Privacy policy
What we collect, why, who we share it with, how long we keep it, and your choices.
Template, not legal advice. Have this reviewed by a qualified lawyer for each market before launch.
Who we are
Made to Adore Jewellery ("we", "us") runs this store from India. For anything about your data, email order@madetoadore.com.
What we collect
- When you order: your name, email, phone, delivery address, the items you buy, any gift note, and whether payment succeeded. Card details are entered directly with our payment provider, Razorpay; we never see or store your card number.
- When you sign in: your email address and a one-time 6-digit code. We store only a scrambled (hashed) copy of the code, it expires after 10 minutes, and we delete it once used. When you're signed in, we keep a hashed session record so this device stays signed in for up to 6 months.
- If you tap "Use my current location" at checkout: your browser asks first, then sends your approximate coordinates to BigDataCloud, which returns your city, state and postal code to fill in the form. We don't store your coordinates.
- Your country: we pick the store (and currency) from the country your connection comes from, which our host Vercel provides with each visit, and remember your choice in a cookie.
- When you look up an order: the order number and email you type. We use them only to find that order and don't keep a separate record of the lookup.
- When you sign up for emails: your email (and mobile number, if you choose), plus a record of what you agreed to and when.
- When you browse: essential cookies always (see Cookie policy). With your consent (see your cookie settings), we and our analytics and advertising partners also collect:
- Device and connection: IP address, approximate location worked out from it (country, region, city), browser, operating system, device type, screen size and language.
- What you do on the site: pages and products you view, how you got here (the website, search, ad or email link, including campaign tags and ad click IDs), what you search, add to your bag or wishlist, and how far you get through checkout.
- Session recordings and heatmaps (Microsoft Clarity): mouse movements, clicks, taps and scrolling, replayed to find what's confusing. Text you type into forms, including addresses and payment details, is masked and not recorded.
- Speed and errors: how fast pages load on your device (Vercel Speed Insights).
- Where an order came from: when you place an order, we save the campaign or website that brought you (first and latest visit), and, if you've allowed advertising cookies, your IP address, browser and the Meta and TikTok cookie IDs, so we can tell which ads lead to orders.
- Matching with ad platforms: if you've allowed advertising cookies, when you check out and when an order is paid we send Meta, Google and TikTok your email, phone, name, city, state/province, postal code and country in hashed (scrambled, one-way) form, with the order value and items. They use this to match the order to an ad you saw and to measure our ads. They can't read the hashed details back.
Why we use it
- To take payment, pack, ship and deliver your order, and to send order, shipping and sign-in emails.
- To let you see your orders and tracking (signed in, on the device you ordered from, or by order lookup).
- To prevent fraud and abuse, for example by limiting how often codes and lookups can be requested.
- To meet tax, customs and accounting obligations.
- To send marketing, only if you agreed.
- To understand how the shop is used and fix what's confusing (analytics, session recordings, page speed), only as your cookie settings allow.
- To measure which ads and campaigns lead to visits and orders, and to show our ads to people likely to be interested (including people similar to our customers), only if you allow advertising cookies.
Who we share it with
- Razorpay (payments).
- Our couriers (delivery and customs).
- Our hosting (Vercel) and database (Neon) providers.
- Shiprocket (booking couriers, labels and tracking).
- Our email providers (GoDaddy for order emails, Resend for newsletters).
- With your consent: Google (Analytics and ads measurement), Meta (Facebook and Instagram ads), TikTok (ads), Microsoft Clarity (session recordings and heatmaps) and Vercel (cookieless visit counts and page speed).
Each provider uses the information only to provide its service to us. We don't sell your personal information for money.
How long we keep it
- Order records: kept for 8 years for tax and customs purposes.
- Sign-in codes: deleted within 10 minutes, or as soon as they're used.
- Sign-in sessions: end after 6 months, or when you sign out.
- Marketing data: kept until you unsubscribe or ask us to delete it.
- Analytics: Google Analytics keeps event data for 14 months; Clarity keeps recordings for 30 days; campaign details on an order are kept with the order.
- Advertising partners keep what they receive under their own policies: Meta, Google, TikTok, Microsoft.
Keeping it safe
- Pages are served over HTTPS.
- Payment happens with Razorpay.
- Sign-in codes and sessions are stored only as hashes.
- Order pages open only with a private link.
- An order lookup never shows the full delivery address.
Your choices about tracking
- Cookie settings (bottom of every page): turn analytics and advertising on or off at any time. Turning them off stops new collection from then on.
- Global Privacy Control: if your browser sends it, we turn advertising off automatically.
- Ad settings on each platform: Meta, Google, TikTok.
- Ask us at order@madetoadore.com to see or delete what we hold about you.
Your rights in India (Digital Personal Data Protection Act, 2023)
We process your personal data with your consent, or where the law allows it to fulfil your order. You can:
- Access a summary of the personal data we hold about you and how we use it.
- Correct, complete, update or erase it (we keep order records as long as tax law requires).
- Withdraw consent at any time, as easily as you gave it: use Cookie settings for tracking, or the unsubscribe link for emails. Withdrawing doesn't affect what was done before.
- Nominate someone to exercise these rights if you die or become unable to.
- Raise a grievance with our grievance officer, our customer care lead, at order@madetoadore.com. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Analytics and advertising cookies stay off in India unless you turn them on.
International transfers
We're based in India and use service providers in other countries, so your information is processed outside India.
Children
Our shop is for adults. We don't knowingly collect information from children under 13.
Changes
If we change this policy, we'll update the date below. For significant changes, we'll also say so on the site.
Last updated 12 October 2026.