Privacy Policy

This policy explains what we collect, why, who else sees it, and what you can ask us to do about it. It covers dcorejewels.in and the Dcore Jewels mobile app.

We collect what an online jewellery shop needs to take your order and get it to you. We do not sell your data, and we do not share it for anyone else's advertising.

Who is responsible for your data

Dcore Jewels Pvt Ltd

• Registered address: Vaishali , Ghaziabad
• Email: support@dcorejewels.in
• Phone: 8292299714

What we collect

You give us:

• Your name, email address and phone number when you create an account or place an order
• Your delivery addresses — recipient name, phone, house and street, landmark, city, state and pincode
• Optionally, your date of birth and gender, if you add them to your profile. Date of birth is used for your birthday reward and nothing else, and both are optional
• Order details — what you bought, what you paid, gift-wrap and message-card choices, and any message text you wrote on a card
• Anything you write to us in an email, a review, a product question or a support message, including photographs you attach

Generated as you use the site:

• Your cart and wishlist, so they are still there next time
• Glow Coin balances and history
• Order and delivery history, including tracking updates from the courier
• Login sessions and device information — browser or app version, operating system, IP address and approximate region — used to keep your account secure
• Push notification tokens, if you use the app and allow notifications

We do not collect or store your card number, CVV, UPI PIN or net banking credentials. Those are entered on the payment gateway's own page, and all we receive back is whether the payment succeeded and a transaction reference.

Why we use it

Purpose	What it covers
Fulfilling your order	Taking payment, packing, shipping, tracking, invoicing, returns and refunds
Keeping you informed	Order confirmations, dispatch and delivery updates, refund updates. These are transactional and cannot be switched off while an order is live
Your account	Signing you in, remembering your addresses, cart, wishlist and Glow Coins
Support	Answering your emails and resolving complaints
Legal obligations	GST invoicing and tax records, which we are required to keep
Fraud prevention	Spotting fraudulent orders, payment abuse and misuse of promotions or COD
Improving the shop	Understanding which pieces sell and where the site is confusing, in aggregate
Marketing, if you allow it	Offers, new drops and occasional news by email or SMS

Marketing, and how to stop it

We send marketing email and SMS only about our own jewellery.

You can turn both off at any time in your account settings, or by using the unsubscribe link in any marketing email. Turning marketing off does not stop transactional messages about an order you have placed — you will still be told when your parcel ships.

We do not sell, rent or trade your contact details, and we do not pass them to third parties for their own marketing.

Who we share it with

Only where it is needed to run the shop, and only what is needed:

• Payment gateways — Razorpay and Cashfree, to take and refund payments. They receive your name, contact details and order amount, and handle your card or UPI details directly under their own privacy policies and PCI-DSS obligations.
• Courier partners, who receive the recipient's name, address and phone number so they can deliver and call ahead.
• Communication providers — our email provider and our SMS provider — to send order updates and, where you have agreed, marketing.
• Google, if you choose to sign in with Google. We receive your name, email address and Google account identifier. We do not receive your Google password.
• Cloud hosting and storage providers, where the site and its images are hosted.
• Professional advisers and authorities, where we are legally required to disclose, or need to establish or defend a legal claim.

Where a provider is outside India, your data is transferred only to the extent needed to provide that service, and under contractual protections.

Cookies and similar technology

We use cookies and equivalent local storage to:

• Keep you signed in and keep your session secure
• Remember your cart between visits
• Remember settings such as recently viewed pieces
• Understand, in aggregate, how the site is used so we can improve it

Blocking cookies will stop sign-in and the cart from working, because both depend on them. You can clear them at any time in your browser settings.

How long we keep it

• Order, invoice and tax records — for 8 years, which is what Indian tax law requires. These are not deleted on request while that obligation stands.
• Account details — while your account is open, and for a reasonable period afterwards for fraud prevention.
• Cart, wishlist and browsing data — cleared when you delete your account.
• Support emails — up to 3 years, so we have context if you write again.
• Marketing consent records — for as long as we rely on them, plus proof of when you opted out.

Your rights

You can ask us to:

• See the personal data we hold about you
• Correct anything inaccurate — you can edit your name, phone, email and addresses yourself in your account
• Delete your account and the personal data we are not legally required to keep
• Stop marketing, which you can do yourself in your account settings
• Withdraw consent where we relied on it

There is no self-service delete button today. Email support@dcorejewels.in from the address on your account and we will act on the request within 30 days. If any part of the request cannot be met — invoices we must retain, for instance — we will tell you which part and why.

Keeping it safe

Traffic to this site is encrypted with HTTPS. Passwords, where used, are stored hashed and never in readable form. Access to customer data is limited to the people who need it to run the shop, and payment credentials never reach our systems at all.

No system is perfectly secure. If a breach occurs that affects you, we will tell you and the relevant authority as the law requires.

Please be careful of impersonation

We will never call, message or email you asking for your card number, CVV, PIN, OTP, UPI PIN or account password. We will never ask you to install a screen-sharing or remote-access app to process a refund. Anyone doing so is not us — put the phone down and write to support@dcorejewels.in.

The only details we may ask for by email are bank account number, IFSC and account name, and only to refund an order you paid for in cash on delivery, and only after you have raised the return yourself.

Children

This site is not intended for children under 18 and we do not knowingly collect their data. If you believe a child has given us personal information, write to us and we will delete it.

Other sites

Our pages may link to other sites, such as our social accounts. This policy does not cover them, and we are not responsible for how they handle your data.

Changes to this policy

We may update this policy. The current version is always the one on this page, and the date it was last updated is shown above. Material changes are announced on the site.

Complaints

Write to support@dcorejewels.in with "Privacy" in the subject. If you are not satisfied with our response, our Contact Us page sets out our grievance process, under which we acknowledge within 48 hours and resolve within 30 days.