Privacy notice.

Coins & Bars Retail Private Limited decides why and how your personal data is used. Under the Digital Personal Data Protection Act, 2023 (the DPDP Act), that makes us the “data fiduciary”.

Seller

Coins & Bars Retail Private Limited

Registered office

Shop No 2, 185 / 248, Royapettah High Rd, Mylapore, Chennai, Tamil Nadu 600004, India

GSTIN

33AANCC7956M1ZY

We use reasonable security measures: encrypted connections, hashed passwords, access limited to people who need it, and payment handling left to Razorpay. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

We collect only what we need to sell and deliver coins to you:

• Account: your name, email address, a scrambled (hashed) version of your password and, if you add one, the mobile number you verify with a one-time code. We never store the password itself.
• Addresses: the name, phone number and postal address you give for delivery and billing.
• Your shopping: your bag, wishlist and recently viewed items, so they follow you between devices.
• Orders: what you bought, the prices, tax and totals, the delivery address and the order's status.
• Payments: only a payment reference from Razorpay and whether the payment succeeded. Your card, UPI and bank details go to Razorpay, not to us.
• PAN: only when an order is above ₹2,00,000, because tax law requires it. We record the PAN and the name on it and check the format. We do not verify it with the Income Tax Department.
• Technical data: our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and to fix faults.

We do not collect sensitive data we have no use for, such as health, biometric or financial account details.

We use only the cookies needed to sign you in and keep you signed in. The site cannot work without them, so they are not optional.

Your browser also stores a few things locally, such as your wishlist and a choice you started before signing in, so they are not lost when you move between pages. This stays on your device.

We use Google Analytics and Microsoft Clarity to see how people use the site, such as which pages they visit, what they click and where a page is confusing, so we can improve it. Clarity records how you move around and scroll a page. It hides everything you type, and we hide your account, bag, checkout and holdings pages from it entirely. These tools set their own cookies. You can turn them off for this browser below, and the site works the same without them. We never run them on our staff admin screens, and we run no advertising scripts or pixels.

Turn off analytics on this device.

We use your data to:

• create and run your account;
• take payment, deliver your order, and return a payment that did not become an order;
• issue tax invoices and keep the records the law requires;
• meet PAN and other legal requirements on high-value orders;
• prevent fraud and keep the site secure; and
• answer your questions and complaints.

We process this data because you have consented to it when you create an account or place an order, or because the law requires it (for example, tax records). We use it only for these purposes.

We send marketing messages (cart reminders, new arrivals and offers on WhatsApp) only if you switch them on in your account, with a box that is unticked by default. WhatsApp order updates are a separate choice at checkout. Saying no will never affect your orders. You can withdraw your permission at any time, as easily as you gave it: switch it off in your account, use the unsubscribe link in any message, or reply STOP.

We do not sell your personal data, and we do not share it for advertising. We share only what each of these needs:

• Razorpay, to process your payment.
• MSG91, to send sign-in codes by text message: your mobile number.
• WhatBot, to send the WhatsApp order updates, reminders and offers you switch on: your mobile number and the message content.
• Shopify, which keeps our order records: your name, email address, phone number, delivery address and what you ordered.
• Our delivery partners (Sequel Logistics, BVC Logistics and CMS Info Systems), to deliver your parcel: your name, phone number and delivery address.
• Google and Microsoft, unless you turn analytics off: how you use the site (Google Analytics and Microsoft Clarity), your browser and device type and an approximate location from your IP address. We do not send them your name, email, phone number or orders.
• Our hosting and database providers, who store data on our behalf and may not use it for anything else.
• Government and tax authorities, courts and the police, where the law requires it or to deal with fraud.

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, except what the law requires us to keep (such as tax records);
• withdraw your consent at any time (this does not affect what we did before);
• nominate someone to use these rights for you if you die or become unable to; and
• complain to us, and then to the Data Protection Board.

You can see and edit your addresses yourself in the account area, and delete your account on the delete my account page or from Account in the Coins & Bars app. For anything else, contact the person named below. We will confirm who you are before acting, and reply within 90 days at the latest.

• Orders, invoices and payment references: for as long as tax and accounting law requires, even if you close your account.
• PAN and identity records: for as long as tax and anti-money-laundering law requires.
• Account, addresses, bag and wishlist: until you ask us to delete your account.
• Server logs: for a short period, for security and troubleshooting.

When we no longer need data and no law requires us to keep it, we delete it.

Some of our service providers, such as our hosting provider, may store or process your data outside India. We allow this only where a provider needs it to run the service for us, and never to a country the Government of India has restricted.

The site is for adults. You must be 18 or over to hold an account or buy from us. We do not knowingly collect children's data; if we learn we have, we will delete it.

This notice covers this website and the Coins & Bars app. Pages we link to, such as Razorpay's payment page or a maker's registration page reached from the QR code on a certificate card, are run by others under their own privacy policies.

We will update this notice when what we collect or how we use it changes. The date at the top shows the last change. If a change needs your fresh consent, we will ask for it.

Contact our Data Protection contact about anything on this page:

Name

To be published before launch

Designation

To be published before launch

Email

To be published before launch

Phone

To be published before launch

Hours

To be published before launch

Postal address

Coins & Bars Retail Private Limited, Shop No 2, 185 / 248, Royapettah High Rd, Mylapore, Chennai, Tamil Nadu 600004, India

If you are not satisfied with our answer, you can complain to the Data Protection Board of India. Our Grievance Redressal page sets out every route.