Privacy, Cookies and Marketing Policy

Effective Date: 31 August 2026

India storefront, orders, support and advertising

 

1.  Data fiduciary and scope

, sole proprietor carrying on business under the trade name SILVME determines why and how SILVME processes personal data for silvme.com, customer accounts, checkout, orders, payments, delivery, returns, warranty registration, complaints, reviews, security and marketing. The privacy contact is Keshav Verma, Privacy Contact and Authorised Privacy Representative.

Shopify, Razorpay, banks, card networks, couriers, marketplaces and other providers may act as processors/service providers or independent data fiduciaries/controllers for their own regulated services. Their notices may also apply.

India's Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. SILVME will comply with provisions as they become applicable and prepares now for notice, consent, security, rights, grievance and breach obligations. The Information Technology Act and applicable rules continue to be considered during transition.

 

2.  Data collected

-    Identity and contact: name, email, phone, billing/delivery address, recipient and account identifiers.

-    Order and transaction: SKU, size/variant, amount, tax, discount, payment status/reference, invoice, delivery, return, refund, warranty, complaint and correspondence.

-    Payment and risk: payment method, masked details, tokens/references, refund account information, device and transaction risk signals. SILVME ordinarily does not receive complete card or bank credentials.

-    Device and use: IP address, browser/device, cookie and advertising identifiers, approximate location, pages, searches, cart and checkout events, referrals and diagnostics.

-    Content and evidence: reviews, photos, videos, invoice uploads, product images, support messages and consent/preference records.

SILVME collects data directly from you and indirectly from Shopify, Razorpay, banks, couriers, official marketplaces, fraud/security tools, marketing platforms, gift senders and authorised/public sources. Where law requires notice for indirect collection, SILVME provides it unless an exception applies.

 

3.  Purposes and lawful processing

-    Operate the site, optional account, cart and checkout; accept payment; generate invoice; process, dispatch and deliver an order; and send necessary service messages.

-    Verify transactions, prevent fraud, secure systems, keep logs, resolve chargebacks and comply with lawful tax, accounting, consumer, safety, customs and government requirements.

-    Handle support, cancellation, return, refund, warranty, repair, complaint, legal claim and recall.

-    Measure site performance, correct errors, forecast inventory and improve products and service using data minimised for the purpose.

-    Send and measure email, SMS, WhatsApp, calls and Meta/Google advertising only with the consent or other lawful basis required for the specific channel and jurisdiction.

When consent is required, it is free, specific, informed, unconditional and unambiguous through clear affirmative action, limited to necessary data and evidenced by wording, channel, source and date/time. Purchase is not conditional on unrelated marketing.

 

4.  Cookies and advertising technologies

Strictly necessary tools support security, network, consent, cart, checkout, payment and account functions. Functional tools remember optional preferences. Analytics tools measure use and diagnose errors. Advertising tools measure campaigns and may support personalised or targeted ads.

Where consent is required, the banner must provide equally available 'Accept All', 'Reject Non-Essential' and 'Manage Preferences' choices. Non-essential Meta, Google and similar trackers must remain blocked until the required consent. Choices must be withdrawable through a persistent cookie-settings link.

SILVME must maintain a live cookie register naming the provider, category, purpose, data, recipients and duration. A generic list that does not match the current Shopify theme and installed apps must not be published.

 

5.  Sharing and international processing

SILVME shares only reasonably necessary data with Shopify and hosting providers; Razorpay, banks and payment networks; authorised couriers and address/communication providers; accountants, lawyers, auditors, security, customer-support and repair providers; advertising platforms consistent with consent; and authorities where lawfully required.

Providers may process data outside India. SILVME will inventory processing countries, use contractual, access-control and security safeguards, follow any notified transfer restriction, and remain responsible to the extent required by law.

SILVME does not sell personal data as a standalone product. A corporate reorganisation may transfer relevant records only with lawful safeguards and without reducing customer rights.

 

6.  Retention and security

Order, invoice, payment, tax and accounting records are kept for at least the period required by GST,

income-tax, foreign-exchange and other law, presently using an internal baseline of 8 financial years after the relevant financial year unless an adviser directs a longer or shorter lawful period.

Return, warranty, complaint and legal-claim records are normally kept for 3 years after closure or longer while a claim, legal hold or statutory period remains open. Marketing consent and suppression records are kept while marketing continues and as needed afterward to prove consent and honour opt-out. ICT logs are retained for at least the applicable CERT-In minimum, currently using a rolling 180-day baseline.

Account and preference data is erased or anonymised when no longer needed, subject to security, fraud, tax, warranty, dispute and legal-retention needs. SILVME must implement least privilege, staff confidentiality, strong authentication, secure configuration, encryption in transit, backups, patching, vendor review, logging and incident response appropriate to risk.

 

7.  Rights, requests and grievances

Subject to provisions then in force and applicable exceptions, you may request access information, correction, completion, updating or erasure, withdraw consent, manage marketing and cookies, nominate another person as allowed, and seek grievance redressal.

Email help@silvme.com with 'Privacy Request', describe the request and identify the relevant account/order. SILVME may verify identity proportionately and will not request more data than necessary. Withdrawal must be as easy as consent; necessary processing for an already paid order or legal retention may continue.

SILVME investigates personal-data incidents, contains harm and notifies affected people and authorities in the form and timeframe required by law. Cyber incidents subject to CERT-In directions are handled through the required reporting and log-preservation process.

 

8.  Marketing and 18+ service

SILVME may use email, SMS, WhatsApp, marketing calls and Meta/Google advertising only under a

channel-appropriate lawful process. Each promotional message identifies SILVME and provides an effective opt-out. Necessary order, payment, delivery, recall, safety, account-security and support messages are not marketing.