Privacy Policy

1. Introduction

At House of Nirvana Jewels, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website houseofnirvanajewels.com or make a purchase.

Please read this policy carefully. By using our website, you consent to the practices described in this policy.

This policy applies solely to information collected through our website and not to any offline data collection.

Data Controller: House of Nirvana Jewels, KB Heights, Lower Ground Floor, opposite Life Care Hospital, Tartoli Road, Aburoad, Rajasthan 307026, India, GSTIN: 08IWHPB8162H1Z9

2. Information We Collect

We may collect the following types of personal information:

a) Information You Provide

• Account Information: Name, email address, phone number, shipping address when you register or place an order
• Payment Information: Payment details (credit/debit card, UPI, net banking) are processed securely via Razorpay. We do not store full card details on our servers.
• Communications: Messages you send via our contact form or customer support
• Newsletter: Email address if you subscribe to our newsletter

b) Automatically Collected Information

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent on site, clicks, navigation paths
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience, analyze site usage, and personalize content. See Section 5 below.
• Location Data: General location derived from IP address for shipping and tax calculations

3. How We Use Your Information

We use the collected information for the following purposes:

• Order Processing: To process your orders, manage payments, and arrange shipping
• Customer Service: To respond to your inquiries, provide support, and address concerns
• Account Management: To create and manage your account, if you register
• Communications: To send order updates, shipping notifications, and service-related emails
• Marketing: To send promotional emails and newsletters if you opt-in; you may unsubscribe at any time
• Website Improvement: To analyze usage patterns, improve our website, products, and services
• Security: To detect and prevent fraud, protect our systems, and ensure the security of transactions
• Legal Compliance: To comply with legal obligations, tax requirements, and accounting standards

4. Sharing Your Information

We do not sell, trade, or rent your personal information to others. We may share your information with:

• Service Providers: Third parties that assist us in operating our website, processing payments (Razorpay), delivering orders (courier partners), sending emails (Resend/Nodemailer), and providing customer support
• Legal Authorities: When required by law or to protect our rights, property, or safety, or that of others
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of the business
• Analytics: Google Analytics and similar services that help us understand how visitors use our site (data is aggregated and anonymized)

All third parties are required to maintain the confidentiality and security of your information.

5. Cookies and Tracking

Our website uses cookies to enhance your browsing experience, analyze site traffic, and personalize content. By continuing to use our site, you consent to our use of cookies.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function (session management, cart functionality)
• Functional Cookies: Remember your preferences (language, location)
• Analytics Cookies: Help us understand visitor behavior (Google Analytics)
• Marketing Cookies: Track your interaction with our ads, used for retargeting (optional)

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

Cookie Disclaimer: Our website may also use third-party services like Google Analytics that set their own cookies. We encourage you to review their privacy policies.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

These measures include:

• SSL encryption for all data transmission (HTTPS)
• Secure payment processing via PCI-DSS compliant Razorpay
• Regular security audits and vulnerability scanning
• Access controls and authentication for administrative areas
• Firewalls and intrusion detection systems
• Regular software updates and patches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction (e.g., GDPR for EU residents, India's Digital Personal Data Protection Act), you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten") under certain conditions
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured format and transmit it to another controller
• Right to Object: Object to processing of your data, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at hello@houseofnirvanajewels.com. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Order Data: Retained for accounting and tax purposes (minimum 6 years as per Indian law)
• Account Data: Retained until you request deletion (or 3 years of inactivity, whichever is longer)
• Newsletter Subscribers: Retained until you unsubscribe
• Contact Form Submissions: Retained for 2 years for customer service follow-up

9. Third-Party Links

Our website may contain links to third-party websites (e.g., Razorpay payment gateway, social media platforms). We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete such information promptly.

11. Data Breach Notification

In the unlikely event of a data breach that may compromise your personal information, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by law.

12. International Data Transfers

Your personal information may be transferred to and processed in countries outside of India, including the USA (Google Analytics), and any cloud hosting providers we use (Vercel, MongoDB Atlas).

When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Indian government, to protect your information.

13. Marketing Communications

If you subscribe to our newsletter or agree to receive marketing communications, you can unsubscribe at any time by clicking the "unsubscribe" link in any email or contacting us at hello@houseofnirvanajewels.com.

We may send SMS notifications regarding order status if you provide your mobile number. You may opt-out of SMS communications by replying STOP to any message.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. It is your responsibility to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

For residents of the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.