Privacy Policy

Last updated: 1 March 2026

Summary (Plain English): We are Rocana Jewels, an online jewellery store based in India. We collect your name, email, phone, and address to process your orders. We do not sell your personal data to anyone. You have the right to access, correct, or delete your data at any time by contacting us.

1 Who We Are & Overview

Rocana Jewels ("we", "us", "our") operates the website rocanafashion.com and is the data controller responsible for your personal information. We are an online jewellery retailer based in India, offering handcrafted jewellery including rings, necklaces, earrings, bracelets, bangles, and pendants.

This Privacy Policy describes how we collect, use, store, share, and protect information about you when you visit our website, place an order, create an account, contact our customer support, or otherwise interact with us online.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the website.

This policy is governed by the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2 Personal Data We Collect

We collect different categories of personal data depending on how you interact with us:

Category	Examples	Why Collected
Identity Data	Full name, username, profile photo	Account creation & personalisation
Contact Data	Email address, mobile number, billing & shipping address	Order fulfilment, delivery, support
Transaction Data	Order history, items purchased, payment method type, invoice records	Processing payments, fraud detection, records
Technical Data	IP address, browser type, device type, OS, pages visited, time spent	Security, analytics, improving UX
Usage Data	Products viewed, wishlist items, cart contents, search queries	Personalised recommendations, improving the site
Marketing Data	Email preferences, communication opt-in/out status	Sending promotions (with consent only)
Communication Data	Messages via contact form, reviews, feedback	Responding to enquiries, improving service

Sensitive Data: We do not collect sensitive personal data such as biometric data, health information, caste, religion, or political opinions. We do not store full payment card numbers -- transactions are handled entirely by our PCI-DSS compliant payment gateway partners.

3 How We Collect Your Data

Direct interactions: When you register, place an order, fill in a contact form, subscribe to our newsletter, or contact support.
Automated technologies: Cookies, server logs, and similar technologies as you navigate our website.
Third parties: Payment processors (Razorpay), shipping partners, Google Analytics, and social media platforms.
Publicly available sources: For fraud prevention purposes only.

4 How We Use Your Data

Process and fulfil your orders -- payment, packaging, dispatch, delivery tracking, and post-delivery support. (Contract performance)
Manage your account -- maintaining your customer profile and order history. (Contract performance)
Provide customer support -- responding to queries, complaints, and feedback. (Legitimate interest)
Send transactional communications -- order confirmations, payment receipts, and shipping notifications. (Contract performance)
Send marketing communications -- newsletters and promotions only if you have opted in. (Consent)
Improve our website -- analysing how users interact with our site. (Legitimate interest)
Prevent fraud -- detecting and preventing fraudulent transactions. (Legitimate interest / Legal obligation)
Comply with legal obligations -- tax, accounting, and regulatory records under Indian law. (Legal obligation)
Personalise your experience -- product recommendations based on your browsing history. (Legitimate interest / Consent)

We will never sell your personal data to third-party marketers, data brokers, or advertisers. Your data is only used to provide and improve our services to you.

Payment Processors: Razorpay, Stripe, PayU -- PCI-DSS certified gateways that handle your transactions securely.
Shipping & Logistics Partners: Delhivery, Blue Dart, DTDC, India Post -- require your name, address, and phone to deliver your orders.
Email & SMS Providers: Mailchimp, SendGrid -- used to send transactional and marketing messages on our behalf.
Analytics Providers: Google Analytics -- anonymised usage data only. No personally identifiable information shared.
Cloud Hosting Providers: Contractually bound to protect server-level data.
Legal Authorities: If required by law, court order, or to protect our legal rights.
Business Transfers: In merger or acquisition events, subject to the same privacy protections.

All third-party providers are contractually obligated to process your data only on our instructions and to maintain appropriate security.

6 Cookies & Tracking

We use cookies and similar tracking technologies to enhance your browsing experience.

Cookie Type	Purpose	Can You Opt Out?
Essential	Keeping you logged in, maintaining your cart, processing orders.	No -- strictly necessary.
Analytical	Google Analytics to understand visitor behaviour and traffic sources.	Yes -- via browser settings.
Functional	Remembering preferences such as recently viewed products.	Yes -- some features may be limited.
Marketing	Facebook Pixel, Google Ads -- tracking to show relevant ads.	Yes -- via browser or platform settings.

7 How Long We Keep Your Data

Account Data: While your account is active. Deleted within 30 days of account removal.
Order & Transaction Data: Minimum 7 years for tax and legal compliance under Indian law.
Customer Support Records: Up to 3 years after resolving your query.
Marketing Preferences: Duration of subscription plus 2 years after unsubscribe (proof of consent).
Technical / Log Data: Up to 12 months for security monitoring.

When no longer required, we securely delete or anonymise your data.

8 How We Protect Your Data

SSL/TLS Encryption: All data in transit is encrypted. Look for the padlock icon in your browser.
Password Hashing: All passwords are hashed with bcrypt. We cannot retrieve them -- only reset them.
Access Controls: Data access is restricted to authorised personnel on a need-to-know basis.
Secure Payment Processing: Full card details are never stored on our servers -- handled by PCI-DSS certified gateways.
Regular Security Audits: We regularly review practices to address new threats.
Database Security: Firewalls, restricted credentials, and regular encrypted backups.

Important: No internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately at support@rocanafashion.com.

9 Your Rights Over Your Data

To exercise any right, please contact us using the details in Section 14. We respond within 30 days.

Right to Access

Request a copy of the personal data we hold about you, free of charge, within 30 days.

Right to Rectification

Request correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

Request deletion of your data where there is no compelling reason for us to continue holding it.

Right to Restrict

Request that we limit how we use your data, e.g. while a dispute is resolved.

Data Portability

Receive your data in a structured, machine-readable format to transfer to another provider.

Right to Object

Object to processing for direct marketing or where we rely on legitimate interest.

Withdraw Consent

Unsubscribe from marketing at any time via email link or by contacting us directly.

Right to Complain

Lodge a complaint under the IT Act, 2000 if you believe your data has been misused.

10 Childrens Privacy

Our website is not directed at children under 18 years. We do not knowingly collect data from minors. If you believe your child has provided us data, contact us at support@rocanafashion.com and we will promptly delete it.

11 Third-Party Links

Our website may link to third-party sites including Instagram, Facebook, payment portals, and partner sites. These operate under their own privacy policies. We are not responsible for their data practices. We encourage you to review their policies before providing any personal information.

12 International Data Transfers

Your data is primarily processed and stored in India. Some third-party providers (cloud hosting, analytics, email) may process data in other countries including the US or EU. We ensure appropriate safeguards are in place, including data processing agreements consistent with the IT Act, 2000.

13 Changes to This Policy

We may update this policy to reflect changes in our practices, legal requirements, or technology. When we make significant changes we will update the "Last updated" date, email registered users, and display a notice on our homepage for 30 days. Your continued use of the website after an update constitutes acceptance of the revised policy.

14 Contact Us -- Data Enquiries

For any questions or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

Rocana Jewels -- Data Privacy Team

Email: support@rocanafashion.com

Instagram: @rocanafashion

Hours: Monday to Saturday, 10 AM to 6 PM IST

Or use our Contact Page to submit your query online.

We aim to respond to all privacy enquiries within 3-5 business days.

Your Cart