Last Updated: 20 June 2026

1. INTRODUCTION

This Privacy Policy describes how We Retail Network, operating the fashion jewellery brand S V E T A R A (“SVETARA”, “we”, “us” or “our”), collects, receives, stores, uses, processes, shares, protects and otherwise handles personal data when you:

• visit or use www.svetara.com (“Website”);
• create an account with SVETARA;
• browse, purchase, return or exchange products;
• communicate with us through email, telephone, WhatsApp Business, social media or customer support;
• subscribe to marketing communications;
• participate in surveys, contests, promotions or loyalty programmes;
• submit ratings, reviews, photographs or other content; or
• otherwise interact with SVETARA online or offline.

SVETARA is a fashion jewellery brand owned and marketed by:

For the purposes of applicable data-protection law, We Retail Network is the entity responsible for determining the purposes and means of processing personal data collected in connection with SVETARA and the Website.

This Privacy Policy should be read together with SVETARA’s Terms and Conditions, Shipping Policy, Cancellation and Refund Policy, Return and Exchange Policy, Cookie Policy and any other policy displayed on the Website.

2. APPLICABLE LAW

This Privacy Policy is intended to operate in accordance with applicable Indian laws, rules and regulations, including, as applicable and as brought into force:

• the Information Technology Act, 2000;
• the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• the Digital Personal Data Protection Act, 2023;
• the Digital Personal Data Protection Rules, 2025;
• the Consumer Protection Act, 2019;
• the Consumer Protection (E-Commerce) Rules, 2020, as amended;
• applicable Goods and Services Tax laws and record-retention requirements;
• applicable directions issued by the Indian Computer Emergency Response Team;
• applicable advertising, telecommunications, consumer-protection, taxation and electronic-commerce laws; and
• any amendment, replacement, notification, rule or regulation issued under the foregoing laws.

Where a provision of the Digital Personal Data Protection Act, 2023 or the Digital Personal Data Protection Rules, 2025 has not yet come into force, We Retail Network may implement the relevant requirement voluntarily or apply it from the date on which it becomes legally effective.

3. MEANING OF PERSONAL DATA

“Personal Data” or “Personal Information” means any information about an individual who is identifiable by or in relation to such information.

Personal Data does not ordinarily include information that has been permanently anonymised or aggregated in a manner that prevents an individual from being identified.

“Processing” includes collecting, recording, organising, storing, adapting, retrieving, using, sharing, disclosing, transmitting, aligning, combining, restricting, erasing or otherwise handling Personal Data through automated or digital means.

4. PERSONAL DATA WE MAY COLLECT

The Personal Data collected by SVETARA depends on how you interact with us.

4.1 Identity and Contact Information

We may collect:

• full name;
• billing and delivery address;
• email address;
• mobile or telephone number;
• WhatsApp number;
• country, state, city and PIN code;
• account username or customer identification number; and
• other contact information voluntarily provided by you.

4.2 Account Information

If you create an account, we may collect:

• account credentials;
• login information;
• saved delivery addresses;
• communication preferences;
• wishlist information;
• cart information;
• order history;
• saved preferences; and
• account-security information.

Passwords may be encrypted, hashed or otherwise protected by our Website or technology service providers. We do not have access to passwords where they are securely managed by such providers.

4.3 Order and Transaction Information

When you place or attempt to place an order, we may collect:

• products viewed, selected, added to cart or purchased;
• order number and date;
• quantity, price and discount information;
• billing and shipping details;
• payment status and transaction reference;
• delivery, cancellation, return, exchange and refund details;
• purchase history;
• coupon or promotional-code usage;
• invoice information; and
• GSTIN or other tax information voluntarily supplied for issuing a tax invoice.

4.4 Payment Information

Payments may be processed by authorised banks, payment gateways, card networks, UPI providers, wallet providers or other financial-service providers.

SVETARA does not ordinarily intend to directly collect or store complete debit-card numbers, credit-card numbers, CVV numbers, UPI PINs, internet-banking passwords or payment authentication credentials.

We may receive and retain limited payment-related information such as:

• payment method;
• transaction identification number;
• payment status;
• payment date and amount;
• refund status; and
• masked card or account details made available by the payment processor.

You should never disclose your card PIN, UPI PIN, CVV, OTP, banking password or other confidential authentication information to any person claiming to represent SVETARA.

4.5 Communications and Customer-Support Information

We may collect information contained in:

• emails;
• telephone calls;
• WhatsApp conversations;
• chat messages;
• social-media communications;
• complaints;
• support requests;
• feedback;
• warranty or authenticity queries;
• return or refund requests; and
• other communications sent to us.

Calls or conversations may be monitored or recorded where permitted by law for quality assurance, training, fraud prevention, dispute resolution and service improvement. Where required, appropriate notice or consent will be obtained.

4.6 Reviews and User-Generated Content

If you post a product review, rating, photograph, testimonial, comment or other content, we may collect and display:

• your name or chosen display name;
• rating and review;
• product photograph or video;
• date of submission;
• purchase-verification status; and
• other information voluntarily included by you.

Reviews and other public submissions may be visible to other users. You should not include sensitive or confidential Personal Data in publicly accessible content.

4.7 Device and Technical Information

When you visit the Website, certain information may be collected automatically, including:

• Internet Protocol address;
• browser type and version;
• device type;
• operating system;
• language;
• time zone;
• screen resolution;
• device identifiers;
• referring and exit pages;
• pages and products viewed;
• date and time of access;
• time spent on pages;
• clicks and navigation paths;
• cart activity;
• approximate location derived from IP address;
• Website errors and performance information; and
• security, fraud-detection and diagnostic information.

4.8 Marketing and Preference Information

Where applicable, we may collect:

• email, SMS, RCS, WhatsApp and telephone marketing preferences;
• products or collections you may be interested in;
• responses to surveys and promotions;
• advertising interactions;
• abandoned-cart activity;
• social-media engagement; and
• consent and opt-out records.

4.9 Information From Third Parties

We may receive Personal Data from:

• Zoho Commerce and other Website or hosting providers;
• payment gateways and banks;
• courier, shipping and fulfilment partners;
• customer-support providers;
• marketing, email, SMS or WhatsApp providers;
• analytics and advertising providers;
• social-media platforms;
• fraud-prevention and security providers;
• referral or affiliate partners;
• publicly available sources; and
• government, regulatory or law-enforcement authorities where legally permitted.

We may combine information received from third parties with information collected directly from you, where permitted by law.

5. INFORMATION WE DO NOT INTEND TO COLLECT

Unless required by law or strictly necessary for a specific lawful purpose, SVETARA does not intend to collect:

• health or medical records;
• biometric information;
• genetic information;
• sexual-orientation information;
• religious or political beliefs;
• complete financial-account credentials;
• payment authentication passwords;
• government identification documents unrelated to a lawful requirement; or
• any other information that is excessive for the stated purpose.

Please do not send such information to us unless we have specifically requested it for a lawful and disclosed purpose.

6. HOW WE COLLECT PERSONAL DATA

We may collect Personal Data:

• directly from you;
• automatically through the Website;
• through cookies, pixels, tags, software-development kits and similar technologies;
• through orders and account activity;
• through customer-support interactions;
• through payment and logistics partners;
• through social-media platforms;
• through reviews, promotions or surveys; and
• from service providers acting on our behalf.

7. PURPOSES FOR WHICH WE USE PERSONAL DATA

We may process Personal Data for the following lawful purposes.

7.1 Providing Products and Services

We may use Personal Data to:

• operate the Website;
• create and manage your account;
• display products and availability;
• process and confirm orders;
• verify payments;
• issue invoices and order confirmations;
• arrange packaging, shipping and delivery;
• send shipment and delivery updates;
• facilitate cancellation, return, exchange and refund requests;
• maintain your wishlist or cart;
• provide customer support; and
• perform our contractual obligations.

7.2 Communication

We may use Personal Data to:

• respond to questions and complaints;
• communicate about orders, payments, deliveries and returns;
• send account or security notices;
• notify you about material changes to our policies;
• request information required to complete a transaction; and
• maintain our customer relationship.

7.3 Fraud Prevention and Security

We may use Personal Data to:

• authenticate users;
• identify suspicious transactions;
• prevent payment fraud, identity theft and account misuse;
• detect security threats;
• investigate unauthorised activity;
• enforce purchase limits or promotional conditions;
• protect customers, SVETARA and third parties; and
• establish, exercise or defend legal claims.

7.4 Website Improvement and Analytics

We may use Personal Data and aggregated information to:

• analyse Website traffic and customer journeys;
• understand product and category performance;
• diagnose technical problems;
• improve navigation, design and mobile usability;
• measure advertising and marketing performance;
• personalise product recommendations;
• improve customer service;
• test Website features; and
• conduct internal research and business analysis.

7.5 Marketing and Advertising

Subject to applicable law and your choices, we may use Personal Data to:

• send newsletters and promotional messages;
• send information about launches, offers and collections;
• remind you about products left in your cart;
• personalise advertising;
• create advertising audiences;
• measure advertisement performance;
• show advertisements on third-party websites and platforms; and
• conduct customer surveys, contests and promotions.

Where consent is required, marketing communications will be sent only after receiving appropriate consent. You may withdraw marketing consent or opt out at any time.

Withdrawal from marketing communications will not prevent us from sending transactional, account, order, payment, delivery, security or legally required communications.

7.6 Legal, Tax and Regulatory Compliance

We may process Personal Data to:

• issue and preserve tax invoices;
• comply with GST and accounting requirements;
• maintain legally required books and records;
• respond to lawful government or regulatory requests;
• comply with court orders, notices, summonses or warrants;
• comply with consumer-protection obligations;
• investigate complaints;
• report or respond to cyber incidents;
• conduct audits;
• prevent unlawful activity; and
• fulfil any other legal obligation.

8. BASIS OF PROCESSING

Depending on the circumstances and applicable law, we may process Personal Data:

• with your free, specific, informed, unconditional and unambiguous consent;
• where you voluntarily provide the information for a stated purpose;
• where processing is necessary to fulfil an order or contract;
• where processing is necessary to comply with law;
• for certain legitimate uses recognised under applicable law;
• to respond to an emergency involving life or health;
• to establish, exercise or defend legal rights;
• to prevent fraud or misuse; or
• for another lawful purpose permitted under applicable law.

Consent for optional marketing or advertising will, where required, be obtained separately from consent required to process an order.

9. CONSENT AND WITHDRAWAL

Where processing is based on consent:

• you may refuse to provide consent;
• you may withdraw consent at any time;
• withdrawal will not affect processing already lawfully carried out before withdrawal; and
• withdrawal may prevent us from providing a feature or service that requires the relevant Personal Data.

We will provide a reasonably accessible method for withdrawing consent. The withdrawal process will be comparable in ease to the method through which consent was obtained, where required by law.

We may continue processing information after withdrawal where such processing is necessary to:

• complete an order already placed;
• provide an already purchased service;
• process a return or refund;
• comply with GST, accounting or other legal obligations;
• prevent fraud;
• respond to a dispute;
• enforce an agreement; or
• establish or defend legal claims.

10. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies, pixels, tags, web beacons, local storage and similar technologies.

These technologies may be used for:

• maintaining Website functionality;
• remembering login and cart information;
• storing preferences;
• security and fraud prevention;
• analysing Website usage;
• measuring advertising performance;
• personalising content;
• remarketing and targeted advertising; and
• improving customer experience.

Cookies may include:

Strictly Necessary Cookies

These cookies are necessary for core Website functions such as account login, cart operation, checkout, security and order processing.

Preference Cookies

These cookies remember preferences such as language, region or display settings.

Analytics Cookies

These cookies help us understand Website traffic, user behaviour and performance.

Advertising Cookies

These cookies may be used to measure campaigns, limit advertising frequency and show more relevant advertisements.

Where required, non-essential cookies will be used only after obtaining appropriate consent through a cookie-consent mechanism.

You may control or delete cookies through your browser or consent settings. Disabling cookies may prevent certain Website functions from operating properly.

A separate Cookie Policy may provide further information about the cookies and tracking technologies used by SVETARA.

11. ANALYTICS AND ADVERTISING TECHNOLOGIES

Where enabled, SVETARA may use third-party services such as:

• Google Analytics;
• Google Ads;
• Google Merchant Center;
• Google Tag Manager;
• Meta Pixel;
• Facebook and Instagram advertising tools;
• Pinterest analytics or advertising tools; and
• similar analytics and marketing technologies.

These providers may collect device, usage, cookie and advertising information in accordance with their own privacy policies.

Where legally required, these tools will be activated only after obtaining appropriate consent. You may manage advertising preferences through the relevant platform, browser or Website consent settings.

12. DISCLOSURE OF PERSONAL DATA

We may disclose Personal Data only where reasonably necessary for a lawful purpose.

12.1 Website and Technology Providers

Personal Data may be processed by Zoho Commerce, Website-hosting providers, cloud-service providers, software providers, database providers and technical-support vendors that help us operate the Website.

12.2 Payment Providers

Personal Data may be shared with payment gateways, banks, card networks, UPI providers, wallet providers and financial institutions for payment processing, verification, refund processing and fraud prevention.

12.3 Courier and Logistics Providers

We may share name, address, telephone number, order value and delivery information with courier, logistics, fulfilment and shipping providers.

12.4 Communication Providers

We may share relevant information with email, SMS, RCS, telephone, WhatsApp, customer-support and notification service providers.

12.5 Analytics and Advertising Providers

Subject to your consent where required, limited device, usage and transaction-related information may be shared with analytics, advertising, measurement and social-media providers.

12.6 Professional Advisers

We may disclose Personal Data to accountants, auditors, insurers, consultants, advocates and other professional advisers under appropriate confidentiality obligations.

12.7 Government and Legal Authorities

We may disclose Personal Data where required or permitted by law, including to:

• courts and tribunals;
• police and law-enforcement authorities;
• tax and GST authorities;
• consumer-protection authorities;
• the Data Protection Board of India;
• the Indian Computer Emergency Response Team;
• other regulators; and
• authorised government agencies.

12.8 Business Transfers

Personal Data may be disclosed in connection with a proposed or completed merger, acquisition, restructuring, financing, insolvency, sale of assets, transfer of business or change in control, subject to applicable law and appropriate safeguards.

12.9 With Your Direction or Consent

We may disclose Personal Data where you direct us to do so or provide specific consent.

We do not sell or rent Personal Data to unauthorised third parties for monetary consideration.

13. THIRD-PARTY PROCESSORS

Third-party service providers process Personal Data only for the services they provide to us or for their independently disclosed purposes.

We seek to engage providers that maintain appropriate technical and organisational safeguards. However, their processing may also be governed by their own privacy policies and terms.

We are not responsible for independent processing carried out by a third party outside our instructions or control.

14. INTERNATIONAL DATA TRANSFERS

Some technology, cloud, communication, analytics, advertising or payment providers may process or store Personal Data outside India.

Where Personal Data is transferred outside India, we will seek to ensure that the transfer:

• is permitted under applicable Indian law;
• is not made to a country or territory restricted by the Government of India;
• is reasonably necessary for the relevant service;
• is subject to appropriate contractual, technical or organisational safeguards; and
• complies with any localisation or transfer requirement applicable to the relevant category of data.

15. DATA RETENTION

We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may depend on:

• the status of your account;
• completion of an order;
• returns, refunds and warranties;
• customer-support requirements;
• fraud-prevention requirements;
• contractual obligations;
• statutory limitation periods;
• litigation or regulatory proceedings;
• tax, GST, accounting and audit requirements; and
• security and incident-response requirements.

Order, invoice, accounting and GST-related records may be retained for the period required under applicable GST law, ordinarily up to seventy-two months from the due date for furnishing the relevant annual return, or longer where an appeal, investigation, audit, assessment or proceeding is pending.

Security logs, processing records and associated traffic data may be retained for the period required under applicable data-protection, information-technology or cybersecurity laws.

Marketing information may be retained until you withdraw consent or opt out, subject to retention of suppression records necessary to honour your opt-out request.

After the applicable retention period expires, Personal Data may be securely deleted, anonymised or archived where legally permitted.

16. DATA SECURITY

We seek to maintain reasonable technical, organisational, physical and contractual safeguards designed to protect Personal Data against:

• unauthorised access;
• unauthorised disclosure;
• misuse;
• alteration;
• accidental loss;
• destruction;
• unlawful processing; and
• personal-data breaches.

Depending on the nature of the information and systems involved, safeguards may include:

• encryption, masking or tokenisation;
• password protection;
• access controls;
• role-based permissions;
• secure communication protocols;
• logging and monitoring;
• backups and recovery controls;
• malware protection;
• software updates;
• vendor-security obligations;
• restricted employee access;
• confidentiality obligations;
• staff awareness measures; and
• incident-response procedures.

No electronic transmission or storage system can be guaranteed to be completely secure. You provide information through the internet at your own inherent risk, subject to our legal obligations.

17. PERSONAL-DATA BREACHES

If we become aware of a Personal Data breach, we may:

• investigate the nature and extent of the breach;
• take steps to contain and remediate it;
• preserve relevant evidence and logs;
• notify affected individuals where required;
• notify the Data Protection Board of India, CERT-In or another competent authority where required;
• provide information regarding possible consequences and protective measures; and
• implement measures intended to reduce the risk of recurrence.

Notifications will be made within the timeframe and in the manner required by applicable law.

18. YOUR RIGHTS

Subject to applicable law, you may have the right to:

• obtain information about the Personal Data processed by us;
• obtain a summary of processing activities;
• request information regarding entities with whom Personal Data has been shared;
• access your Personal Data;
• correct inaccurate or misleading Personal Data;
• complete incomplete Personal Data;
• update outdated Personal Data;
• request erasure of Personal Data;
• withdraw consent;
• opt out of promotional communications;
• raise a grievance;
• nominate another individual to exercise applicable rights in the event of death or incapacity; and
• complain to the competent authority after exhausting the applicable internal grievance process.

These rights are not absolute. We may decline, restrict or defer a request where permitted or required by law, including where information must be retained for:

• GST or taxation;
• legal claims;
• fraud prevention;
• an ongoing transaction;
• regulatory compliance;
• security;
• accounting or audit;
• dispute resolution; or
• another lawful purpose.

19. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy request, contact us using the details in the “Contact and Grievance Redressal” section.

Please include:

• your full name;
• registered email address or mobile number;
• order number, where relevant;
• the nature of your request; and
• sufficient information to identify the Personal Data concerned.

We may verify your identity before acting on a request. We may ask for additional information where reasonably necessary to prevent fraudulent or unauthorised requests.

Where a request is submitted through an authorised representative, we may require evidence of authority and direct identity verification.

20. ACCURACY OF INFORMATION

You are responsible for providing accurate, complete and current information.

We may rely on the authenticity of information supplied by you and will not ordinarily be responsible for losses caused by materially inaccurate, incomplete, false or misleading information provided by a user.

You may request correction or updating of your information using the contact details below.

21. CHILDREN’S PRIVACY

The Website and SVETARA products are intended to be purchased by adults capable of entering into a valid contract.

We do not knowingly create accounts for or collect Personal Data directly from individuals below eighteen years of age without legally valid and verifiable parental or guardian consent where required.

We do not knowingly undertake tracking, behavioural monitoring or targeted advertising directed at children where prohibited by applicable law.

If you believe that a child has supplied Personal Data without appropriate consent, contact us so that we may investigate and take appropriate action.

22. MARKETING COMMUNICATIONS

Where you have consented or where otherwise permitted by law, SVETARA may communicate through:

• email;
• SMS;
• RCS;
• WhatsApp;
• telephone;
• social media;
• push or account notifications; and
• other lawful communication channels.

You may opt out by:

• using the unsubscribe option in an email;
• following the opt-out instructions in a message;
• changing available communication preferences; or
• contacting us.

Opting out of marketing does not affect transactional or service communications relating to orders, payments, delivery, returns, refunds, account security or legal notices.

23. THIRD-PARTY LINKS AND SOCIAL MEDIA

The Website may contain links to third-party websites, payment pages, social-media platforms, applications or services.

Such third parties may independently collect and process Personal Data. Their privacy practices are governed by their respective policies.

We do not control and are not responsible for the content, security, availability, accuracy or privacy practices of independent third-party websites or platforms.

24. USER RESPONSIBILITIES

You agree to:

• provide accurate information;
• keep account credentials confidential;
• use a strong password;
• avoid sharing OTPs, PINs, CVVs or passwords;
• log out from shared devices;
• promptly report unauthorised account use;
• avoid uploading unlawful or third-party Personal Data without authority; and
• use the Website in accordance with applicable law and SVETARA’s policies.

25. FRAUDULENT COMMUNICATIONS

SVETARA will not ask you to disclose:

• debit-card or credit-card PINs;
• CVV numbers;
• UPI PINs;
• internet-banking passwords;
• complete payment passwords; or
• OTPs intended to authorise payments.

You should independently verify suspicious calls, messages, payment links or social-media accounts before providing information or making payment.

26. CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy to reflect:

• changes in law;
• regulatory requirements;
• changes to our Website or services;
• new technologies;
• changes to service providers;
• changes in business operations; or
• security and risk-management requirements.

The updated Privacy Policy will be posted on the Website with a revised “Last Updated” date.

Where required by law, we will provide additional notice or obtain fresh consent before materially changing the purpose for which Personal Data is processed.

Your continued use of the Website after an update does not by itself constitute consent where fresh affirmative consent is legally required.

27. CONTACT AND GRIEVANCE REDRESSAL

Questions, privacy requests, complaints and grievances may be sent to:

Owner and Marketer of S V E T A R A

Website: www.svetara.com

Please write “Privacy Request”, “Data Correction Request”, “Consent Withdrawal” or “Consumer Grievance” in the email subject line, as applicable.

We will endeavour to:

• acknowledge consumer grievances within forty-eight hours;
• resolve consumer grievances within one month of receipt;
• respond to privacy grievances within the period published by us and required under applicable law; and
• keep you reasonably informed where additional time or information is required.

Where the Digital Personal Data Protection Act, 2023 applies, a Data Principal may approach the Data Protection Board of India in accordance with applicable law after exhausting the grievance-redressal process made available by us.

28. GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed by the laws of India.

Subject to any non-waivable right available under consumer-protection, data-protection or other applicable law, courts and competent tribunals having jurisdiction over Jamshedpur, Jharkhand shall have jurisdiction in relation to matters arising from this Privacy Policy.

Nothing in this clause limits a consumer’s right to approach a competent consumer commission, regulator, authority, court or tribunal having jurisdiction under applicable law.

29. COMPANY AND BRAND INFORMATION

Brand Name: S V E T A R A

Nature of Business: Fashion Jewellery and Ecommerce Retail

Website:www.svetara.com

Principal Place of Business: Jamshedpur, Jharkhand, India

Privacy Email:admin@svetara.com

WhatsApp Business: +91 99057 33416

By using the Website or providing Personal Data to us, you acknowledge that you have read and understood this Privacy Policy. Where consent is legally required, Personal Data will be processed on the basis of the specific consent provided by you.