;
  • To comply with a legal obligation;
  • To prevent fraud or protect transaction and website security;
  • To address emergencies or legal claims where permitted; or
  • For another lawful use recognized under applicable Indian law.

Where processing is based on consent, you may withdraw consent using the method described in this Policy.

Withdrawal will not affect processing lawfully completed before the withdrawal. It may also not prevent processing that is independently necessary for legal compliance, an existing order, a refund, fraud prevention or a legal claim.

6. ORDER AND TRANSACTIONAL COMMUNICATIONS

When you place an order or request a service, we may send necessary communications concerning:

  • Order confirmation;
  • Payment status;
  • COD verification;
  • Customization approval;
  • Dispatch and tracking;
  • Delivery attempts;
  • Cancellation;
  • Reverse pickup;
  • Return or replacement;
  • Refund;
  • Seven-Day Guarantee;
  • Lifetime 50% Exchange; and
  • Customer-service or grievance matters.

These communications are necessary to administer the requested transaction and may continue even if you withdraw consent to promotional messages.

7. MARKETING COMMUNICATIONS

We may send promotional WhatsApp messages, SMS or emails only after you opt in or otherwise provide legally valid consent.

Promotional communications may include:

  • New product announcements;
  • Offers and discounts;
  • Festive campaigns;
  • Back-in-stock notifications;
  • Jewellery-care content; and
  • Other marketing updates.

You may withdraw marketing consent at any time by:

  • Using an unsubscribe option where provided;
  • Replying with an opt-out request;
  • Contacting customer care; or
  • Emailing care@bombayjewelleryhp.com.

We will take reasonable steps to record and honour the request.

Withdrawing marketing consent will not stop necessary order, payment, delivery, refund or customer-service communications.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our WordPress website may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used to:

  • Keep the website functioning;
  • Maintain shopping carts and checkout sessions;
  • Remember customer preferences;
  • Secure accounts and transactions;
  • Detect technical errors;
  • Measure website performance;
  • Understand visitor behaviour;
  • Measure advertising effectiveness; and
  • Support personalized advertising where permitted.

Essential cookies

These are required for website operation, security, account access, shopping-cart functions and checkout.

Functional cookies

These remember preferences and support optional website functionality.

Analytics cookies

These help us understand website traffic, navigation, performance and visitor interactions, including through Google Analytics.

Advertising cookies and pixels

These may measure advertising campaigns, understand interactions with advertisements and support advertising through Meta Pixel and related services.

Where required, non-essential cookies will be used according to the choices available through our cookie banner or consent tool.

You may manage cookies using the website consent tool or browser settings. Disabling certain cookies may affect website functionality.

9. GOOGLE ANALYTICS

We may use Google Analytics to understand:

  • Number of website visitors;
  • Pages and products viewed;
  • Traffic sources;
  • Approximate location;
  • Device and browser information;
  • Website engagement; and
  • Technical performance.

Google may process cookie, device and usage information according to its own privacy terms.

Where legally required, Google Analytics will be activated only after the customer provides the applicable cookie consent.

10. META PIXEL

We may use Meta Pixel to:

  • Measure Facebook and Instagram advertising performance;
  • Understand actions taken after an advertisement is viewed or selected;
  • Build or measure advertising audiences; and
  • Improve the relevance of advertising where permitted.

Meta may process cookie, device and interaction information according to its own privacy terms and advertising settings.

Where legally required, Meta Pixel will be activated only after the visitor provides the applicable cookie or advertising consent.

11. SHARING OF PERSONAL INFORMATION

We may share information where reasonably necessary with:

  • Razorpay, banks, UPI providers and card networks;
  • DTDC and other courier or logistics providers;
  • WordPress, hosting and website-technology providers;
  • Google Analytics;
  • Meta and Meta Pixel services;
  • Email, SMS or WhatsApp communication providers;
  • Customer-support providers;
  • Website-security and fraud-prevention providers;
  • Product manufacturers, suppliers or service providers where required to fulfil an order;
  • Accountants, auditors, lawyers and professional advisers;
  • Government, tax, regulatory or law-enforcement authorities where legally required; and
  • Courts, Consumer Commissions or dispute-resolution bodies where necessary.

A courier may receive the customer’s or recipient’s name, delivery address, phone number, order reference and other information required to complete delivery.

Service providers should receive only the information reasonably required to perform their functions.

12. NO SALE OF PERSONAL INFORMATION

We do not sell personal information in exchange for money.

We do not authorize service providers to use customer information for unrelated independent purposes merely because they process it on our behalf.

Certain advertising platforms may independently process information under their own privacy terms. Customers should review the privacy and advertising controls offered by those providers.

13. PAYMENT SECURITY

Online payments may be redirected to or processed through Razorpay or another payment provider displayed at checkout.

Payment providers operate their own secure systems and privacy practices. We ordinarily receive confirmation of payment rather than complete confidential payment credentials.

Customers must protect their banking and authentication information and promptly report suspected unauthorized activity to their bank or payment provider.

We will never ask a customer to share an OTP, UPI PIN, ATM PIN, card PIN, CVV or online-banking password to receive a refund.

14. DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

  • Complete transactions;
  • Provide customer support;
  • Process returns and refunds;
  • Administer guarantees and exchanges;
  • Preserve invoices and accounting records;
  • Comply with GST, tax and other legal obligations;
  • Prevent and investigate fraud;
  • Resolve disputes; and
  • Establish, exercise or defend legal claims.

Because an eligible Lifetime 50% Exchange claim requires verification of the original purchase, relevant invoice and exchange records may need to be retained for an extended period.

Marketing information may be retained until consent is withdrawn or the information is no longer required, subject to maintaining a limited suppression record so that an opt-out request can be honoured.

Information that is no longer required will be deleted, anonymized or securely restricted, subject to legal obligations and reasonable technical limitations.

15. DATA SECURITY

We use reasonable administrative, technical and organizational safeguards intended to protect personal information against:

  • Unauthorized access;
  • Unlawful processing;
  • Accidental loss;
  • Alteration;
  • Disclosure;
  • Misuse; and
  • Destruction.

These safeguards may include access restrictions, protected credentials, security updates, trusted service providers and reasonable record-handling procedures.

No website, internet transmission or electronic-storage system can be guaranteed completely secure.

Customers should use strong passwords, keep credentials confidential and avoid sending sensitive authentication information through unsecured channels.

16. PERSONAL-DATA BREACHES

If we become aware of a personal-data breach, we will take reasonable steps to:

  • Contain the incident;
  • Assess its nature and impact;
  • Protect affected systems and information;
  • Preserve appropriate records;
  • Notify affected individuals where required; and
  • Report the incident to the appropriate authority where required by applicable law.

Customers who suspect unauthorized account activity or misuse of their information should promptly contact care@bombayjewelleryhp.com.

17. CUSTOMER PRIVACY RIGHTS

Subject to applicable law and identity verification, you may request:

  • A summary of eligible personal information being processed;
  • Information about the processing of your personal information;
  • Access to eligible personal information;
  • Correction of inaccurate or misleading information;
  • Completion of incomplete information;
  • Updating of outdated information;
  • Erasure of information no longer required;
  • Withdrawal of consent;
  • Withdrawal from marketing communications; and
  • Redressal of a privacy grievance.

Requests may be submitted to:

Email: care@bombayjewelleryhp.com
Phone/WhatsApp: +91 78278 00726

We may request reasonable information to verify your identity and prevent unauthorized access or deletion.

Certain information may be retained despite an erasure request where reasonably necessary for:

  • Tax and accounting records;
  • Completion of an existing transaction;
  • Refund or exchange administration;
  • Fraud prevention;
  • Compliance with law;
  • An unresolved complaint; or
  • Establishing or defending a legal claim.

18. WITHDRAWAL OF CONSENT

Where processing depends on consent, you may withdraw that consent by contacting us or using an available consent-management mechanism.

Withdrawal should be as reasonably accessible as the method used to provide consent.

After receiving a valid withdrawal request, we will stop the relevant consent-based processing within a reasonable period unless continued processing is permitted or required by law.

If the withdrawn consent is necessary to provide an optional service, we will explain the practical consequence of the withdrawal.

19. CUSTOMER RESPONSIBILITIES

Customers must:

  • Provide accurate and current information;
  • Avoid submitting another person’s information without authority;
  • Protect account and payment credentials;
  • Inform us when important information changes;
  • Avoid submitting unnecessary sensitive information; and
  • Notify us promptly of suspected unauthorized account activity.

If you provide information about another person—such as a gift recipient—you confirm that you are authorized to provide it for the relevant transaction.

20. CHILDREN AND MINORS

Our website is not intended to invite children to independently enter commercial transactions.

A person under 18 may browse the website only under the supervision of a parent or legal guardian. Any purchase intended for a minor must be placed and accepted by the parent or legal guardian.

We do not knowingly seek to process a child’s personal information for targeted advertising or behavioural monitoring.

Where personal information relating to a child is processed, we will seek verifiable consent from a parent or legal guardian where required by applicable law.

If you believe a child has provided personal information without appropriate authorization, contact us so that we can review and, where appropriate, delete or restrict it.

21. REVIEWS, PHOTOGRAPHS AND VIDEOS

If you voluntarily submit a review, photograph or video, we may process it to:

  • Assess a product or service issue;
  • Verify a return or guarantee claim;
  • Respond to feedback; or
  • Publish it where appropriate permission has been obtained.

We will publish identifiable customer reviews, photographs or videos for public or promotional purposes only after obtaining permission.

You may request withdrawal of that permission. We will take reasonable steps to stop future publication, although previously distributed or independently shared material may not always be fully retrievable.

Parcel-opening videos and claim evidence will ordinarily be used for verification, customer service, fraud prevention and dispute resolution—not for advertising.

22. CUSTOMIZATION INFORMATION

For customized or personalized products, we may process information such as:

  • Names;
  • Initials;
  • Dates;
  • Measurements;
  • Design preferences;
  • Reference images; and
  • Other customer-provided instructions.

Customization information will be used to prepare and verify the requested product, provide support and maintain appropriate transaction records.

Customers should avoid placing unnecessary sensitive or confidential information in customization instructions.

23. EXTERNAL LINKS

The website may contain links to payment providers, social-media services or other third-party websites.

Those services operate under their own privacy policies and terms. We do not control the independent privacy practices or content of an external website.

Customers should review the relevant third party’s privacy notice before providing information.

24. INTERNATIONAL PROCESSING

Some hosting, analytics, advertising, payment, security or communication providers may use systems located outside India.

Where personal information is processed outside India, such processing will remain subject to applicable Indian law, including any restrictions notified by the Government of India.

25. BUSINESS TRANSFER

If the business is reorganized, transferred, merged or sold, relevant personal information may be transferred as part of that transaction.

Any such transfer will remain subject to applicable confidentiality, notice and data-protection requirements.

26. PRIVACY GRIEVANCES

For privacy questions, requests or complaints, contact:

Privacy contact: Mr. Vikas Gupta
Email: care@bombayjewelleryhp.com
Phone/WhatsApp: +91 78278 00726
Address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002

For formal escalation, contact:

Grievance Officer: Mrs. Minkal Gupta
Email: minkalg04@gmail.com
Phone: +91 90150 00814
Postal address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002

A privacy grievance should describe:

  • The information or account concerned;
  • The nature of the request or complaint;
  • Relevant dates;
  • The requested resolution; and
  • Any supporting information.

We will endeavour to acknowledge a formal grievance within 48 hours and resolve it within one month, subject to applicable law and the nature of the matter.

27. NOMINATION AND AUTHORIZED REPRESENTATIVES

Where applicable under Indian data-protection law, an individual may exercise eligible rights through a lawfully authorized representative or nominated person.

We may request documentation reasonably necessary to verify the representative’s authority and protect the individual’s information.

28. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect legal, technical, security or operational changes.

The revised Policy will be posted on the website with an updated revision date.

Where required by law, we will provide additional notice or obtain fresh consent before using personal information for a materially different purpose.

29. APPLICABLE LAW

This Privacy Policy is governed by applicable Indian law, including the Digital Personal Data Protection Act, 2023 and related rules to the extent they are in force and applicable.

Nothing in this Policy restricts a privacy or consumer right that cannot legally be excluded.

30. CONTACT INFORMATION

Bombay Jewellery and Cosmetics
Brand: Bombay Jewellery
Proprietor: Mr. Vikas Gupta
GSTIN: 02DJAPG5753C1ZT
Address: 1st Floor, Kamaksha Komplex, Cinema Chowk, Bhojpur, Sundernagar, Mandi, Himachal Pradesh – 175002
Website: https://bombayjewelleryhp.com
Email: care@bombayjewelleryhp.com
Phone/WhatsApp: +91 78278 00726

Scroll to Top