Privacy Policy

This policy explains what personal data Zewar-e-Noor collects when you shop with us, why we collect it and the choices you have. We have tried to keep it short and in plain language. We aim to follow the Digital Personal Data Protection Act, 2023 (the DPDP Act) and the Information Technology Act, 2000 and its rules.

Who we are

Zewar-e-Noor is a small online store in India that sells imitation jewellery. We take orders on WhatsApp and deliver across India. Under the DPDP Act we are the "data fiduciary": we decide why and how your personal data is used, and we are responsible for it.

What we collect

When you order on WhatsApp

• Your name, phone number and delivery address
• What you ordered, the order value and how you chose to pay (Cash on Delivery or UPI)
• Messages, photos and unboxing videos you send us about your order

When you tap a WhatsApp order button ("Send Order on WhatsApp" or "Order on WhatsApp now")

• The order reference at the end of your message, the products and quantities, and the prices our website showed you at that moment
• Your WhatsApp number, only if you choose to type it in. It is optional and your order goes through without it
• Whether you switched on "Also send me offers on WhatsApp" (it is off unless you switch it on), with the exact words you agreed to and the time
• The page you were on, how you first found us (UTM tags), your IP address and browser details

If you type your number, your browser also remembers it on your device so the box is filled in next time. Tap "Not you? Clear" to remove it.

When you join the Noor Circle (our WhatsApp and SMS updates)

• Your phone number, and your name if you share it
• A record of your consent: the words you agreed to, the date and time, the page you were on, your IP address and browser details
• How you reached our website and which pages you had looked at before joining

When you browse our website

• Pages and products you view, items you add to your cart and buttons you tap
• Device and browser details, and an approximate location worked out from your IP address
• How you first found us, for example the website, ad or campaign link (UTM tags) that brought you to us. We remember this first visit in your browser so we can tell which of our ads and posts actually help

We never ask for card numbers, net banking details or your UPI PIN. When you pay by UPI, the payment happens inside your own UPI app and we only see the confirmation, with the name and UPI ID it shows.

Why we use it

• To confirm, pack and deliver your order, and to help you with returns, refunds or questions
• To honour the price you saw when you tapped a WhatsApp order button, even if the price changes before your message reaches us
• If you left your number with an order, to follow up on that order only, for example when your WhatsApp message did not reach us. This is part of handling the order you started, so it needs no separate consent. We do not use it for offers unless you switched them on
• To send you new arrivals and offers on WhatsApp or SMS, but only if you have agreed to receive them
• To understand which products, pages and ads work, so we can improve the store and spend less on ads that do not
• To keep records we must keep by law, for example for tax and accounting
• To prevent fraud and misuse of our website

We do not make automated decisions about you that have legal or similarly important effects.

Cookies and analytics

Our website uses cookies and similar browser storage. Some are needed for the site to work, such as remembering your cart. Others help us measure the site and our ads:

• Google Analytics 4 (Google) to count visits and see which pages are useful
• Meta Pixel (Meta, the company behind Facebook and Instagram) to measure our ads and show them to people likely to be interested
• PostHog to understand how people use the site, for example where they get stuck

These services receive information such as the pages you view, your device and browser, and a random identifier. When you join the Noor Circle, Meta is told that a sign up happened, but not your number. The number you type at a WhatsApp order button is never sent to Google, Meta or PostHog. When we confirm an order, we may send Meta your phone number in a scrambled (hashed) form along with the order value, so we can measure which ads lead to real orders.

You can block or delete cookies in your browser settings. The store will still work, though your cart may not be remembered. You can also use the opt out tools offered by Google and Meta.

Who we share it with

We share only what each partner needs to do its job:

• Delivery and courier partners get your name, phone number and address to deliver your parcel
• Analytics and advertising providers (Google, Meta and PostHog) as described above
• Payment apps: when you pay by UPI, your payment is handled by your UPI app and bank, under their own terms
• Service providers that host our website, store our data and send messages for us, under contracts that limit how they use it
• Authorities, when the law requires it

We never sell your personal data, and we never share your number for anyone else's marketing.

How long we keep it

• Order records (name, phone, address and order details): for as long as tax and accounting laws require, usually up to 8 years
• WhatsApp order taps (order reference, products, prices shown and the optional number): 90 days, then deleted automatically. If the order is confirmed, the tap is kept with the order record for 1 year
• Noor Circle consent records: until you opt out, and then for a short time after, so we can show when you agreed and when you stopped
• Messages and unboxing videos: until your order, return or refund is settled, and for a short time after in case of questions
• Analytics data: for the period each analytics provider's settings allow, typically up to 14 months

When we no longer need data, we delete it or remove the details that identify you.

Marketing messages and how to stop them

We send offers and new arrivals on WhatsApp or SMS only to people who agree to them when they share their number: by joining the Noor Circle, or by switching on "Also send me offers on WhatsApp" next to a WhatsApp order button (it is always off until you switch it on). Leaving your number for an order is not agreeing to offers. To stop them, reply STOP to any of our messages, or message us on WhatsApp and we will take you off the list. Stopping marketing messages does not affect updates about an order you have placed.

Your rights

Under the DPDP Act you can:

• Access: ask for a summary of the personal data we hold about you and how we use it
• Correct and update: ask us to fix data that is wrong or incomplete
• Erase: ask us to delete your data when it is no longer needed, unless the law requires us to keep it
• Withdraw consent: stop marketing messages at any time, as easily as you gave consent
• Nominate: name someone who can use these rights for you if you die or become unable to
• Complain: raise a grievance with us, and if you are not satisfied with our reply, with the Data Protection Board of India

To use any of these rights, message us on WhatsApp. We may ask you to confirm your phone number so we know the request is really from you. We aim to reply within 7 working days and to resolve requests within 30 days.

Grievance Officer

Grievance Officer: to be announced. Until then, contact us on WhatsApp and we will respond to your grievance.

Children

Our store is meant for adults. If you are under 18, please shop with the help of a parent or guardian. We do not knowingly collect data from children for marketing.

Keeping your data safe

We use reasonable security measures, such as access controls and encrypted connections, to protect your data. No system is perfectly secure, so please contact us straight away if you think something is wrong.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is important, we will also tell you on our website or on WhatsApp.

Contact us

Questions about this policy? Please message us on WhatsApp.