Rang Riwaaz
Last updated: August 1, 2026
This Privacy Policy describes how Rang Riwaaz (“we”, “us”, “our”), operating the website https://rangriwaaz.in (the “Website”), collects, uses, discloses, and protects the personal data of visitors, customers, and registered users (“you”, “your”). This policy is drafted to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and other applicable laws of India. By using the Website, you consent to the collection and use of information as described in this policy.
1. Who We Are
Our website address is: https://rangriwaaz.in. Rang Riwaaz is a jewelry retail business based in New Delhi, India, selling necklaces, rings, bracelets, earrings, and related accessories through this Website.
Registered / operating address: O-128 Vani Vihar, Uttam Nagar, New Delhi
Contact email: sales@rangriwaaz.in | Phone: (91) 9211477522
2. Information We Collect
2.1 Information you provide to us
- Name, email address, phone number, and billing/shipping address when you place an order or create an account.
- Payment-related details processed through our third-party payment gateway (see Section 8).
- Any information you submit through contact forms, comment forms, newsletter sign-up, or customer support requests.
2.2 Information collected automatically
- Your IP address, browser type, device information, and browsing behaviour on the Website, collected via cookies and analytics tools.
- Order history and preferences, used to improve your shopping experience.
3. Comments
When visitors leave comments on the Website, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help with spam detection.
An anonymized string created from your email address (a “hash”) may be provided to the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public alongside your comment.
4. Media
If you upload images to the Website, please avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the Website can potentially download and extract location data from images on the Website.
5. Cookies
If you leave a comment on the Website, you may opt in to saving your name, email address, and website in cookies for your convenience, so you do not need to re-enter your details when you leave another comment. These cookies last for one year.
If you visit our login page, a temporary cookie is set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we also set several cookies to save your login information and screen display choices. Login cookies last for two days, and screen option cookies last for a year. If you select “Remember Me”, your login persists for two weeks. Logging out removes login cookies.
If you edit or publish content, an additional cookie is saved in your browser. This cookie includes no personal data and simply indicates the post ID of the content just edited. It expires after one day.
We may also use cookies for shopping cart functionality, analytics (such as Google Analytics), and marketing purposes. You can control or disable cookies through your browser settings; disabling cookies may affect certain features of the Website, such as the shopping cart.
6. Embedded Content From Other Websites
Pages on the Website may include embedded content (for example, videos, images, or articles). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website directly.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
7. Who We Share Your Data With
If you request a password reset, your IP address is included in the reset email. We may also share your information with:
- Payment gateway providers, to process your order payment securely.
- Shipping and logistics partners, to deliver your order.
- Analytics and marketing service providers (e.g. Google Analytics, Meta), in aggregated or pseudonymised form where possible.
- Government or regulatory authorities, where required by Indian law.
We do not sell your personal data to third parties for their independent marketing purposes.
8. Payments
All payments made on the Website are processed through our third-party payment gateway partner(s). We do not store your full credit/debit card, UPI PIN, or net-banking credentials on our servers, in line with Reserve Bank of India (RBI) guidelines on card data storage. Payment data is handled directly by the payment gateway under its own security and privacy standards.
9. How Long We Retain Your Data
If you leave a comment, the comment and its metadata are retained indefinitely, so that we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For registered users, we store the personal information provided in their user profile. Users can see, edit, or delete their personal information at any time (except their username). Website administrators can also see and edit that information.
Order and transaction records are retained for as long as required under Indian tax, accounting, and consumer-protection laws, even after account deletion.
10. Your Rights Over Your Data
If you have an account on the Website, or have left comments, you can request an exported file of the personal data we hold about you, including any data you have provided. You can also request that we erase any personal data we hold about you, except data we are obliged to keep for administrative, legal, tax, or security purposes.
Under the Digital Personal Data Protection Act, 2023, you additionally have the right to:
- Obtain a summary of the personal data we process about you and the processing activities undertaken.
- Request correction, completion, or updating of your personal data.
- Request erasure of personal data that is no longer necessary for the purpose it was collected.
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Register a grievance regarding processing of your personal data with our Grievance Officer (see Section 13).
To exercise any of these rights, please contact us at sales@rangriwaaz.in. We will respond within the timelines prescribed under applicable Indian law.
11. Data Security
We implement reasonable security practices and procedures, as required under Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011, to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Where Your Data Is Sent
Visitor comments may be checked through an automated spam-detection service. Some of our service providers (such as analytics, cloud hosting, or payment processors) may process or store data outside India. Where this occurs, we take reasonable steps to ensure such transfers comply with the Digital Personal Data Protection Act, 2023 and applicable rules.
13. Grievance Officer
In accordance with the Information Technology Act, 2000, the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of the Grievance Officer are provided below:
Name: [Grievance Officer Name]
Designation: [Designation]
Address: O-128 Vani Vihar, Uttam Nagar, New Delhi
Email: sales@rangriwaaz.in
Phone: (91) 9211477522
The Grievance Officer will acknowledge complaints within 24 hours and resolve them within the timeline prescribed under applicable Indian law.
14. Children’s Privacy
The Website is not directed at children under the age of 18. We do not knowingly collect personal data from children without verifiable consent of a parent or lawful guardian, as required under the DPDP Act, 2023.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated policy will be posted on this page with a revised “Last updated” date.
16. Disclaimer
This Privacy Policy is provided for general informational purposes and is based on template language and general guidance regarding Indian data protection law. It does not constitute legal advice. Rang Riwaaz recommends having this document reviewed by a qualified legal professional familiar with the Digital Personal Data Protection Act, 2023 and related rules before publishing it as your final, binding policy, particularly regarding data retention periods, cross-border transfer safeguards, and the appointment of your Grievance Officer / Data Protection Officer.
17. Contact Us
If you have questions about this Privacy Policy, please contact us:
Rang Riwaaz
O-128 Vani Vihar, Uttam Nagar, New Delhi
Email: sales@rangriwaaz.in
Phone: (91) 9211477522