Privacy policy

Mandalian Orders Portal · last updated October 2026

The Mandalian Orders Portal is a private web application used by Mandalian and its business clients to view a product catalog and to place and follow jewellery orders. Access is limited to accounts created by Mandalian.

Information we keep

• Account details – user name, name, e-mail address and mobile number of each portal user. Passwords are stored only as irreversible hashes.
• Client details – company name, contact e-mail, phone / WhatsApp number and the notification preferences chosen for the client.
• Catalog and orders – products, pictures, order lines, quantities, notes, dates and order status.
• Activity log – sign-ins and important actions with date, user and IP address, kept for security.

How we use it

• To show each client its own catalog and orders and to process the orders.
• To send order notifications (e-mail with the printed order, SMS, WhatsApp) to the client and to Mandalian staff, as chosen in the client's settings.
• To keep the service secure (sign-in protection, audit log).

We do not sell or rent personal information and do not use it for advertising.

Google services

The portal uses the Google Drive API only to store and display the pictures of the catalog and of custom orders in a folder of Mandalian's own Google Drive. It does not read, change or share other files, and data received from Google APIs is used only for this purpose, in line with the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

Data is stored on Mandalian's server and in Mandalian's Google Drive. Notifications are delivered through Mandalian's e-mail, SMS and WhatsApp providers, which receive only the message and the recipient address or number.

Retention and your rights

Information is kept while the business relationship lasts and as required for accounting and legal purposes. Users can ask Mandalian to see, correct or delete their personal information, or to stop notifications, by contacting their Mandalian representative.

Security

The portal is served over HTTPS; each client can only open its own data; passwords, mail and gateway credentials are stored protected.

Sign in to the portal