Privacy policy

GemGlow · Your Privacy

Privacy Policy

Originally effective: August 6, 2026

Last updated: September 18, 2026

Your privacy matters to us. This policy explains what personal information we collect, why we use it, who we share it with, and how you can contact us about your choices.

1. Information we collect

Information you provide: Depending on how you interact with us, we collect:

• Your name, email address, mobile number, and billing and delivery addresses.
• Order details, purchased products, delivery instructions, and return or refund requests.
• Account details, product preferences, and communication preferences that you choose to provide.
• Messages, enquiries, and any photos or documents you send to support a request.

If you provide someone else’s details, for example for a gift delivery, please ensure you are authorised to share them and let that person know about this policy.

Payment information: Payments are handled by our payment service providers. We do not store complete card numbers, CVV codes, UPI PINs, or net banking passwords. We may receive transaction references, payment status, payment method, and limited payment identifiers needed to reconcile payments, manage refunds, and prevent fraud. Please do not send us your PINs, passwords, or one-time passwords.

Information collected automatically: Our website and the services used to operate it may collect your IP address, browser and device details, operating system, referring page, search terms, pages and products viewed, interaction times, and cookie or similar identifiers. The information collected depends on the features in use and your privacy choices where applicable.

Information from service providers: We may receive payment confirmations, delivery updates, fraud alerts, and analytics or campaign information from providers supporting those activities.

2. How and why we use your information

• Orders and delivery: To confirm purchases, process payments, deliver orders, and manage returns, refunds, and order updates.
• Accounts and support: To manage your account, answer enquiries, and resolve complaints.
• Security: To verify transactions, detect misuse, prevent fraud, and protect our website and customers.
• Website improvement: To understand how our store is used, diagnose problems, and improve products and services.
• Personalisation and marketing: To remember preferences, recommend relevant products, measure campaigns, and send marketing communications, subject to your choices and applicable consent requirements.
• Legal and business records: To maintain required accounts, comply with lawful requests, resolve disputes, and exercise or defend legal rights.

We process personal information for the purposes described in this policy and on grounds permitted by applicable law. Where we rely on your consent, you may withdraw it as explained below.

You can choose not to provide optional information. If you do not provide information needed to fulfil an order or respond to a request, we may be unable to provide that particular service. Subscribing to promotional emails is optional.

3. Cookies and similar technologies

We and our service providers, including Shopify, use cookies and similar technologies. These may include pixels and local storage, depending on the services enabled on our store.

• Essential technologies support functions such as the shopping cart, checkout, account access, and security.
• Preference technologies remember choices that make your visits more convenient.
• Analytics technologies help measure visits, interactions, and website performance.
• Advertising technologies, where enabled, help measure campaigns and show relevant advertisements.

Where available, use our cookie banner or privacy preferences to manage optional technologies. You can also manage or delete cookies through your browser settings. Blocking essential cookies may affect checkout or other store functions. Browser settings alone may not control every form of tracking.

Where applicable law requires prior consent, optional cookies and similar technologies are used only after that consent is obtained. You can contact us for help with your privacy choices.

4. Analytics, advertising, and marketing messages

Where enabled, analytics and advertising services help us understand visits, product interest, purchases, and campaign results. These services may process device identifiers, browsing events, and transaction events. Reports may be summarised, but the underlying information is not necessarily anonymous and may be linked to a device or account.

Advertising providers may use information about your interactions to measure advertisements or show relevant ads on other services, subject to applicable law and your choices. Their own privacy notices explain any processing they undertake for their own purposes.

If you subscribe to our marketing emails, we may send product news, offers, crystal care guides, and related updates. You can unsubscribe through the link in an email or contact us at info@gemglow.in.

Unsubscribing from marketing does not stop necessary communications about existing orders, payments, returns, security, or support requests.

5. Who we share information with

We share information relevant to the purposes described above with:

• Shopify and technology providers that host and support our online store.
• Payment providers for payment processing, verification, refunds, and fraud prevention.
• Shipping and courier partners for delivery and return services.
• Customer support and email providers for enquiries and communications.
• Analytics and advertising providers, where used and permitted by your choices and applicable law.
• Professional advisers, regulators, courts, or public authorities where necessary for legal obligations, disputes, or protection against unlawful activity.

Providers processing information on our behalf are expected to use it for the agreed services and apply appropriate safeguards. Some providers, including payment providers and Shopify for certain services, may also process information independently under their own privacy notices.

Shopify: Our store is hosted on Shopify, which processes information about visits and purchases to operate the store. If Shopify Network Intelligence is enabled, Shopify may combine information from interactions with our store, other merchants, and Shopify to provide services such as personalisation, security, and advertising. Shopify and relevant third parties may process this information in other countries. See Shopify’s Consumer Privacy Policy and Shopify’s privacy portal for details and applicable choices.

We do not sell or rent personal information for money. Certain advertising disclosures may nevertheless be treated as a “sale,” “sharing,” or “targeted advertising” under laws in some locations. Where those laws apply, the corresponding opt-out rights apply as well.

6. How we protect information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, misuse, disclosure, alteration, or loss. These include encrypted website connections using HTTPS/TLS and access restrictions appropriate to the information and services involved.

No website, transmission method, or storage system can guarantee complete security. Please protect your account credentials and contact us if you suspect unauthorised activity involving your account.

If a personal data breach occurs, we will assess and address it and provide notifications to affected individuals and relevant authorities where required by applicable law.

7. How long we retain information

We retain personal information for as long as needed for the purpose for which it was collected, or for a longer period where required or permitted by applicable law. The period depends on the information involved:

• Order, payment, and invoice records are retained for fulfilment, returns, accounting, tax, and legal recordkeeping.
• Account and support records are retained to maintain your account, resolve enquiries, and handle related disputes.
• Marketing preferences are retained while relevant; limited opt-out records may be kept to respect your choice not to receive marketing.
• Technical and security records are retained according to their purpose, service settings, and applicable legal requirements.

When information is no longer needed, we delete it or make it no longer identifiable. Where immediate removal from backups is not practical, retained copies remain protected and are removed through the applicable backup cycle, subject to legal retention requirements.

8. Your choices, requests, and complaints

You may contact us to ask about our use of your information, request access or correction, request deletion, or withdraw consent where processing relies on consent. Additional rights, such as objecting to certain processing, receiving a portable copy, or opting out of targeted advertising, may apply depending on your location and the law in force.

Email info@gemglow.in with the subject “Privacy Request”. Include your request and the email address or order reference that will help us locate the relevant records. We may take reasonable steps to verify your identity or an authorised representative’s authority before acting.

Withdrawal of consent does not invalidate processing lawfully carried out before withdrawal. It may affect a service that depends on that information. Deletion requests may be limited where records must be retained for legal obligations or other lawful reasons. We will explain relevant limitations and respond within applicable legal time limits.

For a complaint, use the subject “Privacy Grievance” and the contact details in Section 13. We will acknowledge complaints within 48 hours and address them within one month, or within a shorter period if required by applicable law. You may also approach an appropriate authority where that remedy is available under the law in force.

9. Third-party websites and services

Our website may link to third-party websites or allow you to interact with services such as payment platforms or social media. Their privacy notices govern information they collect for their own purposes. Please review those notices before using their services or sharing information.

We do not control independent third-party websites. This does not remove our responsibilities for information we collect or disclose.

10. Children’s privacy

Our store is intended for adults aged 18 and above. We do not knowingly collect personal information from children or knowingly direct targeted advertising to them. If you believe a child has provided personal information, please contact us. We will investigate and take appropriate steps to stop unauthorised processing and delete the information, subject to applicable legal requirements.

11. International processing

GemGlow operates from India. Shopify and other service providers may process or store information in India and other countries where they operate. Privacy laws in those countries may differ from the laws where you live.

Where information is transferred internationally, we will comply with applicable restrictions and use the safeguards required by applicable law. Visiting our website is not, by itself, consent to a transfer that legally requires separate consent.

12. Updates to this policy

We may update this policy to reflect changes in our services, data practices, or legal requirements. The revised version will be posted on this page with an updated date. Where required, we will provide additional notice or obtain consent before a material change takes effect. An update does not remove rights that apply under law.

13. Contact and grievance details

GemGlow
Operated by Subyarth Craft Pvt. Ltd.
C-266, Upper Ground Floor
Sector 122, Noida
Uttar Pradesh 201301, India

Email: info@gemglow.in

Phone: +91 7011394814

Grievance Officer: [Insert appointed officer’s full name and designation]

Privacy questions and grievances may be sent to the email or postal address above, addressed to the Grievance Officer.