Privacy Policy

Who this covers

This policy applies to allindiabullion.com and the All India Bullion app. All India Bullion is the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023. Our products are offered for delivery and collection in India only, and your data is handled for that purpose.

What we collect

When you order

• Your name, mobile number and, if given, email address.
• Billing and delivery addresses, and the name of the person collecting from our store.
• Order details: pieces, prices, invoices, delivery status.
• Payment references: the UTR or transaction reference, the paying account holder's name and the amount, as they appear on our bank statement. We never collect card numbers, UPI PINs or banking passwords.
• PAN or identity documents, only where the law requires them for your order.
• Messages you send us on WhatsApp, by email or by phone.

When you use the website or app

• Device and browser information, IP address, pages and products viewed, and app events such as a product being opened.
• Security and fraud-prevention signals, such as repeated failed sign-ins, unusual request patterns and automated traffic, which help us protect your account and our rates.
• A notification token, if you allow notifications in the app.

Why we use it

• To take, confirm, deliver and support your orders, and to issue tax invoices and credit notes.
• To match your payment to your order and to prevent fraud and money laundering.
• To meet our obligations under tax, anti-money-laundering and consumer protection law.
• To send you order, payment and delivery updates in the app, by WhatsApp or by SMS.
• To keep the website and app secure, and to understand how they are used so we can improve them.

We send promotional messages only with your consent, and you can withdraw it at any time.

Who we share it with

We share personal data only with service providers who process it for us under contract, and with authorities where the law requires:

• Courier partners — the recipient's name, phone number and address, to deliver your order.
• Our bank — to receive, verify and refund payments.
• Technology providers — the secure cloud services that run our website and app and store your data, under contract and confidentiality.
• Messaging — WhatsApp for order messages, and an app notification service for alerts you allow.
• Analytics and advertising — Google Analytics on the website, and Google AdSense on our rate and news pages (not on shop pages).
• Professional advisers and authorities — our chartered accountant and auditors, and government or law-enforcement authorities where the law requires it.
• To protect people — where it is reasonably necessary to prevent fraud or harm to you, our other customers, our staff or the public, or to establish or defend a legal claim.

We do not sell or rent your personal data.

Cookies, analytics and ads

The website uses cookies to keep live rates working securely, to measure visits with Google Analytics, and to show ads on rate and news pages through Google AdSense, which may use cookies to personalise ads. You can block or delete cookies in your browser settings, and manage Google ad personalisation atadssettings.google.com. Some features may not work without cookies.

How long we keep it

Security

Your data is encrypted in transit, access to it is limited to staff who need it, and payments are never confirmed from screenshots. No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, subject to the records the law requires us to keep;
• withdraw consent you have given, for example to marketing messages;
• nominate another person to exercise your rights if you die or become incapacitated; and
• complain to our Grievance Officer, and then to the Data Protection Board of India.

Write to our Grievance Officer using the details below. We will verify your identity before acting on a request.

Deleting your account

You can ask us to delete your account at any time by writing to our Grievance Officer from the mobile number or email on your account. We delete your account, addresses and preferences. We keep invoices, order and payment records for as long as tax law requires, and then delete them.

Children

Our shop is for adults. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy, and the date at the top of this page shows when. We will tell you in the app about any significant change.

Contact and grievances