1Information We Collect

We collect the following categories of personal information:

We do not collect sensitive personal data such as government IDs, biometric data, or financial information beyond what is necessary for payment processing.

2How We Collect Information

• Direct Interactions: When you create an account, place an order, fill a contact form, or subscribe to our newsletter.
• Automated Technologies: Cookies, web beacons, and tracking scripts collect technical data as you browse our website.
• Third-Party Sources: Payment gateways, shipping partners, Google Analytics, and social media platforms when you interact with us through those channels.
• WooCommerce: Our platform collects cart contents, billing details, and purchase history to process your orders.

3How We Use Your Information

• Order Processing: To fulfill your orders, send confirmations, and manage returns or exchanges.
• Account Management: To create and manage your customer account on elvaracrystals.com.
• Payment Processing: To verify and process payments securely through third-party payment partners.
• Delivery: To coordinate shipping and provide tracking updates for your orders.
• Customer Support: To respond to queries and feedback via email, phone (+91 9810805185), or WhatsApp.
• Marketing: To send promotional emails, discount codes (e.g., first-order codes like FIRST150/FIRST201), and seasonal offers — only if you have opted in. You may unsubscribe at any time.
• Site Improvement: To analyze usage patterns and personalize your shopping experience.
• Legal Compliance: To comply with applicable Indian laws and regulations.
• Fraud Prevention: To detect and prevent fraudulent transactions or illegal activity.

4Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share data only with:

• Service Providers: Payment gateways, shipping/logistics partners, email marketing platforms, and cloud hosting providers — bound by confidentiality agreements.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction.
• Legal Authorities: When required by law, court order, or governmental authority under Indian law.
• Safety Purposes: To protect the rights, property, or safety of Elvara Crystals, our customers, or the public.

5Cookies & Tracking Technologies

Our website uses cookies to enhance your browsing experience. Below is a summary of the cookies we use:

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6Data Retention

• Order & Transaction Records: Minimum 7 years as required under Indian tax and accounting laws.
• Account Data: Retained while your account is active. You may request deletion at any time (subject to legal obligations).
• Marketing Data: Retained until you unsubscribe or withdraw consent.
• Technical/Log Data: Typically 90 days unless required longer for security investigations.

When data is no longer needed, it is securely deleted or anonymized.

7Data Security

We implement the following security measures to protect your personal data:

• SSL/TLS encryption (HTTPS) for all data transmitted through our website.
• PCI-DSS compliant third-party payment gateways. We do not store full card details on our servers.
• Restricted access — only authorized personnel can access personal data.
• Password hashing and secure account authentication for registered users.
• Regular security assessments of our website and hosting infrastructure.

8Your Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction: Correct inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal obligations.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
• Right to Grievance Redressal: File a complaint with us — we will respond within 30 days.
• Right to Nominate: Nominate another person to exercise your data rights on your behalf.

To exercise any right, email us at info@elvaracrystals.com with subject line: "Privacy Request". You may also approach the Data Protection Board of India if unsatisfied with our response.

9Children's Privacy

Our website is not directed at children under the age of 18 years. We do not knowingly collect personal data from minors. If you believe your child has provided us with personal data, please contact us at info@elvaracrystals.com and we will promptly delete such information.

10Third-Party Links

Our website may contain links to third-party sites such as payment gateways or social media platforms. This Privacy Policy applies solely to elvaracrystals.com. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before sharing your information.

11Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be indicated by the updated "Last Updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice on our website. Continued use of our site after changes constitutes acceptance of the updated policy.

12Contact Us

For any questions, requests, or concerns regarding this Privacy Policy, please reach out to us: