Privacy policy

Last updated: June 2025

1. Introduction

Welcome to Zoraya ("we", "our", or "us"). We are a fine jewellery brand based in Surat, Gujarat, India. We operate the website zorayajewels.in (the "Site") and sell jewellery online through our Shopify-powered store.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights as a customer.

By using our website or placing an order with us, you agree to the terms of this Privacy Policy.

2. Information We Collect

When you visit our store or place an order, we may collect the following:

Personal Information you provide:

Full name
Email address
Phone number (including WhatsApp)
Shipping and billing address
Payment information (processed securely — we do not store card details)
Order history and preferences

Information collected automatically:

IP address
Browser type and version
Pages visited and time spent on our website
Device type (mobile, desktop, tablet)
Referring URL (how you found our website)
Cookies and tracking data (see Section 6)

Information from third parties:

If you contact us via Instagram DM or WhatsApp, we may retain the conversation for customer service purposes.

3. How We Use Your Information

We use the information we collect to:

Process and fulfill your orders
Send order confirmations and shipping updates
Provide customer support via email, WhatsApp, or phone
Improve our website and shopping experience
Send promotional emails or offers (only if you have opted in)
Prevent fraud and ensure the security of transactions
Comply with legal obligations under Indian law

We will never sell your personal information to third parties for their marketing purposes.

4. Sharing Your Information

We share your information only with trusted third parties who help us run our business.

We do not share your data with anyone else without your explicit consent, except where required by law.

5. Data Retention

We retain your personal data for as long as necessary to:

Fulfill your orders and provide after-sales support
Comply with legal and tax obligations (as required under Indian GST laws)
Resolve disputes or enforce our agreements

You may request deletion of your data at any time by contacting us (see Section 9). Please note we may need to retain certain information for legal compliance.

6. Cookies

Our website uses cookies — small text files stored on your device — to:

Keep items in your shopping cart
Remember your login session
Analyse website traffic (via Google Analytics)
Improve your browsing experience

Types of cookies we use:

Essential cookies — Required for the website to function (cannot be turned off)
Analytics cookies — Help us understand how you use our site
Marketing cookies — Used only if you have opted in to receive promotional content

You can control cookies through your browser settings. Please note that disabling cookies may affect your shopping experience.

7. Data Security

We take the security of your personal data seriously. We implement the following measures:

Our website uses SSL encryption (HTTPS) to protect data in transit
Payments are processed through Razorpay's PCI-DSS compliant payment gateway
Access to customer data within our organisation is restricted on a need-to-know basis
We regularly review our security practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

As a customer, you have the right to:

Access — Request a copy of the personal data we hold about you
Correction — Ask us to correct any inaccurate information
Deletion — Request that we delete your personal data (subject to legal obligations)
Opt-out — Unsubscribe from marketing emails at any time by clicking "Unsubscribe" in any email or contacting us directly
Portability — Request a copy of your data in a structured, machine-readable format

To exercise any of these rights, please contact us at support@zorayajewels.in. We will respond within 30 days.

9. Children's Privacy

Our website and products are not intended for children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Links to Other Websites

Our website may contain links to third-party websites (such as Instagram, WhatsApp, or payment pages). We are not responsible for the privacy practices of these sites and encourage you to read their privacy policies independently.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or industry practices. When we do, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.