Privacy Policy

This Privacy Policy explains how GENZSTYLE Retail Private Limited (“GENZSTYLE”, “we”, “us”) handles personal data when you browse our website, create an account, place an order, contact us or subscribe to our communications. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary and you are the Data Principal.

Privacy contact: privacy@genzstyle.in. By using the website you confirm that you have read this policy. Where we need your consent, we ask for it separately and clearly, and you may withdraw it at any time.

We collect only what we need to run the store and look after our customers.

We do not knowingly collect sensitive personal data such as health information, biometrics or caste. We do not ask for government ID numbers except where the law requires it.

• Consent. For optional uses such as marketing emails, analytics and marketing cookies, and saving your details for faster checkout.
• To fulfil your order. Taking payment, packing, shipping, delivering, handling returns, refunds, exchanges and resoling requests, and sending order updates by email and SMS.
• Legal obligations. Issuing GST invoices, keeping accounting records, responding to lawful requests from courts and authorities and enforcing our Terms & Conditions.
• Safety and fraud prevention. Detecting fraudulent orders, abuse and security incidents, which protects you and us.

We do not sell your personal data, and we do not make decisions about you that have legal effect using solely automated means.

We share personal data only with service providers acting on our instructions, and only to the extent needed:

• Payment aggregators, banks and UPI / card networks that process your payment (regulated by the Reserve Bank of India).
• Courier and logistics partners, who receive your name, delivery address and phone number to deliver your parcel.
• Technology providers for website hosting, email and SMS delivery, customer support tooling and — if you consent — analytics.
• Professional advisers, auditors and insurers, under duties of confidentiality.
• Government, regulators and law-enforcement agencies, where required by law or to protect rights and safety.
• A successor business, if GENZSTYLE is merged or acquired; you would be told of any change in who holds your data.

Every processor is bound by a written contract requiring appropriate security and prohibiting use of your data for their own purposes.

We use strictly necessary storage to keep your bag and sign-in working, and — only with your consent — preference, analytics and marketing technologies. You can review and change your choices at any time from “Cookie settings” in the footer. The details, including every item we store on your device, are in our Cookie Policy.

When data is no longer needed, we delete it or irreversibly anonymise it, unless the law requires us to retain it.

We follow reasonable security practices and procedures as required by Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011. This includes encryption in transit (HTTPS), salted password hashing, access controls on a need-to-know basis, and regular review of our vendors. No method of transmission or storage is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

Our website is not directed at anyone under 18. We do not knowingly process the personal data of children without verifiable consent of a parent or lawful guardian. If you believe a child has given us data, write to privacy@genzstyle.in and we will delete it.

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we process about you and the identities of those we share it with;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased once it is no longer needed for the purpose it was collected, unless the law requires us to keep it;
• withdraw consent at any time — as easily as it was given — without affecting processing done before withdrawal;
• nominate another person to exercise your rights if you die or become incapacitated;
• have your grievance heard and resolved by us before approaching the Data Protection Board of India.

You can exercise these rights yourself from your account or by using the Your Data Rights page, where you can also download a copy of your data or delete your account. We respond within 30 days.

We send marketing emails only to people who have opted in. Every email carries an unsubscribe link, and you can also write to us. Transactional messages — order confirmations, delivery updates, invoices — are not marketing and will continue while you have an open order.

Some of our technology providers may store or process data on servers outside India. Such transfers take place only to countries not restricted by the Government of India under the DPDP Act, and only under contracts that require protection equivalent to this policy.

Our site may link to websites we do not operate, including our website developer’s. We are not responsible for their content or privacy practices; please read their policies.

We may update this policy when our practices or the law change. The “last updated” date at the top shows the current version, and we will tell you of material changes by email or a notice on the website.

Questions or complaints about your personal data? Write to our Grievance Officer at grievance@genzstyle.in or use the form on our Grievance Redressal page. We acknowledge within 48 hours and resolve within 30 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is constituted and the grievance process with us has been exhausted.