Last Updated: September 2026
Entity: Sonali Bangles (Proprietorship)
Website: sonalibangles.in
DPO Contact: support@sonalibangles.in, +91 79726 69871
Address: Sonali Bangles Studio, Maharashtra, India
| Data Category | Specific Fields | Purpose | Legal Basis |
|---|---|---|---|
| Identity | Name, Email, Phone | Account creation, order processing | Consent & Legitimate Purpose |
| Contact | Delivery addresses | Order fulfillment, shipping | Consent & Legitimate Purpose |
| Financial | Razorpay payment references, UPI UTR numbers | Payment verification (no raw card data stored) | Legitimate Purpose |
| Preferences | Bangle size, purity, finish, hypoallergenic flag | Personalised recommendations | Consent |
| Sensitive | Date of Birth, Anniversary | Birthday/anniversary rewards | Consent |
| Communication | Chat messages, support inquiries | Customer support, AI concierge | Consent & Legitimate Purpose |
| Technical | IP address, device info, browser | Security, fraud prevention, session management | Legitimate Purpose |
| Analytics | Page views, performance metrics | Website improvement | Consent |
| Processor | Data Shared | Purpose | Cross-Border Transfer? |
|---|---|---|---|
| MongoDB Atlas | All user data | Database hosting | Depends on cluster region |
| Meta/WhatsApp Cloud API | Phone, name, order status | OTP, notifications | Yes (Meta global) |
| Razorpay | Transaction amount, receipt | Payment processing | No (India) |
| Shiprocket | Name, address, phone, order items | Shipping & delivery | No (India) |
| Google Firebase | Email, UID, analytics events | Authentication, analytics | Yes (Google global) |
| Google Gemini AI | Chat messages, order context | AI customer support | Yes (Google global) |
| Brevo/Sendinblue | Email, name, order details | Transactional emails | Yes (EU) |
| Resend | Email, name | Transactional emails | Yes (US) |
| Vercel | IP, user-agent, page URLs | Hosting, analytics | Yes (Global CDN) |
Consent is obtained through clear, affirmative action (unchecked checkboxes). We maintain separate consent forms for our Terms of Service and Privacy Policy. Withdrawal of consent is as simple as giving it, and can be done via your account settings or by contacting our DPO. Please note that withdrawing consent may result in our inability to process orders or provide certain services.
Our platform is not directed at children under the age of 18. We do not engage in behavioural tracking or targeted advertising directed at minors. If we learn that personal data has been collected from a child without verifiable parental consent, it will be promptly deleted.
| Cookie/Tracker | Purpose | Duration | Category |
|---|---|---|---|
| sb-session-token | Authentication | 30 days | Strictly Necessary |
| sb-cookie-consent | Cookie preferences | 1 year | Strictly Necessary |
| sb-cart | Shopping cart | Persistent | Strictly Necessary |
| Vercel Analytics | Page views, vitals | Session | Analytics (requires consent) |
| Firebase Analytics (G-VSDX5YXY0Z) | User engagement | Persistent | Analytics (requires consent) |
| Vercel Speed Insights | Core Web Vitals | Session | Performance (requires consent) |
DPO / Grievance Officer: Sonali Bangles Customer Care
Email: support@sonalibangles.in
WhatsApp: +91 79726 69871
Address: Sonali Bangles Studio, Maharashtra, India
Resolution timeline: 30 calendar days
Escalation: Data Protection Board of India (once constituted)
Your data may be transferred to and processed on servers located outside India by the third-party services listed in Section 4. All such transfers strictly comply with the provisions of the DPDP Act on cross-border data flow. As of the current date, the Indian government has not notified any restricted countries under Section 16(1) of the Act.
We may update this Privacy Policy from time to time. We will notify registered users via email when material changes are made. Continued use of our services after such notification constitutes your acceptance of the updated policy.