Privacy policy

Privacy Policy

Last updated: 11 September 2026

House of Mani is operated by GOLD BOX JEWELS AND MARKETING (OPC) PRIVATE LIMITED (“House of Mani”, “we”, “us” or “our”), GSTIN 08AAMCG9315P1ZT. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit houseofmani.co.in, create an account, place an order, communicate with us or otherwise use our products and services.

This policy is a privacy notice. Where applicable law requires consent for a particular activity, we will request it separately through an appropriate affirmative action. By providing another person’s personal data, you confirm that you are authorised to provide it and have given that person the information required by law.

1. Scope and responsibility

House of Mani determines the purposes and means of processing personal data for its store operations and acts as the data fiduciary or controller where applicable. Shopify hosts the online store and may also process certain data for its own purposes as explained in Shopify’s consumer privacy documentation.

This policy applies to our website, online store, customer support, order fulfilment, delivery, returns, fraud prevention, marketing and related communications. Third-party websites and services are governed by their own privacy notices.

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data: name, email address, telephone number, billing address, delivery address and recipient details.
  • Account data: account identifiers, preferences, saved items and authentication information managed through Shopify or an account provider.
  • Order and transaction data: products viewed or purchased, cart and wishlist activity, order value, discounts, taxes, payment status, transaction references, returns, replacements, refunds and order history.
  • Payment data: payment method, masked payment details, payment confirmation and fraud signals. Complete card, UPI or banking credentials are generally collected directly by authorised payment providers rather than by House of Mani.
  • Communications: emails, contact-form submissions, WhatsApp messages, complaints, feedback, reviews and records of customer-support interactions.
  • Claim and evidence data: photographs, unboxing videos, delivery evidence, returned-product images, parcel labels, product identifiers, dispatch and return-opening videos, inspection reports and other material submitted or created to assess a cancellation, delivery, return, refund, replacement, warranty, fraud or legal claim.
  • Device and usage data: IP address, browser, device, operating system, identifiers, cookie information, pages viewed, links selected, referral source, session activity and approximate location derived from technical data.
  • Marketing data: communication preferences, campaign interactions and information used to measure or personalise advertising where permitted.
  • Compliance and security data: risk indicators, access logs, suspected misuse, chargeback information and records required for legal, tax, accounting, security or dispute purposes.

Please do not send passwords, OTPs, complete payment-card details or personal data that is unnecessary for your request.

3. Sources of personal data

We may obtain personal data directly from you or an authorised recipient; automatically through the website, cookies and similar technologies; from Shopify; from payment providers such as Razorpay and payment networks; from couriers and fulfilment providers; from marketing, analytics, security and customer-support providers; from social-media or messaging platforms when you interact with us there; and from public authorities or other lawful sources where necessary.

4. Purposes and lawful grounds

We process personal data only for a lawful purpose, including where you have consented, where processing is necessary to respond to your voluntary request or perform an order, for a permitted legitimate use, to comply with law, or under another ground recognised by applicable law. Purposes include:

  • operating, securing and improving the website and store;
  • creating and administering customer accounts;
  • processing payments, orders, invoices, fulfilment, tracking and delivery;
  • processing cancellations, returns, replacements, refunds and complaints;
  • communicating transactional, safety, service and support information;
  • detecting, investigating and preventing fraud, product substitution, payment abuse, false delivery claims, chargebacks, security incidents and violations of our policies;
  • maintaining accounting, GST, audit and business records;
  • establishing, exercising or defending legal claims and responding to lawful authority requests;
  • measuring website performance and improving products and customer experience; and
  • sending or measuring marketing and advertising where permitted, subject to available choices and consent requirements.

If we seek to use personal data for a materially unrelated purpose, we will provide additional information and obtain consent where required.

5. Fraud, delivery and return evidence

To protect customers and House of Mani, we may preserve and compare order records, customer communications, payment and courier records, OTP and proof-of-delivery records, parcel weights, shipping labels, product identifiers, photographs, packing and dispatch videos, pickup records, unboxing evidence, return-opening videos and inspection reports.

This information may be used to assess claims, verify product and parcel identity, identify substitution or deliberate damage, resolve delivery and payment disputes, respond to chargebacks, preserve evidence and report suspected unlawful conduct. Evidence will be considered reasonably as a whole and will not be treated as automatically conclusive merely because it was created by one party.

6. Cookies, analytics and advertising

Shopify and our authorised providers may use cookies, pixels, local storage and similar technologies for essential store functions, security, preferences, analytics, attribution and advertising. Some cookies are necessary for checkout, account, cart and security functions. Optional analytics or advertising technologies may involve sharing identifiers and activity information with providers such as Shopify or Meta when those services are enabled.

Where required, optional technologies will be controlled through a consent or privacy-preference mechanism. You may also manage cookies through your browser, but blocking essential cookies may prevent parts of the store or checkout from functioning. Withdrawing consent will not affect processing already lawfully completed before withdrawal.

7. Marketing communications

We may send marketing by email, SMS, WhatsApp or another channel only where we have an appropriate lawful basis. You may opt out using the unsubscribe method in a message or by contacting us. Opting out of marketing does not prevent necessary order, account, security, delivery, support, recall or legal communications.

8. How we disclose personal data

We may disclose only the personal data reasonably necessary for the relevant purpose to:

  • Shopify and providers supporting hosting, storefront, checkout, accounts, analytics and store operations;
  • Razorpay, banks, card networks, UPI participants, fraud-prevention services and other payment providers;
  • couriers, fulfilment providers, delivery recipients and logistics insurers;
  • cloud, IT, security, communications, customer-support, analytics and marketing providers;
  • Meta and other advertising or social-media providers where their services are enabled and legally permitted;
  • accountants, auditors, insurers, lawyers and professional advisers under appropriate duties;
  • government bodies, regulators, courts, law-enforcement agencies and other competent authorities where required or lawfully permitted; and
  • a genuine successor or participant in a proposed merger, restructuring, financing or sale, subject to appropriate confidentiality and applicable law.

Our service providers are expected to process data for authorised purposes and to apply appropriate safeguards. We do not authorise them to use personal data for unrelated purposes. We do not disclose private complaint evidence for public marketing without an appropriate lawful basis or consent.

9. Shopify and third-party platforms

The store is powered by Shopify. Information submitted through the store is transmitted to and processed by Shopify and its providers, which may be located outside India. Shopify may independently process information across merchants for security, service improvement and enhanced features. You can review the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for data processed independently by Shopify.

If you contact us through WhatsApp, Instagram, Facebook or another third-party platform, that platform may independently process your account, device and communication data under its own terms and privacy policy.

10. International processing

Shopify and other service providers may store or process personal data in India and other countries. Such processing may be subject to different laws. We will use contractual, organisational or other safeguards required by applicable law and will comply with any restriction notified by the Government of India on transfers of personal data outside India.

11. Retention

We retain personal data only for as long as reasonably necessary for the stated purpose, including fulfilment, customer support, tax, GST, accounting, audit, product-safety, security, fraud prevention, chargeback, limitation-period, dispute and legal requirements. Different categories may have different retention periods.

Data may be retained longer where a complaint, return, payment dispute, investigation, litigation hold or legal obligation is pending. When personal data is no longer required, we will delete, anonymise or securely dispose of it as reasonably appropriate, subject to technical backup cycles and lawful retention duties.

12. Security and personal-data breaches

We and our providers use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse and destruction. No system or transmission method can be guaranteed completely secure.

Where a personal-data breach occurs, we will take reasonable containment, assessment and remediation measures and will notify affected individuals, the Data Protection Board of India or another authority where and when required by applicable law. Customers should promptly report suspected account or communication compromise and should never share passwords or OTPs.

13. Your rights and choices

Subject to applicable law and relevant exceptions, you may have the right to:

  • obtain information about personal data being processed and relevant disclosures;
  • request correction, completion or updating of inaccurate or incomplete personal data;
  • request erasure of personal data no longer required for a lawful purpose;
  • withdraw consent where processing is based on consent;
  • opt out of marketing communications;
  • seek grievance redressal; and
  • nominate another person to exercise applicable rights in the event of death or incapacity.

To protect customers, we may reasonably verify identity and authority before acting on a request. Erasure or withdrawal may not apply where processing is required for fulfilment, fraud prevention, recordkeeping, a legal claim or another lawful purpose. We will not discriminate against a person for exercising a genuine legal right.

Please submit privacy requests to support@gbjmindia.com. If you are dissatisfied with our response, you may escalate the grievance to the competent authority, including the Data Protection Board of India where its jurisdiction and the applicable provisions are in force, after using the grievance process required by law.

14. Children’s personal data

A person under 18 must not independently place an order or create a customer relationship requiring contractual capacity. Such activity must be undertaken by a parent or lawful guardian. Where we knowingly process a child’s personal data and applicable law requires it, we will seek verifiable consent from the parent or lawful guardian.

We do not knowingly undertake tracking or behavioural monitoring of children or direct targeted advertising at children where prohibited. A parent or guardian who believes a child has provided personal data without proper authority may contact us for review and deletion, subject to lawful retention requirements.

15. Your responsibilities

When providing personal data or exercising a data right, you must provide authentic information, not impersonate another person, not suppress material information and not submit a knowingly false or fraudulent grievance. This does not discourage or restrict a genuine complaint or request made in good faith.

16. Third-party links

The website may link to services not controlled by House of Mani. We are not responsible for an independent third party’s privacy or security practices. Review the relevant privacy notice before supplying information directly to that third party.

17. Changes to this policy

We may update this policy prospectively to reflect changes in law, technology, providers or business practices. We will update the date above and provide additional notice or seek consent where required. A policy update will not retrospectively make an unlawful use of previously collected personal data lawful.

18. Privacy contact and Grievance Officer

Archana Jain
Grievance Officer
GOLD BOX JEWELS AND MARKETING (OPC) PRIVATE LIMITED
Plot No. 04, Sukhija Vihar-B, Mangyawas, Sanganer, Jaipur, Rajasthan 302020, India
Email: support@gbjmindia.com
Phone/WhatsApp: +91 90012 12444
Hours: Monday–Friday, 9:00 AM–6:00 PM (IST)

Privacy requests should describe the request and identify the relevant account, order or interaction without including unnecessary sensitive information. We may ask for proportionate verification before disclosing, correcting or deleting personal data.