My Account

Legal

Privacy Policy

Effective date: January 1, 2025 · Last updated: January 1, 2025

Glya Fine Jewellery Pvt. Ltd. ("GLYA", "we", "us") is committed to protecting your personal information. This policy explains what we collect, why, and how you can exercise your rights.

1. Information we collect

  • ◈Account & order data: name, email address, phone number, shipping and billing address, and order history when you create an account or place an order.
  • ◈Payment data: we do not store full card details. Payments are processed by PCI-DSS-compliant gateways (Razorpay / Stripe). We receive only a transaction reference.
  • ◈Usage data: pages visited, time on site, browser type, device, and IP address collected via first-party analytics and server logs.
  • ◈Communications: messages you send us via email, WhatsApp, or contact forms.

2. How we use your information

  • ◈Process and fulfil orders, send shipping confirmations and delivery updates.
  • ◈Respond to enquiries and provide customer support.
  • ◈Send transactional emails and, with your consent, marketing newsletters about new collections and offers.
  • ◈Detect fraud, prevent abuse, and maintain the security of our systems.
  • ◈Comply with legal obligations under Indian law (GST Act, IT Act, Consumer Protection Act).

3. Cookies & tracking

  • ◈We use essential cookies required for the site to function (session management, cart persistence).
  • ◈Analytics cookies (first-party) help us understand how visitors use the site. No third-party advertising trackers are used.
  • ◈You can disable cookies in your browser settings. Disabling essential cookies may affect site functionality.

4. Data sharing & third parties

  • ◈Logistics partners (e.g. Bluedart, DTDC) receive your name and delivery address solely to fulfil your order.
  • ◈Payment gateways receive order value and billing details to process payments.
  • ◈Email service providers send transactional and marketing emails on our behalf.
  • ◈We do not sell, rent, or trade your personal data with any third party for their marketing purposes.

5. Data retention

  • ◈Order records are retained for 7 years as required under the GST Act.
  • ◈Account data is retained while your account is active and for 3 years after deletion.
  • ◈Analytics data is aggregated and anonymised after 26 months.

6. Your rights

  • ◈Access: you may request a copy of the personal data we hold about you.
  • ◈Correction: you may update inaccurate data via your account settings or by contacting us.
  • ◈Deletion: you may request deletion of your account and associated data, subject to legal retention requirements.
  • ◈Opt-out: you may unsubscribe from marketing emails at any time via the unsubscribe link or by emailing privacy@glya.in.

7. Security

  • ◈All data in transit is encrypted with TLS 1.2+. Data at rest is encrypted using AES-256.
  • ◈Access to personal data is restricted to authorised personnel on a need-to-know basis.
  • ◈We conduct periodic security reviews and vulnerability assessments.

8. Changes to this policy

  • ◈We may update this policy periodically. Material changes will be communicated via email or a prominent notice on the site at least 14 days before they take effect.
  • ◈Your continued use of the site after the effective date constitutes acceptance of the updated policy.

9. Contact us

  • ◈Data controller: Glya Fine Jewellery Pvt. Ltd., Pune, Maharashtra, India.
  • ◈Privacy queries: privacy@glya.in
  • ◈Response time: within 72 hours on business days.

Questions? Write to privacy@glya.in