Privacy Policy

Information you provide directly

When you place an order, register interest, or contact us, we collect: your full name, email address, phone number, shipping and billing address, and GST number (if provided). During checkout, your phone number is used for OTP verification — the OTP itself is never stored after verification.

Payment information

We do not collect or store your card details, UPI handles, or net banking credentials. All payment data is handled exclusively by Razorpay (a PCI-DSS compliant payment gateway). We receive only a transaction reference and payment status from Razorpay.

Order and usage data

We store records of your orders including the items purchased, configuration choices (strap, bezel, engraving), delivery address, and order status. We also collect anonymous session-level usage data (pages visited, configurator interactions, time on site) to improve our product and experience.

Device and technical data

Our servers automatically record your IP address, browser type, operating system, and referring URL. This information is used for security monitoring and aggregate analytics only.

Wishlist and compare

Your wishlist and comparison selections are stored locally in your browser (localStorage). This data is never transmitted to our servers unless you proceed to checkout.

Order fulfilment

We use your name, address, and phone number to process your order, arrange delivery through Blue Dart, and send you order confirmation and dispatch notifications.

OTP verification

Your phone number is shared with Twilio (our SMS provider) solely to deliver the one-time password needed to authorise your transaction. It is not used for marketing SMS.

Transactional email

Your email address is used to send order confirmations, dispatch notifications, and invoice copies. These emails are sent via Resend. We do not send marketing emails unless you have explicitly subscribed to our newsletter.

Customer support

When you contact us, we use your information to identify your order, respond to your enquiry, and maintain a record of our correspondence.

Service improvement

Anonymous usage data helps us understand which products and features are most valued, identify technical issues, and improve the website experience.

Legal and compliance

We retain order records for the period required under the Goods and Services Tax Act and other applicable Indian statutes.

Razorpay

Payment processing. Razorpay's privacy policy governs how your payment data is handled: razorpay.com/privacy.

Twilio

SMS delivery for OTP verification. Your phone number is transmitted to Twilio solely for this purpose.

Resend

Transactional email delivery for order confirmations and invoices.

Blue Dart

Courier and logistics. Your name, phone number, and delivery address are shared with Blue Dart to arrange and track your shipment.

Google reCAPTCHA

Used on the Order Tracking page to prevent automated abuse. This service sends limited technical data (IP address, browser information) to Google. Google's privacy policy applies.

Order records

Order data (name, address, items, payment reference) is retained for a minimum of 7 years to comply with GST and accounting requirements under Indian law.

Newsletter subscriptions

Your email is retained until you unsubscribe. You may unsubscribe at any time by clicking the link in any newsletter or by emailing us.

OTP records

OTP verification audit records are retained for 90 days for fraud detection purposes, after which they are automatically deleted.

Anonymous analytics

Anonymised session tracking data is retained for 12 months.

Access and correction

You may request a copy of the personal data we hold about you, or ask us to correct inaccurate information, by emailing concierge@royalzman.com with your order number.

Deletion

You may request deletion of your personal data. We will honour this request where we are not legally required to retain the data (e.g., for tax records). Deletion requests for active orders cannot be processed until the order lifecycle is complete.

Withdrawal of consent

Where processing is based on consent (e.g., newsletter subscription), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Data portability

You may request your order history and personal data in a structured, machine-readable format.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS. Payment data never passes through our servers. Admin access to order data is protected by authentication and role-based controls.

No method of transmission over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee absolute security.

We use strictly necessary cookies to maintain your admin session (if you are an admin user) and to remember your preferences across page loads. We do not use third-party advertising cookies or cross-site tracking. The wishlist and comparison data described above is stored in localStorage, not cookies.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the 'Last updated' date at the top of this page. Continued use of the website after changes are posted constitutes acceptance of the revised policy.