01Introduction

Rayora respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how Saloni Badola, operating under the brand name "Rayora", collects, uses, stores, processes and shares personal information when you visit or use http://www.rayora.in, create an account, place or attempt to place an order, request jewellery customisation or engraving, subscribe to promotional communications, contact us by email, telephone, WhatsApp, social media or another channel, or otherwise interact with Rayora.

In this Privacy Policy, "Rayora", "we", "us" and "our" refer to Saloni Badola. "You" and "your" refer to the website visitor, customer or other person interacting with Rayora. By providing personal information to us, you acknowledge that it will be handled in accordance with this Privacy Policy and applicable Indian law.

02Business Information

• Legal business name: Saloni Badola
• Brand name: Rayora
• Business structure: Proprietorship
• Website: http://www.rayora.in
• Registered or principal business address: Gehana Jewellers, Shop No. 15, F-1, D5, Sungrace Apartment, Sector 10, Vashi, Navi Mumbai, Maharashtra – 400703
• Customer-care email: hellorayora@gmail.com
• Customer-care number: 9769745012

For the purposes of applicable privacy law, Saloni Badola determines why and how personal information collected through Rayora is processed.

03Personal Information We Collect

The information collected depends on how you interact with Rayora.

3.1 Identity and contact information

We may collect your full name, email address, mobile number, billing address, shipping address, city, state, country and PIN code, company or business name where applicable, and GSTIN or tax information where requested for invoicing.

3.2 Account information

When you create a customer account, we may collect login credentials, saved addresses, account preferences, wishlist information, cart information, order history, return or exchange history, and communication preferences. Passwords are stored in protected or encrypted form through the website platform. Rayora does not have access to your readable password.

3.3 Order and transaction information

When you place or attempt to place an order, we may collect products viewed or purchased, product size, colour, quantity and specifications, order value, discount or coupon details, billing and shipping information, order status, invoice details, delivery and tracking information, return, exchange, cancellation and refund details, and warranty, repair or after-sales service information.

3.4 Jewellery customisation information

Where you request customised or personalised jewellery, we may collect information such as initials, names, dates, engraving text, personal messages, design instructions, jewellery size, reference photographs, and other information supplied for personalisation. Please provide only the information necessary to complete your customisation request. Where the information relates to another person, you confirm that you have permission to provide it to Rayora.

3.5 Gift-recipient information

Where you purchase a product as a gift, we may collect the recipient's name, delivery address, mobile number, gift message and delivery instructions. You confirm that you are authorised to provide the recipient's information for fulfilling the order. We will use gift-recipient information primarily for order delivery, communication regarding delivery and related customer support.

3.6 Payment information

Payments may be processed through authorised banks, payment gateways, UPI providers or other payment-service providers. Rayora may receive limited transaction information, including payment method, payment status, transaction reference number, amount paid, refund status, and limited or masked payment details. Rayora does not ask customers to provide their UPI PIN, card PIN, CVV, internet-banking password or OTP. Unless expressly stated otherwise, Rayora does not directly store complete debit-card or credit-card information.

3.7 Communications and customer support

We may collect information you provide when you email or call us, contact us through WhatsApp, submit a website enquiry, raise a complaint, request a return, exchange or refund, contact us through social media, respond to a survey, or provide feedback or a product review. This information may include the content of your communication, order number, photographs, videos and supporting documents.

3.8 Reviews and user-generated content

When you submit a review, testimonial, photograph or other content, we may collect your name or display name, review and rating, product photographs or videos, and other information you voluntarily provide. Reviews published on the website may be visible to the public. We recommend that you do not include your address, telephone number, payment details or other confidential information in a public review.

3.9 Device and website-usage information

When you visit the website, certain information may be collected automatically, such as Internet Protocol address, browser type, device type, operating system, approximate location based on IP address, referring website or advertisement, pages and products viewed, searches performed, time spent on the website, cart and checkout activity, date and time of access, and cookie, tag and pixel information. This information may be collected through server logs, cookies, analytics tools and similar technologies.

3.10 Information received from service providers

We may receive limited information from third parties that assist us, including payment confirmation from payment gateways, shipment and delivery status from logistics providers, fraud or risk indicators from payment or security providers, website analytics information, marketing campaign information, and information supplied through social-media or advertising platforms.

04How We Use Personal Information

We may use personal information to:

1. Process, confirm and fulfil orders;
2. Process payments and refunds;
3. Customise, engrave or prepare jewellery according to your instructions;
4. Generate invoices and transaction records;
5. Pack, ship, track and deliver orders;
6. Contact you regarding an order or delivery;
7. Verify delivery details;
8. Process cancellations, returns, exchanges, repairs and warranty claims;
9. Create and maintain customer accounts;
10. Save carts, wishlists and preferences;
11. Respond to questions, requests and complaints;
12. Provide customer support;
13. Detect and prevent fraud, payment abuse and unauthorised activity;
14. Protect the security of the website and customer accounts;
15. Improve website performance and customer experience;
16. Understand how visitors use the website;
17. Measure the effectiveness of marketing campaigns;
18. Send promotional communications where permitted;
19. Request reviews or feedback;
20. Maintain accounting, taxation and business records;
21. Establish, exercise or defend legal claims; and
22. Comply with applicable laws, court orders and lawful government requests.

We will not knowingly use personal information for a purpose that is materially unrelated to the purpose for which it was collected without providing appropriate information or obtaining consent where required.

05Consent and Withdrawal

Where consent is required, we will seek consent through an appropriate affirmative action, such as selecting a checkbox, submitting a form, creating an account, requesting a service, choosing to receive marketing messages, or adjusting cookie preferences.

You may withdraw consent by contacting us or by using the opt-out method provided in the relevant communication. Withdrawal of consent will not affect processing that took place before the withdrawal.

We may continue to retain or process certain information where it is required for completing an existing order, processing a refund, preventing fraud, maintaining tax or accounting records, resolving disputes, enforcing an agreement, or complying with law.

06Marketing Communications

Where you have agreed or where otherwise permitted by law, Rayora may contact you regarding new jewellery collections, product launches, offers and discounts, restocked items, cart reminders, events, brand announcements, and other promotional campaigns.

Communications may be sent through email, SMS, WhatsApp, telephone, social-media platforms, or other channels selected by you.

You may unsubscribe from marketing emails using the unsubscribe option included in the email. You may opt out of other promotional communications by replying with the applicable opt-out request or contacting us.

07Cookies and Similar Technologies

Rayora may use cookies and similar technologies to operate and improve the website.

Essential cookies may be necessary for website security, account login, shopping-cart functionality, checkout, payment processing, fraud prevention, and remembering privacy preferences. Disabling essential cookies may prevent parts of the website from functioning correctly.

Functional cookies may remember language, location or PIN code, saved preferences, recently viewed products, and other website choices.

Analytics cookies may help us understand website traffic, popular products and pages, how visitors navigate the website, website errors, and campaign performance.

Advertising cookies and pixels may help measure advertising performance, limit repeated advertisements, understand whether a customer visited through an advertisement, and present advertisements that may be more relevant.

08How We Share Personal Information

Rayora may share personal information only where reasonably necessary with the following categories of recipients:

• Website and hosting providers: WordPress, WooCommerce, website-hosting providers, cloud-storage providers, website developers, security and backup providers, and technical-support providers.
• Payment providers: Payment gateways, banks, UPI providers, card networks, and fraud-prevention services.
• Courier and logistics providers: To deliver an order, we may share customer or recipient name, mobile number, delivery address, PIN code, order or shipment number, delivery instructions, and cash-on-delivery amount where applicable.
• Communication providers: Providers that facilitate email, SMS, WhatsApp, order notifications, customer support, and promotional communications.
• Analytics and advertising providers: Where configured, limited website and campaign information may be shared with analytics, advertising or social-media platforms.
• Professional advisers: Accountants, auditors, lawyers, insurers, consultants, and other professional advisers.
• Legal and regulatory authorities: Where reasonably necessary to comply with law, respond to a lawful government or court request, investigate suspected fraud, protect customers, protect Rayora's rights or property, or enforce our terms and policies.
• Business restructuring: Where Rayora undergoes a merger, acquisition, restructuring, financing or transfer of business assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

Rayora does not sell or rent customer personal information as a business model.

09Data Retention

Rayora retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for the period required by applicable law. Retention periods may depend on whether you maintain a customer account, whether an order or refund is pending, applicable return, warranty or repair periods, taxation and accounting requirements, fraud-prevention requirements, legal limitation periods, pending disputes or complaints, and your marketing preferences.

Order, invoice, payment-confirmation and refund records may be retained even after an account-deletion request where they are required for tax, accounting, consumer protection, fraud prevention or legal purposes.

Customisation instructions and uploaded reference material should be deleted or anonymised when they are no longer reasonably required, unless continued retention is necessary to fulfil the order, provide after-sales service or resolve a dispute.

When personal information is no longer required, we may delete, anonymise or securely dispose of it.

10Security of Personal Information

Rayora takes reasonable technical, administrative and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, accidental disclosure, destruction, and other unlawful processing.

These measures may include access controls, secure hosting, backups, software updates, encryption or protected transmission, monitoring and restricted access to customer information, where appropriate.

11Personal Data Breaches

Where Rayora becomes aware of a personal-data breach, we will investigate and take reasonable steps to contain and address the incident.

Where required by applicable law, we will notify affected individuals and the relevant authority and provide information regarding the nature of the incident, likely consequences, measures taken to reduce harm, steps customers may take to protect themselves, and contact information for further assistance.

12Your Privacy Choices and Rights

Subject to identity verification, applicable law and legitimate retention requirements, you may request to:

• Know whether Rayora processes your personal information;
• Obtain a summary of personal information held about you;
• Correct inaccurate information;
• Update incomplete or outdated information;
• Request deletion or erasure of information that is no longer required;
• Withdraw consent;
• Opt out of promotional communications;
• Request account deletion;
• Raise a privacy grievance; and
• Exercise any other right available under applicable law.

To submit a request, contact hellorayora@gmail.com with the subject line "Privacy Request – [Type of Request]". Please include your name, registered email address or mobile number, order number where relevant, details of the request, and information reasonably required to verify your identity.

13Account Deletion

You may request deletion of your Rayora customer account by contacting hellorayora@gmail.com or through the account settings where this facility is available.

Deleting an account may remove access to saved addresses, wishlist, account preferences, and online order history. Certain transaction records may continue to be retained for accounting, taxation, fraud prevention, warranty, dispute-resolution and legal-compliance purposes.

14Children's Privacy

Rayora's website is not specifically directed at persons under 18 years of age. Persons under 18 should use the website and place orders only with the involvement of a parent or lawful guardian.

Rayora does not knowingly create or maintain customer accounts for children without appropriate parental or guardian involvement. Where we learn that information relating to a child has been collected without appropriate authority, we will take reasonable steps to delete or restrict that information, subject to legal and transaction-record requirements.

15International Processing and Storage

Some website, hosting, payment, analytics, communication or cloud-service providers may operate servers or personnel outside India. As a result, personal information may be processed or stored in another country.

Where such processing occurs, Rayora will take reasonable steps to use reputable providers and comply with applicable restrictions or requirements relating to overseas processing of personal information.

16Third-Party Websites and Services

The Rayora website may contain links to payment gateways, courier tracking websites, social-media platforms, review platforms, or other third-party services. These services operate independently and may have their own privacy policies.

Rayora is not responsible for the content, security or privacy practices of independently operated third-party websites. You should review their privacy policies before providing personal information.

17Information You Should Not Send to Rayora

Please do not send Rayora UPI PINs, card PINs, CVVs, banking passwords, OTPs, unnecessary identity documents, unnecessary medical or highly sensitive information, or personal information about another person without authority.

18Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in website features, business practices, service providers, technology, legal requirements, or privacy and security practices.

The revised policy will be published on this page with an updated effective date. Where a change materially affects how personal information is used, we may provide additional notice through the website, email or another appropriate communication method.

19Privacy Questions and Grievances

For privacy questions, rights requests or complaints, contact:

We will ordinarily acknowledge a privacy grievance within 48 hours and aim to resolve it within 30 days, subject to the nature and complexity of the request. You may be asked to provide sufficient information to verify your identity and locate the relevant records.