Privacy notice.

Coins & Bars Retail Private Limited decides why and how your personal data is used. Under the Digital Personal Data Protection Act, 2023 (the DPDP Act), that makes us the “data fiduciary”.

Seller

Coins & Bars Retail Private Limited

Registered office

185 / 248, Royapettah High Rd, Mylapore, Chennai, Tamil Nadu 600004, India

GSTIN

33AANCC7956M1ZY

We collect only what we need to sell and deliver coins to you:

• Account: your name, email address and a scrambled (hashed) version of your password. We never store the password itself.
• Addresses: the name, phone number and postal address you give for delivery and billing.
• Your shopping: your bag, wishlist and recently viewed items, so they follow you between devices.
• Orders: what you bought, the prices, tax and totals, the delivery address and the order's status.
• Payments: only a payment reference from Razorpay and whether the payment succeeded. Your card, UPI and bank details go to Razorpay, not to us.
• PAN: only when an order is above ₹2,00,000, because tax law requires it. We record the PAN and the name on it and check the format. We do not verify it with the Income Tax Department.
• Technical data: our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and to fix faults.

We do not collect sensitive data we have no use for, such as health, biometric or financial account details.

We use one cookie that keeps you signed in. The site cannot work without it, so it is not optional.

Your browser also stores a few things locally, such as your wishlist and a choice you started before signing in, so they are not lost when you move between pages. This stays on your device.

We run no analytics, advertising or tracking scripts, and no third-party pixels. If we ever add any that are not strictly necessary, we will ask for your consent first.

We use your data to:

• create and run your account;
• take payment, deliver your order, and handle cancellations, returns and refunds;
• issue tax invoices and keep the records the law requires;
• meet PAN and other legal requirements on high-value orders;
• prevent fraud and keep the site secure; and
• answer your questions and complaints.

We process this data because you have consented to it when you create an account or place an order, or because the law requires it (for example, tax records). We use it only for these purposes.

We do not send marketing messages today. If we start, we will ask for your permission separately, with a box that is unticked by default. Saying no will never affect your orders. You will be able to withdraw that permission at any time, as easily as you gave it.

We do not sell your personal data, and we do not share it for advertising. We share only what each of these needs:

• Razorpay, to process your payment.
• Our delivery partners (Sequel Logistics, BVC Logistics and CMS Info Systems), to deliver your parcel: your name, phone number and delivery address.
• Our hosting and database providers, who store data on our behalf and may not use it for anything else.
• Government and tax authorities, courts and the police, where the law requires it or to deal with fraud.

• Orders, invoices and payment references: for as long as tax and accounting law requires, even if you close your account.
• PAN and identity records: for as long as tax and anti-money-laundering law requires.
• Account, addresses, bag and wishlist: until you ask us to delete your account.
• Server logs: for a short period, for security and troubleshooting.

When we no longer need data and no law requires us to keep it, we delete it.

We use reasonable security measures: encrypted connections, hashed passwords, access limited to people who need it, and payment handling left to Razorpay. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, except what the law requires us to keep (such as tax records);
• withdraw your consent at any time (this does not affect what we did before);
• nominate someone to use these rights for you if you die or become unable to; and
• complain to us, and then to the Data Protection Board.

You can see and edit your addresses yourself in the account area. For anything else, contact the person named below. We will confirm who you are before acting, and reply within 90 days at the latest.

The site is for adults. You must be 18 or over to hold an account or buy from us. We do not knowingly collect children's data; if we learn we have, we will delete it.

Some of our service providers, such as our hosting provider, may store or process your data outside India. We allow this only where a provider needs it to run the service for us, and never to a country the Government of India has restricted.

Contact our Data Protection contact about anything on this page:

Name

To be published before launch

Designation

To be published before launch

Email

To be published before launch

Phone

To be published before launch

Hours

To be published before launch

Postal address

Coins & Bars Retail Private Limited, 185 / 248, Royapettah High Rd, Mylapore, Chennai, Tamil Nadu 600004, India

If you are not satisfied with our answer, you can complain to the Data Protection Board of India. Our Grievance Redressal page sets out every route.

We will update this notice when what we collect or how we use it changes. The date at the top shows the last change. If a change needs your fresh consent, we will ask for it.