Privacy policy

Last updated: July 25, 2026

Kyza Jewels Private Limited, operating under the brand names “Kyza”, “Kyza India” and “Kyza Jewellery” (“Kyza”, “we”, “us” or “our”), operates this website and online store, including all related information, content, products, features, tools and services offered through it (collectively, the “Services”).

Our store is hosted and powered by Shopify, which enables us to provide the Services to you. We may also use third-party checkout, payment, logistics, analytics, customer-support, communication and marketing service providers, including GoKwik, to operate and improve our business.

This Privacy Policy explains how we collect, use, store, process and disclose your personal information when you:

• visit or use our website;
• browse or purchase our products;
• use our checkout;
• communicate with us;
• submit a custom jewellery enquiry;
• interact with us through email, telephone, SMS, WhatsApp, social media or other channels; or
• otherwise use our Services.

If there is any conflict between our Terms of Service and this Privacy Policy concerning the collection, processing or disclosure of personal information, this Privacy Policy will apply.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with us, we may collect or process the following categories of personal information.

Contact and identification information

This may include:

• your full name;
• email address;
• telephone or mobile number;
• billing address;
• shipping or delivery address;
• country, state, city and postal code;
• identity, tax or verification information where required for high-value, insured or international shipments; and
• any other information you voluntarily provide to us.

Account information

Where you create an account, this may include:

• username;
• password or account credentials;
• account preferences;
• saved addresses;
• order history;
• wishlist information; and
• communication preferences.

Passwords and security credentials may be handled through Shopify or another platform provider and may not be directly visible to us.

Order and transaction information

This may include:

• products viewed or purchased;
• cart and wishlist contents;
• ring size, engraving or customisation details;
• metal, stone or finish preferences;
• custom order references and design instructions;
• order value;
• purchase history;
• return, replacement, repair, exchange or cancellation requests;
• delivery status;
• payment status;
• invoices;
• tax details; and
• transaction confirmations.

Payment information

We may receive limited payment and transaction information, such as:

• selected payment method;
• transaction status;
• payment confirmation;
• billing details;
• refund status; and
• limited payment-related details supplied by the payment gateway.

Full card numbers, CVV details, UPI PINs, online-banking passwords and similar sensitive payment credentials are generally processed directly by authorised payment gateways or financial institutions and are not stored by Kyza.

GoKwik may facilitate the checkout experience, but prepaid and online payment processing is generally carried out by the payment aggregator or payment gateway integrated with the checkout.

Communications and customer-support information

This may include information contained in:

• emails;
• telephone calls;
• WhatsApp conversations;
• SMS messages;
• social-media messages;
• support requests;
• feedback;
• reviews;
• complaints;
• voice notes;
• photographs;
• design references; and
• other communications you send to us.

Device and technical information

When you visit or use our Services, we or our service providers may automatically collect:

• IP address;
• browser type;
• device type;
• operating system;
• device identifiers;
• network information;
• approximate location derived from an IP address;
• referral source;
• pages visited;
• time spent on pages;
• search activity;
• cart activity;
• checkout activity;
• cookie identifiers; and
• similar technical or usage data.

Marketing and preference information

This may include:

• consent to receive marketing;
• email, SMS or WhatsApp preferences;
• products or categories you are interested in;
• abandoned-cart activity;
• browsing behaviour;
• advertising interactions; and
• responses to campaigns or promotions.

Custom jewellery information

Where you request a custom piece, we may collect:

• reference images;
• ring measurements;
• jewellery specifications;
• stone and metal preferences;
• engraving text;
• budget information;
• delivery deadlines;
• photographs voluntarily supplied by you; and
• information relevant to preparing designs, CADs, quotations or orders.

Please avoid submitting unnecessary sensitive information through custom-order communications.

2. How We Collect Personal Information

We may collect personal information from the following sources.

Directly from you

For example, when you:

• place an order;
• create an account;
• subscribe to marketing;
• contact customer support;
• submit a custom-order request;
• provide measurements;
• send a design reference;
• leave a review;
• enter a promotion; or
• communicate with us by telephone, email, SMS, WhatsApp or social media.

Automatically through our Services

We may collect information automatically through:

• cookies;
• pixels;
• analytics tools;
• server logs;
• browser storage;
• session technologies; and
• similar tracking or technical tools.

From service providers

We may receive information from organisations that support our business, such as:

• Shopify;
• GoKwik;
• payment gateways;
• fraud-prevention and verification providers;
• courier and logistics providers;
• customer-support providers;
• email and WhatsApp service providers;
• analytics providers;
• advertising platforms;
• cloud-service providers; and
• technology vendors.

From business partners or other third parties

We may also receive personal information from:

• social-media platforms;
• advertising partners;
• referral partners;
• affiliates;
• marketplaces;
• event partners; and
• other organisations where permitted by law.

3. How We Use Your Personal Information

We may use personal information for the following purposes.

To provide and fulfil the Services

We may use your information to:

• process and confirm orders;
• prepare made-to-order or custom jewellery;
• process payments and refunds;
• manage your account;
• arrange shipping and delivery;
• provide tracking information;
• verify delivery addresses;
• manage repairs, replacements, exchanges or returns where applicable;
• provide invoices;
• respond to enquiries;
• send order updates;
• communicate regarding design, ring size, CAD approval or production;
• remember your preferences; and
• provide customer support.

Checkout and order processing

We may use GoKwik and associated technology providers to:

• facilitate checkout;
• pre-fill or verify customer details;
• verify mobile numbers;
• determine cash-on-delivery availability;
• assess order risk;
• reduce fraudulent or high-risk transactions;
• reduce return-to-origin risk;
• improve checkout speed and performance;
• support abandoned-checkout communication; and
• assist with order-related messaging.

GoKwik may process information such as your name, mobile number, email address, shipping address, cart contents, order information, device details, IP address and checkout interactions in accordance with its own privacy policy. GoKwik describes its services as a checkout platform that processes personal data connected with use of its checkout services.

Payment processing

We may share information necessary to process payments with:

• payment gateways;
• acquiring banks;
• card networks;
• UPI service providers;
• financial institutions; and
• fraud-prevention providers.

We generally do not directly receive or store your complete card credentials, UPI PIN, internet-banking password or similar sensitive payment authentication information.

Order fulfilment and insured shipping

We may use and share relevant information for:

• packaging;
• shipping;
• insured jewellery delivery;
• delivery verification;
• OTP-based delivery;
• customs clearance;
• international shipping;
• address verification;
• fraud prevention;
• insurance requirements;
• tax compliance; and
• high-value order verification.

This may include your name, contact details, delivery address, order value, product details and identification or tax information where reasonably required.

Customisation and product development

We may use custom-order details to:

• prepare quotations;
• develop designs;
• create CADs;
• manufacture jewellery;
• confirm specifications;
• conduct quality checks;
• provide after-sales support; and
• improve our products and customer experience.

Communication with you

We may contact you through:

• email;
• telephone;
• SMS;
• WhatsApp;
• social media; or
• other communication channels.

Communications may include:

• order confirmation;
• payment confirmation;
• production updates;
• ring-size confirmation;
• CAD or design approval;
• delivery updates;
• abandoned-cart reminders;
• checkout reminders;
• customer-support responses;
• review requests;
• service announcements; and
• account-related information.

Marketing and advertising

Subject to your preferences and applicable law, we may use personal information to:

• send product announcements;
• send promotional offers;
• send email, SMS or WhatsApp campaigns;
• remind you about items left in your cart;
• personalise product recommendations;
• analyse campaign performance;
• display relevant advertisements; and
• improve marketing effectiveness.

You may opt out of promotional communications through the unsubscribe mechanism provided or by contacting us. Even after opting out of marketing, you may continue to receive transactional or service-related communications concerning your orders, account or enquiries.

Security and fraud prevention

We may use personal information to:

• authenticate accounts;
• protect checkout and payment processes;
• prevent unauthorised transactions;
• investigate suspicious orders;
• detect fraud;
• verify customer or delivery information;
• prevent misuse of offers;
• identify malicious activity;
• protect customers, Kyza and service providers; and
• maintain the security of our website and systems.

Analytics and improvement

We may use information to:

• understand website use;
• monitor website performance;
• improve navigation;
• improve checkout conversion;
• identify technical issues;
• analyse customer preferences;
• improve products;
• improve marketing;
• develop new services; and
• personalise the shopping experience.

Legal and compliance purposes

We may use personal information to:

• comply with applicable laws;
• maintain tax and accounting records;
• respond to lawful government or court requests;
• investigate legal claims;
• protect our rights;
• enforce our terms and policies;
• resolve disputes;
• prevent unlawful conduct; and
• meet regulatory, customs or insurance obligations.

4. Legal Bases and Lawful Processing

Where required by applicable law, we process personal information on one or more of the following grounds:

• your consent;
• performance of a contract with you;
• steps taken at your request before entering into a contract;
• compliance with legal obligations;
• legitimate business interests that do not override your rights;
• prevention of fraud or security threats;
• protection of legal rights; or
• another lawful ground permitted under applicable law.

Where we rely on your consent, you may withdraw that consent using the relevant unsubscribe or withdrawal mechanism or by contacting us.

Withdrawal of consent will not affect processing lawfully carried out before withdrawal. We may continue to retain or process certain information where necessary to:

• fulfil an existing order;
• provide support;
• comply with tax or accounting laws;
• prevent fraud;
• establish or defend legal claims;
• resolve disputes; or
• meet another legal obligation.

5. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to:

• operate the website;
• remember your preferences;
• keep items in your cart;
• support login and checkout;
• analyse site traffic;
• measure advertising performance;
• personalise content;
• detect fraud;
• improve website performance; and
• support marketing.

Some cookies are necessary for the website to function. Other cookies may be used for analytics, personalisation or advertising, subject to applicable consent requirements.

You can manage certain privacy preferences through our cookie banner or privacy settings where available. You may also control cookies through your browser settings, although disabling necessary cookies may affect website or checkout functionality.

Shopify provides merchants with customer privacy tools such as privacy policies, cookie banners and data-sharing opt-out controls, which may be configured by region.

6. How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Shopify

Our store is powered by Shopify. Personal information submitted through our website may be processed by Shopify to host, operate, secure and improve the Services.

Shopify may process information in countries outside your place of residence and may use information connected with interactions across Shopify-powered stores in accordance with its applicable privacy notices and merchant settings.

GoKwik and checkout providers

We may disclose personal information to GoKwik and related checkout technology providers for:

• checkout facilitation;
• customer verification;
• address pre-filling;
• COD eligibility;
• fraud and risk assessment;
• return-to-origin reduction;
• checkout optimisation;
• cart recovery; and
• customer communication.

Payment providers

We may disclose relevant information to payment gateways, banks, financial institutions and payment networks to process:

• payments;
• refunds;
• disputes;
• chargebacks; and
• fraud checks.

Courier, logistics and insurance providers

We may disclose information to:

• courier companies;
• delivery partners;
• shipping aggregators;
• insured-logistics providers;
• freight providers;
• customs agents;
• insurance providers; and
• address or identity verification partners.

This information may be required to deliver your order, verify receipt, insure a shipment, complete customs procedures or manage a return.

Technology and operational service providers

We may disclose information to vendors that provide:

• website hosting;
• cloud storage;
• IT support;
• order management;
• customer relationship management;
• customer support;
• email delivery;
• SMS or WhatsApp communication;
• analytics;
• fraud prevention;
• review collection;
• accounting;
• inventory management; and
• other business services.

Marketing and advertising partners

Where permitted by law and subject to your privacy choices, we may share information with advertising, analytics or marketing partners to:

• measure campaign effectiveness;
• deliver relevant advertising;
• understand customer activity;
• carry out remarketing; and
• improve promotions.

Such partners process information under their own privacy notices and contractual obligations.

When you direct or consent to disclosure

We may share information where you:

• request delivery;
• authorise a custom service;
• use a social-media integration;
• request communication with a third party;
• participate in a collaboration; or
• otherwise consent to the disclosure.

Legal, safety and business purposes

We may disclose information where necessary to:

• comply with law;
• respond to legal process;
• cooperate with regulators or law enforcement;
• investigate fraud;
• protect safety;
• defend legal claims;
• enforce agreements;
• complete a merger, acquisition, restructuring or sale of assets; or
• protect Kyza, our customers or others.

We do not sell personal information for money.

Certain privacy laws may define some advertising-related disclosures as a “sale” or “sharing” even where no money is exchanged. Where applicable, you may have a right to opt out through the privacy controls provided on our website.

7. Relationship With Shopify

Shopify hosts and supports our online store and may collect and process personal information concerning your access to and use of the Services.

Information submitted through our store may be transmitted to Shopify and other service providers located in countries other than your own.

Shopify may also provide enhanced platform services that use information from interactions across Shopify-powered stores, depending on our Shopify settings and applicable customer privacy controls.

To understand how Shopify processes personal information, you may refer to Shopify’s applicable consumer privacy policy and privacy portal.

Shopify provides automated policy and customer privacy tools, but Kyza remains responsible for ensuring that its privacy practices and published policy accurately reflect its business operations.

8. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, social-media platforms or services.

We are not responsible for the privacy, security, accuracy or practices of third-party websites or platforms that we do not control.

When you access a third-party service, you should review its privacy policy and terms separately.

The inclusion of a third-party link does not necessarily mean that Kyza endorses or controls that third party.

9. International Transfers

Kyza is based in India, but Shopify and some of our service providers may store or process information in other countries.

As a result, personal information may be transferred to, stored in or processed in a country outside your place of residence.

Where required by applicable law, we or our service providers will rely on recognised safeguards or transfer mechanisms for international transfers, such as:

• contractual protections;
• adequacy decisions;
• standard contractual clauses; or
• another lawful transfer mechanism.

Data protection laws in the destination country may differ from those in your country.

10. Data Security

We use reasonable administrative, technical and organisational safeguards intended to protect personal information against:

• loss;
• misuse;
• unauthorised access;
• unauthorised disclosure;
• alteration; and
• destruction.

However, no website, transmission method, storage system or security measure is completely secure. We therefore cannot guarantee absolute security.

Please do not send sensitive payment credentials, passwords, UPI PINs or similar confidential information through email, WhatsApp or social media.

You are responsible for maintaining the confidentiality of any account credentials associated with the Services.

11. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• process and fulfil orders;
• provide customer support;
• maintain account history;
• provide repairs or after-sales services;
• maintain tax and accounting records;
• comply with legal requirements;
• prevent fraud;
• resolve disputes;
• enforce agreements; and
• establish or defend legal claims.

Retention periods may vary depending on:

• the nature of the information;
• the purpose of processing;
• whether an account remains active;
• legal or tax requirements;
• warranty or after-sales obligations;
• fraud-prevention needs; and
• potential disputes.

When information is no longer required, we may delete, anonymise or securely dispose of it, subject to applicable law.

12. Children’s Privacy

Our Services are intended for adults who are legally capable of entering into a purchase transaction.

We do not knowingly collect or process personal information belonging to a child in a manner that requires parental or guardian consent under applicable law.

Where required, we may seek verifiable consent from a parent or lawful guardian before processing a child’s personal information.

If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share, as those terms may be defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.

13. Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights.

Right to access or know

You may request information about the personal information we hold or process about you.

Right to correction

You may request correction, completion or updating of inaccurate or incomplete personal information.

Right to deletion or erasure

You may request deletion of personal information, subject to legal, contractual, fraud-prevention and record-retention exceptions.

Right to data portability

Where applicable, you may request a copy of certain personal information in a structured or commonly used format.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent.

Right to object or restrict processing

Depending on your jurisdiction, you may object to or request restriction of certain processing activities.

Right to opt out of marketing

You may unsubscribe from promotional communications through:

• the unsubscribe link in an email;
• the opt-out instructions in a message; or
• contacting us.

You may still receive non-promotional communications relating to orders, customer support, account security or legal matters.

Right to opt out of targeted advertising or sharing

Where applicable, you may have the right to opt out of processing for targeted advertising or certain disclosures treated as “sale” or “sharing” under local law.

Where available, these preferences may be managed through the customer privacy controls or data-sharing opt-out page on our website.

Right to grievance redressal

You may contact us regarding questions, concerns or complaints about our handling of personal information.

Right to nomination in India

Where provided under applicable Indian data-protection law, you may have the right to nominate another individual to exercise your rights in the event of death or incapacity.

Authorised representatives

Where permitted by law, you may designate an authorised representative to submit a privacy request on your behalf. We may require proof of authority and verification of your identity.

Verification

Before fulfilling a rights request, we may need to verify your identity to protect your information and prevent unauthorised access.

We will not discriminate against you for exercising a privacy right available under applicable law.

14. Rights Available in India

Subject to the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, their applicable commencement provisions and other applicable Indian law, individuals in India may have rights relating to:

• access to information concerning processing;
• correction, completion and updating of personal data;
• erasure of personal data;
• withdrawal of consent;
• grievance redressal; and
• nomination.

The Digital Personal Data Protection Act, 2023 establishes the general framework for lawful digital personal-data processing in India, while the Digital Personal Data Protection Rules, 2025 and notified commencement provisions determine how particular obligations take effect.

Requests may be submitted using the contact details listed below.

15. Rights in the European Economic Area and United Kingdom

Where the General Data Protection Regulation or UK data-protection law applies, you may have rights including:

• access;
• correction;
• deletion;
• restriction;
• objection;
• portability;
• withdrawal of consent; and
• complaint to a competent supervisory authority.

Where we rely on consent, withdrawal does not affect the lawfulness of processing completed before withdrawal.

Where we rely on legitimate interests, you may have a right to object in certain circumstances.

16. United States Privacy Rights

Depending on the state in which you reside, you may have rights concerning:

• access;
• correction;
• deletion;
• portability;
• targeted advertising;
• sale or sharing of personal information; and
• profiling with legal or similarly significant effects.

Such rights vary by state and may be subject to exceptions.

Where applicable, you may submit a request through our website privacy controls or by contacting us.

We may recognise a legally valid Global Privacy Control signal where required by applicable law and technically supported.

17. Complaints and Grievances

If you have a complaint or concern about how we process personal information, please contact us using the details below.

We will review and respond within a reasonable period and in accordance with applicable law.

Where available under applicable law, you may also have the right to:

• appeal our response;
• contact a competent data-protection authority;
• submit a grievance to the appropriate authority; or
• pursue another legally available remedy.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in our business;
• changes in our service providers;
• changes in technology;
• changes in legal requirements;
• new products or services; or
• operational, security or regulatory developments.

When we update this Privacy Policy, we will revise the “Last updated” date above.

Where required by law, we may also provide additional notice or request fresh consent.

19. Contact Us

For questions, privacy requests, complaints or concerns relating to this Privacy Policy or our handling of personal information, please contact:

Kyza Jewels Private Limited
Operating under the brand name Kyza Jewellery
6, Lyons Range, Murgighata, B.B.D. Bagh
3rd Floor
Kolkata – 700001
West Bengal, India

Email: admin@kyzaindia.com
Phone: +91 74398 77985

For the purposes of applicable data-protection laws, Kyza Jewels Private Limited is the data controller or data fiduciary responsible for the personal information processed in connection with the Services, except where another organisation independently determines the purpose and manner of processing.