Privacy Policy

VAIMA JEWELS (PARAM MANISH MORADIA) operates vaimajewels.com. For the purposes of the DPDP Act 2023, we are the Data Fiduciary for the personal data described in this policy.

Registered address: 4th Floor, 401/B, Chamunda Niwas, Near Sarla Hospital, Tagore Road, Mumbai, Maharashtra 400054

GSTIN: 27DXDPM5547K1ZZ

Contact: sales@vaimajewels.com · +91 83697 60775

We collect only what an order or an account actually needs.

• Account details — your name, email address and password. If you sign in with Google, we receive your name, email address and Google account identifier from Google; we never receive your Google password.
• Order and delivery details — shipping and billing address, phone number, pincode, and the items, sizes, metals and finishes you ordered.
• Payment details — collected and processed entirely by Razorpay. We receive only a payment reference, the amount, and whether the payment succeeded. We never see or store your card number, UPI PIN, CVV or netbanking credentials.
• Bespoke enquiries — the design notes, measurements and any inspiration images you send us.
• Job applications — your CV and the contact details in it, if you apply through our careers page.
• Usage data — pages viewed, approximate location from your IP address, device and browser type, and referring site, collected through cookies and analytics.

We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

• To take, process, pack, insure and deliver your order, and to handle returns.
• To issue a GST-compliant tax invoice, which we are legally required to retain.
• To answer your questions and provide after-sales service, resizing and care.
• To detect and prevent fraudulent orders and payment abuse.
• To improve the site, our range and our service through aggregate analytics.
• To send you marketing about new pieces and offers — only where you have opted in, and every message carries a one-click unsubscribe.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

We share the minimum necessary with service providers who act on our instructions:

• Razorpay — to take and refund payments.
• Sequel Logistics and other couriers — your name, address and phone number, so your piece can be delivered.
• Google Cloud — hosting and database infrastructure.
• Google Analytics / Tag Manager — usage analytics.
• Email delivery providers — to send order confirmations, invoices and shipping updates.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Your data is stored on Google Cloud infrastructure. Some of our service providers may process data outside India; where they do, we require contractual safeguards consistent with Indian law.

• Order and invoice records — retained for eight years, as required by GST and companies legislation.
• Account details — retained until you ask us to delete your account.
• Job applications — retained for twelve months from the date you apply, then deleted.
• Marketing consent records — retained while you are subscribed, plus three years, as proof of consent.

Traffic to and from this site is encrypted with TLS. Passwords are stored only as bcrypt hashes and cannot be read by us. Administrative access is restricted to named staff accounts, and changes made in our admin system are recorded in an audit log. Payment credentials never touch our servers.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.

We use cookies that are strictly necessary to keep you signed in and to remember your cart, and analytics cookies that help us understand how the site is used. You can block or delete cookies in your browser settings; if you block the necessary ones, signing in and checking out will not work.

Under the DPDP Act 2023 you may:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong, incomplete or out of date;
• ask us to erase your data, except where we are legally required to keep it — most notably tax invoices;
• withdraw consent for marketing at any time;
• nominate someone to exercise these rights on your behalf if you cannot;
• complain to the Data Protection Board of India.

To exercise any of these, email sales@vaimajewels.com. We respond within 30 days.

If you are unhappy with how we have handled your data or your order, contact our Grievance Officer, appointed under the Consumer Protection (E-Commerce) Rules 2020 and the Information Technology Act 2000:

We acknowledge every complaint within 48 hours and aim to resolve it within one month of receipt.

We update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be announced on this page before they take effect.