Privacy Policy

This website and the shop catalog on it are run by Pratik Products, a manufacturer of imitation jewellery that sells under the name Caliber, at 210 Ashish Udyog Bhavan, Opp. American Spring, Ramchandra Lane, Malad (W), Mumbai 400 064, Maharashtra, India (“we”, “us”).

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary for the personal data described here: we decide why and how it is used. You — the person the data is about — are the Data Principal.

It covers personal data we collect through caliberset.com — the brand website, sign-up and log-in, the shop catalog, ordering, sharing photos, your account and job applications — and through our business with you (orders, invoices, payments and deliveries).

It does not cover other websites or apps you reach from ours, such as WhatsApp or Google Maps; they have their own policies.

We collect only what we need for the purposes in section 4:

1. Sign-up details — your name, your shop or company name, your WhatsApp number, your shop address, the password you choose (we never store the password itself, only a one-way encrypted form of it) and, if you add one, your shop’s logo.
2. Your account — brand names and logos you add, the markup you set, the orders you place (designs, pieces, platings, notes and dates) and a record of the designs you make photos of to share, with the prices and brand you chose.
3. Contacts you add when sharing — when you share photos you may give the name, WhatsApp number and city of the person (or the name of the WhatsApp group) you are sending them to. These are kept in your account as your own customer list, so you have a record of whom you shared what with. We do not contact these people, market to them, or sell or give their details to anyone. Please add only people who are happy to hear from you.
4. Sign-in and security information — each time you sign up, log in or open the website: the internet (IP) address of your connection, the approximate area that address belongs to, your browser and type of phone or computer, the date and time, and a random identifier stored in your browser so we can tell your devices apart. If — and only if — you allow it when your browser asks, the precise location of your device at that time.
5. Billing and delivery records — when you buy from us: invoices, payments, delivery and transport details, and your GSTIN, PAN or other details you give us for billing, as tax law requires.
6. Enquiries you send — when you use “Get a quote”: your name and mobile number and, if you give them, your shop or company, city, email, the kind of buyer you are, and what you need — to reply to you with designs and rates.
7. Messages — what you write to us on WhatsApp, by email or on the phone.

We do not take card or bank payments on this website, and we do not ask for sensitive data such as health, biometric or caste information.

We use each kind of data only for these specified purposes:

1. To open and run your account — sign-up details, to create your account, let you log in and check that you are a genuine shop before we open the catalog to you.
2. To show you the catalog and take your orders — your account and order details, to show designs and prices, receive your orders, confirm them with you, make or source the goods, deliver them and keep you updated.
3. To make the photos you share and keep your sharing history — your brands, logos, markup and the contacts you add, so the photos carry your brand and you can see whom you shared what with.
4. To keep your account safe — sign-in and security information, to spot a login that is shared, stolen or misused (for example, many different phones, or a log-in far from your usual place) and to investigate and stop misuse.
5. To bill you and meet the law — billing records, to issue GST invoices, keep accounts and meet tax, legal and court requirements.
6. To answer you — your messages, to reply to questions, complaints and requests.

We do not use your personal data for advertising, we do not sell it, and we do not build profiles of you beyond what these purposes need.

When you sign up you agree to this policy by ticking the box and pressing Sign up; we keep the date you agreed and the version you agreed to. Your browser asks you separately before sharing your device’s precise location, and you can say no. Some processing does not need consent where the DPDP Act allows it — for example, keeping invoices because tax law requires it.

You can withdraw your consent at any time, as easily as you gave it: send a WhatsApp or email to our Grievance Officer (section 16) saying you want to withdraw consent or close your account. To stop sharing your location, switch location off for this website in your browser’s settings. When you withdraw, we stop using your data within a reasonable time and delete it as described in section 8 — except what the law makes us keep. Withdrawing consent means we can no longer give you access to the catalog.

Once Consent Managers registered with the Data Protection Board of India are available, you may also give, review or withdraw your consent through one of them.

We never sell your personal data. We share it only as follows, and only as much as each needs:

• Our staff, who see only what their work needs, under a duty of confidentiality.
• Service providers who process data for us (Data Processors) — the companies that host our website and database (Vercel Inc. and Railway Corp.), and the email service we use for our own system emails and backups (Brevo). They may only use the data to provide their service to us, and we remain responsible for them.
• Transporters and couriers, who get the delivery name, address and phone number for your orders.
• Government and legal authorities — tax authorities, courts or police — when the law requires it.
• WhatsApp (Meta) — only when you choose to message us, or a customer, through WhatsApp.
• If our business is sold or reorganised, the new owner, who must keep to this policy.

Our hosting providers may keep data on servers outside India. The DPDP Act allows this except to countries the Government of India restricts, and we will not transfer data to such a country.

We do not use advertising cookies, analytics trackers or third-party tracking of any kind. We keep a few items in your browser’s storage so the website works: your log-in (so you stay signed in), the random device identifier described in section 3, and your choices (for example, the brand and markup you last used). Clearing your browser’s storage signs you out; the website then works as for a new device.

• Your account, brands, sharing history and the contacts you added — while your account is open. When you close it or withdraw consent, we delete them within 30 days, apart from what is listed below, and have our service providers delete them too.
• Orders, invoices and payments — for as long as GST and income-tax law requires (currently up to 8 years), then deleted.
• Enquiries — until two years after our last contact about them, then deleted automatically; one that becomes an order stays with that order’s records.
• Sign-in and security information — for at least one year, as the DPDP Rules require for investigating misuse, and then deleted once it is no longer needed.
• Accounts not used for three years — we may close them and delete their data; we will tell you on WhatsApp at least 48 hours before, so you can log in to keep the account.
• Backups — copies inside our backups are overwritten in the normal course of backup rotation.

We take reasonable security measures, including:

• encryption of all traffic to and from the website (HTTPS), and passwords stored only in a one-way encrypted form;
• access control — each staff member sees only what their role needs, and shops can see only their own account;
• limits on repeated log-in attempts, and the ending of every log-in when a password is changed or reset;
• records of sign-ins and changes, monitored so that unauthorised access can be spotted and investigated, kept as section 8 says;
• regular backups, and contracts with our service providers that require them to protect the data.

No system can be completely secure, but we work to keep your data safe and review these measures regularly.

If a breach affects your personal data, we will tell you without delay — what happened, what it may mean for you, what we have done and what you can do, and whom to contact — and we will report it to the Data Protection Board of India as the DPDP Act and Rules require.

Under the DPDP Act you have the right to:

1. Access — a summary of your personal data we hold and how we use it, and the names of the other organisations we have shared it with and what we shared;
2. Correction and erasure — have your data corrected, completed, updated or deleted (you can change most of your details yourself on the My shop page);
3. Withdraw consent — as section 5 explains;
4. Grievance redressal — complain to our Grievance Officer and get an answer (section 16);
5. Nominate — name another person to use these rights for you if you die or cannot act yourself.

We keep your data complete and accurate where we use it to make a decision about you — please keep your details on My shop up to date, and tell us if anything is wrong.

To use any right, contact our Grievance Officer. We may ask you to confirm your identity first (for example, from your registered WhatsApp number). We answer within 30 days. There is no charge.

When you apply on our Careers page we collect your name and mobile number and, if you give them, your email, city, experience, what you write about yourself and your resume — with your consent, given by the tick on the form.

• We use them only to consider you for jobs at Caliber and to contact you about them. Only the people who handle hiring can see them; your resume is never published, and we do not share it outside Pratik Products.
• We keep an application for up to 12 months and then delete it automatically — sooner if you ask. If you join us, it becomes part of your staff record.
• To withdraw your application or have it deleted, WhatsApp or email us, or write to our Grievance Officer (section 16).

This website is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children’s personal data. We do not track, monitor or target advertising at children. If you believe a child has given us personal data, tell our Grievance Officer and we will delete it. If a person with a disability who has a lawful guardian uses the website, we will ask for the guardian’s consent.

This policy is in English. If you would like it in Hindi, Marathi, Gujarati or another language listed in the Eighth Schedule to the Constitution of India, ask our Grievance Officer and we will provide it.

We may update this policy. The date at the top shows the latest version. If a change matters to how we use your data, we will ask you to read and agree to the new version the next time you log in.

For any question, request or complaint about your personal data or this policy, contact our Grievance Officer:

We acknowledge every complaint within 2 working days and resolve it within 30 days.

Complaint to the Data Protection Board of India. If you are not satisfied with our answer, you may complain to the Data Protection Board of India, set up under the DPDP Act, through the digital platform it provides for complaints. Please contact our Grievance Officer first, as the Act expects.

This policy is governed by the laws of India; the courts at Mumbai have jurisdiction.