Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Personal identification information (Name, email address, phone number)
• Delivery address and billing information
• Payment information (processed securely through our payment partners)
• Transaction history and purchase records

We may also collect information generated through your use of our website and services, such as device, browser, IP address, and usage information, where applicable and necessary for providing and securing our services.

We collect and process personal data only for specified purposes communicated to you and in accordance with applicable law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules made thereunder.

Where personal data is collected directly from you, the applicable notice will provide information necessary to understand the personal data being processed and the purpose for which it is processed.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about your orders and account
• Send you promotional materials with your consent, where consent is required
• Improve our services and customer experience
• Comply with legal obligations
• Prevent fraud, misuse, unauthorized activity, and security incidents
• Provide customer support and manage returns, exchanges, refunds, and related services

Where processing is based on consent, consent will be obtained through clear affirmative action after the applicable notice. Consent will be free, specific, informed, unconditional, and unambiguous.

Where consent is required for a separate or additional purpose, OxyGold will obtain such consent separately through an appropriate mechanism.

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties.

We may share your information with:

• Service providers who assist in our operations, including payment processors and delivery partners
• Other authorized service providers where required to provide our services
• Legal authorities when required or permitted by law
• Business partners where such sharing is permitted and the required consent or other lawful basis is available

Personal data shared with service providers will be limited to what is necessary for the relevant service or purpose and will be handled in accordance with applicable law and appropriate safeguards.

We may also disclose personal data where required by law, lawful order, regulatory requirement, or other legally authorized direction.

4. Data Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorized access, disclosure, alteration, loss, or other applicable security risks.

All payment transactions are encrypted using SSL technology where supported by our payment partners. However, no method of transmission over the internet is 100% secure.

Where a personal data breach occurs, OxyGold will take measures required under applicable law, including applicable requirements relating to notification of affected Data Principals and the Data Protection Board.

5. Your Rights

Subject to applicable law and the conditions prescribed under the DPDP Act, you may have the right to:

• Access information about your personal data and its processing
• Correct, complete, or update inaccurate or incomplete personal data
• Request erasure of personal data where applicable
• Withdraw consent where processing is based on consent
• Obtain grievance redressal
• Nominate another individual, where applicable under law
• Opt out of promotional or marketing communications where applicable

Where you have provided consent for processing, you may withdraw that consent through the available mechanism. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Where withdrawal of consent affects processing that is necessary to provide a requested service and no other lawful basis is available, OxyGold may be unable to continue that service to the extent affected.

Requests relating to your rights, correction, erasure, withdrawal of consent, or privacy grievances may be submitted using the contact details provided in Section 7.

6. Cookies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, maintain website functionality, and personalize content where applicable.

Where cookies or similar technologies involve processing of personal data, such processing will be carried out for specified purposes and in accordance with applicable law.

Where consent is required, the applicable consent will be obtained through an appropriate mechanism. You may also control certain cookie preferences through your browser settings, subject to the functionality of the website.

7. Contact Us

If you have any questions about this Privacy Policy, the processing of your personal data, your Data Principal rights, withdrawal of consent, correction or erasure requests, or privacy-related grievances, please contact us at: