Privacy Policy

This Privacy Policy explains how Cosmic 9 Gems collects, uses, shares, and protects your personal data, and what rights you have over it. It is written in plain language and is aligned with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

This website, https://cosmic9gems.com (the “Website”), is owned and operated by Operating legal entity and registration number to be confirmed — see the entity note in the Terms & Conditions (“Cosmic 9 Gems”, “we”, “us”, “our”), registered office at Registered office address to be confirmed.

Under the DPDP Act, we act as the Data Fiduciary — the entity that decides why and how your personal data is processed. You, the person whose data we process, are the Data Principal.

Please read this Policy together with our Terms & Conditions and Returns & Refunds Policy, also on this Website.

Your consent

By accessing or using the Website, placing an order, using our gemstone/numerology/birth-chart tools, or booking a consultation, you confirm that you have read and understood this Policy and consent to the collection and processing of your data as described here. Your consent is free, specific, informed, and given by clear affirmative action (for example, ticking a box or submitting a form) — not assumed from silence or pre-ticked boxes.

You may withdraw consent at any time (see Section 6). Withdrawal does not affect processing already carried out lawfully, and some processing may continue where required by law (e.g., tax records). If you do not agree with this Policy, please do not use the Website.

1. Personal Data We Collect

We collect only what is needed for the purposes in Section 2.

Category	What it includes	Why we need it
Identity & contact	Name, email, phone number, billing/shipping address	Create your account, process and deliver orders, send invoices and confirmations, provide support
Order & transaction	Products ordered, order value, GSTIN (if provided for a B2B invoice), transaction records. We do not store full card numbers — payment details are captured directly by our payment gateway	Fulfil purchases, issue GST invoices, handle returns/refunds, prevent fraud
Astrological / birth details (Sensitive)	Date, time, and place of birth — collected only when you voluntarily use our gemstone, numerology, or birth-chart tools, or book a personal consultation. Any recommendations generated from this data	Generate your personalised gemstone/rudraksha recommendation or consultation. Treated as sensitive personal data, collected only with your explicit consent, and only when you choose to use these tools
Device & usage	IP address, browser type, device identifiers, approximate location, referring/exit pages, pages viewed, cookies	Operate and secure the Website, detect fraud, understand how customers use our services
Communications & content	Messages sent via WhatsApp, email, chat, or phone; reviews and comments you post	Respond to and resolve queries; display content you choose to make public

Astrological note

Gemstone, rudraksha, and other recommendations are offered on the basis of traditional Vedic belief. Birth details are used only to generate these belief-based suggestions and are never used to diagnose, treat, cure, or predict any medical, financial, or legal outcome. Providing birth details is always optional, and you may use most of the Website without doing so.

2. Why We Process Your Data

• Order fulfilment — payments, shipping via courier partners, invoices, returns and cancellations.
• Recommendations & consultations — generating gemstone/rudraksha or numerology suggestions from birth details you voluntarily provide.
• Communication & support — responding to enquiries, order updates, support over WhatsApp/email/phone.
• Security & fraud prevention — screening orders and device data for risk.
• Analytics & improvement — anonymous, aggregated statistics to improve our products and services.
• Marketing (opt-in only) — newsletters, offers, and product updates by email/SMS/WhatsApp, only where you've opted in. You can opt out at any time (Section 6).

We rely on your consent for optional processing (marketing, sensitive birth data), and on contractual necessity and legal obligation (tax, accounting, fraud prevention) for the rest.

You confirm that any information you provide is accurate and current; we are not responsible for consequences arising from inaccurate information you supply.

3. How We Share Your Data

We do not sell your personal data. We share it only with the categories below, only to the extent necessary, and under confidentiality and data-protection obligations. All third-party providers are vetted for data-protection compliance before we work with them.

Who we share with	Purpose
Payment gateways	Securely process payments (UPI, cards, net-banking, wallets, EMI, COD). They capture your payment credentials directly; we receive only the transaction result
Logistics & courier partners	Deliver and track your order — name, address, and phone shared only for this purpose
Hosting & e-commerce platform providers	Host the Website and operate our order-management and support systems
Analytics & marketing providers	Measure and improve site performance; we may share anonymous, aggregated data that does not identify you
Professional advisers & authorities	To comply with law, respond to a court order or lawful government request, or protect our legal rights and the safety of others
Business transfers	If Cosmic 9 Gems is involved in a merger, acquisition, or asset sale, your data may transfer to the successor entity, which remains bound by this Policy

Confidentiality of your correspondence with us (consultations, order-related communication) is respected on both sides — we will not disclose the substance of your consultation without your consent, except where the law requires it.

4. Cookies & Tracking

We use cookies, log files, web beacons, and similar technologies to keep the Website working, remember preferences, understand usage, and support marketing.

• Cookies — small files that remember you and your preferences.
• Log files — track IP address, browser type, referring pages, and timestamps.
• Web beacons/pixels — measure how campaigns and pages perform.

You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality. We do not currently alter our data practices in response to browser “Do Not Track” signals.

5. Data Retention

We keep personal data only as long as necessary for the purpose it was collected, or as required by tax, accounting, or other legal obligations. Order and invoice records are retained for the period required under applicable law. Once no longer required, data is erased or anonymised. You may request earlier deletion at any time, subject to legal retention requirements (Section 6).

6. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Erase your data, subject to legal retention requirements
• Withdraw consent for any processing based on consent
• Nominate another individual to exercise your rights in the event of death or incapacity
• Grievance redressal — raise a complaint and have it addressed

To opt out of marketing specifically: unsubscribe from any email, reply STOP to a message, or Marketing opt-out route to be confirmed — opt-out page, or contact us directly.

To exercise any right, contact our Grievance Officer (Section 10). We will verify your identity before acting on a request and will not charge you for exercising these rights.

7. Data Security

We implement reasonable security practices consistent with the SPDI Rules, 2011, including secure hosting, access controls limiting data to personnel who need it, and encryption in transit for payment and account pages. Payment details are handled directly by PCI-compliant gateways and are never stored on our servers.

No method of transmission or storage over the internet is completely secure. In the unlikely event of a data breach affecting you, we will act in accordance with applicable law, including notifying you and the relevant authority where required.

8. Children's Data

The Website and our services are intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18, or from a person with a disability who has a lawful guardian, without verifiable parental/guardian consent, and we do not direct behavioural tracking or targeted advertising at children. If you believe a child's data has reached us without proper consent, contact our Grievance Officer immediately and we will take steps to delete it.

9. Cross-Border Data Transfer

Where we use service providers (hosting, analytics, payment processing) based outside India, your data may be processed or stored outside your country of residence. We only transfer data to jurisdictions not restricted under the DPDP Act, and we take steps to ensure it continues to receive protection consistent with this Policy. By using the Website, you consent to such transfer as described here.

10. Grievance Officer & Contact

If you have questions about this Policy, wish to exercise your rights, or want to raise a complaint, contact our Grievance Officer. We aim to acknowledge requests within 48 hours and resolve them within 30 days, or sooner where the law requires.

Grievance Officer name: To be confirmed
Grievance email: To be confirmed
Support email: To be confirmed
Phone: To be confirmed
WhatsApp: To be confirmed
Hours: To be confirmed

Registered office: To be confirmed
Operational office: Unit S-8, 2nd Floor,
H. No. 1473, Bumb Sadan 1st,
Barah Gangaur Ka Rasta,
Chokdi Vishveshwar Ji,
Jaipur, Rajasthan – 302001, India

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India, constituted under the DPDP Act, 2023.

11. Astrological & Gemstone Disclaimer

Gemstone, rudraksha, numerology, and other guidance offered by Cosmic 9 Gems is based on traditional Vedic belief, intended for spiritual and personal well-being. It is not a substitute for professional medical, financial, or legal advice, and we do not claim to diagnose, treat, cure, or prevent any condition, or guarantee any specific outcome. Individual beliefs and results vary, and any decisions you make based on this guidance are made at your own discretion.

Our liability in connection with any product or service purchased through the Website is limited to the original purchase value of that product or service. Physical goods may be returned per our Returns & Refunds Policy; service-based offerings (consultations, readings) are non-refundable once delivered, except where required by law.

12. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. Updates take effect when posted here, and the “last updated” date will be revised. Where changes are significant, we will take reasonable steps to notify you (e.g., email or a Website banner). Continued use of the Website after an update constitutes acceptance of the revised Policy.

---

This Policy should be reviewed by a qualified lawyer before publication, to confirm all placeholders are filled in correctly and that it fully reflects Cosmic 9 Gems' actual data practices, vendors, and jurisdictional obligations.