Privacy Policy

Last updated: 1st June 2026 Effective date: 1st May 2026

1. Introduction

This Privacy Policy explains how [N & K Enterprise], trading as Olive and Gold ("Olive and Gold," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you visit, browse, or make a purchase from https://oliveandgold.in (the "Website") or otherwise interact with us.

By using our Website or providing us with your information, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

We are committed to handling your personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020.

2. Who We Are

  • Business name: [N & K Enterprise] (trading as Olive and Gold)
  • Registered address: [10th Floor, 1007 A Wing, Unicus Shyamal, Shyamal Cross Road, Shyamal, Ahmedabad, Gujarat 380015, India]
  • Email: support@oliveandgold.in

We are the "Data Fiduciary" responsible for your personal data under the DPDP Act.

3. Information We Collect

a) Information you provide to us

  • Identity & contact details: name, email address, phone number, billing and shipping address.
  • Order information: products purchased, sizes, order value, gift messages.
  • Payment information: processed securely by our payment gateways we do not store your full card or bank details on our servers.
  • Account information: if you create an account, your login credentials and saved preferences.
  • Communications: messages, reviews, survey responses, and any information you share when you contact us (including via WhatsApp, email, or social media).

b) Information collected automatically

  • Device & usage data: IP address, browser type, device identifiers, operating system, referring pages, pages viewed, and time spent on the Website.
  • Cookies and similar technologies (see Section 7).

c) Information from third parties

  • Our platform provider (Shopify), payment processors, shipping/logistics partners, and analytics/advertising partners may share information related to your transactions and interactions.

4. How We Use Your Information

We use your personal data to:

  • Process, fulfil, and deliver your orders, and send order confirmations and updates.
  • Manage returns, exchanges, refunds, and warranty/quality requests.
  • Provide customer support and respond to your enquiries.
  • Send you marketing communications about new collections, offers, and promotions where you have consented (you can opt out at any time).
  • Personalise your shopping experience and show relevant products.
  • Detect, prevent, and address fraud, security issues, and misuse.
  • Improve our Website, products, and services through analytics.
  • Comply with legal, tax, accounting, and regulatory obligations.

5. Legal Basis and Consent (DPDP Act, 2023)

We process your personal data based on:

  • Your consent — for example, for marketing communications and non-essential cookies. Consent is free, specific, informed, and may be withdrawn at any time.
  • Legitimate uses / contractual necessity — to fulfil an order you have placed and provide the services you request.
  • Legal obligation — to meet tax, accounting, and other statutory requirements.

Where processing relies on consent, you may withdraw it at any time by contacting us (see Section 13). Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

6. Sharing and Disclosure of Information

We do not sell your personal data. We share it only with:

  • Payment gateways — [Razorpay / Cashfree / Phonepe ] to process payments securely.
  • Shipping & logistics partners — e.g., [Shiprocket / Blue Dart] to deliver your orders.
  • Technology providers — Shopify (e-commerce platform hosting), and email/SMS/WhatsApp service providers used to communicate with you.
  • Analytics & advertising partners — e.g., Google Analytics, Meta (Facebook/Instagram) Pixel, to understand and improve performance and show relevant ads.
  • Professional advisers and authorities — where required by law, court order, or to protect our legal rights.

These partners are permitted to use your data only for the purposes of providing services to us and are required to protect it.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website, remember your cart and preferences, analyse traffic, and deliver relevant marketing.

  • Essential cookies are required for the Website and checkout to function.
  • Analytics and marketing cookies are used only where permitted.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect Website functionality, including checkout.

8. Payments

All payments are processed by PCI-DSS-compliant third-party payment gateways. Your payment card and banking details are entered directly with the payment provider and are not stored by Olive and Gold. Please review the privacy policy of the relevant payment provider for details of how they handle your data.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy, including to meet legal, tax, accounting, and reporting obligations, resolve disputes, and enforce our agreements. When data is no longer required, we securely delete or anonymise it.

10. Data Security

We implement reasonable technical and organisational security measures — including encryption in transit (SSL/TLS), access controls, and secure hosting through Shopify — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach affecting your data, we will notify you and the Data Protection Board of India as required under the DPDP Act.

11. Your Rights

Subject to applicable law, including the DPDP Act, you have the right to:

  • Access the personal data we hold about you and a summary of how it is processed.
  • Correction and updating of inaccurate or incomplete data.
  • Erasure of your personal data where it is no longer required.
  • Withdraw consent at any time for processing based on consent.
  • Grievance redressal — raise complaints about how we handle your data.
  • Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before responding. We will respond within the timelines prescribed by applicable law.

12. Children's Privacy

Our Website and products are intended for users aged 18 and above. We do not knowingly collect personal data of children without verifiable parental or guardian consent as required under the DPDP Act. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Grievance Officer and Contact Details

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, and to address concerns under the DPDP Act, you may contact our Grievance Officer:

  • Name: Nabil Shaikh
  • Designation: Grievance Officer
  • Email: [grievance@oliveandgold.in]
  • Phone: [+91 6356352700]
  • Address: [10th Floor, 1007 A Wing, Unicus Shyamal, Shyamal Cross Road, Ahmedabad, Gujarat 380015, India]

We aim to acknowledge complaints within 48 hours and resolve them within the timelines prescribed under applicable law.

14. International Data Transfers

Some of our service providers may process or store data outside India. Where this happens, we take steps to ensure your data continues to be protected in accordance with this Policy and applicable law, and only transfer data to jurisdictions not restricted by the Government of India.

15. Third-Party Links

Our Website may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review it periodically. Continued use of the Website after changes are posted constitutes acceptance of the revised Policy.

17. Consent

By using our Website and providing your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.