Privacy Policy

Who we are

DivineTatva sells certified gemstones, rudraksha, bracelets and puja items from Jaipur, Rajasthan, India, through divinetatva.com. For anything in this policy, write to divinetatva@gmail.com.

What we collect

• When you order: your name, phone number, email address (if you give one), delivery address and pincode, the items ordered, and the amount.
• When you pay online: nothing about your card, UPI or bank account. Payment is handled entirely by PhonePe on their own pages. We receive only a success or failure result and a transaction reference.
• When you create an account: your email address and a password, stored hashed by our authentication provider — we cannot read it.
• When you message us on WhatsApp: your phone number and the content of that conversation.
• Automatically as you browse: pages viewed, approximate location from your IP, device and browser type, and how you arrived at the site.

Why we use it

• To take, pack, ship and support your order — including giving the courier your address and phone number so they can deliver it.
• To send you order updates by WhatsApp and email: confirmation, dispatch and tracking.
• To answer your questions and handle returns or authenticity claims.
• To detect fraudulent or abusive orders.
• To understand which pages and products people find useful, in aggregate.

We do not sell your personal information to anyone, and we do not share it with other brands or data brokers.

Who else sees your data

Only the companies we need to run the shop, and only the data they need:

• PhonePe — online payments.
• ShipClues and its courier partners (Delhivery, Ekart, DTDC, Bluedart and similar) — your name, address and phone number, to deliver the parcel.
• Supabase — the database that stores orders and accounts.
• Vercel — website hosting.
• Meta (WhatsApp Business Platform) — to deliver order messages to your WhatsApp number.
• Google Analytics and the Meta Pixel — anonymous usage measurement and advertising measurement.

We will also disclose information if the law requires it — for example a valid order from a court or tax authority.

Cookies and tracking

The site sets cookies to keep your cart and your login working, and uses Google Analytics and the Meta Pixel to measure traffic and advertising. You can block or clear these in your browser settings; the cart and login will stop working if you block all cookies. We do not use cookies to build a profile of you across unrelated websites.

How long we keep it

• Order records — retained for at least eight years, because Indian tax and company law requires it. These cannot be deleted on request while that period runs.
• Account details — until you ask us to delete the account.
• WhatsApp conversations — up to two years, so we can look up an old order query.
• Analytics data — as configured in Google Analytics, currently 14 months.

Your rights

Write to divinetatva@gmail.com and you can ask us to:

• tell you what personal data we hold about you
• correct anything wrong — a misspelt name or an old address
• delete your account and personal data (see the limits above on order records)
• stop sending you marketing messages

We reply within 30 days. There is a step-by-step guide at Data deletion.

Security

The site is served over HTTPS, order data sits in an access-controlled database, and administrative pages are password protected. No system is perfect, so we keep the amount we store deliberately small — most importantly, we never hold your card or UPI credentials.

Children

DivineTatva is not intended for anyone under 18, and we do not knowingly collect their data. If a child has placed an order, write to us and we will remove the account.

Changes

If this policy changes we update the date at the top of this page. Material changes will also be mentioned on the site.