Privacy policy

What we collect, why, who we share it with, how long we keep it, and your choices.

Template, not legal advice. Have this reviewed by a qualified lawyer for each market before launch.

Who we are

Made to Adore Jewellery ("we", "us") runs this store from India. For anything about your data, email hello@example.com.

What we collect

When you order: your name, email, phone, delivery address, the items you buy, any gift note, and whether payment succeeded. Card details are entered directly with our payment provider, Razorpay; we never see or store your card number.
When you sign in: your email address and a one-time 6-digit code. We store only a scrambled (hashed) copy of the code, it expires after 10 minutes, and we delete it once used. When you're signed in, we keep a hashed session record so this device stays signed in for up to 6 months.
When you look up an order: the order number and email you type. We use them only to find that order and don't keep a separate record of the lookup.
When you sign up for emails: your email (and mobile number, if you choose), plus a record of what you agreed to and when.
When you browse: essential cookies always (see Cookie policy), and analytics and advertising cookies only as described there and in your cookie settings.

Why we use it

To take payment, pack, ship and deliver your order, and to send order, shipping and sign-in emails.
To let you see your orders and tracking (signed in, on the device you ordered from, or by order lookup).
To prevent fraud and abuse, for example by limiting how often codes and lookups can be requested.
To meet tax, customs and accounting obligations.
To send marketing, only if you agreed, and to understand how the shop is used, only as your cookie settings allow.

Who we share it with

Razorpay (payments).
Our couriers (delivery and customs).
Our hosting (Vercel) and database (Neon) providers.
Our email provider (Resend).
With your consent, Google Analytics, Meta and TikTok.

Each provider uses the information only to provide its service to us. We don't sell your personal information for money.

How long we keep it

Order records: kept for 8 years for tax and customs purposes.
Sign-in codes: deleted within 10 minutes, or as soon as they're used.
Sign-in sessions: end after 6 months, or when you sign out.
Marketing data: kept until you unsubscribe or ask us to delete it.

Keeping it safe

Pages are served over HTTPS.
Payment happens with Razorpay.
Sign-in codes and sessions are stored only as hashes.
Order pages open only with a private link.
An order lookup never shows the full delivery address.

Your rights in Canada (PIPEDA)

We only use non-essential cookies with your consent, and only send marketing emails if you've given express consent (CASL). You can access or correct your information, or withdraw consent at any time. You can also complain to the Office of the Privacy Commissioner of Canada. Email hello@example.com.

International transfers

We're based in India and use service providers in other countries, so your information is processed outside Canada.

Children

Our shop is for adults. We don't knowingly collect information from children under 13.

Changes

If we change this policy, we'll update the date below. For significant changes, we'll also say so on the site.

Last updated 11 October 2026.