At Tejra Crystals, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (www.tejracrystals.in), shop with us, or interact with our services. This Policy is published in accordance with the provisions of the Information Technology Act, 2000, the Information Technology (Amendment) Act, 2008, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

We collect the following categories of information:

• Personal Identifiable Information (PII): Name, email address, phone number, and shipping/billing address when you place an order.

• Financial Information: Payment details processed securely through a trusted Third-Party Payment Gateway. We do not store your card, UPI, or banking credentials on our servers.

• Technical & Non-Personal Data: Browsing data, cookies, IP address, device type, and analytics to improve your shopping experience.

• Communication Records: Any correspondence you initiate with us via email, WhatsApp, or other channels.

We use your information for the following lawful purposes:

• To process, fulfill, and deliver your orders.

• To communicate with you regarding your purchases, order updates, and service-related notifications.

• To send promotional communications only if you have explicitly opted in.

• To improve our products, services, and website experience.

• To detect and prevent fraud, misuse, or unlawful activity.

• To comply with applicable laws and regulatory requirements.

We do not sell, rent, or trade your personal information to any third parties. We may share your information only under the following circumstances:

• With trusted service providers (such as logistics partners and payment processors) strictly for the purpose of fulfilling your order, under confidentiality obligations.

• If required by law, court order, or a competent governmental or regulatory authority.

• In the event of a business merger, acquisition, or sale, subject to the new entity honouring this Privacy Policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Upon expiry of the retention period or upon a valid deletion request, your data will be securely deleted or anonymised.

We implement reasonable technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, in accordance with the IT (Reasonable Security Practices) Rules, 2011. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

As a data principal under the DPDP Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you.

• Correction: Request correction of inaccurate or incomplete data.

• Grievance Redressal: Lodge a complaint with our Grievance Officer (see below).

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the name and contact details of the Grievance Officer are as follows:

Name: Tejra Support

Email: tejracrystals@gmail.com

Phone: +91 9217071006

Response Time: We endeavour to acknowledge grievances within 48 hours and resolve them within 30 (thirty) days of receipt.

Our website uses cookies to enhance your browsing experience. You may configure your browser settings to refuse cookies; however, this may affect certain functionalities of our website

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites and encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Any material changes will be posted on our website with a revised effective date. Continued use of our services after such changes constitutes your acceptance of the updated Policy.

Tejra Crystals, operating www.tejracrystals.in from India, is the "Data Fiduciary" under the DPDP Act, 2023 and the "controller" for users in the EEA, UK and Switzerland. This Policy applies to visitors and customers worldwide.

Our Lo Shu Grid tool may ask for your date of birth, gender and name to prepare personalised crystal and bracelet recommendations.

• Providing this data is voluntary, and it is used only to generate your result and fulfil your custom order.

• We do not use it for profiling that produces legal or similarly significant effects, and we do not sell it.

• Recommendations are based on traditional belief and are not medical, financial or guaranteed advice.

• By using our website or placing an order, you consent to processing as described in this Policy. Where required, we ask for your consent separately, clearly and for a specific purpose.

• You may withdraw consent at any time by writing to the Grievance Officer. Withdrawal does not affect processing already done, and we may be unable to fulfil orders that depend on the withdrawn data.

• Withdrawing marketing consent never affects order-related messages.

For users under the GDPR and UK GDPR, we rely on:

• Contract: to process and deliver your order.

• Legal obligation: tax, accounting, customs and consumer-law records.

• Legitimate interests: fraud prevention, site security and improving our services, balanced against your rights.

• Consent: marketing messages and non-essential cookies.

• Our website is built and hosted on Wix. Wix.com Ltd. and its affiliates process site data, orders and visitor data on our behalf as service providers, on servers that may be located in India, the EU, the US and other countries. Wix's own privacy policy applies to its processing.

• Other providers we may use include payment gateways, shipping and courier partners, email and messaging tools, analytics and advertising tools. They may use your data only to provide their service to us, under contractual confidentiality and security obligations.

• We do not permit service providers to use your data for their own marketing.

• Essential cookies keep your cart, checkout and login working. Analytics and advertising cookies or pixels (for example, Google or Meta tools) are used only where enabled, and, where the law requires, only after your consent through our cookie banner.

• You can change your cookie choices at any time through the cookie banner or your browser settings. We also respond to browser signals such as Global Privacy Control where required by law.

For deliveries outside India, we share your name, address, phone number, email and order value with couriers, customs and border authorities as needed to ship, clear and deliver the parcel. Refusing this sharing may make delivery impossible.

• Your data may be transferred to and processed in India and other countries where our providers operate, which may have different data protection laws from your country.

• Where required, we use appropriate safeguards such as contractual protections (including Standard Contractual Clauses through our providers) and other lawful transfer mechanisms.

• By using our website you acknowledge these transfers.

Besides the rights listed above, under the DPDP Act, 2023 you may also:

• Request erasure of your personal data, unless we must retain it by law.

• Withdraw your consent at any time.

• Nominate another person to exercise your rights in the event of your death or incapacity.

• Complain to the Data Protection Board of India if your grievance is not resolved by us.