Your details,
and what we do with them

Ojas Collection is a handcrafted metalware brand — brass, copper and oxidised silver jewellery, devotional showpieces and gifts — trading under ARM Agritrade LLP, at New Raja Park, Ram Gali No. 8, Shanti Path, Jaipur, Rajasthan, India.

This policy covers ojascollection.store and explains what we collect when you browse, enquire or order, why we hold it, who else ever sees it, and what you can ask us to do with it. It is written to be read, not to be got past.

We ask for the least we can and still get a parcel to you.

• When you place an order: your name, a phone number we can reach you on, and the address the order ships to. An email address is optional — plenty of our customers order over WhatsApp and have none, so we do not insist on one. Give it to us and we will use it to send your order updates.
• When you send an enquiry: whatever you choose to put in the form or the message — typically a name, a way to reply to you, and what you are asking about.
• When you message us on WhatsApp or call: your phone number and the conversation itself, held in the ordinary way on the phone it arrived on.
• Automatically, at our host: standard server logs — the page requested, a timestamp, an IP address and a browser user-agent. These are what keep the site up and let us spot abuse. We do not build a profile from them.

We never ask for and never receive your card, UPI or bank details. Those are typed into Razorpay’s own secure window and never reach our servers — see section 4.

What you add to your bag is saved on your own device, in your browser’s local storage. It is not a cookie, it is not sent to us as you shop, and we cannot see it. It survives closing the tab so that your bag is still there when you come back — which is the whole reason it is stored at all.

The contents reach us only at the moment you go to checkout and confirm the order. Clearing your browser’s site data empties it, and emptying your bag on the site removes it too.

Card, UPI and net-banking payments are handled by Razorpay Software Private Limited, a payment gateway licensed by the Reserve Bank of India. When you pay, those details go directly to Razorpay in their own secure window. They are not typed into our site, they do not pass through our servers, and we could not store them if we wanted to.

To take the payment we pass Razorpay the order amount and the contact details needed to raise it. What comes back to us is a payment reference and whether it succeeded — never a card number. Razorpay handles what it receives under its own privacy policy and its RBI obligations, which we would encourage you to read on their site.

Only for the reasons you gave it to us:

• to take, pack and deliver your order, and to keep you posted on it;
• to reply to an enquiry, quote for a personalised or bulk piece, and answer questions about something you have already bought;
• to handle a return, a replacement or a refund under our Return & Refund Policy;
• to keep the invoices and records that Indian tax and company law require us to keep;
• to keep the site working, secure, and free of fraud and abuse.

We do not send marketing to people who have not asked for it, and we have never sold anyone’s details. If we ever want to send you an offer, we will ask you first and you will be able to stop it in one reply.

A short list, and it does not grow quietly. We share what is strictly needed with:

• the courier delivering your order — the name, address and phone number on the label, because a parcel cannot be delivered without them;
• Razorpay, to take and to refund payment;
• the services that run the site — our hosting and our database — which hold the data on our behalf and act on our instructions, not their own;
• a public authority, where the law actually requires it of us.

That is the complete list. We do not sell, rent or trade personal data, and we do not pass it to advertisers or data brokers — not for money and not for reach.

This site runs no advertising pixels, no third-party analytics and no cross-site trackers. There is no Google Analytics tag, no Meta pixel and no tag manager on any page you can visit. That is a deliberate choice, and it is why you have never been shown a cookie banner here — we do not set anything that would need one.

The only cookies this site sets are the sign-in cookies for our own staff administration area. They are issued after a password login, they are strictly necessary to keep that session secure, and a customer browsing or ordering is never given one.

Your bag is kept in local storage rather than a cookie, as described in section 3.

• Order records — kept for as long as Indian tax and company law require us to keep invoices and books of account. We cannot delete a paid order before then, and we will tell you so plainly if you ask.
• Enquiries that did not become orders — kept while we are still talking, and cleared once the conversation is plainly finished.
• Server logs — kept for a short period for security and troubleshooting, then rotated away.

Under India’s Digital Personal Data Protection Act 2023 you can ask us to:

• tell you what we hold about you, and give you a copy of it;
• correct anything that is wrong, incomplete or out of date;
• delete it, where we are not required by law to keep it — see section 8;
• withdraw a consent you gave us, as easily as you gave it;
• nominate someone to exercise these rights for you if you die or become incapable of doing so yourself.

Ask on WhatsApp, by email at ojcollection123@gmail.com, or by phone on the numbers in section 11. We will verify that the request really comes from you — usually by the phone number on the order — and answer within 30 days. There is no charge.

The whole site is served over HTTPS, so what you send us is encrypted in transit. Order data sits in a database that can only be reached over an encrypted connection using credentials held on our server and never sent to your browser. The administration area is behind a password and kept out of search engines, and access to it is limited to the people who actually need it to fulfil orders.

No system is perfect, and we would rather say so than imply otherwise. If a breach ever affects your data we will tell you and the Data Protection Board of India, as the law requires, rather than hoping you do not notice.

This shop is meant for adults. We do not knowingly collect data from anyone under 18, and we do not direct advertising at children. If you believe a child has sent us their details, tell us and we will delete them.

Anything about this policy or about your data — including a grievance, which we would much rather hear directly — reaches us here:

• WhatsApp — the quickest way, and the one we watch most closely.
• Email ojcollection123@gmail.com — best if you would rather have your request and our answer in writing.
• Call +91 95870 25268.
• Call +91 93523 02829.
• By post: ARM Agritrade LLP, New Raja Park, Ram Gali No. 8, Shanti Path, Jaipur, Rajasthan, India.

Those are the only channels we run. The address above is the one inbox we publish — anything written to a “support@” or “grievance@” style address at this domain reaches nobody, because no such mailbox exists. If we cannot resolve a complaint between us, you may take it to the Data Protection Board of India.

If this policy changes we will update the page and move the “last updated” date at the top of it. Where a change genuinely affects how we use data you have already given us, we will tell you rather than leaving you to find it.