M/S MULIYA KRISHNA BHAT SONS JEWELLERS
SINCE 1991
This Privacy Policy explains how Muliya Krishna Bhat Sons Jewellers, a registered under the laws of India, having its registered office at Koingodi Complex, Main Road, Srirampete, Sullia, Mangalore, Karnataka - 574239 (“Company”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal data.
This Privacy Policy applies when you:
Create a customer account;
Purchase gold, silver, diamond or gemstone jewellery;
Join a jewellery purchase or savings plan;
Make an instalment or other payment;
Visit or transact through an authorised store;
Contact customer support;
Participate in a promotion; or
Otherwise interact with our services.
The website, mobile application, stores and related services are collectively referred to as the “Platform”.
By using the Platform or voluntarily providing your personal data, you acknowledge the practices described in this Privacy Policy.
For personal data processed under this Privacy Policy, the Data Fiduciary or organisation responsible for deciding how and why personal data is processed is:
Legal Business Name: Muliya Krishna Bhat Sons Jewellers
Registered Address: Koingodi Complex, Main Road, Srirampete, Sullia, Mangalore, Karnataka - 574239
GSTIN:
BIS Jeweller Registration Number:
Privacy Email: [email protected]
Customer Support Number: +91 7760 829 990
“Personal data” means information relating to an identifiable individual.
Depending on the context, personal data may include your name, telephone number, address, email address, payment information, identity documents, transaction history, device information and other information connected with you.
Some information, such as passwords, bank-account details, payment-instrument details and biometric information, may be treated as sensitive personal data under applicable Indian law.
We may collect:
Full name;
Mobile number;
Email address;
Residential or delivery address;
Billing address;
Date of birth;
Gender, where voluntarily provided;
Customer or member identification number;
Username and encrypted password;
Profile photograph, where provided; and
Preferred language and communication preferences.
When you join a fixed, flexible, cash-credit, gold-weight or other jewellery purchase plan, we may collect:
Plan type and plan category;
Instalment amount and frequency;
Plan start, maturity and closure dates;
Paid, pending, missed or reversed instalment information;
Amount invested or paid;
Gold or silver weight credited;
Applicable gold rate;
Bonus grams, bonus cash or promotional benefit;
Redemption information;
Nominee details;
Plan receipts and statements; and
Account closure status.
We may collect:
Products viewed, saved or purchased;
Jewellery design, size and customisation preferences;
Ring, bracelet or other measurements;
Engraving instructions;
Order number and invoice information;
Product weight, purity, hallmark and HUID details;
Delivery and return information;
Exchange or buyback requests; and
Warranty, repair and service history.
Where required for customer verification, high-value transactions, fraud prevention, taxation or legal compliance, we may collect:
PAN;
Masked Aadhaar or other government-issued identification, where legally permitted;
Proof of address;
Photograph;
Signature;
Date of birth;
Bank-account ownership evidence;
Cancelled cheque;
Tax declarations;
Nominee identification; and
Legal-heir or succession documents.
We will not require Aadhaar unless its use is permitted under applicable law. Customers may be allowed to provide another legally acceptable identity document where applicable.
We may collect or receive:
Payment method;
UPI transaction reference;
Bank-account details;
Refund account details;
Card type and limited card information;
Payment-gateway transaction identifier;
Payment status;
Chargeback or dispute information;
Instalment receipts; and
Reconciliation records.
Payments may be processed by authorised banks, UPI applications and payment gateways.
We do not ordinarily receive or store complete card numbers, card PINs, UPI PINs, internet-banking passwords or card verification values such as CVV. You must never share a UPI PIN, card PIN or internet-banking password with our employees or representatives.
We may collect:
Recipient name;
Delivery address;
Telephone number;
Delivery instructions;
Delivery confirmation;
Signature or one-time-password confirmation;
Courier tracking information;
Failed-delivery records; and
Proof of delivery.
When you communicate with us, we may collect:
Emails and messages;
Call details and recordings, where notice is provided;
Support complaints;
Feedback and reviews;
Photographs and videos submitted for return or damage claims;
Social-media communications; and
Records of grievance resolution.
When you use the Platform, we may automatically collect:
Internet Protocol address;
Browser type;
Device type and operating system;
Device identifiers;
Application version;
Login time;
Pages or screens viewed;
Clicks and navigation activity;
Referral source;
Crash and performance data;
Security and access logs; and
Approximate location inferred from an IP address.
We will collect precise device location only where it is required for a feature and you have granted the relevant device permission.
We may use cookies, pixels, software-development kits, local storage and similar technologies for:
Maintaining login sessions;
Remembering preferences;
Securing accounts;
Maintaining shopping carts;
Understanding Platform usage;
Measuring advertising or campaign performance;
Detecting fraud; and
Improving services.
Further details are provided in Section 13.
We may receive personal data from:
Banks and payment gateways;
UPI and payment applications;
Delivery and logistics providers;
Authorised stores and sales representatives;
Identity-verification providers;
Marketing and referral partners;
Customer-support providers;
Fraud-prevention providers;
Publicly available sources; and
Government or regulatory authorities.
We process third-party information only for lawful and relevant purposes.
You may provide information about a nominee, recipient, family member, legal heir or another person.
Before providing another person’s data, you must:
Have lawful authority to provide it;
Inform that person that their information is being shared with us; and
Provide accurate and relevant information.
We may contact such an individual to verify a nomination, delivery, claim, succession request or other lawful transaction.
We may process personal data for the following purposes.
To:
Register and authenticate your account;
Maintain your customer profile;
Secure your account;
Display balances, instalments and transaction history; and
Process account updates or closure requests.
To:
Process and confirm orders;
Manufacture or customise jewellery;
Verify product specifications;
Generate invoices;
Arrange delivery;
Manage returns, repairs, exchanges and refunds; and
Provide warranty or after-sales support.
To:
Register customers in a plan;
Record instalments;
Calculate eligible gold or silver weight;
Maintain cash credits;
Calculate bonuses or promotional benefits;
Send payment reminders;
Process maturity or redemption;
Handle missed instalments;
Process early closure and refunds; and
Maintain plan statements and audit records.
To:
Initiate and verify payments;
Reconcile transactions;
Detect failed or duplicate payments;
Process refunds;
Investigate chargebacks;
Prevent unauthorised transactions; and
Maintain accounting records.
To:
Verify identity;
Meet invoicing and tax requirements;
Comply with cash-transaction restrictions;
Respond to lawful requests;
Prevent fraud and money laundering;
Establish or defend legal claims; and
Meet accounting, audit and regulatory obligations.
To:
Answer enquiries;
Resolve complaints;
Investigate missing, damaged or incorrect products;
Process purity or hallmark complaints;
Communicate service updates; and
Improve support quality.
To:
Detect unauthorised logins;
Verify payment activity;
Prevent account takeover;
Protect customers and the Platform;
Maintain security logs;
Investigate suspected fraud; and
Comply with cybersecurity requirements.
To:
Understand how the Platform is used;
Diagnose technical problems;
Improve user experience;
Develop new features;
Measure performance; and
Prepare aggregated business reports.
Where reasonably possible, analytics information will be aggregated or de-identified.
With appropriate consent or as otherwise permitted by law, we may use your contact information to send:
Product announcements;
Promotional offers;
Jewellery-plan information;
Festival and seasonal campaigns;
Store-event invitations;
Abandoned-cart reminders; and
Customer surveys.
You can opt out of promotional communications at any time. Opting out will not stop essential communications regarding your account, order, payment, plan, refund or security.
We process personal data only for lawful purposes.
Depending on the circumstances, processing may be based on:
Your consent;
Data voluntarily provided by you for a specific request or transaction;
Processing necessary to provide requested goods or services;
Compliance with a legal obligation;
Prevention or investigation of fraud or cyber incidents;
Establishment, exercise or defence of legal claims; or
Another lawful use permitted under applicable Indian law.
Where consent is relied upon, it will be requested in clear language and limited to the data reasonably necessary for the stated purpose.
The DPDP framework requires notices to identify the personal data and purposes involved and provides for consent withdrawal, access, correction, erasure, grievance redressal and nomination rights.
Where processing is based on consent, you may withdraw consent by:
Changing the settings available in your account;
Using an unsubscribe option;
Contacting [email protected].
Withdrawing consent will not affect processing already lawfully carried out.
Withdrawal may prevent us from continuing optional activities such as marketing. It may also prevent us from providing a service where the relevant information is necessary for that service.
For example, we may still retain and process order, payment, tax and fraud-prevention records after consent withdrawal where retention is required or authorised by law.
We may share only the personal data reasonably necessary for the relevant purpose.
We may share information with:
Payment gateways;
Banks;
Card networks;
UPI providers;
Refund-processing providers; and
Fraud and chargeback service providers.
These providers process payments according to their own legal obligations and privacy practices.
We may share recipient name, address, telephone number, order value where required for insurance, and delivery-verification information with authorised logistics and delivery providers.
We may use:
Cloud-hosting providers;
Database providers;
Email and SMS providers;
Customer-support platforms;
Analytics providers;
Security-monitoring providers;
Backup providers; and
Application-development or maintenance providers.
Such providers may process personal data only for contracted services and subject to appropriate confidentiality and security obligations.
Information may be shared with authorised stores or service centres where necessary to fulfil an order, redeem a plan, inspect jewellery, process a repair or handle a return.
We may share information with auditors, accountants, insurers, lawyers and other professional advisers where reasonably necessary.
We may disclose personal data when required by:
Applicable law;
A court or tribunal;
Tax authorities;
Law-enforcement agencies;
Cybersecurity authorities;
Consumer authorities;
BIS or another regulatory body; or
A lawful government request.
If our business undergoes a merger, restructuring, acquisition, financing, insolvency or sale of assets, personal data may be disclosed to advisers, potential purchasers and successor entities subject to applicable confidentiality and legal requirements.
We may share information with another party when you specifically request or authorise us to do so.
We do not sell or rent personal data to third parties in exchange for money.
We do not permit service providers to use personal data for their independent marketing unless you have separately consented or the service provider has an independent lawful basis and has directly informed you.
Payments are ordinarily completed through third-party banks, UPI applications and payment gateways.
You should:
Verify the merchant name before approving payment;
Pay only through payment details officially displayed by us;
Never disclose your UPI PIN, card PIN, CVV, password or one-time password to another person;
Immediately report suspicious payment requests; and
Retain transaction-reference details.
Where the Platform opens a third-party payment or UPI application, use of that service will also be governed by the provider’s terms and privacy policy.
We use reasonable technical and organisational safeguards appropriate to the nature of the personal data processed.
These measures may include:
Encryption during transmission;
Encryption, masking or tokenisation where appropriate;
Password hashing;
Role-based access controls;
Multi-factor authentication for administrative access;
Access logging and monitoring;
Restricted employee access;
Secure backups;
Vulnerability and security testing;
Incident-response procedures;
Employee confidentiality obligations; and
Security requirements in service-provider contracts.
The DPDP Rules specify safeguards including encryption or masking, access controls, logs, monitoring, backups, processor contracts and technical and organisational measures. They also prescribe personal-data breach communication requirements once the relevant provisions take effect.
No online system is completely secure. Customers should use a strong password, protect their devices and notify us immediately of suspected unauthorised activity.
If a personal-data breach occurs, we will:
Investigate and contain the breach;
Take reasonable steps to reduce harm;
Preserve relevant evidence and logs;
Notify affected individuals where required;
Provide safety instructions where appropriate; and
Notify the Data Protection Board, CERT-In or other authorities within applicable legal timelines.
A breach notification may describe:
The nature and extent of the incident;
The types of information affected;
Likely consequences;
Remedial measures taken;
Recommended protective steps; and
Contact information for questions.
Essential cookies support:
Account login;
Security;
Shopping carts;
Payment flow;
Session management; and
Customer preferences.
Disabling essential cookies may prevent parts of the Platform from functioning.
Analytics cookies help us understand:
Page visits;
Feature usage;
Errors;
Traffic sources; and
General Platform performance.
Where used and consented to, advertising technologies may measure campaigns or display more relevant promotions.
You may manage non-essential cookies through:
Our cookie-preference tool;
Your browser settings;
Device settings; or
Third-party opt-out controls.
Deleting cookies may remove saved preferences and require you to log in again.
Depending on the features you use, the mobile application may request permission to access:
Camera: to capture product, receipt, QR or verification images;
Photos or files: to upload documents, receipts or return evidence;
Notifications: to send payment, order and security alerts;
Location: for optional delivery or nearby-store features; and
Device security information: to detect fraud and protect accounts.
You can manage permissions through your device settings.
Remove any permission from this section that the application does not actually request.
You may unsubscribe from promotional communications by:
Using the unsubscribe link in an email;
Replying with the opt-out instruction available in a message;
Changing communication preferences in your account; or
Contacting customer support.
We may maintain a suppression record containing limited contact information to ensure that the opt-out request continues to be respected.
Transactional messages cannot always be disabled while you have an active order, plan, payment, refund, complaint or account-security matter.
The Platform and jewellery purchase plans are intended for persons who are at least 18 years old and legally competent to contract.
We do not knowingly permit a child to independently:
Create a jewellery-plan account;
Enter into a purchase contract;
Make an instalment commitment; or
Provide payment information.
An adult may purchase jewellery for a child or identify a child as a nominee, recipient or beneficiary. In such cases, we process the child’s information only for the relevant purpose and through the responsible adult.
We do not knowingly undertake behavioural tracking or targeted advertising directed at children.
If you believe a child has provided personal data without appropriate authority, contact [email protected].
You are responsible for providing accurate and current information.
You may update certain information through your account. For information that cannot be directly edited, you may contact us.
We may request supporting documents before changing information connected with:
Identity;
PAN;
Payment ownership;
Nomination;
Plan balances;
Legal-heir claims;
Delivery completion; or
Completed invoices.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy or as required by law.
Retention periods may depend on:
Whether your account or plan remains active;
Whether an order or refund is pending;
Tax and accounting requirements;
Warranty and jewellery-service requirements;
Fraud and security risks;
Chargeback periods;
Legal limitation periods;
Regulatory requirements; and
Pending disputes or investigations.
Indicative retention practices include:
Active account and profile information: While the account remains active
Inactive account information: Ordinarily up to 3 years after closure or last meaningful activity, unless longer retention is required
Orders, invoices, plan and payment records: For the applicable statutory accounting, tax and audit period
Identity-verification records: For the legally required period or until the relevant verification purpose ends
Refund and chargeback records: Until the dispute and applicable limitation periods expire
Customer-support complaints: Ordinarily 3 years after closure, or longer for legal disputes
Security and processing logs: At least one year where required or reasonably necessary
Marketing data: Until consent is withdrawn or the campaign purpose ends
Opt-out records: As long as necessary to honour the opt-out
Return photographs or videos: Until the claim and related dispute periods expire
When retention is no longer necessary, data will be securely deleted, anonymised or made inaccessible, subject to technical backup cycles.
The right to erasure does not require deletion where retention remains necessary for a lawful purpose or legal compliance.
You may request account deletion through:
The account or application settings; or
Deleting your account may remove access to the Platform but will not automatically delete:
Invoices;
Payment records;
Jewellery-plan statements;
Refund records;
Tax and accounting records;
Fraud-prevention information;
Grievance records; or
Information required for legal claims.
Before deleting an account with an active plan, pending order, refund or account balance, we may require the relevant transaction to be completed or closed.
Subject to applicable law and the commencement of relevant legal provisions, you may request:
A summary of personal data being processed and information about relevant processing activities.
Correction of inaccurate or misleading data, completion of incomplete data and updating of outdated information.
Deletion of personal data that is no longer required, subject to legal and operational retention requirements.
Withdrawal of consent for processing based on consent.
Review and resolution of a concern regarding the processing of personal data.
Nomination of another individual to exercise applicable data rights in the event of death or incapacity, where the relevant legal provisions apply.
Stopping promotional email, SMS, telephone or application communications.
Send privacy requests to:
Email: [email protected]
Postal Address: Koingodi Complex, Main Road, Srirampete, Sullia, Mangalore, Karnataka - 574239
Your request should include:
Full name;
Registered mobile number or email;
Customer or member ID, where applicable;
Nature of the request; and
Information reasonably required to locate the relevant records.
We may verify your identity before responding. We will not provide account information to an unverified requester.
We may refuse or limit a request where:
Identity cannot be verified;
The request is fraudulent or impersonates another person;
Retention is required by law;
Disclosure would affect another person’s rights;
The request seeks legally privileged information; or
Another lawful exception applies.
We will explain the reason where a request cannot be fully completed.
For privacy complaints, contact:
Privacy or Grievance Officer:
Designation:
Legal Business Name: Muliya Krishna Bhat Sons Jewellers
Address: Koingodi Complex, Main Road, Srirampete, Sullia, Mangalore, Karnataka - 574239
Email: [email protected]
Telephone: +91 7760 829 990
Working Hours:
We will acknowledge complaints within 48 hours and endeavour to resolve them within 30 days, subject to the nature and complexity of the matter.
The existing Sensitive Personal Data Rules require an accessible privacy policy and a designated grievance officer for information-processing complaints.
After exhausting our grievance process, you may approach the Data Protection Board of India when the relevant complaint provisions apply or another competent authority.
Some technology, cloud, communication or support providers may process data outside India.
Where personal data is transferred or made accessible outside India, we will take reasonable steps to ensure:
A lawful transfer mechanism;
Contractual confidentiality;
Appropriate security safeguards;
Processing only for authorised purposes; and
Compliance with restrictions or orders issued by the Government of India.
We may change service providers or processing locations as business and legal requirements evolve.
The Platform may contain links to:
Payment applications;
Banks;
Delivery tracking websites;
Social-media services;
Maps;
Government verification services; or
Other third-party websites.
We do not control third-party privacy practices. You should review the privacy policy of the relevant third party before providing information.
Where CCTV is used at authorised stores or offices, recordings may be processed for:
Physical security;
Theft and fraud prevention;
Employee and customer safety;
Investigation of incidents; and
Legal compliance.
Appropriate notices should be displayed at locations using CCTV.
Recordings will ordinarily be retained for a limited period unless an incident, investigation or legal requirement requires longer retention.
Customer-support calls may be recorded for:
Quality monitoring;
Training;
Transaction verification;
Complaint investigation; and
Fraud prevention.
Where calls are recorded, an appropriate notice will be provided.
You may contact us through a non-recorded written channel where available.
We may create information that no longer identifies an individual.
Aggregated or anonymised information may be used for:
Business analysis;
Product development;
Financial forecasting;
Operational reporting;
Fraud trend analysis; and
Research.
This Privacy Policy does not restrict information that cannot reasonably identify an individual.
Employees and authorised representatives may access personal data only where reasonably necessary for their work.
Access may be provided to personnel involved in:
Customer support;
Order fulfilment;
Jewellery-plan administration;
Accounting;
Refund processing;
Fraud prevention;
Legal compliance; and
Platform security.
Unauthorised use or disclosure may result in disciplinary or legal action.
We may update this Privacy Policy to reflect:
Legal or regulatory changes;
New products or services;
Changes to data-processing practices;
Security improvements; or
Changes to service providers.
The updated version will be published with a revised “Last Updated” date.
Where a change materially affects the use of personal data, we may provide additional notice through email, SMS, an application notice or another appropriate method.
Where fresh consent is legally required, we will request it before beginning the new processing.
For questions regarding this Privacy Policy or our handling of personal data, contact:
Legal Business Name: Muliya Krishna Bhat Sons Jewellers
Registered Address: Koingodi Complex, Main Road, Srirampete, Sullia, Mangalore, Karnataka - 574239
Privacy Contact Person:
Email: [email protected]
Customer Support Email: [email protected]
Telephone: +91 7760 829 990
Website: https://muliyakrishnabhatsons.com/