01 Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:

• Contact Details: Your name, billing address, shipping address, phone/WhatsApp number, and email address.
• Financial Information: Credit card, debit card, UPI, and financial account details, payment confirmation, and transaction records processed securely via encrypted gateways.
• Account Information: Your username, password, preferences, saved wishlist stones, and settings.
• Transaction Information: Gemstones you view, compare, add to your cart or wishlist, custom mounting specifications, purchases, returns, or exchanges.
• Communications With Us: Information shared when requesting D65 daylight videos, live vault inspections, or astrological carat/ratti consultations.
• Device & Usage Information: Information about your device, browser, IP address, network connection, and how you navigate our online vault.

02 Personal Information Sources

• Directly From You: When you create an account, place an order, request a stone video, or communicate with our Mumbai concierge desk.
• Automatically Through the Services: From your device when you browse our website through cookies and similar technologies.
• From Service Providers & Partners: When we engage trusted logistics, payment, or technology providers to process information on our behalf.

03 How We Use Your Personal Information

• Provide, Tailor, and Improve the Services: To process payments, fulfill and insure your gemstone orders, arrange custom ring/pendant mounting, manage your account, and facilitate returns or exchanges.
• Marketing and Advertising: To send curated vault updates, promotional communications by email/WhatsApp (with opt-out options), and display relevant online advertisements.
• Security and Fraud Prevention: To authenticate accounts, ensure secure high-value transactions, and detect or prevent fraudulent or unauthorized activity.
• Communicating With You: To deliver prompt gemological support, D65 daylight videos, and laboratory report verifications.
• Legal Reasons: To comply with applicable Indian and international tax, KYC, and regulatory laws or respond to valid legal processes.

04 How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:

• With Shopify, high-value insured logistics carriers, payment processors, and IT vendors who perform services on our behalf.
• With business and marketing partners to provide personalized advertising in accordance with their privacy notices.
• When you direct or consent to our disclosure of information (such as sharing a lab certificate or shipping details).
• In connection with legal obligations, business transactions, or to protect the rights and safety of KFG Jewellers and our clients.

05 Relationship With Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the store. Information you submit may be transmitted to and shared with Shopify and third parties located in other jurisdictions. To learn more about how Shopify uses your personal information and any rights you may have, please visit the Shopify Consumer Privacy Portal.

06 Security, Retention & Children's Data

We implement industry-standard safeguards to protect your information; however, no transmission channel is impenetrable, and we recommend not sending sensitive payment credentials over unencrypted channels. We retain personal information only as long as necessary to maintain your account, fulfill orders, comply with tax/legal obligations, and honour our lifetime vault upgrade programme.

Our Services are not intended for individuals under the age of majority, and we do not knowingly collect personal data from children under 16 years of age.

07 Your Rights, Choices & International Transfers

Depending on where you reside, you may exercise the following rights regarding your personal information:

• Right to Access / Know: Request access to the personal information we hold about you.
• Right to Delete: Request deletion of personal information we maintain about you, subject to legal retention requirements.
• Right to Correct: Request correction of inaccurate personal information.
• Right of Portability: Receive a copy of your data in a structured format where applicable.
• Managing Communication Preferences: Opt out of promotional emails at any time using the unsubscribe link in our emails.

Where personal data is transferred outside your country of residence (including the EEA or UK), we rely on recognized legal transfer mechanisms such as Standard Contractual Clauses.

08 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our vault operations or regulatory requirements. We will post the revised policy on this page and update the "Last updated" date above.