Who we are
BEADPUNK is a jewellery brand operated by Beadpunk Fashion Private Limited. For purposes of the live retail website, the company will determine why and how customer personal data is processed for the services it provides.
Personal data we may collect
Depending on how you use the live website, data may include your name, contact details, delivery and billing details, account information, order history, support communications, review content, device/browser information, and information needed to process payments or prevent fraud.
Payment-card or banking information should be handled by the selected payment provider according to the final checkout architecture; the policy must reflect what BEADPUNK itself actually receives or stores.
Why we may use personal data
- to create and manage customer accounts;
- to process, fulfil and support orders;
- to provide delivery, return, refund and customer-care services;
- to maintain wishlist, review and personalization features;
- to detect abuse, fraud or security issues;
- to send service communications and, where permitted or consented to, marketing communications;
- to meet applicable legal, accounting or regulatory obligations.
Service providers and sharing
Information may need to be shared with service providers that support the store, such as hosting, payment, logistics, communications, analytics, fraud prevention and customer-service providers. The final policy should name or categorize these providers accurately after the AWS/backend and live integrations are known.
Cookies and browser storage
The current frontend prototype uses browser storage for functions such as the bag, wishlist and demo profile. The live site should distinguish technologies that are strictly necessary from optional analytics or marketing technologies and present preference controls appropriate to the markets in which BEADPUNK operates.
Retention
Personal data should be retained only for as long as needed for the relevant purpose or as required by applicable law. Exact retention periods should be documented after the production systems and legal/accounting requirements are mapped.
Your choices and requests
Where applicable, customers should be able to access the privacy notice, withdraw consent where processing is based on consent, update relevant account information, use available rights mechanisms and raise a grievance through clearly published contact channels.
Security
BEADPUNK should use reasonable technical and organisational safeguards appropriate to the production environment, including controlled access, secure transmission, monitoring and backup practices where applicable. No internet service can promise absolute security.
International processing
As the brand expands globally, personal data may be processed by service providers in more than one country. The live policy should disclose relevant cross-border processing and apply the transfer requirements that govern the destination and customer market.
Privacy and grievance contact
The final privacy contact and grievance mechanism will be published here before launch. It should be consistent with the contact information displayed elsewhere on the site.
This policy must be updated with the actual hosting/backend stack, payment gateway, analytics, email/SMS tools, logistics providers, cookie technologies, retention periods, privacy contact and grievance details.