Privacy Policy -

Effective Date: 5 August 2026
Last Updated: 5 August 2026

This Privacy Policy explains how Soul Touch Jewellery collects, uses, stores, shares and protects personal information when you visit, browse, register on or purchase through soultouchjewellery.com, or communicate with us through email, telephone, WhatsApp or another authorised channel.

Soul Touch Jewellery is a sole proprietorship owned and operated by Nazia Khan, with its principal place of business at:

Soul Touch Jewellery
House No. 68, Alhasnath Colony
Toli Chowki, Hyderabad
Telangana – 500008, India

Website: soultouchjewellery.com
Privacy and customer-care email: care@soultouchjewellery.com
Phone and WhatsApp: +91 63097 93041
Support hours: Monday to Saturday, 10:00 a.m. to 6:00 p.m. IST, excluding public holidays.

This Policy has been prepared using the website, payment, hosting, analytics, courier and marketing information provided by Soul Touch Jewellery, including its use of WooCommerce, Hostinger, Razorpay, Google Analytics and Delhivery.

India’s Information Technology data-protection rules require an organisation handling personal information to publish an accessible privacy policy explaining the information collected, its purposes, disclosures and security practices. They also provide that information should not be retained longer than required for its lawful purpose or applicable law.

Plain-language summary

When you use our website or place an order, we may collect information such as your:

Name;
Email address;
Phone number;
Billing and delivery address;
Order and payment status;
Account information;
Product preferences;
Customer-support communications;
Reviews, photographs or videos voluntarily submitted by you; and
Website, device and cookie information.

We use this information to:

Process and deliver orders;
Collect and verify payments;
Manage Cash on Delivery orders;
Provide customer service;
Handle returns, refunds and warranty claims;
Maintain customer accounts;
Prevent fraud;
Improve our website;
Understand website performance; and
Send promotional communications where you have opted in.

We do not directly store complete card information, CVV numbers, UPI PINs, card PINs or internet-banking passwords.

We do not sell or rent customers’ personal information.

You may contact us to request access, correction, updating or deletion of eligible personal information, withdraw marketing consent or raise a privacy complaint.

This summary is provided for convenience. The complete Policy below applies to our processing of personal information.

1. Scope of this Policy

This Privacy Policy applies when you:

Visit or browse our website;
Search for or view a product;
Add a product to your cart or wishlist;
Begin or complete checkout;
Purchase as a guest;
Create or use a customer account;
Select prepaid or Cash on Delivery payment;
Contact us by email, phone or WhatsApp;
Submit a return, refund or warranty request;
Submit a grievance;
Subscribe to promotional communications;
Submit a review, photograph or video;
Participate in an offer, loyalty programme or referral programme; or
Otherwise interact with Soul Touch Jewellery.

This Policy does not govern a third-party website, application or service that maintains its own privacy policy.

2. Who controls your personal information

For the purposes of this Privacy Policy, Soul Touch Jewellery determines why and how personal information is processed in connection with its website and retail operations.

References to:

“Soul Touch Jewellery”
“we”
“us”
“our”

mean Soul Touch Jewellery, the sole proprietorship owned and operated by Nazia Khan.

The person authorised to respond to privacy questions and requests is:

Nazia Khan
Founder and Grievance Officer
Email: care@soultouchjewellery.com
Phone: +91 63097 93041

Soul Touch Jewellery is not presently describing Nazia Khan as a formally designated “Data Protection Officer,” because that title should be used only where appointment is legally required or formally made.

3. Meaning of personal information

“Personal information” means information relating to an identified or reasonably identifiable individual.

Depending upon the context, personal information may include:

Contact information;
Delivery information;
Account details;
Transaction information;
Communications;
Device information;
Photographs;
Videos;
Reviews;
Preferences; and
Other information connected with an identifiable customer or website visitor.

Information that has been irreversibly anonymised so that it cannot reasonably identify an individual may not be treated as personal information.

4. Information you provide directly

We may collect information you voluntarily provide, including:

Identity and contact details

Full name;
Email address;
Mobile number;
WhatsApp number;
Billing address;
Delivery address;
City;
State;
PIN code; and
Delivery instructions.

Account information

Account username;
Account password in protected or hashed form;
Saved address;
Wishlist;
Order history;
Account preferences; and
Login and account-management information.

Soul Touch Jewellery does not ordinarily have access to a customer’s readable account password.

Order information

Products purchased;
Product quantity;
Order value;
Discount applied;
Gift-card or store-credit use;
Payment status;
Cash on Delivery preference;
COD advance status;
Courier and tracking details;
Return or refund status; and
Warranty information.

Optional profile information

Where voluntarily provided and relevant, we may collect:

Date of birth;
Gender;
Jewellery preferences;
Favourite product categories;
Communication preferences; and
Occasion or gifting preferences.

Date of birth and gender should remain optional unless there is a clear operational or legal reason to require them.

Communication information

We may retain:

Emails;
WhatsApp messages;
Customer-support requests;
Telephone-call notes;
Complaints;
Grievances;
Return requests;
Refund instructions;
Reviews;
Feedback; and
Other communications sent to us.

Content submitted by customers

Where enabled, customers may submit:

Product reviews;
Ratings;
Photographs;
Videos;
Testimonials;
Social-media handles; and
Other user-generated content.

5. Information collected automatically

When you visit or use our website, certain technical information may be collected automatically by the website, hosting provider, WooCommerce, security tools, cookies or analytics services.

This may include:

Internet Protocol address;
Browser type;
Device type;
Operating system;
Language settings;
Approximate location derived from an IP address;
Referring website;
Pages viewed;
Products viewed;
Time spent on pages;
Search queries;
Cart activity;
Checkout activity;
Date and time of access;
Cookie identifiers;
Session identifiers;
Website errors;
Login attempts; and
Security or fraud indicators.

We do not intend to collect precise GPS location unless a clearly identified website feature requires it and appropriate notice or consent is provided.

6. Information received from other parties

We may receive limited information from service providers involved in operating the website or fulfilling an order, including:

Payment confirmation from Razorpay;
Transaction status from banks or payment networks;
Shipment and delivery status from Delhivery, India Post or another courier;
Website and hosting information from Hostinger;
Website analytics from Google Analytics;
Fraud or payment-risk information;
Email delivery or communication status;
Customer responses to an authorised marketing provider; and
Information from social-media platforms when you directly contact or interact with us through those platforms.

We use third-party information only where reasonably connected with the relevant transaction, communication or lawful business purpose.

7. Payment information

Online payments are processed through Razorpay or another payment provider displayed at checkout.

Depending on the payment method, the payment provider may process:

Card details;
Bank information;
UPI information;
Wallet details;
Transaction identifiers;
Billing details;
Authentication results; and
Fraud-prevention information.

Soul Touch Jewellery does not directly store:

Complete debit- or credit-card numbers;
CVV numbers;
Card PINs;
UPI PINs;
Internet-banking passwords; or
Payment OTPs.

Customers must never send such information to Soul Touch Jewellery through email, WhatsApp, telephone, review forms or customer-support messages.

Payment providers process payment information under their own legal terms, security practices and privacy policies.

8. COD refund information

For an approved Cash on Delivery refund, we may request limited financial information such as:

UPI ID;
Account-holder name;
Bank-account details;
IFSC code; or
Other information reasonably necessary to complete the refund.

This information will be used only for:

Verifying the recipient;
Processing the approved refund;
Maintaining a transaction record;
Preventing fraud; and
Meeting legal or accounting obligations.

We will never ask for a UPI PIN, ATM PIN, CVV, payment password or OTP to issue a refund.

9. Why we process personal information

We may process personal information for the following purposes.

Website and shopping services

Displaying products;
Maintaining the shopping cart;
Remembering website preferences;
Providing guest checkout;
Creating and managing accounts;
Maintaining wishlists; and
Providing requested website functions.

Orders and payments

Receiving orders;
Verifying payment;
Verifying COD orders;
Collecting the 40% COD advance;
Processing the remaining COD amount;
Issuing invoices or receipts;
Preventing duplicate transactions; and
Maintaining order records.

Shipping and delivery

Packing orders;
Creating shipping labels;
Sharing tracking information;
Providing delivery updates;
Coordinating delivery attempts;
Investigating lost parcels;
Managing returns to origin; and
Processing replacements or reshipments.

Customer support

Responding to questions;
Providing product information;
Handling cancellations;
Processing returns and exchanges;
Managing refunds;
Assessing warranty claims;
Investigating complaints; and
Redressing grievances.

Website security and fraud prevention

Securing accounts;
Monitoring suspicious activity;
Preventing fraudulent payments;
Identifying COD abuse;
Preventing unauthorised access;
Investigating chargebacks;
Protecting customers and the business; and
Establishing or defending legal claims.

Website analytics and improvement

Understanding website use;
Identifying popular products;
Measuring website performance;
Detecting technical errors;
Improving navigation;
Improving product presentation;
Improving checkout completion; and
Planning inventory and services.

Marketing and personalisation

Where permitted and, where required, with your consent, we may use information to:

Send newsletters;
Announce product launches;
Communicate offers;
Send back-in-stock updates;
Recommend products;
Send abandoned-cart reminders;
Manage loyalty or referral benefits; and
Measure communication performance.

Legal and administrative purposes

Maintaining business records;
Meeting accounting and tax obligations;
Responding to lawful government requests;
Complying with court or regulatory directions;
Enforcing website policies;
Resolving disputes; and
Protecting legal rights.

Personal data should be processed for lawful purposes and, where consent is used, the consent should be informed, specific and capable of withdrawal. The DPDP framework also requires processing to be limited to what is necessary for the stated purpose.

10. Basis on which we process information

Depending on the circumstances, we process information where:

You have voluntarily provided it to receive a requested product or service;
Processing is necessary to fulfil or manage your order;
You have given consent;
Processing is necessary for customer support;
Processing is required or authorised by applicable law;
Processing is reasonably necessary to prevent fraud or protect security;
Processing is needed to establish, exercise or defend legal claims; or
Another lawful ground applies.

Marketing consent will not be treated as a condition for purchasing products where the marketing activity is unnecessary for the purchase.

Consent for marketing and non-essential cookies should be separate from acceptance of the Terms & Conditions.

11. Guest checkout and customer accounts

Customers may ordinarily purchase through guest checkout or create an account.

Guest checkout

When you purchase as a guest, we still collect information necessary to:

Process payment;
Fulfil the order;
Deliver the parcel;
Communicate order status;
Provide returns, refunds and warranty support; and
Maintain legally required transaction records.

Customer accounts

An account may allow you to:

View order history;
Save delivery information;
Manage profile details;
Track orders;
Maintain a wishlist; and
Access other website features.

Customers are responsible for:

Maintaining the confidentiality of their login credentials;
Using a strong and unique password;
Not sharing their account;
Providing accurate information; and
Informing us promptly of suspected unauthorised access.

12. Marketing communications

We may send promotional communications through:

Email;
SMS;
WhatsApp;
Push notification; or
Another channel selected by the customer.

Promotional messages will ordinarily be sent only where:

You have opted in;
You have requested the communication;
The communication is otherwise permitted by law; or
Another valid basis applies.

Marketing consent is voluntary.

You may withdraw your marketing consent by:

Selecting the unsubscribe link in an email;
Using an available opt-out option;
Replying “STOP” where supported;
Changing account preferences; or
Contacting care@soultouchjewellery.com.

Withdrawal may take a reasonable period to process.

Even after marketing opt-out, we may continue sending non-promotional communications concerning:

Existing orders;
Payments;
Delivery;
Security;
Returns;
Refunds;
Warranty;
Policy changes affecting an existing transaction; and
Customer-support requests.

13. Abandoned-cart reminders

Where you enter an email address during checkout but do not complete an order, we may send an abandoned-cart reminder where:

You have provided the email address voluntarily;
The communication is permitted by your consent or applicable law;
The reminder clearly identifies Soul Touch Jewellery; and
An unsubscribe or opt-out method is provided where required.

Abandoned-cart information may include:

Email address;
Cart contents;
Cart value;
Product links;
Time of cart creation; and
Whether the order was subsequently completed.

We will not require a customer to receive abandoned-cart marketing as a condition of completing a purchase.

14. Reviews, photographs and videos

Where review functionality is enabled, information included in a submitted review may become visible publicly.

Public review information may include:

Display name;
Rating;
Written review;
Product purchased;
Photograph;
Video; and
Date of submission.

Customers should not include private information such as:

Home address;
Personal phone number;
Bank information;
Government identification;
Passwords;
Medical information; or
Information concerning another person without permission.

Soul Touch Jewellery may moderate reviews to remove unlawful, abusive, fraudulent, irrelevant or privacy-invasive content.

We will not use a customer’s photograph or video in paid advertising, campaigns or broader marketing merely because it was submitted with a review. Separate permission will ordinarily be obtained before such reuse.

15. Cookies and similar technologies

Cookies are small files or identifiers that may be stored on a browser or device.

We may use the following categories.

Strictly necessary cookies

These support essential website functions such as:

Security;
Login;
Shopping cart;
Checkout;
Payment processing;
Session management;
Fraud prevention; and
Cookie-preference storage.

The website may not function correctly without these cookies.

Preference cookies

These may remember:

Language;
Region;
Display preferences;
Saved cart;
Recently viewed products; and
Other selected settings.

Analytics cookies

These help us understand:

Number of visitors;
Pages viewed;
Website performance;
Navigation patterns;
Product interest; and
Technical errors.

Advertising cookies

Advertising or remarketing cookies will be used only if such tools are actually installed, disclosed and activated in accordance with applicable consent requirements.

At the date of this Policy, Soul Touch Jewellery should not represent that Meta Pixel, Google Ads remarketing or another advertising tracker is active unless it has actually been installed and reflected in the cookie banner.

16. Cookie choices

Customers will be offered the ability to reject non-essential cookies where required and technically supported.

The cookie banner should provide options such as:

Accept All;
Reject Non-Essential;
Manage Preferences; and
Save Choices.

Strictly necessary cookies may remain active because they are required to provide website and checkout functions.

Customers may also change cookie controls through their browser. Blocking cookies may affect:

Cart retention;
Account login;
Checkout;
Saved preferences;
Website performance; and
Certain interactive features.

Consent withdrawal should be reasonably comparable in ease to the method used to obtain consent.

17. Google Analytics

We may use Google Analytics to understand how visitors interact with the website.

Depending on configuration, Google Analytics may process information such as:

Device information;
Browser information;
IP-derived location;
Pages viewed;
Session duration;
Referral source;
Website events; and
Technical performance.

Google Analytics should be configured to respect the website’s cookie-consent choices.

Analytics data should not intentionally include:

Card details;
UPI PINs;
Passwords;
CVV numbers;
Complete bank details; or
Unnecessary customer-message content.

Analytics identifiers may be processed by Google under its own terms and privacy practices.

18. Advertising and targeted marketing

Soul Touch Jewellery does not sell or rent customer information to advertisers.

We do not currently state that we share identifiable customer information with advertising partners for third-party targeted marketing.

Before activating an advertising pixel, remarketing service or audience-matching tool, Soul Touch Jewellery should:

Update this Privacy Policy;
Identify the relevant provider;
Update the cookie banner;
Obtain consent where required;
Provide an opt-out method; and
Confirm that the website configuration matches the published disclosure.

Aggregated or anonymised business insights may be used where they do not reasonably identify an individual.

19. When information may be shared

We may share limited personal information with service providers only where reasonably necessary for the relevant purpose.

Website and hosting providers

Including:

WooCommerce;
WordPress-related service providers;
Hostinger;
Security, backup and website-maintenance providers; and
Approved website plugins.

Payment providers

Including:

Razorpay;
Banks;
Card networks;
UPI providers; and
Payment-fraud or reconciliation services.

Courier and fulfilment providers

Including:

Delhivery;
India Post;
Other approved courier partners; and
Delivery-support providers.

Courier partners may receive information such as:

Recipient’s name;
Delivery address;
Phone number;
Parcel value;
COD amount;
Order reference; and
Delivery instructions.

Communications providers

Including authorised providers used for:

Email;
SMS;
WhatsApp;
Push notifications;
Transactional messages; and
Customer support.

Professional and administrative recipients

Information may also be shared with:

Accountants;
Auditors;
Lawyers;
Insurers;
Fraud investigators;
Government bodies;
Courts;
Regulators; and
Law-enforcement authorities.

Such disclosure will be limited to what is reasonably necessary or legally required.

20. Business transfers

If Soul Touch Jewellery undergoes a genuine:

Sale;
Merger;
Reorganisation;
Transfer of business;
Transfer of assets;
Financing arrangement; or
Change in ownership,

personal information may be disclosed to professional advisers and prospective or actual successors where reasonably necessary.

Any successor receiving personal information will be expected to handle it consistently with applicable law and the commitments applicable to the information.

21. No sale or rental of personal information

Soul Touch Jewellery does not:

Sell customer lists;
Rent personal information;
Trade customer contact details;
Provide customer banking information to advertisers; or
Permit an unrelated person to use customer information for its independent marketing without an appropriate lawful basis.

This does not prevent necessary disclosure to providers who help us process orders, payments, deliveries, communications, analytics, security or legal obligations.

22. Processing outside India

Some technology, hosting, payment, analytics, communication or cloud providers may operate infrastructure in India and other jurisdictions.

As a result, personal information may be processed or accessed outside India depending on:

The provider’s infrastructure;
Data-centre configuration;
Backup arrangements;
Support operations;
Contractual terms; and
Applicable legal restrictions.

Where personal information is transferred or processed outside India, Soul Touch Jewellery will seek to use providers and arrangements permitted under applicable law.

The DPDP framework permits the Central Government to restrict transfers to specified countries or territories and preserves stricter requirements that may apply under another Indian law.

Soul Touch Jewellery should not publish an absolute statement that no information ever leaves India unless this has been verified contractually with every website, hosting, analytics, payment, email and communications provider.

23. Data retention

We retain personal information only for as long as reasonably required for the purpose for which it was collected or for another lawful requirement.

Retention periods may depend on:

Order fulfilment;
Warranty administration;
Returns and refunds;
Customer service;
Fraud prevention;
Accounting;
Taxation;
Legal claims;
Grievance records;
Payment reconciliation;
Security investigations; and
Other legal obligations.

Examples include:

Order and transaction records

These may be retained for the period required to satisfy accounting, taxation, consumer, audit, payment-dispute and legal obligations.

Customer accounts

Account information may be retained until:

The customer requests deletion;
The account is closed;
The account remains inactive for a period after which deletion is appropriate; or
Continued retention is required for orders, disputes or legal compliance.

Marketing information

Marketing contact information may be retained until:

Consent is withdrawn;
The customer unsubscribes;
The information is no longer needed; or
Retention is necessary to maintain a suppression record showing that the customer opted out.

Customer-support and grievance records

These may be retained for a reasonable period to:

Demonstrate resolution;
Manage repeated issues;
Prevent fraud;
Administer warranties; and
Establish or defend legal claims.

Reviews and submitted content

Public reviews may remain displayed until:

The customer requests eligible removal;
The review is removed under moderation rules;
The product or website is discontinued; or
Retention is no longer appropriate.

Personal information should not be retained indefinitely merely because storage is technically possible. Current Indian rules state that personal information should not be held longer than required for its lawful purpose, and the DPDP framework similarly provides for erasure where the purpose is no longer served unless legal retention is necessary.

24. Security practices

Soul Touch Jewellery seeks to maintain reasonable technical, organisational and administrative measures appropriate to the nature and scale of its operations.

Measures may include:

HTTPS or encrypted website connections;
Access restrictions;
Strong account credentials;
Role-based administrative access;
Payment processing through an authorised gateway;
Website and plugin updates;
Security monitoring;
Malware protection;
Backups;
Fraud-detection procedures;
Secure deletion practices;
Confidentiality controls; and
Limiting access to persons who reasonably require it.

Customers can also help protect their information by:

Using a strong and unique password;
Keeping login credentials confidential;
Avoiding shared or public devices during payment;
Checking the website domain before entering information;
Never sharing OTPs, PINs or CVV numbers; and
Informing us promptly of suspected account misuse.

No website, transmission or storage system can be guaranteed to be completely secure. Soul Touch Jewellery therefore cannot promise absolute security, but it will seek to respond appropriately to verified security incidents.

The DPDP framework requires reasonable security safeguards, appropriate technical and organisational measures and accountability for processing carried out by service providers.

25. Personal-data breaches

A personal-data breach may include accidental or unauthorised:

Access;
Disclosure;
Loss;
Alteration;
Destruction;
Transmission; or
Use of personal information.

Where Soul Touch Jewellery becomes aware of a breach, it may:

Investigate the incident;
Secure affected systems;
Suspend compromised access;
Reset credentials;
Coordinate with service providers;
Preserve relevant evidence;
Assess the possible impact;
Notify affected individuals where appropriate or legally required; and
Notify a competent authority where required by law.

A customer who suspects that their Soul Touch Jewellery account or information has been compromised should contact:

care@soultouchjewellery.com

The subject line should state:

Urgent Privacy or Account Security Concern

26. Your privacy rights

Subject to applicable law, verification and valid retention requirements, you may request:

Confirmation of whether we process your personal information;
A summary of the information being processed;
Information concerning the purposes of processing;
Correction of inaccurate information;
Completion of incomplete information;
Updating of outdated information;
Deletion or erasure of eligible information;
Withdrawal of consent;
Marketing opt-out;
Closure of your customer account;
Information regarding relevant service-provider categories;
Review of a privacy-related decision; and
Grievance redressal.

Where applicable under the DPDP framework, an individual may also have the right to nominate another person to exercise relevant rights in the event of death or incapacity. The Act provides rights concerning access, correction, updating, erasure, grievance redressal and nomination.

These rights are not absolute. We may retain information where reasonably necessary for:

An existing order;
Payment reconciliation;
Refund processing;
Warranty administration;
Fraud investigation;
Legal compliance;
Tax or accounting records;
Dispute resolution;
Security; or
Establishing or defending a legal claim.

27. How to make a privacy request

Send your request to:

care@soultouchjewellery.com

Use one of the following subject lines:

Privacy Access Request
Privacy Correction Request
Privacy Deletion Request
Withdraw Marketing Consent
Close My Account
Privacy Grievance

Include:

Full name;
Registered email address;
Registered mobile number;
Order number, where relevant;
Nature of the request;
Information affected; and
Any details reasonably necessary to verify the request.

We may request proportionate verification to prevent an unauthorised person from accessing or deleting another customer’s information.

We will not ask for a password, card PIN, UPI PIN, CVV or OTP.

28. Withdrawal of consent

Where processing is based on consent, you may withdraw that consent through:

An unsubscribe link;
Cookie settings;
Account settings, where available;
Email to care@soultouchjewellery.com; or
Another method made available when consent is collected.

Withdrawal will not invalidate lawful processing already carried out before withdrawal.

Withdrawal may also affect our ability to provide a service that genuinely requires the relevant information. For example, withdrawing processing necessary to deliver an existing paid order will not prevent us from using the information required to complete that order. The DPDP Act expressly recognises withdrawal of consent while allowing necessary processing for an already placed order to continue.

29. Correction and accuracy

Customers are responsible for providing accurate and current information.

You may update certain information through your account or request correction by contacting us.

Where inaccurate delivery information causes:

Failed delivery;
Return to origin;
Refund delay;
Payment error; or
Account-access difficulty,

the consequences may be governed by the Shipping Policy, Cancellation Policy or Return, Exchange & Refund Policy.

We may retain a record of a correction where necessary for accounting, fraud-prevention or legal purposes.

30. Deletion requests

A valid deletion request may result in:

Closure of the account;
Removal of optional profile details;
Removal from active marketing lists;
Deletion of eligible communications;
Anonymisation of certain analytics or business records; or
Removal of customer-uploaded content where appropriate.

We may decline or limit deletion where the information remains necessary for:

Completing an order;
Processing a refund;
Enforcing a warranty;
Preventing fraud;
Maintaining financial records;
Resolving a dispute;
Complying with law;
Investigating a security incident; or
Defending a legal claim.

Where complete deletion is not possible, we may restrict use or retain only the information reasonably required for the relevant obligation.

31. Children’s privacy

The website and purchasing facilities are intended primarily for persons aged 18 years or above.

Soul Touch Jewellery does not knowingly seek to collect personal information directly from children below 18 for independent purchasing or marketing.

A person below 18 should use the website and place an order only through or under the supervision of a parent or lawful guardian.

If we learn that a child’s information was collected without appropriate authority, we may:

Delete the information;
Close the account;
Stop marketing;
Request parent or guardian verification; or
Take another action required by law.

We do not intend to conduct behavioural tracking or targeted advertising directed specifically at children. The DPDP framework contains special restrictions on processing children’s information, including verifiable parental consent and restrictions on harmful processing and targeted advertising.

32. Social-media login

At the date of this Policy, Soul Touch Jewellery does not intend to offer Google, Facebook or other social-media login unless the feature is specifically enabled on the website.

If social login is introduced, the website may receive information authorised by the customer through the relevant platform, such as:

Name;
Email address;
Account identifier; and
Profile image.

Before enabling social login, this Privacy Policy should be updated to identify the feature and explain the information received.

33. Social media and messaging platforms

When you contact us through Instagram, Facebook, WhatsApp or another platform:

The platform may process information under its own privacy policy;
We may receive your profile name, contact information and message content;
We may retain the communication for customer service or dispute resolution; and
Information shared publicly may be visible to other platform users.

Customers should not send payment passwords, PINs, CVV numbers, OTPs or unnecessary sensitive information through social media.

34. Third-party websites and services

Our website may contain links to:

Instagram;
Payment providers;
Courier tracking websites;
Social-media platforms;
Customer-support tools; or
Other third-party services.

A third-party service may collect information independently under its own privacy policy.

Soul Touch Jewellery does not control the independent privacy practices of an unrelated third party. Customers should review the third party’s privacy information before providing personal data.

35. Automated decision-making and profiling

Soul Touch Jewellery does not presently intend to make legally significant customer decisions solely through automated processing.

Automated or rule-based systems may nevertheless be used to:

Detect payment risk;
Identify suspicious login attempts;
Flag potential fraud;
Identify repeated COD refusals;
Recommend products;
Detect abandoned carts; or
Prioritise website security reviews.

Where a decision materially affects an order or account, Soul Touch Jewellery may conduct a reasonable manual review upon request, subject to fraud-prevention and legal requirements.

36. Privacy complaints

A privacy complaint may concern:

Unauthorised use of personal information;
Incorrect information;
Unwanted marketing;
Failure to action an opt-out;
Suspected data disclosure;
Account-security concerns;
Deletion requests;
Cookie choices; or
Another privacy matter.

Send the complaint to:

Nazia Khan
Founder and Grievance Officer
Soul Touch Jewellery

Email: care@soultouchjewellery.com
Phone: +91 63097 93041

Address:
House No. 68, Alhasnath Colony
Toli Chowki, Hyderabad
Telangana – 500008, India

Use the subject:

Privacy Grievance – Brief Description

We will acknowledge a grievance within 48 hours and endeavour to address it within one month, in accordance with our Grievance Redressal Policy.

37. Legal disclosures

We may preserve or disclose personal information where reasonably necessary to:

Comply with applicable law;
Respond to a lawful court order;
Respond to an authorised government request;
Prevent or investigate fraud;
Address a cybersecurity incident;
Protect life or safety;
Enforce a contract or website policy;
Recover amounts lawfully due;
Establish or defend a legal claim; or
Protect the rights of Soul Touch Jewellery, its customers or another person.

We will seek to limit disclosure to information reasonably necessary for the relevant purpose.

38. Changes to this Privacy Policy

Soul Touch Jewellery may update this Policy to reflect:

Changes in law;
Changes in website technology;
New payment or courier providers;
New analytics or advertising tools;
New customer-account features;
Changes in marketing practices;
New customer rights; or
Changes in business operations.

The revised version will display an updated “Last Updated” date.

Where a change materially affects the use of personal information, we may provide additional notice through:

Website notice;
Email;
Account notification;
Cookie banner; or
Another appropriate method.

A material new purpose requiring consent will not be treated as approved merely because this Policy has been updated.

39. Contact information

For questions about this Privacy Policy or the handling of personal information, contact:

Soul Touch Jewellery
House No. 68, Alhasnath Colony
Toli Chowki, Hyderabad
Telangana – 500008, India

Email: care@soultouchjewellery.com
Phone and WhatsApp: +91 63097 93041
Support hours: Monday to Saturday, 10:00 a.m. to 6:00 p.m. IST, excluding public holidays.