Security & privacy
Privacy Policy
How Zyvora collects, uses, and protects personal information under the Digital Personal Data Protection Act, 2023 and IT Rules, 2021.
Information we collect
Account details (name, email, phone), shipping addresses, order history, device identifiers for guest shopping continuity, and communications you send our team.
Payment card data is processed by PCI-DSS-compliant payment partners — we do not store full card numbers, CVVs, or UPI PINs on our servers.
With your consent, we may collect analytics data (pages visited, time on site, purchase funnel) and marketing interaction data (email opens, click-throughs) to improve our service.
How we use data
To fulfil orders, prevent fraud, improve the storefront experience, and send transactional messages (order confirmation, shipping updates, refund status). Transactional messages cannot be opted out without affecting service.
Marketing email, push notifications, and personalised ads are optional and can be managed from your Preferences page. We do not sell your personal data to third parties.
Data sharing
We share your data only with service partners necessary to fulfil your order — logistics providers (shipping address and phone), payment processors (billing details), and customer support tools. Each partner is bound by confidentiality obligations.
We may disclose data to law enforcement or courts when legally required to do so.
Your rights
Under the Digital Personal Data Protection Act, 2023 and applicable IT Rules, you have the right to access, correct, and erase your personal data. Contact support@zyvora.com or write to our Grievance Officer to exercise these rights.
Data deletion requests are processed within 30 days. Some data may be retained for legal compliance (e.g., GST invoices for 7 years) and cannot be deleted on request.
Cookies & tracking
We use strictly necessary cookies for cart and session management. With your consent, we use analytics and marketing cookies. See our Cookie Policy for full details and opt-out options.