Privacy Policy

1. Who we are

The Royal Gold / TRG Jewellers Pvt Ltd ("TRG", "we", "us") operates this website, related customer portals and any official The Royal Gold mobile application. Privacy questions may be sent to theroyalgolds@gmail.com or by phone at +91 9102192444.

2. Scope

This policy explains how we collect, use, disclose, retain and protect personal data when you browse, create an account, authenticate, purchase jewellery, use Gold SIP features, contact support, submit a review, receive notifications, or use an official mobile app distributed through Google Play or another authorised channel.

3. Data we may collect

• Identity and contact data: name, email, mobile number and account identifiers.
• Address and fulfilment data: shipping address, city, state, pincode and delivery instructions.
• Order and transaction data: products, variants, quantities, invoices, payment status, gateway references, refunds and shipment information. We do not intentionally store full card numbers or CVV data processed by regulated payment gateways.
• Authentication data: password hashes, OTP verification status and Google sign-in identifiers where you choose those methods.
• Customer content: enquiries, support transcripts, reviews, uploaded review images and preferences you voluntarily provide.
• Technical data: IP address, device/browser information, session identifiers, diagnostic logs, cookies and security events.
• App data: push-notification token, app/version diagnostics and permissions actually used by the published mobile app.

4. Why we use personal data

• Provide accounts, authentication, carts, checkout, orders, invoices, Gold SIP and support services.
• Process payments, prevent fraud, verify transactions and comply with accounting, tax and legal obligations.
• Arrange shipping, tracking, delivery verification, returns, exchanges and warranty/support requests.
• Display verified-purchase reviews and maintain marketplace trust.
• Send service notifications and, where permitted, promotional communications that you can opt out of.
• Protect the website/app, investigate abuse and improve reliability, accessibility and performance.

5. Consent and lawful handling

We process personal data only for disclosed, legitimate purposes and in accordance with applicable Indian privacy and technology laws, contractual necessity, legal obligations, legitimate security/service interests, and consent where consent is required. You may withdraw consent for optional processing, although this does not affect processing already lawfully completed or data we must retain by law.

6. Service providers and disclosures

Depending on the feature you use, data may be shared with vendors acting for payment, authentication, messaging, logistics, cloud infrastructure and notifications. The current codebase integrates or can integrate services such as Razorpay, Google authentication, Shiprocket and Firebase/FCM. Each provider processes data under its own terms and privacy commitments. We do not sell personal data to advertisers.

7. Google Play and mobile-app disclosure

If you install our official Android app from Google Play, the app's Data Safety form and permission prompts should reflect the data actually collected by that released build. The app should request only permissions required for enabled features. Any discrepancy between this policy and the actual app build should be reported to us so it can be corrected promptly. Google Play itself may collect device, purchase and diagnostic information under Google's own policies.

8. Cookies, sessions and similar technologies

We use essential cookies/session storage for login state, cart continuity, security, preferences and limited promotional frequency controls. Optional analytics or advertising technologies, if introduced, should be disclosed and consented to where required.

9. Retention

We keep data only for as long as needed for the relevant service and legal purpose. Order, invoice, taxation, payment-dispute and fraud-prevention records may be retained for statutory or legitimate business periods. Support and diagnostic data may be retained for shorter operational periods. Data that is no longer required is deleted, anonymised or access-restricted.

10. Security

We use access controls, password hashing, CSRF protections, HTTPS in production, payment-gateway verification and administrative authentication. No internet system is perfectly secure, so users should protect passwords/OTP codes and immediately report suspected account compromise.

11. Your choices and rights

• Request access, correction or updating of account information.
• Request deletion or anonymisation where legally permitted.
• Withdraw optional marketing consent or change notification preferences.
• Raise a grievance about inaccurate or inappropriate processing.

Account/data deletion instructions are available on our Account & Data Deletion page.

12. Children

Our products and account services are intended for persons legally capable of entering purchase contracts. We do not knowingly design account features to solicit personal data from children. If a parent or guardian believes a child has provided data inappropriately, please contact us.

13. Cross-border processing

Some technology providers may process data in locations outside your state or country. Where this occurs, we expect appropriate contractual, security and legal safeguards consistent with applicable restrictions.

14. Changes and contact

We may update this policy when services, law or app-store requirements change. Material updates will be posted here with a revised date. Contact: theroyalgolds@gmail.com, Muzaffarpur, Bihar, India.