Privacy policy

This policy explains what personal information we collect, why we collect it, who we share it with, and the control  you have over it. We have tried to write it in plain language rather than legal jargon. 

OATH is a brand of Perfectly Average Jewellery Private Limited, a company incorporated in India with its  registered office at B-9, Vivekanand Marg, C-Scheme, Jaipur 302001, Rajasthan. In this policy, "we", "our" and  "us" mean that company, which is the data fiduciary responsible for your personal data. 

1. What We Collect 

What you give us 

Your name, email address, phone number and delivery address 

Payment details, handled directly by our payment gateway partners. We never see or store your full card  number. 

Account details such as your login, order history, saved addresses and wishlist 

Messages you send us by email, WhatsApp, phone or social media 

Engraving text and gift messages, where you ask for personalisation 

What we collect automatically 

Your IP address, device type, operating system and browser 

How you use the site: pages viewed, time spent, what you clicked, where you came from Approximate location based on your IP address. We do not use GPS tracking. 

Cookies and similar technologies, explained in Section 5 

What we get from others 

Payment confirmation from our payment gateway 

Delivery status from our logistics partners 

Basic profile information, if you choose to log in using a social media account 

2. Why We Use It 

To process your order, take payment, ship it and keep you updated 

To answer your questions and handle returns, exchanges and warranty claims 

To recommend products and tailor what you see on our site 

To send you marketing messages, but only if you have opted in. You can opt out at any time. To improve our website and products through analytics 

To detect and prevent fraud and misuse 

To meet our legal and tax obligations, and to resolve disputes 

3. Who We Share It With 

We do not sell, rent or trade your personal information. We share it only with: 

Service providers who work on our behalf: payment gateways, logistics partners, email and messaging  providers, analytics providers and cloud hosting providers. They may use your data only to do the job we  have asked them to do, under confidentiality obligations. 

Authorities, where the law, a court order or a government agency requires it, or where it is needed to protect the rights and safety of OATH, our customers or the public. 

A buyer or successor, if our business is merged, acquired or sold. We will tell you before your data moves,  and this policy will continue to apply. 

4. Where Your Data Lives 

We store your data primarily on secure servers in India, with reputable cloud providers. 

Some of the tools we use, such as analytics and email services, are operated by companies outside India, so  limited data may be processed abroad. Where that happens, we make sure appropriate safeguards and  contractual protections are in place, and we transfer data only to countries not restricted by the Government of  India. 

Our security measures include SSL and TLS encryption for data in transit, encrypted storage for sensitive data,  access controls and authentication, and periodic security reviews. No system is completely secure, but we take  every reasonable precaution. 

5. Cookies 

When you first visit our site, we ask which cookies you are happy with. You can change your choice at any time  through the cookie settings link in our website footer. 

Essential cookies keep the site working. Your cart, checkout and login need them, so they cannot be switched off. 

Analytics cookies help us understand how the site is used. These run only with your consent. 

Marketing cookies help us show you relevant ads and measure whether they worked. These run only with  your consent. 

6. Your Rights 

Under the Digital Personal Data Protection Act, 2023, you have the right to: 

Ask for a copy of the personal data we hold about you 

Ask us to correct anything inaccurate, or complete anything missing 

Ask us to delete your data, unless the law requires us to keep it 

Withdraw your consent to marketing at any time, as easily as you gave it 

Ask for your data in a portable, machine-readable format where that is technically possible Nominate someone to exercise these rights on your behalf if you die or become unable to act Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied 

To exercise any of these, email privacy@oathofficial.com. We will respond within 30 days. 

7. How Long We Keep It 

Order and transaction records: 8 years, as Indian tax and accounting law requires 

Account information: until you ask us to delete it 

Marketing consent records: for as long as you are subscribed, plus 3 years afterwards as proof of consent Support conversations and unboxing videos: 12 months from the date the matter is closed 

8. If Something Goes Wrong 

If a data breach affects your personal information, we will notify you and the Data Protection Board of India  without delay, and tell you what happened, what it means for you, and what we are doing about it. 

9. Children 

Our website and products are meant for adults. We do not knowingly collect data from anyone under 18. We do  not track children’s behaviour or show them targeted advertising. If we find we have collected a child’s data  without verified parental consent, we will delete it promptly. If you believe your child has given us their data,  please write to privacy@oathofficial.com. 

10. Changes 

We may update this policy. If the change is significant, we will email you or put a clear notice on our website  before it takes effect. 

11. Contact and Grievances 

For anything to do with your data, write to support@oathofficial.com.