Skip to main content

Privacy Notice

Effective 13 July 2026

This notice explains how Zhoomi Shop handles personal information through this website, customer accounts, checkout, delivery, support, and email preferences.

Information we handle

  • Account and contact information, such as your name, email address, phone number, saved addresses, profile photo, and email-verification status.
  • Order and fulfilment information, such as products, delivery address, order status, courier references, and payment-provider identifiers. We do not receive or store your full card details.
  • Content and preferences you choose to provide, including product reviews, support communications, and marketing or order-update preferences.
  • Security and service records, such as request identifiers, authentication events, delivery logs, and fraud-prevention or rate-limit signals.

Why we use it

  • To create and secure accounts, process orders and payments, reserve inventory, arrange delivery, provide tracking, handle returns or support requests, and send essential account or order messages.
  • To publish reviews safely. Public reviews use an abbreviated display name and do not expose customer or order identifiers.
  • To send promotional email only when the account preference is enabled. Marketing consent can be withdrawn from account preferences or through the unsubscribe link in each campaign email.
  • To protect the store, investigate errors, prevent abuse, reconcile provider events, and comply with applicable legal obligations.

Service providers

  • The store uses specialist providers for hosted authentication and data storage, payments, courier fulfilment, email delivery, image hosting, and website hosting. Current integrations include Supabase, Razorpay, Delhivery, Resend, Cloudinary, and the configured web-hosting platform.
  • Providers receive only the information needed for their role. Their processing locations and retention practices may depend on the store’s configured account and service region.

Storage, retention, and security

  • The browser uses essential local storage for session continuity, cart persistence, and cached storefront settings. The application does not include an advertising-tracker or behavioural-advertising integration.
  • Records are retained only while needed for the purposes described above, dispute resolution, fraud prevention, accounting, or other legal obligations. Deleting an account revokes access and anonymizes the customer profile; order and payment records may remain where integrity or legal retention requires it.
  • We use access controls, signed payment and webhook verification, one-time token hashing, request limits, database row security, and audit records. No online service can promise absolute security.

Your choices

  • Signed-in customers can review and correct profile details, manage saved addresses and email preferences, change their password, or request account deletion from the account area.
  • You may also ask for access, correction, deletion, consent withdrawal, or help with a privacy grievance by contacting the address below. We may need to verify the request before acting on it.
  • The store is not designed for unsupervised use by children. A parent or guardian who believes a child provided personal information should contact us.

Privacy and grievance contact

A privacy contact must be configured before this store is launched.