Privacy Policy

1. Introduction

This Privacy Policy explains how Snapvora Systems Private Limited ("Zenvy Bags," "we," "our," or "us") collects, uses, shares, and protects your personal data when you visit our website zenvybags.store or use our services.

This policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and other applicable data protection regulations. By using our Website, you consent to the collection and use of your personal data as described in this policy.

2. Data Fiduciary Information

For the purposes of the DPDP Act, Snapvora Systems Private Limited acts as the "Data Fiduciary" responsible for your personal data:

3. Personal Data We Collect

3.1 Information You Provide Directly

• Account Information: Name, email address, phone number, password (encrypted)
• Order Information: Shipping address, billing address, order details, payment information
• Communication Data: Messages, inquiries, feedback, and correspondence with our support team
• Profile Information: Preferences, saved addresses, wishlist items

3.2 Information Collected Automatically

• Device Information: Browser type, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Location Data: IP address, approximate geographic location (city/region level)
• Cookies and Tracking: Session cookies, persistent cookies, analytics identifiers

3.3 Information from Third Parties

• Payment verification data from payment processors
• Delivery status updates from shipping partners
• Social media information if you connect your accounts

4. Purpose of Data Collection

We collect and process your personal data for the following purposes:

• Order Fulfillment: Processing orders, shipping, delivery, and providing order updates
• Customer Service: Responding to inquiries, handling complaints, providing support
• Account Management: Creating and managing your account, authentication
• Payment Processing: Verifying payments, preventing fraud
• Communication: Sending order confirmations, shipping updates, and important notices
• Marketing: Promotional communications (with your consent)
• Improvement: Analyzing usage patterns to improve our Website and services
• Legal Compliance: Complying with legal obligations and protecting our rights

5. Lawful Basis for Processing

Under the DPDP Act 2023, we process your personal data based on the following lawful grounds:

• Consent: For marketing communications and optional data collection
• Contractual Necessity: For processing orders and providing services you requested
• Legal Obligation: For compliance with tax laws, consumer protection regulations
• Legitimate Interest: For fraud prevention, security, and service improvement

6. Your Rights Under DPDP Act 2023

As a Data Principal, you have the following rights regarding your personal data:

To exercise any of these rights, please contact our Grievance Officer at info@zenvybags.store.

7. Data Sharing and Disclosure

7.1 Service Providers

We share your data with trusted third-party service providers who assist us in operating our business:

• Payment Processors: For processing payments securely
• Shipping Partners: For order delivery and tracking
• Communication Services: For sending emails and SMS notifications
• Analytics Providers: For website analytics and improvement
• Cloud Hosting: For storing and securing data

7.2 Legal Requirements

We may disclose your data when required by law, court order, or government authority, or to protect our rights, property, or safety.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Encrypted storage for sensitive data
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• We do not store card details (RBI Tokenisation Guidelines compliant)

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Until account deletion request or 3 years of inactivity
• Order Data: 7 years for tax and legal compliance
• Communication Records: 3 years from last interaction
• Analytics Data: 26 months (anonymized)

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for Website functionality (cart, checkout)
• Analytics Cookies: Help us understand how visitors use our Website
• Marketing Cookies: Used for targeted advertising (with consent)

10.2 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect Website functionality.

11. Children's Privacy

Our Website is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside India. We ensure adequate safeguards are in place as required by the DPDP Act and will only transfer data to countries notified by the Central Government as having adequate data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a prominent notice on our Website or sending you an email. We encourage you to review this policy periodically.

14. Grievance Redressal

If you have any complaints or concerns about how we handle your personal data, please contact our Grievance Officer: