═══════════════════════════════════════════════════════════════
PRIVACY POLICY — NILA JEWELLERY
═══════════════════════════════════════════════════════════════
Effective Date: Effective Date: 15-07-2026
Last Updated: 11-07-2026

1. INTRODUCTION

NILA Jewellery ("NILA," "we," "us," "our") operates the website
https://nilajewellery.com and the NILA mobile applications
(together, the "Services"), providing a curated demi-fine
jewellery shopping experience.

This Privacy Policy explains what information we collect, how
we use it, who we share it with, and the choices and rights
you have over your own data. By using the Services, you
confirm you have read and understood this policy.

If anything in our Terms and Conditions conflicts with this
Privacy Policy on the specific matter of how your personal
data is collected, used, or disclosed, this Privacy Policy
takes precedence.

2. INFORMATION WE COLLECT

We collect two broad categories of information.

  DEVICE INFORMATION
  Collected automatically when you visit the Services —
  browser type, IP address, approximate location, device
  identifiers, time zone, and how you navigate and interact
  with pages and products. We collect this through cookies and
  similar tracking technologies (see Section 9).

  ORDER & ACCOUNT INFORMATION
  Provided directly by you — name, email, phone number,
  delivery addresses, account credentials, order history,
  wishlist and cart contents, customer support conversations,
  reviews, and payment confirmation details (we never store
  full card numbers or CVV — those are handled entirely by
  Razorpay, our payment processor).

We rely on you to provide accurate information. We are not
responsible for losses arising from incorrect or outdated
information you supply to us.

3. HOW WE USE YOUR INFORMATION

  Order Information is used to:
    - Fulfil and ship your orders, including generating
      invoices and order confirmations
    - Process payments securely through Razorpay
    - Communicate order status, delivery updates, and support
    - Screen orders for fraud or unusual risk patterns
    - Where you've given consent, send you offers and
      recommendations relevant to your purchase history

  Device Information is used to:
    - Detect and prevent fraudulent activity
    - Understand how customers use our Services so we can
      improve site speed, layout, and product discovery
    - Measure the effectiveness of our marketing

  Wallet & Loyalty Information (NILA Wallet, NILA Second
  Chance, VIP Membership) is used to:
    - Track credit balances, unlock dates, and eligibility
      for offers tied to your account
    - Verify exchange/trade-in submissions and their approval
      status

4. MARKETING COMMUNICATIONS & CONSENT

By creating a NILA account or completing a purchase, you
consent to receive transactional and promotional
communications from us through app notifications, SMS,
WhatsApp/RCS messages, email, and — where you've opted in —
promotional calls. This includes order updates, wallet credit
alerts, exchange request status, and offers on collections
like our Value Bundle Collections.

You may withdraw marketing consent at any time by:
  - Turning off promotional notifications in the app's
    Profile -> Settings
  - Emailing support@nilajewellery.com with the subject
    "Withdraw Marketing Consent"

We will action withdrawal requests within 7 business days.
Transactional messages (order confirmations, delivery
updates, OTPs, wallet credit unlock notices) are not
promotional and cannot be opted out of while you hold an
active account, as they are necessary to operate the Services.

5. SHARING YOUR INFORMATION

We do not sell your personal information. We share it only
with:

  - Delivery and logistics partners - name, address, phone,
    solely to complete delivery
  - Razorpay - payment processing (Razorpay's own privacy
    practices govern how they handle payment data)
  - Firebase (Google) - authentication, push notifications,
    and app performance monitoring
  - Analytics providers - aggregated, anonymized usage data
    to help us improve the Services
  - Government or regulatory authorities - only where legally
    required, such as in response to a valid court order or
    statutory request
  - A successor entity - in the event of a merger, acquisition,
    or sale of NILA's business, your information may transfer
    as part of that transaction, subject to the same
    protections described here

Any service provider we share data with is contractually
required to protect it and use it only for the purpose we've
authorized.

6. DATA SECURITY

We use HTTPS/TLS encryption across the Services, encrypted
database storage, and PCI-DSS compliant payment handling via
Razorpay. Access to customer data internally is restricted to
staff who need it to do their job. No online system is 100%
secure, and we cannot guarantee absolute protection against
every possible attack - but we continuously monitor and
improve our safeguards.

7. YOUR RIGHTS

Under India's Digital Personal Data Protection Act, 2023, you
have the right to:

  - Access the personal data we hold about you
  - Correct inaccurate or outdated data
  - Request deletion of your account and associated data
    (except where retention is legally required - see
    Section 8)
  - Withdraw consent for marketing at any time
  - Receive your data in a portable, machine-readable format
  - Nominate another individual to exercise these rights on
    your behalf in the event of your death or incapacity
  - Lodge a grievance with our Grievance Officer (Section 12)

To exercise any of these rights, email
support@nilajewellery.com with the subject "Data Rights
Request" and your registered mobile number or email for
verification. We will acknowledge your request within 24
hours and resolve it within 30 days, in line with DPDP Act
requirements. In some cases - such as an active warranty claim
or pending order - we may need to retain specific records
even after a deletion request, and we'll explain why if this
applies to you.

8. DATA RETENTION

  - Active account data - retained while your account remains
    active
  - Order history and invoices - retained 7 years, as required
    for GST and tax compliance
  - Wallet transaction records - retained 7 years
  - Exchange/trade-in request records - retained 3 years from
    resolution
  - Customer support conversations - retained 2 years
  - Device/analytics data - anonymized after 14 months

Once a retention period expires, we permanently delete or
irreversibly anonymize the data.

9. COOKIES AND TRACKING

We use cookies and similar technologies to keep you logged in,
remember your cart and wishlist, understand site traffic
patterns, and - where you consent - personalize recommendations
and measure marketing performance. You can disable cookies in
your browser settings; some features (like a persistent cart)
may not work correctly if you do.

10. CHILDREN'S PRIVACY

The Services are intended for users aged 18 and above. We do
not knowingly collect information from anyone under 18. If you
believe a minor has provided us with personal information,
contact support@nilajewellery.com and we will delete it
promptly.

11. THIRD-PARTY LINKS

The Services may link to external sites - Instagram, our
payment gateway, courier tracking pages. Once you leave our
Services, this Privacy Policy no longer applies. We encourage
you to review the privacy practices of any third-party site
you visit.

12. GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000 and
the DPDP Act, 2023, all privacy-related grievances should be
directed to:

  Email: support@nilajewellery.com
  Subject line: "Grievance - Privacy"

We acknowledge grievances within 24 hours and aim to resolve
them within 30 days.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect
changes in our practices, technology, or legal requirements.
Material changes will be communicated via email or an in-app
notice before they take effect. Continued use of the Services
after an update constitutes acceptance of the revised policy.

14. CONTACT US

  Email:   support@nilajewellery.com
  Website: https://nilajewellery.com

═══════════════════════════════════════════════════════════════
Compliant with the Digital Personal Data Protection Act 2023,
the Information Technology Act 2000, Google Play Data Safety
requirements, and Apple App Store Privacy requirements.
═══════════════════════════════════════════════════════════════