Privacy Policy

01 Introduction

Samruddhi Silver, a proprietary business operated under the trade name Samruddhi Silver and rooted in the legacy of V. Navinchandra Hirachand Malji Jewellers, is committed to protecting the personal data of its customers and website visitors.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, or engage with us through our WhatsApp Business channel. It is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) (as notified and applicable in 2026), and in adherence to Meta's WhatsApp Business API Policies.

By interacting with our website or providing your personal data through any channel, you acknowledge that you have read and understood this Privacy Policy.

02 Identity of the Data Fiduciary

Under the DPDP Act, 2023, the entity that determines the purpose and means of processing personal data is the Data Fiduciary. For all purposes of this policy, the Data Fiduciary is:

03 Data We Collect

We believe in collecting the minimum data necessary to serve you effectively. We only collect data that you voluntarily provide to us or that is generated through your use of our WhatsApp Business channel.

3.1 Data You Provide Directly

3.2 Data We Do Not Collect

We do not collect or process any of the following categories of data:

• Financial information (bank account, credit/debit card numbers)
• Government-issued identification numbers (Aadhaar, PAN, Passport)
• Biometric or health data
• Religious or political beliefs, caste, or ethnicity
• Location data beyond the city for delivery purposes (if applicable)

04 Purpose of Processing

Your personal data is processed solely for the following lawful and specific purposes:

We will not use your data for any other purpose without obtaining fresh, explicit consent from you in advance.

05 WhatsApp Business API — Special Notice

We communicate with our customers primarily through the WhatsApp Business API, a service provided by Meta Platforms Ireland Limited. The following disclosures apply specifically to our WhatsApp channel:

5.1 How We Use WhatsApp

• Sending transactional messages: order confirmations, dispatch notifications, and delivery updates.
• Sharing current silver rate alerts to opted-in customers.
• Providing customer support and responding to product inquiries.
• Sending promotional content such as new collections, festive offers, and exclusive launches — only to customers who have explicitly consented.

5.2 Consent for WhatsApp Communication

We only initiate WhatsApp Business conversations (using approved message templates) with customers who have:

1. Shared their WhatsApp number with us voluntarily (in-store, via website, or through a referral); OR
2. Initiated a conversation with us on WhatsApp themselves; OR
3. Explicitly opted in to receive communications from Samruddhi Silver.

5.3 Opt-Out / Unsubscribe

5.4 Meta's Role

Meta Platforms acts as a sub-processor (or Data Processor) for the purpose of message delivery via the WhatsApp Business API. Meta processes data in accordance with its own WhatsApp Privacy Policy and Business Data Processing Terms. We encourage you to review Meta's policies to understand how they handle data at the infrastructure level.

Samruddhi Silver does not share your personal data with Meta beyond what is technically required to deliver messages through the WhatsApp Business API.

06 Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following lawful bases:

• Consent: You have freely given, specific, informed, and unambiguous consent by sharing your contact details with us or by initiating a WhatsApp conversation. You may withdraw consent at any time (see Section 10).
• Contractual Necessity: Processing is necessary to fulfil your order, respond to inquiries, or perform our obligations to you as a customer.
• Legitimate Use: For certain operational activities such as maintaining business records, customer support, and ensuring security of our systems.
• Legal Obligation: Where we are required to retain data to comply with applicable Indian laws such as the GST Act, 2017, or orders from competent legal authorities.

07 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by law.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised from our systems.

08 Security Measures

Samruddhi Silver takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Our Security Practices Include:

• Access Control: Customer data within Malji CRM is accessible only to authorised personnel on a need-to-know basis.
• Encrypted Messaging: All WhatsApp communications are end-to-end encrypted by Meta's infrastructure.
• Secure Storage: Customer records in our CRM are stored on secured servers with restricted access.
• No Third-Party Sale: We never sell, rent, or trade your personal data to any third party for commercial purposes.
• Regular Review: We periodically review our data handling practices to ensure they remain appropriate and secure.

While we strive to protect your data, no method of electronic storage or transmission over the internet is 100% secure. In the event of a data breach that is likely to result in harm to you, we will notify you as required under the DPDP Act.

09 Third-Party Sharing & Disclosure

We do not sell, share, or disclose your personal data to third parties except in the following limited circumstances:

• Meta Platforms (WhatsApp API Provider): Message delivery data is processed by Meta solely for delivery infrastructure purposes.
• Logistics Partners: If applicable, delivery name and address may be shared with a courier partner solely to fulfil your order.
• Legal or Regulatory Requirements: We may disclose your data if required by a court order, government authority, or regulatory body under applicable Indian law.
• Business Succession: In the unlikely event of a business merger, acquisition, or transfer, your data may be transferred to a successor entity, subject to the same level of data protection.

10 Your Rights Under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you are entitled to the following rights regarding your personal data:

To exercise any of these rights, please contact us at info@samruddhisilver.com. We will respond to your request within 30 days.

11 Children's Privacy

Our services are not directed at children below the age of 18 years. Under the DPDP Act, 2023, processing of personal data of children requires verifiable parental consent.

We do not knowingly collect or process personal data of minors. If you believe that a minor has provided us with personal information without parental consent, please contact us immediately at info@samruddhisilver.com and we will take prompt steps to delete such data.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify customers via WhatsApp or email where feasible, especially if the changes affect how we process your existing data.

We encourage you to review this page periodically. Your continued engagement with Samruddhi Silver after any updates constitutes acceptance of the revised policy.

13 Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, we have appointed a Grievance Officer to handle any data-related complaints or queries:

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India, once it is operational under the DPDP Act, 2023.

14 Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please reach out to us through any of the following channels:

This Privacy Policy was drafted with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, Meta's WhatsApp Business API Policies, and applicable guidelines issued by the Government of India. It is intended as a comprehensive disclosure to our valued customers and does not constitute legal advice.