Privacy & Policy

1. Applicability

This Policy applies to:

• Information collected through our Services (web, app, etc.)
• Electronic communications we send/receive in connection with the Services
• It does not apply to data collected by third-parties independent of Zustbay, even if linked from or to the Services

2. What Information We Collect

We collect:

A. Personal Information(directly from you or via third parties)

This may include, but is not limited to:

• Name, email address, phone number, postal address
• Date of birth, gender, occupation, income (if required for services)
• Payment information (bank, card, UPI, etc.)
• Government-issued IDs, tax information, etc. (where legally required)
• Login credentials and profile information

B. Non-Personal / Technical Information(automatically collected)

This may include:

• IP address, device identifiers, browser type, operating system
• Usage data: pages visited, time spent, search queries, clicks, logs, error reports
• Location data (where permitted)
• Metadata, cookies, web beacons, SDKs, etc.

C. Content & Public Contributions

• Reviews, photos, comments, ratings you submit
• Interactions with other users or public areas of the Services

3. How We Use the Information

We use your information for purposes including:

• Operating, maintaining, and improving the Services
• Processing orders, payments, deliveries, refunds, returns
• Personalizing experience: recommendations, localization, preferences
• Customer support, notifications, communications (push, email, SMS)
• Marketing and promotional activities (with appropriate consent)
• Fraud detection, risk assessment, security, compliance with laws
• esearch, analytics, audits, internal reporting
• Other purposes you explicitly consent to

4. Sharing and Disclosure of Information

We may share your information with:

• Affiliates, subsidiaries, and group companies under common control
• Service providers and contractors (payment processors, logistics, marketing, analytics) under obligation to protect your data
• Third-party advertisers, partners, for marketing (subject to your consent/choices)
• Legal, regulatory bodies or law enforcement, if required by law, court order, or to protect rights and safety
• Marketing and promotional activities (with appropriate consent)
• Successors in business transactions (e.g., mergers, acquisitions)

We do not sell your sensitive personal data without explicit consent (unless required by law).

5. Cookies & Tracking Technologies

We and our partners use cookies, web beacons, pixels, and similar tracking technologies to:

• Store preferences and settings
• Provide analytics and measure performance
• Display personalized advertisements
• Track usage patterns

You can usually manage or disable cookies via your browser or device settings, but this may limit certain features of the Services.

6. Data Retention

We retain your personal information:

• For as long as needed to provide the Services and fulfill the purposes in this policy
• To comply with legal obligations, enforce agreements, resolve disputes
• Display personalized advertisements
• After deletion requests, some data may be retained in anonymised or aggregated form

You can usually manage or disable cookies via your browser or device settings, but this may limit certain features of the Services.

7. Security

We implement reasonable administrative, physical, and technical safeguards to protect your data. However, no system is completely secure. We do not guarantee confidentiality or security of transmissions over the internet.

You are responsible for keeping your account credentials confidential.

8. Age Restrictions

The Services are intended for users 18 years and older (or as per local law). If underage users are allowed by location law, they must be supervised by a parent or legal guardian.

If we discover that a user under the permissible age has submitted personal data, we will delete it as soon as practical.

9. Your Rights & Choices

Depending on applicable law, you may have the right to:

• Access, correct, update, or delete your personal data
• Oppose or restrict processing of your data
• Withdraw consent for marketing/tracking (without affecting service functionality)
• Request portability of certain data
• Lodge complaints with relevant data protection authorities

To exercise these rights, contact us using the information below.

10. International Data Transfers

If we process or store your personal information in jurisdictions other than your own, we will ensure adequate protection as required by law (e.g., standard contractual clauses, encryption, etc.).

11. Updates to This Policy

We may update this Policy periodically. We will notify users of material changes via prominent notice or in the Services. Continued use after updates implies acceptance.

12. Grievance & Contact Information

In accordance with Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures And Sensitive Personal Data or Information) Rules, 2011, the name and contact details of the Grievance Officer are provided below: