Privacy Policy

When you use our website:

• Device and browser data (IP address, browser type, pages visited, time spent) collected automatically via server logs and analytics tools.
• Form submissions — name, phone number and email address when you fill in a contact or callback request form.
• Cookies and similar tracking technologies (see Section 8).

When you use our gold-buying services:

• Identity documents — a government-issued photo ID (such as Aadhaar Card, PAN Card, Passport or Voter ID) as required by applicable law.
• Contact details — name, phone number, email and address.
• Transaction records — item descriptions, purity test results, weights, agreed price and payment details.
• Photographs — we may photograph items brought in for assessment as part of our internal records.

• To process and complete gold purchase transactions.

• To comply with legal and regulatory obligations, including Know Your Customer (KYC) and anti-money laundering (AML) requirements under applicable Indian law.
• To respond to your enquiries, callback requests and complaints.
• To send you service-related communications (e.g. transaction confirmations).
• To improve our website and services through analytics.
• To detect and prevent fraud or other illegal activity.

• Legal obligation — identity verification and transaction records are required by Indian regulations including the Prevention of Money Laundering Act (PMLA) and related rules.

• Contract performance — processing is necessary to carry out the purchase transaction you have requested.
• Legitimate interests — website analytics and fraud prevention, balanced against your privacy rights.
• Consent — for optional communications such as price-alert notifications, where we ask for your agreement before sending.

• Law enforcement and regulators — when required by law, court order or regulatory authority (e.g. reporting obligations under PMLA).

• Service providers — third parties who help us operate our business (e.g. payment processors, IT infrastructure providers, analytics platforms) under data-processing agreements that restrict them from using your data for other purposes.
• Professional advisers — lawyers, accountants and auditors, subject to confidentiality obligations.
• Business transfers — if EasyGoldBuyer is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction. We will notify you before such a transfer.

• Transaction records and identity documents are retained for a minimum of five years after the transaction date, as required under PMLA and related regulations.

• Website enquiry data (contact forms, callback requests) is retained for up to two years or until the matter is resolved, whichever is shorter.
• Analytics data is retained in aggregated or anonymised form and does not identify individual users after 26 months.

• Encrypted connections (HTTPS) on our website.

• Access controls limiting who within our organisation can view personal data.
• Secure physical storage of identity documents at our offices.
• Regular review of our security practices.

• Keep the website functioning correctly (essential cookies).

• Understand how visitors use the site and improve performance (analytics cookies, e.g. Google Analytics).

• Access — request a copy of the personal data we hold about you.

• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your data, subject to legal retention requirements.
• Objection — object to processing based on our legitimate interests.
• Withdrawal of consent — withdraw consent for any processing based on consent (e.g. marketing notifications).
• Grievance redressal — lodge a complaint with us or with the relevant data protection authority.