Privacy Policy

1. Introduction & Overview

This Privacy Policy describes how ZAKI Handmade Treasures LLP (“ZAKI”, “We”, “Us”, or “Our”) collects, uses, maintains, protects, and discloses information collected from users and customers (“User”, “You”, or “Your”) accessing or purchasing from our website. We are committed to safeguarding your personal data in strict compliance with applicable Indian laws, including the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023.

2. Merchant Jurisdiction & Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India. The primary jurisdiction for any legal disputes, claims, or regulatory inquiries relating to data privacy shall rest exclusively with the competent courts located in Maharashtra, India, where the merchant’s registered business operates.

3. Customer / User Information Collection

We collect personal and non-personal information through transparent and lawful means when you interact with our website. Categories of information collected include:

Personal Identification Information: Full name, billing address, shipping address, email address, mobile phone number, and account credentials created during signup or checkout.
Payment & Transaction Data: When you make a purchase, payment details are processed through our authorized, PCI-DSS compliant payment gateway partner, Paytm Payment Gateway. ZAKI does NOT store or retain sensitive credit card numbers, debit card details, CVVs, UPI PINs, or net banking passwords on its servers.
Technical & Device Information: IP address, browser type, operating system, device identifiers, pages viewed, time spent, referral links, and log data automatically captured via server logs.
Customization & Preference Data: Saved wishlist items, product search queries, artisanal preferences, customer service communications, and product feedback

4. Use of Information

We use your information strictly for legitimate business purposes:

Order Processing & Delivery: Managing transactions, verifying payment authenticity via Paytm, and coordinating courier dispatches for physical products
Customer Support: Communicating order updates, sending tracking links, and resolving customer inquiries.
Platform Optimization: Enhancing website usability, security, browsing performance, and personalizing product recommendations.
Marketing Communications: Sending updates on artisan collections, traditional art series, and seasonal offers (only with explicit user consent; you may opt out at any time).
Legal & Security Compliance: Detecting and preventing fraudulent transactions, complying with tax and regulatory audit requirements, and protecting platform integrity.

5. Third-Party Disclosure & Sharing

ZAKI Handmade Treasures LLP respects your privacy. We DO NOT sell, rent, trade, or monetize your personal identification data to third parties. Information is disclosed strictly on a need-to-know basis to trusted service providers under strict confidentiality agreements

Payment Service Providers: Paytm Payment Gateway to process encrypted payment authorization and settlement.
Logistics & Delivery Partners: Contracted courier and postal networks to transport orders to your designated shipping destination
Technology Infrastructure Vendors: Web hosting providers, security firewall services, and analytics partners managing site performance.
Statutory Authorities: When required by law, court order, statutory subpoena, or government demand to comply with legal processes or protect merchant legal rights.

6. Information Protection & Security Practices

We implement reasonable technical, administrative, and physical security measures to protect your personal data against unauthorized access, loss, misuse, or alteration:

SSL (Secure Sockets Layer) 256-bit encryption across the website.
Encrypted API integrations with Paytm for secure checkout environments.
Restricted data access limited strictly to authorized operations personnel.
Regular system updates and firewall monitoring.

7. Rights of Users

Under Indian data protection laws and DPDP guidelines, Users possess the following rights regarding their personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request updates or corrections to inaccurate or incomplete personal details.
Right to Erasure: Request the deletion of your account and personal data (subject to legal record-retention requirements under GST/Tax laws).
Right to Opt-Out: Unsubscribe from promotional marketing messages at any time using the "Unsubscribe" link in emails or by contacting support.