1. Introduction

At Zi. Origin, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have — in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act). By using our website or placing an order, you consent to the practices described in this policy.

This policy applies to the Zi. Origin website hosted on Shopify and all interactions associated with your account or purchases.

2. Consent

We collect and process your personal data only with your informed, specific, and unambiguous consent. When you visit our website for the first time, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies.

When creating an account or placing an order, you will be asked to confirm your consent to the relevant data processing activities. Consent to marketing communications is separate and optional.

You may withdraw your consent at any time by contacting us at care@ziorigin.com. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

3. Information We Collect

Information you provide to us:

• Name, email address, phone number, and shipping/billing address when you place an order or create an account.
• Payment details — processed securely by our payment gateway; we do not store full card or banking information.
• Gift note content if you opt into our gifting service.
• Communications you send us via email, WhatsApp, or our contact form.

Information collected automatically:

• Browser type, IP address, device type, and operating system.
• Pages visited, time spent on site, and click behaviour via cookies and analytics tools.
• Referring URLs and search terms that led you to our site.

4. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders, including shipping and delivery.
• Send order confirmation, tracking updates, and post-purchase communications.
• Respond to customer service enquiries.
• Personalise your experience on our website.
• Send occasional editorial updates or early-access communications, where you have opted in.
• Improve our website, product range, and overall customer experience.
• Comply with legal obligations under applicable Indian law.

5. Cookies & Tracking

Our website uses cookies and similar tracking technologies. These include:

• Essential cookies required for the website to function (e.g., Shopify session cookies) — these cannot be disabled without affecting your ability to use the site.
• Analytics cookies (e.g., Google Analytics) to understand site usage — these are only placed with your consent.
• Marketing cookies for targeted communications — these are only placed with your explicit opt-in consent.

You may review and update your cookie preferences at any time via the cookie settings on our website, or through your browser settings.

6. Third-Party Communications Channels

If you choose to contact us via WhatsApp, please be aware that WhatsApp is operated by Meta Platforms, Inc., a company based outside India. Messages sent via WhatsApp are subject to Meta's privacy policy, and your message data may be processed on servers outside India by Meta. By choosing to contact us via WhatsApp, you acknowledge this.

We recommend using email at care@ziorigin.com for any communication involving sensitive personal information.

7. Data Sharing & Third Parties

We do not sell your personal data. We may share your information with trusted third-party service providers solely for the purposes of operating our business, including:

• Shopify (e-commerce platform and data hosting)
• Payment gateways (e.g., Razorpay, PayU) for secure payment processing
• Logistics and courier partners for order fulfilment
• Email and communication platforms for transactional or opted-in marketing messages

All third-party partners are bound by their own privacy policies and applicable data protection obligations. Where data is transferred to entities outside India, we take reasonable steps to ensure adequate protection is in place.

8. Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Order data is retained for a minimum of three (3) years in accordance with Indian accounting and tax regulations.

9. Contact

• Privacy enquiries: care@ziorigin.com
• Entity: Zi Luxury Brands Private Limited
• Address: A-805, Business Suites 9, SV Road, Santacruz West, Mumbai – 400054, India

10. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to access the personal data we hold about you.
• Right to correction of inaccurate or incomplete data.
• Right to erasure of your data, subject to legal obligations.
• Right to nominate a person to exercise your data rights on your behalf in the event of your death or incapacity (Section 14, DPDP Act).
• Right to opt out of marketing communications at any time by clicking 'Unsubscribe' in any email or contacting us directly.
• Right to grieve — you may file a complaint with the Data Protection Board of India once it becomes operational, if you believe your data rights have been violated.

To exercise any of the above rights, please contact us at care@ziorigin.com.

11. Data Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. Our website is SSL encrypted (HTTPS), and all payment processing is handled by PCI-DSS compliant gateways. That said, no method of internet transmission is entirely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us immediately, and we will take prompt steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date and version number. We encourage you to review this page periodically. Archived versions are available on request.