Koshda Jewellery House ("we", "us", or "our") is committed to protecting the digital personal data of our authorized business partners and dealers in strict compliance with the **Digital Personal Data Protection (DPDP) Act, 2023** of India. This policy describes how we collect, process, retain, and protect your digital personal data, and details your rights including the Right to Erasure.
Per system security requirements, we collect specific data points solely to authenticate business entities, process custom orders, and audit B2B confidentiality compliance. The categories, purpose, and retention guidelines are mapped below:
| Data Category | Specific Items | Primary Processing Purpose | Retention Period |
|---|---|---|---|
| Business Identity | PAN details, Shop photos, Business name. | Manually verify commercial dealer legitimacy under B2B onboarding. | 7 Years (financial/statutory audit compliance). |
| Contact Details | Owner Name, business email, mobile number, shipping address. | Manage account portal logins, process shipping, send invoices. | Active account duration + 3 years post-termination. |
| Digital Logs | IP Address, Device Fingerprints, event audit trails, search history. | Verify NDA security, detect session hacks, prevent design leakage. | 1 Year (rolled in security database audits). |
| Authentication | Bcrypt Passwords, TOTP cryptographic secrets. | Control portal security logins. | Permanent until account deletion. |
We do not sell personal data. To facilitate operations, we disclose minimal personal data elements to three specific B2B API integrations:
Our platform uses tab-scoped sessionStorage and essential cookies to maintain secure sign-in states, coordinate concurrent session checks, and support Toast messages. No marketing, analytical, or cross-site tracking cookies are deployed. Session states are cleared automatically upon browser tab closing or log out.
Under the DPDP Act 2023, you have the right to request the erasure of your personal data when it is no longer necessary for the purpose for which it was collected. Submit the form below to file a deletion request with our Data Protection Officer (DPO). Requests are verified and processed within 15 days.