Privacy Policy

1. Introduction

Riyaana Creations Pvt. Ltd. ("Company", "we", "our") under its brand Jewelbox values the trust you place in us. We are committed to the highest standards of secure transactions and customer information privacy.

This Privacy Policy describes how we collect, process, use, and protect your personal data when you visit our stores, use our website Jewelbox.co.in ("Platform"), interact with our digital campaigns, or participate in our loyalty programs, offers, or marketing initiatives.

By providing your information, visiting our stores, or using our services, you acknowledge and consent to the practices described in this Policy.

2. Data We Collect

We may collect the following categories of personal data:

• Personal Identifiers: Name, phone number, email address, postal address, date of birth, gender, loyalty program ID, and such other identifiers voluntarily provided.
• Biometric Data (where applicable): Facial templates generated for identification, personalization, or security purposes.
• Transactional Data: Purchase history, returns, payment method details (excluding full card numbers), rewards points earned/redeemed.
• Behavioral & Preference Data: Wishlists, browsing history, responses to offers, communication preferences, and activity on our Platform.
• Technical Data: Device details, IP address, cookies, analytics identifiers, and location data (where permitted).
• Visit & Surveillance Data: Store visit logs, CCTV footage (where legally permitted), and footfall data.
• Any Other Data Voluntarily Provided: Feedback, survey responses, complaints, or interactions with customer support.

We may also collect demographic and profile data to improve our offerings.

3. Purpose of Processing

Your data may be processed for the following purposes:

• Loyalty Program Administration: Enrollment, rewards points tracking, redemption, and related communication.
• Customer Identification & Personalization: Tailoring offers, recognizing returning customers, and enhancing your experience.
• Marketing & Communication: Sending promotional materials, offers, event invitations, and updates (with opt-out option).
• Analytics & Business Intelligence: Understanding customer behavior, measuring campaign effectiveness, and improving products and services.
• Security & Fraud Prevention: Protecting against theft, fraud, misuse of loyalty benefits, and ensuring store security.
• Legal & Compliance: Meeting legal obligations, responding to lawful requests, and protecting our rights and interests.

4. Legal Basis & Consent

• Data processing is primarily based on your consent.
• Certain activities (fraud prevention, legal compliance) may rely on legitimate interests or legal obligations.
• Some services (e.g., loyalty program participation) require consent; withdrawal may limit or terminate benefits.

5. Data Sharing & Transfers

We may share your data with:

• Trusted Service Providers: IT infrastructure, analytics, marketing automation, payment gateways, logistics, customer service.
• Affiliates & Group Companies: For centralized operations and unified engagement.
• Regulatory Authorities: Where legally required.
• Successors or Acquirers: In case of merger, sale, or restructuring.

We do not sell personal data. All sharing is subject to confidentiality and contractual safeguards.

6. Data Retention

• We retain personal data only as long as necessary for the purposes outlined above, compliance, and dispute resolution.
• Loyalty program data is typically retained 1–3 years after last activity, unless longer retention is required by law.

7. Data Security

We employ strict safeguards including encryption, access controls, regular audits, and secure servers to protect against unauthorized access, loss, or misuse of your data.

8. Cookies

Cookies help record aspects of your visit to personalize your experience and provide uninterrupted services. Jewelbox does not use cookies to store personal information for external use.

9. Your Rights

Subject to applicable laws, you may:

• Access and obtain a copy of your data.
• Request correction or updates to inaccurate data.
• Withdraw consent and request deletion.
• Opt out of marketing communications.
• Lodge grievances with our Privacy Officer at [email protected].

Requests may be subject to verification and legal exceptions.

10. Children's Data

We do not knowingly collect data of individuals under 18 years of age. Parents/guardians may request deletion if such data is inadvertently collected.

11. Changes & Updates

We reserve the right to update this Policy at any time. The latest version will always be available on our Platform. Continued use of our services or loyalty program after updates constitutes acceptance.

12. Limitation of Liability

To the fullest extent permitted by law, the Company shall not be liable for loss or damage arising from unauthorized access, misuse, or breach of data despite reasonable safeguards, unless caused by our gross negligence or willful misconduct.

13. Questions?

Questions regarding this can be directed to the following address: [email protected]