Privacy Policy
Last updated: 13 October 2026
This Privacy Policy explains what personal data JOSHA GOLD AND DIAMOND JEWELLERY collects through this website and when you contact us, why we collect it, who we share it with, how long we keep it and what rights you have. This website collects very little, so we have kept this policy short and in plain English.
On this page
1. Who we are
This website is run by JOSHA GOLD AND DIAMOND JEWELLERY ("we", "us", "our").
- Address: No 73, 2nd Floor, Nagavarapalya Main Road, C V Raman Nagar Road, Bangalore, Karnataka - 560093
- GSTIN: 29BPXPA5622R2ZY
- Email: Josha.infinity777@gmail.com
- Phone: +91 80 3556 5332 (Mon – Sat: 9:00 AM – 6:00 PM)
Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") we are the Data Fiduciary for the personal data described in this policy, which means we decide why and how it is used.
What this website does
The website publishes reference gold and silver rates twice a day, shows the metal value of items by weight, and has pages about our coins, bars, biscuits and jewellery, news updates and a contact form. There is no online shop, no online payment and no customer account on this website. If you want to buy, you contact us, our desk confirms a quote, and you pay by bank transfer to an account listed on our Bank Details page.
2. What we collect and why
| What we collect | When | Why we use it |
|---|---|---|
| Your name, email address, phone number (optional), subject and message | You send the contact form | To reply to your enquiry, prepare a quote and keep a record of our conversation with you |
| Your name, email address, phone number (optional), the type of request and any details you add | You send the data request form | To deal with your request, check that it comes from you, and keep a record that we handled it |
| Your phone number, email address or WhatsApp number, and what you tell us | You call, email or message us on WhatsApp | To answer you, give you a quote and arrange your purchase |
| Details needed to complete a purchase, such as your name, contact details, invoice details and the bank transfer reference. [To confirm: any other details collected when a customer buys, e.g. PAN or ID where the law requires it] | You buy from us (this happens off the website) | To complete the sale, issue a GST invoice, match your payment and meet our legal, tax and accounting duties |
| Your IP address, browser and device type (user agent), the page requested, the page you came from, and the date and time | Automatically, each time your browser loads a page. These are the standard log files of the server that hosts our website | To keep the website running and secure, find and fix errors, and detect and stop abuse |
| A few small cookies that keep forms working and remember your cookie choice | When you visit the website | See our Cookie Policy |
Please do not send us sensitive information, such as health details or bank card numbers, through our forms. We do not need it.
3. What we do not collect
- We do not use analytics, advertising pixels, tracking cookies or chat widgets.
- This website does not send newsletters or marketing emails.
- The website takes no payments. We never ask for card numbers or passwords.
- The public cannot create accounts on this website, so we hold no customer passwords or profiles.
4. Why we may use your data
We use your personal data only for the purposes listed in section 2, on one of these grounds under the DPDP Act:
- Your consent. When you send us a form or contact us, you agree to us using your details to deal with your enquiry or request. You can withdraw your consent at any time (see section 8). Withdrawing does not affect anything we did before you withdrew.
- Legitimate uses allowed by law. For example, where you have given us your details yourself for a specific purpose, such as asking for a quote, or where we must keep records to comply with the law, such as tax and GST records.
Server logs are kept to run and protect the website. [To confirm: the ground relied on for server logs, with your legal adviser]
5. How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected for, or for as long as the law requires, and then delete it.
| Data | How long we keep it |
|---|---|
| Contact form enquiries | [To confirm: retention period for enquiries] |
| Data requests and our replies | [To confirm: retention period for data-request records] |
| Purchase, invoice and payment records | As long as tax and accounting laws require. [To confirm: retention period for invoices and transaction records] |
| Server logs | [To confirm: how long the hosting provider keeps server logs] |
| Cookies | See the Cookie Policy |
6. Who we share it with
We do not sell or rent your personal data. Only our authorised staff can read the enquiries and requests you send us. We share personal data only with the following, and only as much as each one needs:
| Who | What they receive | When |
|---|---|---|
| Our website hosting provider [To confirm: hosting provider name] | Everything stored on the website, including form submissions and server logs | Always, because the website runs on their server |
| Our email provider [To confirm: email provider] | Your email address and the messages we exchange | When we reply to you by email |
| jsDelivr, unpkg and cdnjs (services that deliver the code libraries our pages use) | Your IP address and browser details | Each time a page loads, because your browser fetches files from them |
| Google (Google Maps) | Your IP address and browser details. Google may set its own cookies | Only if you allow embedded content, or click to load the map on the Contact page |
| TradingView | Your IP address and browser details. TradingView may set its own cookies | Only if you allow embedded content, or click to load a chart on the Charts page |
| WhatsApp (Meta) | Your WhatsApp number and the messages you send us | Only if you choose to contact us on WhatsApp |
| Banks | Payment details, such as the payer's name, account and transfer reference | Only when you pay us by bank transfer |
| Government authorities, courts or regulators | What the law requires | Only where we are legally required to |
[To confirm: any other parties who receive customer data, e.g. your accountant or a courier]
Google, TradingView, WhatsApp and banks handle your data under their own privacy policies. Some of these providers may store or process data outside India.
7. How we protect it
- The website uses HTTPS, so information sent between your browser and our server is encrypted.
- Enquiries and requests are kept in our website database and can be read only by authorised staff who sign in to our password-protected admin area.
- Our forms are protected against automated abuse and cross-site request forgery.
- We collect only what we need.
No website or computer system can be made completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law.
8. Your rights and how to use them
As provided under the DPDP Act and the rules made under it, and subject to the conditions and exceptions in that law, you have the right to:
- Access: ask for a summary of the personal data we hold about you, how we use it and who we have shared it with.
- Correction: ask us to correct inaccurate or misleading data, complete incomplete data, or update it.
- Erasure: ask us to delete your personal data, unless we must keep it to comply with the law.
- Withdraw consent: withdraw consent you have given us, as easily as you gave it. We will then stop using that data, unless the law allows or requires us to keep it.
- Grievance redressal: complain to us about how we have handled your personal data and receive a response.
- Nominate: name another person to use these rights for you if you die or become unable to do so yourself.
These rights apply as provided under applicable law, including as the DPDP Rules come into force.
How to make a request
- Use our data request form, or email or call us using the details in section 12.
- Tell us which right you want to use and what it relates to, for example roughly when you contacted us.
- We may ask you to confirm your identity before we act, so that we never show or change someone else's data.
- We will reply within [To confirm: response time].
If you are not satisfied with how we handle your grievance, you may be able to complain to the Data Protection Board of India, as provided under the DPDP Act.
9. Children
This website is not directed at children (under the DPDP Act, anyone under 18). We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.
10. Cookies and other websites
We use only the cookies the website needs to work and to remember your cookie choice. Google Maps and TradingView content loads only if you allow it. We do not use analytics or advertising cookies. Full details are in our Cookie Policy, and you can change your choice at any time with the Cookie settings link at the bottom of every page.
Our pages link to other websites, such as WhatsApp and Google Maps. Those websites have their own privacy policies, and we are not responsible for how they handle your data.
11. Changes to this policy
We may update this policy when our website, our services or the law changes. We will publish the new version on this page and change the "Last updated" date at the top.
12. Contact and grievances
For any question, request or complaint about your personal data, please contact:
- Person handling privacy requests: [To confirm: name/designation of the person handling privacy requests]
- Email: Josha.infinity777@gmail.com
- Phone: +91 80 3556 5332 (Mon – Sat: 9:00 AM – 6:00 PM)
- Post: JOSHA GOLD AND DIAMOND JEWELLERY, No 73, 2nd Floor, Nagavarapalya Main Road, C V Raman Nagar Road, Bangalore, Karnataka - 560093
- Online: our data request form or the Contact page