BhimaPolicies

Effective Date: 01 July 2026 | Last Updated: 01 July 2026

This Privacy Policy describes how Bhima Jewellery Madurai (137, West Masi Street, Madurai, Tamil Nadu, 625001, GSTIN: 33AAIFB1068K1ZJ) ("Bhima Jewellery," "we," "us," "our") collects, uses, stores, shares, and protects personal data of users ("you," "customer") of its e-commerce platform, in accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and other applicable Indian law.

a) Identity & Contact Information: Name, email address, phone number, billing and shipping address, date of birth (where collected for age verification).

b) KYC / Financial Compliance Information:

PAN (Permanent Account Number) — mandatory where a customer's cumulative order value across a financial year exceeds ₹2,00,000. This is an internal compliance threshold adopted by Bhima Jewellery to support anti-structuring and money-laundering safeguards under the Prevention of Money Laundering Act (PMLA), 2002 (which designates jewellers/gems dealers as reporting entities), and in furtherance of the underlying intent of Rule 114B of the Income Tax Rules, 1962 and Section 269ST of the Income Tax Act, 1961.

Aadhaar — optional, on a "good to have" basis. Customers who voluntarily provide Aadhaar may experience improved shipping/billing verification and a smoother delivery experience, but Aadhaar is not mandatory for any order.

c) Payment Information: Payment is processed through third-party, PCI-DSS compliant payment gateways. Bhima Jewellery does not store complete card or banking credentials on its own servers.

d) Order & Transaction Information: Order history, product preferences, purchase value, delivery records, and unboxing video/photographic evidence submitted for claims.

e) Technical & Usage Information: IP address, device/browser type, pages visited, and cookies. We use Meta Pixel and Meta Conversions API (Meta Platforms, Inc.) and Google Ads and Google Analytics (Google LLC) to understand platform usage, measure advertising effectiveness, and deliver relevant ads. Where applicable, certain data (such as hashed email or phone number) may be shared with these platforms in hashed form for Custom Audience matching and conversion tracking purposes. See Cookie Policy for further detail.

f) Communication Records: Emails, customer support correspondence, and any information voluntarily provided through forms or service requests.

Personal data is collected and processed for the following purposes:

Processing and fulfilling orders, including payment confirmation, shipping, and delivery

Complying with PAN/KYC and other financial/tax regulatory requirements

Verifying identity at the point of delivery, per the Shipping & Delivery Policy

Customer support, grievance redressal, and claims processing (returns, damage, discrepancy)

Fraud prevention and prevention of unauthorized or fraudulent transactions

Sending order updates, service communications, and (where consented) marketing communications

Measuring and improving the effectiveness of advertising campaigns run through Meta and Google

Improving platform functionality, security, and user experience

Complying with applicable legal, regulatory, or law enforcement requirements

Data is processed on the basis of: (a) your consent at the time of account creation, order placement, or KYC submission; (b) performance of the contract for sale of goods; and (c) compliance with legal obligations (e.g., tax/KYC regulations).

Personal data may be shared with the following categories of third parties, strictly for the purposes described above:

Payment gateway providers, for processing transactions

Logistics and delivery partners, for order fulfilment and identity verification at delivery

KYC verification agencies/regulatory authorities, where required for PAN/financial compliance

Meta Platforms, Inc. (Meta Pixel, Conversions API) and Google LLC (Google Ads, Google Analytics), for advertising measurement, audience matching, and analytics. Data shared with these platforms for Custom Audience/conversion matching is transmitted in hashed (non-readable) form.

NBFC/financing partners, only where a customer opts for EMI/financing at checkout

Bhima Jewellery does not sell personal data to third parties. Third parties receiving data are contractually/operationally bound to use it only for the specified purpose.

You may opt out of personalized advertising from Meta and Google by adjusting your preferences at:

Meta: Ad Preferences (within your Meta/Facebook/Instagram account settings)

Google: Google Ads Settings (https://adssettings.google.com)

Opting out does not affect your ability to use the platform or complete a purchase, but may result in less relevant advertising shown to you on these platforms.

Personal data is stored on secure servers with reasonable security practices and procedures as mandated under the Information Technology (Reasonable Security Practices) Rules, 2011 and the DPDP Act, 2023. While we take reasonable measures to protect personal data, no method of electronic transmission or storage is 100% secure, and Bhima Jewellery cannot guarantee absolute security.

Personal data is retained for as long as necessary to fulfil the purposes outlined in this Policy, including compliance with statutory record-keeping requirements (e.g., financial/tax records), and is deleted or anonymized thereafter, as determined by Bhima Jewellery from time to time in line with applicable law.

Subject to applicable law, including the DPDP Act, 2023, you have the right to:

Access the personal data held about you

Request correction of inaccurate or incomplete data

Withdraw consent for processing (where processing is consent-based), subject to the impact this may have on order fulfilment

Request erasure of your data, subject to statutory retention obligations

Raise a grievance regarding the handling of your personal data

Requests may be sent to the Data Protection Officer (Clause 10).

The platform is not intended for use by individuals under the eligibility age stated in the Terms of Service. We do not knowingly collect personal data from minors.

For any privacy-related queries, requests, or grievances, you may contact:

Name: Ranjith

Email: info@mybhima.com

Address: 137, West Masi Street, Madurai, Tamil Nadu, 625001

Bhima Jewellery reserves the right to update this Privacy Policy at any time, as determined by Bhima Jewellery from time to time. Continued use of the platform after such updates constitutes acceptance of the revised Policy.