GREEN CARAT – COMPREHENSIVE PRIVACY POLICY

Effective Date: September 5, 2026

Welcome to Green Carat. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, use our services, or purchase our luxury jewellery.

This policy is designed to comply with global data privacy frameworks, including India's Digital Personal Data Protection (DPDP) Act, 2023, the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA), and the United Arab Emirates Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

1. INFORMATION WE COLLECT

We collect personal information directly from you, through your interactions with our website, and via authorised third-party service providers. The categories of data we collect include:

• Identity & Contact Data: Full name, billing address, shipping address, email address, telephone number, and account login credentials.
• Transaction & Financial Data: Purchase history, cart details, and payment confirmation status. Note: We do not store full credit card numbers, CVVs, or bank credentials; all financial transactions are tokenised and processed securely by certified third-party payment gateways.
• Regulatory Compliance Data: For high-value transactions in certain jurisdictions (such as purchases in India exceeding statutory thresholds), we are legally mandated to collect government-issued identification details (e.g., PAN card information) for tax and anti-money laundering compliance.
• Technical & Device Data: IP address, browser type, operating system, device identifiers, and automated cookie data regarding your navigation on our website.

2. PURPOSE OF PROCESSING & LEGAL BASES

We process your personal data only for clear, lawful, and specific business purposes:

• Order Fulfilment: Processing payments, executing global shipping, and managing returns or exchanges.
• Legal & Tax Compliance: Maintaining required financial records, conducting mandatory KYC/AML checks, and meeting statutory obligations across India, the US, the UAE, and the EU.
• Customer Support & Account Management: Maintaining your user profile, processing customer service inquiries, and facilitating product sizing or custom orders.
• Marketing & Communications (With Consent): Sending newsletters, promotional offers, or brand updates. You may opt out of marketing communications at any time.

3. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal data to data brokers. We share your data strictly with trusted third parties necessary to operate our business:

• Logistics & Courier Partners: To deliver your jewellery safely across global destinations.
• Payment Processors: To securely authorise and execute checkout payments.
• Legal & Regulatory Authorities: When strictly required by law, court orders, or government tax investigations.

4. CROSS-BORDER DATA TRANSFERS

As an international luxury brand, your data may be transferred to, stored, and processed in countries outside your jurisdiction (including servers located in India, the United States, and the European Union). We ensure all cross-border data flows are safeguarded using approved legal mechanisms, such as Standard Contractual Clauses (SCCs) and rigorous technical encryption standards.

5. DATA RETENTION PRACTICES

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account & Profile Data: Retained as long as your account remains active or until you request its deletion.
• Transaction & Financial Records: Retained for a mandatory minimum period of 7 years to comply with international tax, accounting, and anti-fraud laws.
• Marketing Data: Retained until you withdraw your consent or unsubscribe.

6. YOUR RIGHTS AS A DATA SUBJECT

Depending on your geographic location, you hold robust legal rights regarding your personal data:

• Right to Access: Request a summary or copy of the personal data we hold about you.
• Right to Correction & Erasure: Request the correction of inaccurate information or the immediate deletion ("Right to be Forgotten") of your data, subject to legal retention obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Object / Opt-Out (US/CCPA): California and international residents have the right to opt out of the "sale" or "sharing" of personal data for targeted advertising.

7. COOKIES AND TRACKING TECHNOLOGIES

Our website utilizes cookies and similar tracking tools to enhance user experience, analyse traffic, and personalise content. You can manage your cookie preferences directly through your browser settings or our website's privacy banner.

8. GRIEVANCE REDRESSAL & CONTACT US

If you have any questions, wish to exercise your privacy rights, or need to lodge a grievance regarding how your personal data is handled, please contact our designated Privacy and Legal Department:

• Email: legal@greencarat.com
• Contact Number: +91 6354471220