Privacy Policy

Last updated: April 21, 2026

1. Overview

UNPLATED is a solid gold jewellery brand based in India. This policy explains what personal data we collect when you use getunplated.com, why we collect it, how we protect it, and what rights you have over it. We keep this straightforward — no legalese, no surprises.

By using our website or placing an order, you agree to the practices described here. This policy is governed by the Digital Personal Data Protection Act, 2023 (India).

2. Information We Collect

We collect information in the following ways:

Information you give us directly:

  • Name, email address, phone number, and delivery address when you place an order or create an account
  • Payment details — processed securely by our payment provider; we never store card numbers
  • Custom order details such as ring size, engraving text, charm selections, or personalisation requests
  • Messages you send us via email, contact forms, or social media
  • Reviews or feedback you submit through Judge.me or on-site forms

Information collected automatically:

  • IP address, browser type, device type, and operating system
  • Pages visited, time spent on site, and referring URLs
  • Cookie and session data (see Section 4)

3. How We Use Your Information

  • Process, fulfil, and ship your orders — including communicating tracking updates
  • Send transactional emails (order confirmation, shipping notification, delivery confirmation)
  • Respond to your queries and provide customer support
  • Send marketing communications if you have opted in — you can opt out at any time
  • Improve our website, product range, and customer experience
  • Detect and prevent fraud, abuse, or misuse of our services
  • Comply with legal obligations and resolve disputes

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies & Tracking

We use cookies and similar technologies to make our site function and to understand how it is used. These include:

  • Essential cookies — required for the cart, checkout, and login to work
  • Analytics cookies — help us understand which pages are popular and where visitors come from (data is aggregated and anonymised)
  • Marketing cookies — used to show you relevant ads on third-party platforms, only if you have consented

You can manage or disable cookies through your browser settings. Disabling essential cookies will affect site functionality.

5. Third-Party Services & Data Sharing

We do not sell your personal data. We share data only with the third-party services necessary to operate our store:

  • Shopify — our e-commerce platform, which stores and processes order and account data. Shopify is GDPR and PCI-DSS compliant. See Shopify's privacy policy.
  • Payment processors — Razorpay, Stripe, or other providers depending on your payment method. Card data goes directly to them; we never see or store it.
  • Shipping partners — courier services receive your name, address, and phone number to deliver your order.
  • Judge.me — our review platform. If you submit a review, your display name and review content are stored by Judge.me. See Judge.me's privacy policy.
  • hCaptcha — our site is protected by hCaptcha to prevent spam and abuse. hCaptcha's Privacy Policy and Terms of Service apply.
  • Email marketing tools — if you subscribe to our newsletter, your email is stored with our email service provider and used solely to send UNPLATED communications.

We may disclose your information if required by law, court order, or a lawful government request.

6. Data Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Payment data is handled by PCI-DSS compliant processors and is never stored on our servers.

No system is entirely immune to risk. If you suspect unauthorised access to your account, please contact us immediately.

7. Your Rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of your data (subject to legal retention requirements)
  • Withdraw consent for marketing communications at any time
  • Raise a complaint with the Data Protection Board of India

To exercise any of these rights, get in touch and we will respond within 30 days.

8. Data Retention

We retain order and account data for as long as your account is active and for up to 7 years thereafter to comply with tax and legal obligations in India. If you request deletion of your account, we will erase your personal data within 30 days, except where retention is legally required.

9. Children's Privacy

Our website is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify registered customers by email. Your continued use of our site after changes are posted constitutes your acceptance of the revised policy.

11. Contact

For any questions, data requests, or privacy concerns, please reach out via our contact page.