Privacy Policy

PRIVACY POLICY

Website: https://ghoshjewellery.com/
Business: Ghosh Jewellery
Effective Date: 11 October 2026
Last Updated: 11 October 2026

Ghosh Jewellery ("Ghosh Jewellery", "we", "us", "our") respects your privacy and is committed to protecting the personal information and personal data entrusted to us by customers, visitors and users of https://ghoshjewellery.com/ (the "Website").

Ghosh Jewellery operates an online jewellery business offering gold jewellery, silver jewellery and precious-stone jewellery and also operates physical retail outlets at Kamarpukur, Hooghly, West Bengal and Kotulpur, Bankura, West Bengal, India.

This Privacy Policy explains what personal data we may collect, why we collect it, how we use and protect it, with whom it may be shared, how long we retain it, and the choices and rights available to you.

This Policy is intended to operate consistently with applicable Indian laws and regulations relating to privacy, data protection, electronic commerce and consumer protection, including the Digital Personal Data Protection Act, 2023, applicable provisions of the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and applicable rules, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, and other applicable laws as amended or replaced from time to time.

1. WHO WE ARE

The Website is operated by:

Legal Business Name: M/S Ghosh Jewellery
Trading Name: Ghosh Jewellery
Registered/Business Address: Kamarpukur , Hooghly West Benal , India PIN- 712612
Email: ghoshjewellery88@gmail.com
Telephone/WhatsApp: +91 85974 16716
Website: https://ghoshjewellery.com/

For privacy and personal-data purposes, the above business shall be referred to as the "Data Fiduciary", where that terminology applies under applicable data-protection law.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data collected through:

https://ghoshjewellery.com/
Online product enquiries
Online orders and purchases
Customer registration or account creation, where applicable
Contact forms
WhatsApp or other messaging-based enquiries initiated through the Website
Telephone enquiries
Email communications
Delivery and order-related communications
Customer service and complaint communications
Marketing subscriptions, where applicable
Physical-store interactions where customer information is digitally recorded or subsequently processed by us
Other digital services operated by Ghosh Jewellery that link to this Privacy Policy

This Policy does not necessarily apply to websites, applications, payment gateways, courier services, social-media platforms or other third-party services that are operated independently by other organisations.

3. INFORMATION WE MAY COLLECT

Depending upon how you interact with us, we may collect the following categories of information.

3.1 Identity and Contact Information

This may include:

Name
Mobile/telephone number
Email address
Billing address
Shipping/delivery address
Communication preferences
Information provided when contacting customer support

3.2 Order and Transaction Information

When you purchase or enquire about jewellery, we may process information such as:

Products selected or purchased
Product specifications
Quantity
Jewellery weight and product details
Order number
Invoice information
Delivery information
Payment status
Refund or cancellation information
Customer service and transaction history

3.3 Payment Information

Where online payments are available, payment transactions may be processed by an independent payment gateway or financial service provider.

Depending on the payment method, we may receive information such as:

Payment confirmation
Transaction/reference number
Payment status
Limited payment-related information required for reconciliation

We do not intend to store complete debit-card, credit-card, CVV, UPI PIN, internet-banking password or similar authentication credentials on our own servers unless expressly required by law and lawfully processed through an appropriately secured system.

Payment details may instead be processed directly by the relevant authorised payment service provider under its own privacy and security policies.

3.4 Technical and Device Information

When you visit our Website, certain information may automatically be collected by our hosting provider, analytics systems, security systems or other technical services.

This may include:

IP address
Browser type
Device type
Operating system
Approximate location derived from IP address
Referring website
Pages visited
Date and time of access
Session information
Website interaction data
Error and diagnostic information

We use such information primarily for website operation, security, analytics, performance improvement and fraud prevention.

3.5 Communication Information

If you contact us by email, telephone, WhatsApp, contact form or another communication channel, we may retain:

Your contact details
Your message
Enquiry details
Order-related information
Complaint or support information
Records necessary to resolve the matter

4. INFORMATION WE DO NOT INTENTIONALLY COLLECT

We do not intentionally request or collect sensitive information that is unnecessary for purchasing jewellery.

Customers should not provide us with:

Passwords
UPI PINs
ATM PINs
Card PINs
CVV numbers through ordinary communication channels
Banking passwords
OTPs
Aadhaar numbers or other government identification numbers unless specifically required for a lawful purpose and requested through an appropriate process

Ghosh Jewellery will never ask you to disclose an OTP, UPI PIN, card PIN, CVV or banking password to our employees through telephone, WhatsApp, email or social media.

5. HOW WE COLLECT YOUR INFORMATION

We may obtain information:

Directly from you when you place an order.
When you submit an enquiry or contact form.
When you communicate with us by telephone, email or messaging services.
When you create an account, where the Website provides such functionality.
When you subscribe to marketing communications.
Automatically through cookies, server logs and similar technologies.
From service providers involved in payment, delivery, website hosting, security, analytics or customer support.
From information lawfully available to us or provided by you in connection with a transaction.

6. WHY WE USE YOUR PERSONAL DATA

We process personal data only for legitimate and specified purposes, including:

A. Processing and fulfilling orders

We may use your information to:

Confirm your order
Generate invoices
Process payments
Arrange delivery
Provide order updates
Handle cancellations, returns and refunds
Provide after-sales service

B. Customer service

We may use your information to:

Respond to enquiries
Answer product questions
Resolve complaints
Provide support
Maintain customer-service records

C. Website operation

Information may be processed to:

Operate the Website
Improve functionality
Diagnose technical problems
Maintain security
Prevent fraudulent or abusive activity

D. Legal and regulatory compliance

We may process information when reasonably necessary to:

Comply with applicable laws
Maintain accounting and tax records
Respond to lawful governmental requests
Prevent fraud
Establish, exercise or defend legal claims
Comply with court orders or other lawful directions

E. Marketing and promotional communications

Where applicable and where legally required, we may use your contact information to send:

New-product announcements
Jewellery collections
Offers
Festival campaigns
Store announcements
Educational or informational content

Where consent is required, marketing communications will be sent only after obtaining the appropriate consent.

You may withdraw marketing consent or unsubscribe from promotional communications.

Withdrawal of marketing consent does not necessarily affect processing required to fulfil an existing order, comply with law or maintain legally required records.

7. LEGAL BASIS FOR PROCESSING

Depending on the circumstances and applicable law, personal data may be processed:

With your consent;
To provide a product or service requested by you;
To fulfil an order or transaction;
To comply with a legal obligation;
For legitimate and lawful business purposes permitted under applicable law;
To protect the Website, customers, business or legal rights;
Where processing is otherwise permitted or required under applicable Indian law.

Where consent is the applicable basis, consent should be voluntary, specific, informed and unambiguous, and you may withdraw consent subject to applicable legal limitations.

8. YOUR CONSENT

Where we rely on consent, we will seek consent through an appropriate affirmative action.

We will not treat silence, inactivity or a pre-ticked consent box as affirmative consent where applicable law requires an affirmative action.

You may withdraw consent using the available communication mechanism or by contacting us using the details provided in this Policy.

Withdrawal of consent will not invalidate processing that was lawfully carried out before withdrawal.

Where certain processing is necessary to complete an order, comply with law or perform another legally permitted function, withdrawing consent may affect our ability to provide a particular service.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies and similar technologies.

Cookies are small data files stored on or associated with your device that can help a website remember information and understand how visitors use the Website.

We may use:

Essential Cookies

These may be required for:

Website functionality
Shopping-cart operation
Login/session management
Security
Fraud prevention
Basic website operation

Analytics Cookies

Where enabled, analytics tools may help us understand:

Number of visitors
Popular pages
User navigation
Website performance
Traffic sources
Technical problems

Preference Cookies

These may remember choices such as language, display or other Website preferences.

Marketing/Advertising Technologies

If we use advertising, remarketing or similar technologies, they may collect information regarding Website interactions to help measure or personalise advertising, subject to applicable law and consent requirements.

You can control cookies through your browser settings. Some Website functions may not operate correctly if essential cookies are disabled.

Where legally required, non-essential cookies will be deployed only after obtaining the appropriate consent.

10. THIRD-PARTY SERVICES AND DATA PROCESSORS

To operate an online jewellery business, we may use carefully selected third-party service providers.

These may include:

Website hosting providers
Domain and DNS providers
Payment gateways
Banks/payment institutions
Courier and logistics providers
SMS/email service providers
WhatsApp or messaging platforms
Customer-support providers
Website analytics providers
Cybersecurity providers
Cloud-storage providers
IT and maintenance providers
Accounting and tax service providers
Marketing service providers, where applicable

Such providers may process personal data only to the extent reasonably necessary to provide their services or as otherwise permitted by law.

Where appropriate, we seek contractual, technical or organisational safeguards designed to protect personal data.

11. PAYMENT PROCESSING

Online payments, where available, may be processed by third-party payment service providers.

When you choose a payment method, you may be redirected to or interact with the payment provider's systems.

The payment provider may independently process information in accordance with its own privacy policy, security practices and applicable law.

Ghosh Jewellery does not request or collect your UPI PIN, card PIN, CVV or banking password through ordinary customer communications.

12. DELIVERY AND LOGISTICS

To deliver your purchase, we may provide necessary information to courier, logistics or delivery partners.

This may include:

Recipient name
Mobile number
Delivery address
Order/reference number
Delivery-related instructions

Only information reasonably necessary for delivery and related service purposes should be shared.

13. WHATSAPP AND OTHER MESSAGING SERVICES

If you choose to contact Ghosh Jewellery through WhatsApp or another third-party messaging platform, information exchanged through that platform may also be processed by the relevant platform provider under its own terms and privacy policy.

You should review the privacy policy of the relevant platform before using it.

Ghosh Jewellery will use information received through such communications for legitimate customer-service, enquiry, order, transaction or other permitted purposes.

14. SHARING OF PERSONAL DATA

We do not sell your personal data as a commodity.

We may disclose or provide access to personal data where reasonably necessary to:

Fulfil an order
Process payments
Deliver products
Provide customer support
Maintain the Website
Provide hosting or cloud services
Perform analytics
Prevent fraud and security incidents
Maintain accounting and tax records
Comply with legal obligations
Respond to lawful governmental or regulatory requests
Establish, exercise or defend legal claims
Protect the rights, property or safety of Ghosh Jewellery, customers or others

We may also disclose information as part of a lawful business restructuring, merger, acquisition, sale of business/assets or similar transaction, subject to applicable law.

15. INTERNATIONAL DATA TRANSFERS

Some third-party technology or service providers used by the Website may process information from locations outside India.

Where personal data is transferred or processed outside India, Ghosh Jewellery will take steps required by applicable Indian law and contractual arrangements to ensure appropriate protection and lawful processing.

16. DATA SECURITY

We take reasonable technical and organisational measures appropriate to the nature of the personal data we process.

Depending on the circumstances, safeguards may include:

HTTPS/SSL encryption
Access controls
Password protection
Limited employee access
Secure hosting
Software and security updates
Backup procedures
Monitoring and logging
Malware and security controls
Vendor/service-provider controls
Internal procedures for handling personal data

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

Therefore, while we take reasonable precautions, we cannot guarantee absolute security against every possible cyberattack, unauthorised access, data loss or technical failure.

17. DATA BREACHES AND SECURITY INCIDENTS

If we become aware of a personal-data breach that requires notification under applicable law, we will take appropriate steps in accordance with applicable legal requirements, including notifying the relevant authority and/or affected individuals where required.

We may also take immediate measures to:

Contain the incident
Investigate the cause
Secure affected systems
Assess potential impact
Preserve relevant evidence
Prevent recurrence
Provide legally required notifications

18. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required/permitted by applicable law.

Retention periods may depend upon:

Nature of the information
Purpose of collection
Order/transaction requirements
Accounting and taxation requirements
Warranty/service requirements
Legal limitation periods
Dispute resolution requirements
Regulatory requirements
Fraud-prevention and security requirements

When personal data is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with applicable law and our internal retention practices.

19. YOUR DATA PROTECTION RIGHTS

Subject to applicable law and any applicable conditions or limitations, you may have rights including:

Right to access information

You may request information regarding the personal data processed by us and the purposes for which it is processed, as provided under applicable law.

Right to correction/update

You may request correction of inaccurate or incomplete personal information.

Right to erasure/deletion

You may request deletion of personal data where applicable.

However, deletion may not be possible where retention is required or permitted by law, for example for taxation, accounting, transaction records, legal claims, fraud prevention or other lawful purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent.

Right to grievance redressal

You may contact us regarding concerns about the processing of your personal data.

Right to nominate

Where applicable under the Digital Personal Data Protection Act, 2023 and related rules, you may exercise the right to nominate another individual to exercise specified rights in the event of death or incapacity.

The precise scope and manner of exercising these rights will depend upon the applicable law and its effective provisions at the relevant time.

20. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy/data request, please contact:

Privacy/Grievance Contact: [Insert Name/Designation]
Email: [Insert Privacy Email]
Telephone: [Insert Phone Number]
Postal Address: [Insert Complete Business Address]

Your request should, where reasonably necessary, contain sufficient information for us to identify the relevant account, transaction or request.

For security reasons, we may request reasonable verification before acting on certain requests.

We aim to respond within the period required by applicable law.

21. GRIEVANCE REDRESSAL

If you have a concern regarding the collection, use or handling of your personal data, please contact our designated grievance/privacy contact first.

Grievance Officer / Privacy Contact

Name:Mr.Surajit Ghosh
Designation: Partner
Email: [Insert Email]
Phone: ghoshjewellery88@gmail.com
Address: Kamarpukur , Hooghly West Benal , India PIN- 712612

We will review and address legitimate privacy complaints in accordance with applicable law.

Where applicable, you may have the right to approach the competent regulatory authority or the Data Protection Board of India after following the prescribed grievance mechanism.

22. CHILDREN'S PRIVACY

Our Website is intended for general consumers and is not specifically directed at children.

We do not knowingly request unnecessary personal data from children.

Where processing of a child's personal data is subject to special requirements under applicable law, we will follow those requirements, including any applicable requirements concerning verifiable parental or lawful guardian consent.

If you believe that a child has provided personal data to us in circumstances where such processing is not permitted, please contact us so that we can investigate and take appropriate action.

23. THIRD-PARTY WEBSITES

Our Website may contain links to third-party websites, social-media platforms, payment gateways, delivery services or other external services.

We do not control the privacy practices of those third parties.

Once you leave our Website, the privacy policy and terms of the relevant third party may apply.

We encourage users to review the privacy policies of external websites before providing personal information.

24. SOCIAL MEDIA

Ghosh Jewellery may maintain profiles or pages on platforms such as Facebook, Instagram, YouTube, WhatsApp or other social-media services.

Interactions with these platforms may be governed by the privacy policies and terms of the respective platform operators.

Information publicly posted by you on social-media platforms may be visible to others depending on your privacy settings.

25. WEBSITE ANALYTICS

We may use analytics tools to understand Website traffic, user behaviour, technical performance and customer journeys.

Analytics information may be used to:

Improve Website navigation
Improve product presentation
Understand customer interests
Measure marketing effectiveness
Detect technical problems
Improve Website performance
Develop better products and services

Where an analytics provider processes personal data on our behalf, we will seek to use appropriate contractual and technical safeguards.

26. AI-ASSISTED PRODUCT IMAGERY AND PRODUCT REPRESENTATION

Ghosh Jewellery may use professionally edited, retouched, composited or AI-assisted imagery for product presentation, advertising, marketing and Website design.

For certain jewellery products, the jewellery may be digitally placed, composited or presented on an AI-generated or digitally generated model.

Such imagery is intended primarily for visual presentation and marketing purposes.

Accordingly:

The model shown may not represent an actual Ghosh Jewellery customer or employee.
The model may be AI-generated or digitally created.
Lighting, camera angle, scaling, colour rendition and digital editing may affect visual appearance.
The appearance of jewellery when worn by a model may differ from its appearance in actual physical use.
Minor visual differences between the Website image and the actual jewellery may occur.

The actual physical jewellery supplied to the customer shall be governed by the applicable product specifications, invoice, weight, purity/fineness, hallmark/HUID information where applicable, and other legally required product particulars—not solely by the photographic representation.

Customers should contact Ghosh Jewellery before purchasing if they require clarification about dimensions, stone size, colour, finish, weight or other physical characteristics.

27. HANDMADE JEWELLERY AND DESIGN VARIATION

Many Ghosh Jewellery ornaments are handmade or involve substantial artisanal workmanship.

Because handmade jewellery is individually produced, minor differences may occur between:

Product photographs and the physical article
Two pieces of the same design
Pattern details
Engraving
Texture
Stone placement
Surface finish
Proportion
Minor design characteristics

Such minor variations may be an inherent characteristic of handmade jewellery and should not automatically be considered a defect.

However, such variations will not be used to misrepresent the material purity, declared weight or other legally required product information.

28. PURITY, WEIGHT AND PRODUCT INFORMATION

Product photographs are primarily visual representations.

For precious-metal jewellery, customers should rely on the applicable product description, invoice and legally required markings/certifications for information relating to:

Precious-metal type
Purity/fineness
Net precious-metal weight
Applicable hallmark information
HUID, where applicable
Stone details, where applicable
Applicable charges and taxes

For hallmarked precious-metal articles, customers should examine the applicable hallmark/fineness information and retain the authentic invoice.

BIS states that hallmarking provides an official indication of precious-metal purity/fineness, and its consumer guidance recommends retaining the authentic bill/invoice containing relevant article details.

Where applicable, customers may verify a gold jewellery HUID through the BIS Care App's "Verify HUID" facility.

29. ACCURACY OF WEBSITE INFORMATION

We make reasonable efforts to maintain accurate and current information on the Website.

However, occasional errors may occur in:

Product descriptions
Photographs
Prices
Stock availability
Product dimensions
Colour representation
Technical information
Website content

Where a material error is identified, we may take appropriate corrective action in accordance with applicable law and the relevant order/transaction terms.

Nothing in this Privacy Policy limits rights that consumers have under applicable consumer-protection law.

30. MARKETING COMMUNICATIONS

If you have provided consent or where otherwise legally permitted, we may communicate with you regarding:

New jewellery collections
Offers
Festival campaigns
Special events
Store updates
Product launches
Customer information
Other relevant communications

You may opt out of promotional communications at any time.

Transactional communications—such as order confirmation, payment status, delivery information, security notifications or important service messages—may continue where reasonably necessary even after marketing opt-out.

31. DIRECT MARKETING AND YOUR CHOICES

We do not intend to use personal information for unrelated marketing purposes without an appropriate lawful basis.

You may request that we stop sending promotional communications.

Where a third-party advertising or marketing platform is used, its own privacy and opt-out mechanisms may also apply.

32. DATA MINIMISATION

We seek to collect and process only information reasonably necessary for the relevant purpose.

For example, we do not require unnecessary personal information merely to allow a visitor to browse jewellery products.

Information required to fulfil a purchase may be greater than information required to browse the Website.

33. ACCOUNT SECURITY

If the Website provides customer accounts, you are responsible for maintaining the confidentiality of your login credentials and for notifying us promptly if you suspect unauthorised access.

You should:

Use a strong password
Avoid sharing login credentials
Avoid using the same password across multiple services
Log out from shared devices
Never share OTPs or payment authentication credentials

34. FRAUD AND SECURITY

To protect customers and the business, we may process information to detect and prevent:

Fraudulent transactions
Fake orders
Payment fraud
Account misuse
Automated attacks
Spam
Phishing
Website abuse
Cybersecurity incidents

Such processing may occur where permitted or required by applicable law.

35. LEGAL DISCLOSURES

We may disclose personal data where we reasonably believe that disclosure is necessary to:

Comply with a legal obligation
Respond to a valid legal process
Comply with a court order
Respond to a competent government or regulatory authority
Investigate suspected fraud
Protect the rights or property of Ghosh Jewellery
Protect customers or the public from harm
Establish or defend legal claims

36. BUSINESS TRANSFER

If Ghosh Jewellery undergoes a merger, acquisition, restructuring, sale of assets, change in ownership or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

Where required, customers will receive applicable notices.

37. CHANGES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy to reflect:

Changes in law
Regulatory requirements
Changes in Website functionality
Changes in business operations
Changes in third-party services
Changes in data-processing practices
Improvements in privacy and security practices

The updated version will be published on this page with a revised "Last Updated" date.

Where required by law, we may provide additional notice or obtain fresh consent.

38. GOVERNING LAW

This Privacy Policy shall be interpreted in accordance with the laws applicable in India.

Nothing in this Policy is intended to exclude, restrict or waive any mandatory statutory rights available to consumers or Data Principals under applicable law.

39. CONTACT US

For privacy questions, data requests, complaints or concerns, please contact:

Ghosh Jewellery
Website: https://ghoshjewellery.com/

Legal/Business Name: Ghosh Jewellery
Address: Kamarpukur , Hooghly West Benal , India PIN- 712612
Email: ghoshjewellery88@gmail.com
Phone/WhatsApp: +91 85974 16716

Privacy & Grievance Contact

Name: Mr.Surajit Ghosh
Designation: Partner
Email: ghoshjewellery88@gmail.com
Phone: +91 85974 16716

40. IMPORTANT CUSTOMER NOTICE

For your own security, Ghosh Jewellery will never ask you to provide your OTP, UPI PIN, card PIN, CVV, internet-banking password or similar payment authentication credentials through telephone, WhatsApp, email or social media.

If anyone claiming to represent Ghosh Jewellery requests such information, do not disclose it and contact us through the official contact details published on https://ghoshjewellery.com/.