Privacy Policy

SOBAGU — The House of Jewellery ('SOBAGU', 'we', 'us', or 'our') respects your privacy and is committed to protecting the personal information we collect when you use our website and services. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have regarding your information.

By accessing or using the SOBAGU website, creating an account, placing an order, renting jewellery, or contacting us, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

Information We Collect

We collect information you provide directly and information gathered automatically when you use our website, as described below.

• Account information: name, email address, mobile number, and password (stored securely) when you register or log in.
• Profile and address information: delivery and billing addresses, pincode, and preferred contact method.
• Government ID: for jewellery rentals, we are required to collect a government-issued photo ID and address proof to verify identity and prevent fraud.
• Order and rental information: products purchased or rented, rental dates and durations, rental/deposit amounts, and order history.
• Payment information: payment is processed securely by our payment partner Razorpay. We do not store full card numbers; card and bank details are transmitted directly to Razorpay and are not retained on our servers.
• Wishlist and preferences: products you save to your wishlist and your browsing preferences.
• Communications: inquiries and messages you send to us via contact forms, email, WhatsApp, or elsewhere, including unboxing-video submissions related to returns.
• Usage and device data: pages visited, products viewed, search keywords, referrer, device type, browser, IP address, and similar analytics data.
• Cookies and similar technologies: see the 'Cookies' section below.

How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders and rentals, including payment processing, order confirmation, shipping, delivery tracking, and customer support.
• To manage your account, wishlist, addresses, order history, and rental bookings.
• To verify your identity, especially for rentals where government ID and address proof are required.
• To prevent fraud, unauthorised transactions, and abuse of our services.
• To communicate with you about your orders, rentals, shipping, returns, and refunds.
• To send service notifications and (with your consent where required) marketing updates, offers, and newsletters.
• To improve our website, products, and services through analytics and usage research.
• To comply with legal obligations, enforce our Terms & Conditions, and protect our legal rights.

Legal Basis for Processing

We process your personal information to perform the contract we have with you (for example, to process and deliver your order), to comply with legal obligations, to protect our legitimate interests (for example, fraud prevention and improving our services), and with your consent where required by law.

Payments

All payments are processed securely through Razorpay, a PCI-DSS compliant payment gateway. Payment card and bank details are transmitted directly encrypted to Razorpay and are never stored on our servers. When you check out, the payment amount is verified server-side before an order is confirmed.

Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your preferences (such as your chosen theme), understand how the website is used, and improve performance. We also use analytics and advertising tools that set cookies, including Google Analytics and Meta Pixel, to measure and improve our marketing. You can control cookies through your browser settings; however, disabling cookies may affect certain functionality of the website.

Sharing of Information

We do not sell your personal information. We share information only where necessary to operate our business and provide our services, with:

• Payment processors (Razorpay) to complete transactions.
• Shipping and courier partners (for example, NimbusPost) to deliver orders and provide tracking.
• Hosting and infrastructure providers (for example, Vercel, Cloudflare, Supabase, Cloudflare R2) that store and serve our website and data.
• Analytics and advertising providers (for example, Google Analytics, Meta Pixel) to understand and improve our marketing.
• Government authorities or other third parties where required by law or in response to valid legal process.

Data Retention

We retain your personal information only as long as necessary for the purposes described in this Policy or as required by applicable law. Order, rental, and financial records are retained for a period necessary to satisfy tax, accounting, and legal obligations. You may request deletion of your personal information as described under 'Your Rights' below.

Data Security

We implement appropriate technical and organisational safeguards to protect your personal information, including encryption in transit (HTTPS/TLS), restricted access to personal data, and secure handling of records. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 of India), you have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate personal information.
• Withdraw consent where processing is based on consent.
• Request deletion of your personal information where legally permitted.
• Restrict or object to certain processing.
• Lodge a complaint with the appropriate data protection authority.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:

SOBAGU — The House of Jewellery

Email: [email protected]