Skip to main content
Home/Legal Policies

Privacy Policy

How We Protect & Process Your Personal Information

DPDP Act 2023 CompliantLast Updated: October 23, 2026

Welcome to Ratna Gems™. We respect your personal information and explain our data practices clearly so you can shop with confidence.

This Privacy Policy explains how Ratna Gems™ (“we,” “our,” or “us”) collects, uses, shares, and safeguards information when you visit our website (ratnagems.com), use our mobile services, create an account, contact us, or make a purchase. This policy is written with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable e-commerce requirements in India.

1. Information We Collect

We collect information with your consent to provide our certified gemstone products and services:

  • Personal Identifiers: Name, postal address (billing and shipping), email address, and phone number.
  • Account Information: The details of the sign-in method you choose — your mobile number (verified with a one-time code), your Google account's name and email, or your name, email address and a password together with a mobile number verified with a one-time code — plus your order history and saved preferences. Sign-in is handled by Google Firebase Authentication; passwords are held only by Firebase and are never seen or stored by us.
  • Payment Details: Information needed to process payments through authorized gateway partners (Razorpay). We do not store full card numbers or UPI PINs.
  • Order Details: Product selections, weight (carats/ratti), pricing, lab certificate requests, and related communications.
  • Technical & App Data: IP address, browser/device information, usage analytics, crash diagnostics, and notification preferences. If you turn on order alerts in your browser after placing an order, we keep that browser's push subscription (an address from your browser's push service) to send you shipping and delivery alerts; you can turn them off any time in your browser's site settings.
  • Customer Support Communications: Emails, WhatsApp messages, reviews, and support ticket interactions.

2. How We Use Your Information

  • Order Processing & Fulfillment: Generating invoices, issuing gemstone lab reports, and arranging secure insured courier dispatch.
  • Customer Communication: Sending order confirmations, live tracking updates, and responding to inquiries.
  • Service Improvement: Enhancing catalog navigation, product recommendations, and website performance.
  • Security & Fraud Prevention: Protecting your account against unauthorized access and fraudulent transactions.
  • Legal & Tax Compliance: Meeting GST invoicing, Income Tax, and regulatory requirements under Indian law.

3. Cookies and Tracking Technologies

We use essential, analytics, and advertising cookies to analyze storefront traffic, evaluate site performance, and measure marketing campaigns. What we store and process includes:

  • A sign-in cookie — set only if you create an account and sign in, so that you stay signed in between pages. It is removed when you sign out.
  • How your visit began — the website or search that brought you here, kept in your browser for the length of the visit only and cleared when you close the tab. If you choose to place an order, it is sent with that order so we know which of our efforts reached you.
  • Storefront analytics — Google Tag Manager and Google Analytics 4 (GA4) measure page interactions, session duration, and navigation pathways to help improve catalog accessibility and website performance.
  • Advertising attribution — Google Ads and Meta Pixel (account 693068893177574) measure conversion events to help us show relevant gemstone recommendations on search and social networks.
  • Ad-click details with an order — if you arrive from one of our ads and advertising cookies are allowed, our own server keeps the ad's click reference in a first-party cookie for up to 90 days. If you then place an order, we keep with it the ad-click references, the Google and Meta browser identifiers set on this site, your IP address and your browser type, so we can measure which ads lead to sales. These order details are deleted 90 days after the order.

Clearing your browser's site data for ratnagems.com removes all locally stored items.

4. Sharing of Information

We do not sell or rent your personal information to any third party.

Data is shared strictly with authorized partners required to fulfill your orders:

  • Payment Processors: RBI-licensed payment gateways (Razorpay) for secure payment processing.
  • Logistics Partners: Delhivery and Amazon Shipping for insured express delivery within India and international carriers for orders outside India.
  • Advertising Measurement: Google and Meta receive the pages you view and the orders you place, with the ad-click references and browser identifiers set on this site, your IP address and browser type, so we can measure which ads lead to sales. Your email, phone number, name and address go to them only in a one-way scrambled (hashed) form. Our own server sends these details to them only when advertising cookies are allowed.
  • Legal Compliance: Government or judicial authorities when required by applicable law or court order.

Live Chat

  • What we ask for: before a chat starts we ask for your name and mobile number, so our team can reply to you and keep a record of your enquiry. If you are signed in, we use the name and number on your account instead of asking.
  • What we keep: your name and number, your messages and our replies, the page you were viewing, whether you wrote from the website or the app and, in the app, a notification token so we can tell you when our team replies. Our staff may match your number to your customer account to see your past orders.
  • The AI assistant: replies are written by an AI assistant that runs on Google's Gemini service. Your messages, any photo you attach and your name are sent to Google to produce a reply. Your mobile number is not sent to it. We use Google's paid Gemini API service, under whose terms Google does not use these messages to improve its products and keeps them only for a limited period to detect misuse. Photos are used for the reply and are not stored by us.
  • Spam protection: chat on our website is protected by limits and checks that run on our own server, without any third-party service. In our Android app, Google Play Integrity (through Firebase App Check) confirms that chat and contact requests come from the genuine Ratna Gems app. Our website's Contact form and newsletter sign-up use Google reCAPTCHA, which checks that the request comes from a person and not an automated program; to do this it collects information about your device and browser and sends it to Google. Google's Privacy Policy and Terms of Service apply.
  • How long: chat messages are deleted automatically one year after they are sent, and a conversation once it has been inactive for one year. A grievance raised through the chat is kept separately as a grievance record.
  • On your device: your name and number are remembered on your device so you are not asked again. Signing out, or clearing this site's data in your browser, removes them; in the app, signing out does.

5. Amazon Selling Partner API (SP-API) Data Handling

For order fulfillment and parcel shipping of purchases made via our website, we leverage the Amazon Selling Partner API. In accordance with the Amazon Data Protection Policy:

  • Collection: Data is exchanged strictly over secure HTTPS connections using Login with Amazon (LWA) credentials.
  • Usage: Data is used solely for purchasing shipping services, printing waybills and shipping labels, and preparing tax invoices — never for marketing or profiling.
  • Storage: Shipping labels are never stored on our servers; only the shipment and tracking identifiers needed to service your delivery are retained.
  • Disposal: Amazon shipment identifiers are automatically purged from our systems 30 days after delivery.

6. Your Rights & Choices (DPDP Act 2023 & GDPR)

Under the Indian DPDP Act 2023 and European GDPR (for EEA/UK customers), you hold full rights regarding your data:

Right to Access & RectifyRequest a copy of your personal data or update inaccurate records.
Right to Erasure & DeletionDelete your account and personal data at any time, from the Ratna Gems app or this page.

Deleting your account, and what we must keep

You can delete your Ratna Gems account at any time - in the Android app under Account → Delete Account, or from this page. Deleting removes your profile, your sign-in identity, every active session, your app notification tokens and browser order-alert subscriptions, your saved address and preferences, your cart, and your marketing subscriptions.

We cannot delete tax invoices. Section 36 of the CGST Act requires accounts and records to be kept for 72 months from the due date of the annual return for that financial year - longer while an appeal, proceeding or investigation is open - and a tax invoice must carry the buyer's name and address, so it cannot be anonymised either. We therefore retain issued invoices, past order records with their original billing and delivery details, refund records, payment references and shipment records, exactly as issued, in a restricted accounting archive.

Retained records are never used for marketing, advertising, personalisation or ordinary account profiling. After the retention period and any unresolved dispute have ended, remaining personal data is deleted or irreversibly anonymised. Deleting your account does not cancel an order, start a refund or release reserved stock - please contact us for those.

7. Grievance Redressal & Contact Information

In accordance with the Information Technology Act 2000 and DPDP Rules, the details of our Grievance Officer are provided below:

Grievance Officer: Shaikh Shabnambanu
Postal Address: Ratna Gems™, B-74, Dhoptala Colony, Rajura, Chandrapur, Maharashtra – 442905, India
Complaint Timeline: Acknowledgment within 48 hours, resolution within 30 days.