Privacy Policy
This policy explains what personal data Vaima Jewels collects when you browse or buy from us, why we collect it, how long we keep it, who we share it with, and the rights you hold over it under the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Last updated: 10 September 2026
1. Who we are
Vaima Jewels operates vaimajewels.com. For the purposes of the DPDP Act 2023, we are the Data Fiduciary for the personal data described in this policy.
Contact: hello@vaimajewels.com · +91 83697 60775
2. What we collect
We collect only what an order or an account actually needs.
- Account details — your name, email address and password. If you sign in with Google, we receive your name, email address and Google account identifier from Google; we never receive your Google password.
- Order and delivery details — shipping and billing address, phone number, pincode, and the items, sizes, metals and finishes you ordered.
- Payment details — collected and processed entirely by Razorpay. We receive only a payment reference, the amount, and whether the payment succeeded. We never see or store your card number, UPI PIN, CVV or netbanking credentials.
- Bespoke enquiries — the design notes, measurements and any inspiration images you send us.
- Job applications — your CV and the contact details in it, if you apply through our careers page.
- Usage data — pages viewed, approximate location from your IP address, device and browser type, and referring site, collected through cookies and analytics.
We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.
3. Why we use it
- To take, process, pack, insure and deliver your order, and to handle returns.
- To issue a GST-compliant tax invoice, which we are legally required to retain.
- To answer your questions and provide after-sales service, resizing and care.
- To detect and prevent fraudulent orders and payment abuse.
- To improve the site, our range and our service through aggregate analytics.
- To send you marketing about new pieces and offers — only where you have opted in, and every message carries a one-click unsubscribe.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
4. Who we share it with
We share the minimum necessary with service providers who act on our instructions:
- Razorpay — to take and refund payments.
- Sequel Logistics and other couriers — your name, address and phone number, so your piece can be delivered.
- Google Cloud — hosting and database infrastructure.
- Google Analytics / Tag Manager — usage analytics.
- Email delivery providers — to send order confirmations, invoices and shipping updates.
We may also disclose data where the law requires it, or to establish or defend a legal claim.
5. Where it is stored, and for how long
Your data is stored on Google Cloud infrastructure. Some of our service providers may process data outside India; where they do, we require contractual safeguards consistent with Indian law.
- Order and invoice records — retained for eight years, as required by GST and companies legislation.
- Account details — retained until you ask us to delete your account.
- Job applications — retained for twelve months from the date you apply, then deleted.
- Marketing consent records — retained while you are subscribed, plus three years, as proof of consent.
6. How we protect it
Traffic to and from this site is encrypted with TLS. Passwords are stored only as bcrypt hashes and cannot be read by us. Administrative access is restricted to named staff accounts, and changes made in our admin system are recorded in an audit log. Payment credentials never touch our servers.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.
7. Cookies
We use cookies that are strictly necessary to keep you signed in and to remember your cart, and analytics cookies that help us understand how the site is used. You can block or delete cookies in your browser settings; if you block the necessary ones, signing in and checking out will not work.
8. Your rights
Under the DPDP Act 2023 you may:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong, incomplete or out of date;
- ask us to erase your data, except where we are legally required to keep it — most notably tax invoices;
- withdraw consent for marketing at any time;
- nominate someone to exercise these rights on your behalf if you cannot;
- complain to the Data Protection Board of India.
To exercise any of these, email hello@vaimajewels.com. We respond within 30 days.
9. Grievance redressal
If you are unhappy with how we have handled your data or your order, write to hello@vaimajewels.com or call +91 83697 60775.
We acknowledge every complaint within 48 hours and aim to resolve it within one month of receipt.
10. Changes to this policy
We update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be announced on this page before they take effect.