PRIVACY POLICY

Effective Date: 12 May 2026
Brand Name: Zumi

INTRODUCTION

Your privacy matters to us. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

This Privacy Policy explains how Zumi (“we,” “us,” “our,” or the “Platform”) collects, uses, shares, and protects your personal data.

We are committed to protecting your privacy in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other relevant regulations.

By using our website, you consent to the data practices described in this Privacy Policy.

PERSONAL DATA

For the purposes of this Privacy Policy, “Personal Data” means any information about an individual who is identifiable, directly or indirectly, by or in relation to such data.

This includes any data that can reasonably be used to identify you as an individual, either on its own or in combination with other information available to us.

Personal Data may include, but is not limited to:

• Full name

• Email address

• Phone number

• Billing and shipping address

• Date of birth (if provided)

• Payment-related information (processed securely through third-party providers)

• Device information, IP address, and browsing activity

• Any other information voluntarily provided by you while using our services

We collect and process Personal Data only to the extent necessary for the purposes described in this Privacy Policy and in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023.

A customer’s Personal data is collected to complete the transaction and deliver the goods. We collect this data when the customer: 

• Make a purchase with us; 

• Create an account with us 

• Inquire about our products or request additional information about them; 

• Share feedback or complaints regarding our services;

• Participate in any of our marketing events or activity; or 

• Submit your interest in joining our mailing list.

USE OF YOUR PERSONAL DATA

We use your Personal Data strictly for legitimate business purposes, including:

• Processing and fulfilling your orders

• Managing payments and refunds

• Providing customer support

• Sending order confirmations and service updates

• Marketing and communication (only with consent)

• Improving our website, products, and services

• Conducting analytics and customer research

• Preventing fraud and ensuring security

• Legal and regulatory compliance

We may contact you via email, SMS, phone calls, WhatsApp, or other digital communication channels.

We do not sell or rent your Personal Data.

We may share your information only with trusted third parties to operate our business, including:

a) Service Providers

• Website hosting and e-commerce platform provider

• Payment gateway and transaction processors

• Shipping and logistics partners

• Email marketing and communication tools

• Analytics and performance tracking providers

b) Legal and Regulatory Authorities

We may disclose your data if required by law, court order, or government authority.

c) Business Operations

We may share data with affiliates or partners strictly for operational, marketing, or service-related purposes.

All third-party providers are required to handle your data securely and only for the intended purpose.

PAYMENTS AND SECURITY

All payment transactions are processed through secure third-party payment gateways such as Razorpay.

We do not store your full card details, UPI credentials, or banking information.

Payment data is encrypted and handled in compliance with applicable security standards such as PCI-DSS (where applicable).

COOKIES AND TRACKING TECHNOLOGIES

Cookies are small text files that we use to enhance your shopping experience. These are also used to, but are not limited to, maintaining current login, and providing a unique identifier for website statistics. When a user visits our website, one or more website cookies are assigned to his web browser. 

We use cookies and similar technologies to:

• Improve website functionality

• Remember user preferences

• Analyse website traffic and performance

• Provide personalized content and offers

You may choose to disable cookies through your browser settings. However, some features of the website may not function properly if cookies are disabled.

DATA RETENTION

We retain Personal Data only for as long as necessary for:

• Order fulfillment and customer service

• Legal, tax, and accounting requirements

• Business and operational purposes

After the retention period, your data is securely deleted or anonymized.

SHOPIFY

Our online store is hosted on Shopify Inc, an e-commerce platform to sell our products and services. Its data storage, databases, and the general Shopify app are used to store customer data on a secure server behind a firewall. 

Shopify saves your credit card data when you opt for a direct payment gateway for order placement. It is encrypted through PCI-DSS or Payment Card Industry Data Security Standard, which confirms the secure handling of credit card data by our store and its service providers. Once the purchase transaction gets complete, the credit card information is deleted. 

Get more insights about Shopify’s Terms of Service here https://www.shopify.com/legal/terms and Privacy Statement here https://www.shopify.com/legal/privacy. 

CUSTOMER’S RIGHTS 

Subject to applicable laws, you have the right to:

• Access your Personal Data

• Correct inaccurate or incomplete data

• Request deletion of your data

• Withdraw consent (where applicable)

• Opt out of marketing communications

To exercise these rights, you may contact us at: support@zumi.co.in

DATA SECURITY  

We take reasonable technical and organizational measures to protect your Personal Data against unauthorized access, misuse, alteration, or loss. While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

CHILDREN’S PRIVACY

Our services are not intended for individuals under the age of 18. We do not knowingly collect Personal Data from minors. If such data is identified, we will take steps to delete it.

GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy shall be governed by the laws of India.

Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Mumbai, India.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy at any time.

Any changes will be posted on this page with an updated “Effective Date.” Continued use of the website after changes constitutes acceptance of the updated policy.

YOUR CONSENT

By using the Website and/ or by providing your information, you consent to the collection and use of the information you disclose on the Website in accordance with this Privacy Policy, including but not limited to Your consent for sharing your information as per this privacy policy. . If you disclose any personal information relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

If we decide to change our privacy policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it.