This notice explains what personal data Gem Plaza Private Limited collects through gemplaza.net, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it.
We are the data fiduciary for this data under India's Digital Personal Data Protection Act 2023 and the DPDP Rules 2025, and the data controller under the EU and UK General Data Protection Regulation where that applies to you.
Who we are
Gem Plaza Private Limited CIN U36911RJ2003PTC018054 · GSTIN 08AABCG9832C1ZP Khetan Bhawan, M.I. Road, Jaipur, Rajasthan 302001, India mail@gemplaza.net
Data-protection questions, and any request you make about your own data under this notice, go to that address — by email to mail@gemplaza.net, or by post to the address above.
What we collect, and why
We collect only what a specific purpose requires. Each purpose below is stated separately, and we do not use data collected for one purpose for another without asking you again.
Enquiries and bespoke requests. When you send an enquiry, a bespoke commission request or a trade enquiry, we collect your name, email address, telephone number where you give one, country, and whatever you write in the message. We use it to answer you, to prepare a quotation, and to keep a record of the conversation if it becomes an order. Legal basis: performance of a contract or steps taken at your request, and your consent under the DPDP Act.
Appointments. When you book a showroom, atelier or museum visit, we collect your name, contact details, the date and time you choose, and the purpose of the visit. We use it to hold the appointment and to confirm it by email or WhatsApp. Legal basis: performance of a contract or steps at your request.
Newsletter. If you subscribe, we collect your email address and the fact that you subscribed, with the date. We use it to send occasional emails about new work and the house. Legal basis: consent, which you can withdraw at any time through the unsubscribe link in every email.
Purchases. If you buy from us, we collect the information required to complete and record the sale, including billing and delivery details, and information required by Indian tax and export law. Legal basis: performance of a contract and compliance with a legal obligation.
Site analytics. We collect aggregate information about how the site is used — pages viewed, approximate region, device type, referring site. This is used to improve the site. Non-essential analytics do not run before you consent to them.
We do not collect special categories of data, we do not knowingly collect data from children, and we do not use automated decision-making or profiling.
Cookies
Strictly necessary cookies, which keep the site working and remember your language and motion preferences, are set without consent because the site cannot function without them. Everything else — analytics, and any future advertising or embedded media — runs only after you have accepted it. See the cookie notice for the full list and how to change your choice.
Who we share it with
We share personal data only with service providers who process it on our instructions, and only as far as the purpose requires:
- Email delivery for transactional and newsletter email.
- Hosting and content delivery for the site itself.
- Bot protection on forms, to stop automated submissions.
- Messaging, where you have asked us to confirm an appointment by WhatsApp.
- Shipping, customs and payment providers, where you have made a purchase.
We do not sell personal data and we do not share it for anyone else's marketing.
Some of these providers process data outside India. Where personal data of EU or UK residents is transferred to India, the transfer is made under the European Commission's standard contractual clauses or an equivalent safeguard.
How long we keep it
- Enquiries that do not become orders: 24 months from the last contact.
- Appointment records: 24 months from the appointment date.
- Newsletter subscribers: until you unsubscribe, and then a suppression record only, so we do not email you again.
- Order and transaction records: eight years from the end of the relevant financial year, as required by Indian tax law.
- Analytics: 14 months in aggregate form.
At the end of each period the data is deleted or irreversibly anonymised.
Your rights
Under the DPDP Act 2023 you may ask us for a summary of the personal data we hold about you and how we process it; ask us to correct or complete inaccurate data; ask us to erase data we no longer need; nominate another person to exercise your rights if you die or become incapacitated; and withdraw consent at any time, as easily as you gave it.
If you are in the EU or the UK, you may additionally ask for a copy of your data in a portable format, object to processing based on legitimate interests, and ask us to restrict processing while a dispute is resolved.
To exercise any of these, write to us at mail@gemplaza.net. We will answer within 30 days. There is no charge.
Complaints
If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act. If you are in the EU or the UK, you may complain to your national supervisory authority.
Breach notification
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected data principal without delay, in the form and within the timeframes the DPDP Rules 2025 require. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours and affected individuals where the risk to them is high.
Changes
We will update this notice when our processing changes, and the date at the top of the page will change with it. Material changes affecting how we use data you have already given us will be notified to you directly.