Raj Jeweller's collects account, contact, delivery, order and payment-proof information only for customer service and order processing. Logged-in customers are authorized to view only their own orders, addresses, payments and invoices.
Passwords are hashed, authentication uses secure HTTP-only cookies, and sensitive configuration is stored in environment variables.