Privacy Policy

This policy explains how SVICK ("we", "us"), which runs the Jhilmira online store at https://jhilmira.com, handles your personal data. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the data described here. This policy is also published under the Information Technology Act, 2000 and the SPDI Rules, 2011.

If anything here is unclear, contact our Data Protection / Grievance contact (section 11).

1. Data we collect

When you place an order

Name, delivery address, pincode, state, phone number and email address.
Billing details needed for your GST invoice (and your GSTIN, if you enter one).
Order details: items, prices, discounts, delivery status.

When you pay

Payments are handled by Cashfree Payments. You enter card, UPI, net-banking or wallet details on Cashfree's secure checkout, not on our servers.
We receive only a payment reference, status, amount, method type (e.g. "UPI") and, for cards, the network and last four digits. We never see or store your full card number, CVV, UPI PIN or banking password.

When you contact us

Messages, photos and unboxing videos you send for a damage or defect claim, plus your ticket history.

If you create an account (optional; guest checkout is available)

Login email or phone and a password, stored only as a secure one-way hash. Saved addresses and order history are also kept.

When you browse

Essential data needed for the site to work: cart contents, session, security logs (IP address, browser type, time of request).
Analytics data, only if you allow it: pages viewed, device type, approximate location (city level), referring site. See section 6.

We do not collect sensitive data such as health, biometric or financial account information, and we do not ask for Aadhaar.

2. Why we use it (purposes)

Purpose	Data used	Basis
Process, ship and deliver your order	Name, address, phone, email, order details	Your consent, given when you place the order, for this specific purpose
Take payment and issue refunds	Payment reference and status	Your consent; refunds also a legal obligation
Issue GST invoices and keep tax records	Name, address, state, order and payment details	Legal obligation (GST law)
Handle damage claims, complaints and grievances	Messages, photos, videos, ticket history	Your consent; legal obligation under consumer protection rules
Send order updates (confirmation, dispatch, delivery)	Email; phone/WhatsApp if you opted in	Your consent
Send one reminder email if you leave items in your cart	Email, cart contents	Only if you tick the optional, unticked box at checkout; every reminder has an unsubscribe link
Prevent fraud and keep the site secure	IP address, logs, payment status	Legitimate use permitted by law
Improve the site through analytics	Browsing data	Only with your separate consent
Marketing emails or WhatsApp offers	Email, phone	Only with your separate, opt-in consent (never pre-ticked)
Ask for a review after delivery, and publish reviews you submit	Email, order, your rating, text and photos (location data is removed from photos)	Your consent; reviews are published only after you submit them and we approve them, and you can ask us to remove yours
Email you when an item you asked about is back in stock	Email, the item	Only when you request the alert; one email per alert

We do not use your data for any purpose not listed here without asking you first.

We share only what each party needs:

Our fulfilment partner in Jaipur, Rajasthan, which packs and ships your order: your name, delivery address, pincode and phone number. They do not receive your email or payment information.
Courier and logistics companies: name, delivery address, phone number, parcel details.
Cashfree Payments (payment gateway): order amount and reference, your name, mobile number and email (Cashfree needs them to process the payment), and the details you enter on their checkout. Cashfree processes them under its own privacy policy and RBI rules.
Service providers that run the store for us: hosting (Mumbai, India (Hostinger)), transactional email (Zoho Mail), messaging (WhatsApp) and analytics (none, only with consent). They act as our Data Processors under contract and may use the data only to provide their service to us.
Government and law enforcement when the law requires it, for example tax authorities or a court order.

We do not sell your personal data, and we do not share it with other brands for their marketing.

Some service providers may store data on servers outside India. Where that happens, transfers follow Indian law, including any restrictions notified under the DPDP Act.

4. How long we keep it

Order and invoice records: for as long as GST and income-tax law require (currently at least six years after the relevant annual return), then deleted or anonymised.
Damage-claim videos and photos: until the claim is closed plus 90 days, unless needed for a dispute.
Account data: until you delete your account, or after 3 years of inactivity.
Marketing consent: until you withdraw it.
Analytics data: no longer than 14 months.
Security logs: up to 1 year, or longer if the law requires.

5. How we protect it

HTTPS encryption on every page, and passwords stored as one-way hashes.
Access to customer data limited to people who need it to fulfil orders.
Payment data handled only by Cashfree Payments, a PCI-DSS compliant gateway.
Regular backups stored encrypted, and software kept up to date.

No system is perfectly secure. If a personal data breach occurs that affects you, we will tell you and the Data Protection Board of India as the law requires, explaining what happened and what you can do.

6. Cookies and analytics

Essential cookies (cart, login, security) are always on, because the site cannot work without them.
Analytics cookies (none) and advertising pixels (none) are off until you choose "Allow" in the cookie banner. You can change your choice at any time from the Cookie settings link in the footer.

7. Your rights

Under the DPDP Act, 2023 you have the right to:

access a summary of the personal data we hold about you and who we have shared it with;
correct, complete or update your data;
erase your data when it is no longer needed for the purpose you gave it for, except where the law requires us to keep it, such as GST records;
withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing already done, and we may then be unable to complete an order in progress;
grievance redressal through our contact in section 11;
nominate another person to exercise your rights in case of death or incapacity.

To use any of these rights, email contact@jhilmira.com from the email linked to your order, or write to the address in section 11. We may ask you to verify your identity. We respond within the time set by law, and in any case within 30 days.

Consent managers. You may also give, manage, review or withdraw consent through a Consent Manager registered with the Data Protection Board of India, once such services are available.

8. Children

Our store is meant for adults. We do not knowingly process personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not track or target ads at children. If you believe a child has given us data, contact us and we will delete it.

9. Marketing

We send marketing messages only if you ask for them: by ticking an unticked opt-in box, or by entering your email in our newsletter form and then confirming through the link we email you (double opt-in). Nothing is sent until you confirm. Every marketing email has an unsubscribe link; for WhatsApp, reply STOP. Order updates are not marketing and will still be sent.

10. Changes to this policy

If we make a material change we will update the date at the top and, where the change affects how we use data you already gave us, tell you by email or on the site before it takes effect.

11. Contact, grievances and complaints

Data Protection / Grievance contact Sathvic Kollu, Proprietor SVICK, Flat 101, MRVS Apartment, K.B Layout, Tirupati, Andhra Pradesh 517501 Email: contact@jhilmira.com · Phone: +91 86390 55087 (WhatsApp only)

We acknowledge privacy complaints within 48 hours and aim to resolve them within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is accepting complaints, after first using our grievance process as the law requires.

Last reviewed: 2026-10-31