Nata Jewels Private Limited

Website Privacy Policy

Effective Date: 1st May 2026 Last Updated: April 2026
1

Introduction

Nata Jewels Private Limited ("Nata"), is a company incorporated under the laws of India (collectively, "we", "us" or "our"), is engaged in the business of [●]. This Website Privacy Policy ("Policy") describes how we collect, receive, use, store, disclose, transfer and otherwise process information and/or Personal Data of individuals, including without limitation visitors, subscribers and members of the general public (collectively, "Users"), in accordance with the Digital Personal Data Protection Act, 2023 ("Act/Applicable Data Protection Law"). This Policy applies to all Personal Data in our possession or under our control, including Personal Data processed by third-party organizations engaged by us to collect, use, disclose or otherwise process such Personal Data on our behalf, and does not override or replace any other internal policies that may prescribe additional requirements for the protection of Personal Data. This Policy further explains process your Personal Data when you visit or use our website located at www.natajewels.in and any associated webpages, mobile sites or digital interfaces (collectively, the "Website"), create an account with us, place an order, make a purchase, request a return, or repair, or otherwise transact with us, contact us for customer support, bespoke orders, appointment booking, enquiries or complaints, subscribe to our newsletters, marketing communications or promotional updates, or otherwise interact with us in connection with our products, services or business.

By providing your Personal Data to us, or by interacting with us or by submitting information through our Website and you acknowledge that to have read, understood and agreed to the terms of this Policy. You have further given your consent for us to collect, use, disclose and process your Personal Data, and to further disclose your Personal Data to our business partners, authorised service providers, vendors, sub-contractors and relevant third parties in the manner and for any of the purposes set forth in this Policy.

This Policy supplements but does not supersede nor replace any other consent you may have previously provided to us in respect of your Personal Data, and your consent herein is cumulative and additional to any rights which we may have at law to collect, use, disclose and/or process.

This Policy is intended to be read together with our Terms of Use, refund/return policy, shipping policy, cookie banner/settings and any other notices that may be issued at the time of collection of your Personal Data.

By using our Website or otherwise providing your Personal Data to us, you acknowledge that you have read and understood this Policy. Where consent is required under Applicable Data Protection Law, we will seek your consent in the manner required by law.

2

Application of Our Privacy Policy

This Policy applies to the access and use of Website. It is also intended to help Users in making an informed decision before providing us with any Personal Data. Further, your access and use of our Website or utilizing the information and services available therein are all subject to this Policy.

This Policy applies to individuals whose Personal Data we process in connection with the Website, including visitors, customers, prospective customers, account holders, gift recipients, persons making enquiries, and other individuals who interact with us online ("you" or "your").

This Policy does not apply to any websites, applications, destinations, or other offerings that we do not own or control, even if they are linked to or accessible from our Website, products, or services. Capitalized terms used in this Privacy Policy shall have the meanings assigned to them under Schedule I.

By using our Website, you consent to the collection, use, disclosure, and processing of your Personal Data as necessary therein, for us to provide the subscribed services, improve user experience, and fulfill any other obligations.

3

Collection of Personal Data

Please take note that Personal Data can be collected in the many ways you may provide them to us. Personal Data may be collected by us in instances such as, but not limited to the following, namely, when:

3.1.1a User visits our Website while browsing the internet;
3.1.2a new information is created through User Activity Data;
3.1.3Personal Data is automatically recorded when you use the Website (by use of Cookies and similar technologies);
3.1.4you wish to communicate with us, whether via online, or otherwise like postal mail, telephone, or any combination of the foregoing, for purposes of various service enquiries; and
3.1.5provide Personal Data on this Website for any other purposes as you may consent to, from time to time.

Personal Data which we may collect from you may include but shall not be limited to:

3.2.1Identity and contact data, such as your name, email address, mobile number, shipping address, billing address and other contact details;
3.2.2Account data, such as your login credentials, user ID, saved preferences, wish list details, order history and communication preferences;
3.2.3Transaction and order data, such as products purchased, order value, delivery details, invoice details, return/refund details, and payment confirmation information. For clarity, we do not store your full credit card, debit card or similar payment instrument details on our own servers; such payments are generally processed by regulated third-party payment service providers;
3.2.4Customer support and communication data, such as records of your enquiries, complaints, feedback, review submissions, appointment requests, repair/service requests and correspondence with us by email, phone, chat, WhatsApp or other channels;
3.2.5Marketing and preference data, such as your preferences for receiving promotional communications, product categories of interest, survey responses and participation in contests, campaigns or loyalty initiatives, where offered;
3.2.6User-generated content, such as reviews, photographs, testimonials, comments or other content that you voluntarily submit or publish through the Website or our official social media pages;
3.2.7(in relation to permanent residents), Users permanent residency effective date, expiry date;
3.2.8(in relation to foreigner), Users work pass type, worker permit number, worker pass effective date and work pass expiry date;
3.2.9Users gender;
3.2.10User date of birth;

Information collected automatically:

3.3.1Device and technical data, such as IP address, browser type, device type, operating system, language settings, approximate location inferred from IP, unique device identifiers and referring URLs;
3.3.2Usage data, such as pages viewed, products browsed, time spent on pages, clickstream data, search queries, shopping cart activity, session data and similar interaction data;
3.3.3Cookie and similar technology data, such as data collected through cookies, SDKs, pixels, tags, web beacons and similar tools, subject to your browser or cookie preferences;
3.3.4We may receive Personal Data from third parties, such as payment processors, logistics providers, fraud-prevention vendors, analytics partners, advertising networks, social media platforms, publicly available sources, and group entities or business partners, where lawful.

In addition, we may collect certain information that may not be considered Personal Data to improve our Website and other online services through our analysis of customer traffic, including through the use of Cookies. Such non-Personal Data may include information such as your IP address, the internet browser you use, details of your interaction with our Website.

If you provide us with any Personal Data relating to a third party (e.g. information on your next-of-kin, dependent, spouse, children, parents, etc.), you represent and warrant that the collection, use and disclosure of their respective Personal Data to us and you have obtained prior consent of such respective third party to share their Personal Data with us.

Your failure to supply certain Personal Data to us (or if we are not permitted by you to process the Personal Data) may result in us being unable to process, administer and/or manage your relationship with us.

You represent that the Personal Data provided by you is true, complete and accurate to the best of your knowledge.

We are not responsible for inaccuracies, deficiencies or outdated information supplied by you, except to the extent required by law.

4

Use of Personal Data

Personal Data which you provide to us may be used, disclosed, and/or processed by us, for the purposes of facilitating your business requirements with us and to keep you informed of updates, changes, and developments relating to us, the scope of which may include but shall not be limited to:

4.1.1To provide and operate the Website, including enabling navigation, account access, product display, checkout and other Website features;
4.1.2To process and fulfil orders, including payment processing, invoicing, order confirmation, shipping, delivery, returns, repairs and refunds;
4.1.3To communicate with you, including in relation to your orders, service requests, customer support enquiries, complaints, updates and administrative notices;
4.1.4To maintain your account and relationship with us, including authenticating access, preserving preferences and maintaining transaction history;
4.1.5To improve our products, services and Website, including analytics, troubleshooting, diagnostics, service optimization, product curation and user experience enhancement;
4.1.6To prevent fraud, abuse and unlawful activity, including payment risk screening, account misuse prevention, cyber security monitoring, incident response and enforcement of our legal rights;
4.1.7To send marketing or promotional communications, including product launches, offers, campaigns and reminders, only where permitted by law and, where required, based on your consent or opt-in preference;
4.1.8To publish reviews, testimonials or user content that you voluntarily choose to make public, subject to our moderation rights and Website terms;
4.1.9To comply with legal, regulatory, tax, accounting, audit, consumer protection or law enforcement requirements;
4.1.10To establish, exercise or defend legal claims, and to protect our rights, property, systems, personnel, customers and business;
4.1.11For any other purpose disclosed to you at or before the time of collection, or otherwise permitted under Applicable Data Protection Law;
4.1.12providing services based on your required profile and record keeping purposes, (if and where so applicable);
4.1.13administering and maintaining your account with us;
4.1.14general management and reporting purposes, such as invoicing and account management;
4.1.15communicating with you on matters relating to your account with us;
4.1.16responding to queries or feedbacks from you;
4.1.17for recruitment purposes;
4.1.18notifying you about important changes to our Policy, specific Terms and Conditions and any other matters which may affect the Users;
4.1.19comply with orders, directions, requirements, guidelines and/or requests made or existing under any Data Protection Laws, and/or by or from any courts, governmental, statutory or regulatory bodies, (whether of Singapore or elsewhere), with which we are expected to comply; and
4.1.20facilitate any business relationship with third parties to whom your Personal Data may be necessary to be disclosed provided that you have previously consented to such disclosure.
5

Consent

The consent that you provide for the collection, use and disclosure of the Personal Data to us will remain valid until such time it is being withdrawn by you in writing or until the purposes for which the Personal Data was disclosed by you to us have been fulfilled.

6

Exceptions to the Requirement of Consent

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose where such collection, use and disclosure without consent is permitted or required under Act.

7

Disclosure of Personal Data

Except where permitted by Act, we will not disclose your Personal Data to any third parties without first obtaining your consent permitting us to do so or unless any such disclosure is permitted under any of the statutory exemptions under the Act.

We may disclose your Personal Data to third parties, agents and other organizations with whom we have any form of business relationship. Also, in the event any such third party is outside of the jurisdiction of India, we will take such measures to ensure that such overseas recipients are legally bound to provide same standard of protection to your Personal Data so transferred that is comparable to the protection under the Act.

Subject to the provisions of any applicable law, you hereby agree, acknowledge and consent that your Personal Data may be disclosed or transferred for any of the purposes in this Policy (as applicable) to the following entities or parties, regardless of whether they are located overseas or in India:

7.3.1agents and other third parties we use to support our business. These include but are not limited to those which provide administrative or other services to us such as payment processing service providers, mailing houses, telecommunication companies, information technology companies and data centres;
7.3.2our corporate clients;
7.3.3any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale);
7.3.4external banks, credit card companies, other financial institutions and their respective service providers;
7.3.5relevant government ministries, regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority; and/or
7.3.6any other party to whom you authorise us to disclose your Personal Data to.
8

Protection and Security of Personal Data

We have implemented generally acceptable standards of technology and operational security to protect the Personal Data that we collect in compliance with the Act. We have undertaken appropriate security measures to protect your Personal Data from any unauthorised access, modification, use or disclosure from any other similar risks. However, we shall not be responsible or liable for any such unauthorised access, modification, use (such as the collection or copying of Personal Data), or disclosure of Personal Data by third parties where such acts are attributable to factors beyond our control.

Whilst we will make reasonable efforts to ensure that the Personal Data you provide are collected and recorded faithfully, accurately and without modification, we will not be responsible for the accuracy, truthfulness and completeness of the Personal Data which you provide.

9

Retention of Personal Data

We may retain your Personal Data for as long as it is necessary to fulfill the purpose for which it was collected, or as required or permitted by Act and we will implement appropriate measures to securely destroy or anonymize your Personal Data when it is no longer required.

We will cease to retain your Personal Data or remove the means by which the Personal Data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the Personal Data was collected, and is no longer necessary for business or legal purposes subject to taking into account any legal requirements and tax and accounting rules which may require us to retain Personal Data for certain time periods beyond this.

Where required under applicable law or notified rules, we may retain specified records, logs and associated information for the minimum period mandated by law, even if your account is deleted or the transaction is completed.

If you close your account or request deletion, we may retain limited information as necessary to comply with law, resolve disputes, prevent fraud, enforce agreements or complete pending transactions.

10

Use of Cookies

We automatically collect information sent by your computer when you browse our Website. This information includes your browser type, IP address and the pages you visit. This information may be collected for analysis and evaluation for us to improve our Website. This information will not be used in association with your Personal Data.

We may use Cookies to store and track information about you when you interact with our Website. "Cookies" are small data text files that are sent to your browser to track information such as the number of users and their frequency of use, profiles of users and their usage.

You can choose to accept or decline Cookies. While web browsers automatically accept Cookies, you can usually modify your browser setting to decline Cookies.

Please note, however, that the use of Cookies may be necessary to allow certain features of our Website to function properly. As such, if you disable Cookies on your browser, you may not be able to use those features, and your access to our Website will be limited and not personalised. As a result, and to the maximum extent permitted by applicable law, we accept no liability for any consequences that may occur as a result of our Website's limited functionality flowing from the inability to utilise the Cookies necessary for our Website to function properly.

11

Children's Privacy

Our Website is not intended to knowingly collect Personal Data from children for independent use of the Website contrary to Applicable Data Protection Law.

If you are under the age threshold prescribed under Applicable Data Protection Law, you should use the Website only with the involvement of your parent or lawful guardian.

Where processing of a child's Personal Data requires verifiable parental or guardian consent under applicable law, we will seek such consent through appropriate measures.

If you believe that a child has provided Personal Data to us without appropriate authorisation, please contact us and we will take appropriate steps in accordance with law.

12

Contacting Us – Withdrawal and Correction and Other Rights Regarding Your Personal Data

If you:

12.1.1have any questions or feedback relating to your Personal Data or about this Policy; or
12.1.2would like to withdraw your consent to any use of your Personal Data as set out in this Policy; or
12.1.3would like to obtain access and make correction to your Personal Data records;

please contact us by email:

info@natajewels.in

Upon receipt of your request, we may be required to first verify your identity before processing your request.

13

Rights to Amend This Policy

This Policy is subject to change from time to time. We reserve the right, at our sole discretion, to modify the terms of this Policy from time to time in order to ensure compliance with the Act or in response to changing regulatory or operational requirements (Updated Terms).

The Updated Terms shall be effective immediately (unless we state otherwise) and shall supersede the terms of this Policy. We will notify you of any changes to this Policy and we will obtain your consent if the changes significantly affect your rights or as may be required by law. Your continued use of the Website or Software after any Updated Terms will mean you have accepted those changes. If you do not agree to the Updated Terms you should stop using the Website and cancel your subscription.

14

Your Rights

Subject to Applicable Data Protection Law, you may have the right to request a summary of the Personal Data we hold about you, obtain information regarding the processing activities undertaken in relation to your Personal Data, request correction, completion or updating of inaccurate or incomplete Personal Data, request erasure of your Personal Data (subject to lawful retention requirements), withdraw consent where processing is based on consent, opt out of or unsubscribe from marketing communications, seek grievance redressal in relation to our processing of your Personal Data, and nominate another individual to exercise such rights on your behalf where permitted by law. We may require reasonable verification of your identity before acting on any such request. Further, where withdrawal of consent affects our ability to provide the Website, process pending orders or deliver services requested by you, we shall communicate the consequences of such withdrawal, which may apply to the extent permitted by law.

15

Governing Law

This Privacy Policy shall be governed in all respects by the laws of India.

Sch.

Schedule I — Glossary of Defined Terms

Definitions
"Cookies"
shall have the meaning ascribed to it in Clause 10.2.
"Organisation"
shall include any individual, company, association or body of persons, corporate or unincorporated, whether or not: (a) formed or recognised under the law of Singapore; or (b) resident, or having an office or a place of business, in India.
"Personal Data"
shall mean data, whether true or not, about a User who can be identified: (a) from that data or (b) from that data and other information to which we have or are likely to have access.
"Policy"
shall have the meaning as ascribed to it under Clause 1.1.
"User Activity Data"
in relation to an Organisation, means Personal Data about an individual/User that is created in the course or as a result of the individual's/Users' use of any product or service provided by the Organisation.
"User/Users, you or your"
shall have the meaning as ascribed to it under Clause 1.1.
"Website"
shall have the meaning as ascribed to it under Clause 1.1.
0