Privacy policy

G Sons Gold & Diamonds LLP (“G Sons”, “we”) runs gold and silver savings schemes through our showrooms and the G Sons app. This policy explains what personal data we collect, why, who can see it, how long we keep it, and your rights under the Digital Personal Data Protection Act, 2023.

What we collect

• Your details: name and mobile number; and, only if you give them, your email address, date of birth, address, city and PIN code.
• Sign-in: we send a one-time code by SMS to your mobile to sign you in. Members have no password. We record when you last signed in.
• KYC documents: a copy of your Aadhaar (masked or full) and, if you choose, your PAN. You upload these yourself, and only after agreeing to us keeping them.
• An unfinished sign-up: if you ask for a sign-in code but do not finish creating your account, we keep the mobile number you entered and when you tried.
• Your nominee: the name, relationship and mobile number of the person you nominate.
• Scheme records: your enrolments, instalments and payments (amount, date, payment mode and receipt number), the gold or silver rate locked for each payment, the weight credited, and maturity and redemption.
• Online payments: for a payment made in the app, the order number and the bank’s transaction reference, the payment method (such as UPI or card) and whether it succeeded. We never receive your full card number, CVV or UPI PIN.
• Refund details: if you cancel a scheme, the name, bank account number and IFSC, or UPI ID, that the refund is to be paid to, and the reference of the bank transfer.
• A record of changes: when you or our staff change your details, we record what changed, who changed it and when.

The app uses your camera only when you choose to photograph a KYC document. We do not collect your location, your contacts or any other files from your phone.

Why we use it

• To run your scheme: enrol you, record your payments, credit gold or silver, issue receipts, and handle maturity and redemption.
• To refund you: the amount paid when you cancel a scheme, or an online payment that could not be credited.
• To confirm who you are before you redeem, using your KYC documents.
• To contact you about your scheme, for example about a due instalment or a matured scheme.
• If you start signing up in the app but do not finish, to call or WhatsApp you on that number to help you complete it. We tell you this before you ask for your code. We call only about your sign-up, and if you ask us not to, we will not contact you again.
• To keep the accounting and tax records the law requires of us.
• To prevent fraud and to resolve any dispute about a payment.

We do not sell your personal data, and we do not share it with anyone for their advertising.

Your consent for KYC documents

We collect Aadhaar and PAN only with your explicit consent, which you give in the app before uploading, and we record when you gave it. We use them only to confirm your identity. You may withdraw your consent by contacting your showroom; we will then delete the documents, though we may need to confirm your identity another way before you redeem.

Who can see your data

• You see your own details, scheme, passbook and receipts in the app. The system is built so that one member can never see another member’s records.
• G Sons staff see what their job needs. Your KYC documents can be opened only by our head office and by the manager of your showroom, and the same applies to your refund bank details.
• Collection agents appointed by G Sons see the name, mobile number and scheme details of the members they collect payments from, and record those payments.
• HDFC Bank, which processes online payments through its SmartGateway. For each payment we send it the amount, an order number and your name, mobile number and email address (if you gave one). You enter your card or UPI details on HDFC Bank’s own page, not in our app.
• Service providers who run parts of the service for us: our database and file storage (Supabase), the hosting of our back office (Vercel), and the email and SMS services that deliver sign-in codes. These providers may store data on servers outside India. They may use it only to provide their service to us.
• Authorities, when the law requires us to share it.

How we protect it

Data travels over encrypted connections. Access is controlled in the database itself, not only in the app. KYC documents are kept in private storage and open only through links that expire within minutes. Payments cannot be edited or deleted once recorded, and every change to your details is logged.

How long we keep it

• Your sign-in, KYC documents and optional details (email, address, date of birth): until you delete your account, or earlier if you ask us to remove them.
• Enrolments, payments, refunds and receipts, with the name and mobile number on them: for as long as Indian accounting, tax and LLP laws require us to keep books of account, generally up to eight years. This also applies after you delete your account.
• The record of changes: for the same period, as it is part of those records.

Your rights

• See and correct your data. Your details and your nominee can be updated in the app under Profile. Your name and mobile number are changed at the showroom, because they appear on your receipts.
• Delete your account in the app, or without it. Here is how.
• Nominate someone to exercise these rights for you if you die or cannot do so yourself.
• Complain. Contact us first, below. If we do not resolve your concern, you may complain to the Data Protection Board of India.

Age

Our savings schemes and the app are for adults aged 18 and over.

Changes to this policy

If we change how we use your data, we will update this page and the date at the top of it.

Contact us

For any question about your data, or to use any of the rights above, email info@gsonsgold.com or contact G Sons Gold & Diamonds LLP at any showroom and ask for the person responsible for data protection.