Who We Are
Solitaire Jewellery Boutique ("Solitaire", "we", "our", "us") is a family-owned jewellery retail boutique operating from Lane of Skin Mantraa, 113/65B, Behind Hotel Royal Cliff, Khalasi Line, Swaroop Nagar, Kanpur, Uttar Pradesh 208002, India. We operate as a data fiduciary as defined under the Digital Personal Data Protection Act, 2023 ("DPDPA").
This Privacy Policy describes how we collect, use, store, share, and protect the personal data you provide when you interact with our website (solitairejewelleryboutique.com), contact us via WhatsApp, book an appointment, or visit our boutique. By using our website or voluntarily sharing your information with us, you acknowledge the practices described in this policy.
Personal Data We Collect
We collect only the information you choose to provide to us. This may include:
- Contact details — your name, mobile number, and email address.
- Enquiry details — the piece or collection you are interested in, your preferences, and any other information you include in your message to us.
- Appointment information — your preferred date and time, wedding date (for bridal consultations), and the nature of your requirement.
- Communication records — the content of messages you send us via WhatsApp, the enquiry form, or email.
- Website usage data — anonymised, aggregate page-view data collected by Plausible Analytics; and, with your explicit consent, session and event data via Google Analytics and Meta Pixel.
We do not collect payment card numbers, government identity numbers (such as Aadhaar or PAN), financial account details, biometric data, or any other sensitive personal information. All financial transactions take place in-store and no payment data is transmitted through our website.
How We Collect Your Data
We receive personal data through the following channels:
- The enquiry and contact forms on our website.
- WhatsApp messages you initiate to our registered business number (+91 89578 04161).
- Appointment booking forms for bridal consultations and private viewings.
- Newsletter sign-up forms, where you provide only your email address.
- In-store interactions, where you may provide contact details directly to our team.
- Telephone calls when you contact us directly.
Why We Process Your Data
We use your personal data solely for the following purposes:
- To respond to your enquiry promptly, accurately, and in a helpful manner.
- To schedule, confirm, and manage appointments and private viewings.
- To share photographs, videos, and details of pieces you have expressed interest in.
- To provide after-sales service, including reminders for complimentary annual check-ups.
- To send our newsletter, only if you have subscribed; you may unsubscribe at any time.
- To understand how visitors use our website and improve the content and experience we offer.
We do not use your data for automated profiling, algorithmic decision-making, or any purpose that produces legal or similarly significant effects on you.
Legal Basis for Processing
We process your personal data on the following legal bases under the DPDPA 2023 and applicable Indian law:
- Consent — where you have voluntarily provided your data by submitting an enquiry, booking an appointment, or subscribing to our newsletter.
- Legitimate purpose — to respond to communications you have initiated and to fulfil our obligations as a boutique serving you.
- Contractual necessity — where processing is required to honour a booking, special order, or other commitment you have made with us.
You may withdraw your consent at any time by contacting us using the details in the "Grievance Officer and Contact" section below. Withdrawal of consent does not affect the lawfulness of any processing that took place before withdrawal.
Third-Party Service Providers
We engage carefully selected service providers who may access your data solely to help us operate our boutique and website. These providers are contractually bound to process data only on our instructions and to maintain appropriate security standards:
- Cal.com — for appointment and booking management.
- Vercel Inc. — for website hosting on enterprise-grade cloud infrastructure.
- Plausible Analytics — for privacy-first, cookieless web analytics. No personal data is collected or shared through Plausible.
- Google LLC — for Google Analytics (with your consent) and Google Maps integration for store directions.
- Meta Platforms, Inc. — for Meta Pixel advertising attribution (with your consent) and WhatsApp Business communications you initiate.
- Resend — for transactional email delivery, such as appointment confirmations.
Some of these providers operate servers outside India. Where your data is transferred internationally, we rely on appropriate safeguards — including the standard contractual clauses recognised under Indian law and the DPDPA — to protect it. We do not sell, rent, exchange, or otherwise transfer your personal data to any third party for their own marketing or commercial purposes, under any circumstances.
How Long We Retain Your Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected, and no longer than required by applicable law:
- Enquiry and communication records: up to 12 months from the date of last contact, unless you have an ongoing relationship with us (such as a special order or after-sales service engagement).
- Appointment and consultation records: up to 6 months after the appointment date.
- Newsletter subscriber data: until you unsubscribe or request deletion, whichever is sooner.
- Records we are required to retain by law (for example, accounting or tax records): for the period mandated by the applicable statute.
After the applicable retention period, data is securely deleted or irreversibly anonymised. We review our data holdings periodically to ensure compliance with this policy.
How We Protect Your Data
We implement reasonable technical and organisational security measures consistent with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including:
- Encrypted transmission of all data between your browser and our website via TLS/HTTPS.
- Access controls ensuring that only authorised members of our team can access enquiry and appointment records.
- Hosting on Vercel's enterprise-grade infrastructure with ISO 27001-certified data centres and continuous security monitoring.
- Regular review of vendor agreements and data access permissions.
- No storage of sensitive financial data (payment cards, bank details) on our systems.
No method of data transmission over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in harm to you, we will notify the Data Protection Board of India and, where required by the DPDPA, inform you directly, without undue delay.
Cookies and Analytics
We use a minimal number of cookies and tracking technologies on our website:
- Essential cookie: a single short-lived session cookie for the cookie consent banner. This does not store any personal data and is necessary for the banner to function correctly.
- Plausible Analytics: our default analytics tool. Plausible is cookieless, does not track individual users, and processes no personal data. It simply counts page views in aggregate.
- Google Analytics (with your consent): tracks pages visited, session duration, and general usage patterns for advertising attribution. Activated only after you provide explicit consent.
- Meta Pixel (with your consent): tracks visits and ad-related events for our Facebook and Instagram advertising campaigns. Activated only after you provide explicit consent.
You can accept all cookies, reject non-essential cookies, or customise your preferences from the banner that appears on your first visit. You may change your choice at any time by clearing your browser cookies and revisiting our website. For full details, please see our Cookie Policy.
Your Rights Under the DPDPA 2023
As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights in relation to the personal data we hold about you:
- Right to access: request a summary of the personal data we hold about you and how it is being used.
- Right to correction: ask us to correct personal data that is inaccurate, incomplete, or out of date.
- Right to erasure: request the deletion of your personal data, subject to any legal obligations that require us to retain it.
- Right to grievance redressal: raise a complaint with our Grievance Officer, and if not resolved to your satisfaction, with the Data Protection Board of India once it is constituted.
- Right to withdraw consent: opt out of data processing at any time; this will not affect the lawfulness of any processing carried out before withdrawal.
- Right to nominate: nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer using the details in Section 14. We will acknowledge your request within 48 hours and resolve it within 30 days, or within such time as required by law.
Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately and we will take prompt steps to delete it from our records.
Links to Third-Party Websites
Our website may contain links to third-party websites — for example, to GIA (gia.edu) or IGI (igi.org) for certificate verification, or to our social media profiles on Instagram and Facebook. These links are provided for your convenience and information only. We have no control over the content or privacy practices of those websites. We encourage you to read the privacy policies of any third-party site you visit before providing personal data.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acknowledgement of the updated policy.
Grievance Officer and Contact
For any questions, concerns, complaints, or requests relating to this Privacy Policy or the personal data we hold about you, please contact our Grievance Officer:
- Name: Solitaire Jewellery Boutique — Customer Relations
- Address: Lane of Skin Mantraa, 113/65B, Behind Hotel Royal Cliff, Khalasi Line, Swaroop Nagar, Kanpur, Uttar Pradesh 208002, India
- WhatsApp: +91 89578 04161
- Hours: Monday to Saturday, 12 noon to 8 PM IST
- Response commitment: acknowledgement within 48 hours; resolution within 30 days
If you are not satisfied with the resolution provided by us, you may, once the Data Protection Board of India is constituted under the DPDPA 2023, file a complaint with the Board.
Last updated 1 July 2026