Privacy Policy

Amiglam (“we”, “us”) sells budget-friendly jewellery for women and kids at amiglam.com. This policy explains what we collect when you browse or buy, why we collect it, and what you can ask us to do about it. It is written for the Digital Personal Data Protection Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020.

Who is responsible for your data. [registered legal entity name], [registered address], GSTIN [GSTIN].

What we collect

What	When	Why
Name, email address, phone number	When you create an account, place an order or subscribe	To identify you, confirm orders and send order updates
Delivery and billing address	At checkout	To deliver your order and raise a valid invoice
Order history, returns, refunds	As you shop	To run your account, handle returns and meet tax obligations
Payment status and a payment reference	At checkout	To confirm payment. We never see or store your full card number, CVV or UPI PIN — those go directly to the payment gateway
IP address, browser and device type, pages viewed	Automatically	To keep the site secure, fix faults and understand what people shop for
Cookies and similar storage	Automatically	See Cookies below

Virtual Try-On: your photo never leaves your device

Our Virtual Try-On lets you see a piece on yourself using your camera or a photo from your device. This runs entirely inside your browser.

Your photo and camera stream are never uploaded to our servers, and never sent to any third party.
The face and hand detection models run locally in your browser. We host those model files ourselves, so using Try-On does not tell anyone else that you used it.
Nothing is saved. Close the Try-On window or the tab and the image is gone. If you download the result, that copy lives only on your device.
Your browser will ask permission before the camera turns on, and you can revoke it at any time in your browser settings.

Search by image works differently

If you use the camera icon in the search bar to search by image, that image is uploaded to our server so we can match it against our catalogue. We use it only to return search results and delete it after processing. This feature also loads an image-recognition library from a third-party CDN (jsDelivr), which will see your IP address. If you would rather not share the image, search by text instead.

Cookies

Essential — your session, cart contents, login state and the security token that protects forms. The site cannot work without these.
Preference — small conveniences such as your chosen listing view or recently compared items, stored in your browser.
Fonts — our pages load typefaces from Google Fonts, which receives your IP address as part of that request.

You can clear or block cookies in your browser. Blocking essential cookies will stop checkout from working.

Who we share it with

We do not sell your personal data. We share only what is needed, with:

Delivery partners — your name, address and phone number, so your parcel arrives.
Payment gateways — they handle the payment itself and are responsible for your card or UPI credentials under their own policies.
Email and SMS providers — to send order confirmations and delivery updates.
Authorities — where the law requires it.

How long we keep it

Order and invoice records: retained as long as tax and accounting law requires.
Account details: until you ask us to delete your account.
Server and security logs: a short rolling window, then overwritten.
Images uploaded to search-by-image: deleted after processing.

Your rights

You can ask us to:

tell you what personal data we hold about you;
correct anything inaccurate or incomplete;
delete your account and personal data, where we are not required to keep it;
stop sending you marketing messages — every marketing email has an unsubscribe link;
nominate someone to exercise these rights on your behalf.

Write to [support email] and we will respond within 30 days.

Children

We sell jewellery for children, but we sell it to adults. Accounts and orders are for people aged 18 and over, and we do not knowingly collect personal data from a child. If you believe a child has given us their details, contact us and we will delete them.

Security

The site is served over HTTPS, passwords are stored hashed rather than in plain text, and access to order data is limited to staff who need it. No system is perfect — if we ever discover a breach that affects you, we will tell you and the Data Protection Board as the law requires.

Grievance Officer

If you are unhappy with how we have handled your data, contact our Grievance Officer: [officer name], [email], [phone]. You may also complain to the Data Protection Board of India.

Changes

We will update this page when our practices change and revise the date below. Material changes will be announced on the site.

Last updated [date].