Privacy Policy

Last updated: 22 August 2026

ZISUN (“ZISUN”, “we”, “us”) operates https://zisun.in. This policy explains what personal data we collect, why, and what rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

  • Account: mobile number (used to sign in via OTP), and optionally your name and email address.
  • Orders: delivery address, items purchased, order value and order history.
  • Payments: processed by Razorpay. We receive a payment confirmation and reference id. We never see or store your card, UPI or bank credentials.
  • Usage: pages viewed, products opened, items added to cart, and device/browser information.

2. Why we use it

To create and secure your account, process and deliver orders, provide customer support, send order updates over WhatsApp and SMS, prevent fraud and misuse, meet tax and legal obligations, and improve the store.

We do not sell your personal data, and we do not use it for advertising by third parties.

3. Analytics and error monitoring

We do not currently use session recording, heatmaps or third-party behavioural analytics on this store.

We use error monitoring to capture technical faults — the page that failed and the error itself — so we can fix them. It is configured not to send personal data.

4. Cookies and on-device storage

We do not use advertising or tracking cookies, and we do not sell or share anything for advertising.

What we do set, and why:

  • One session cookie. When you sign in we set a single cookie that keeps you signed in. It is marked HttpOnly, Secure and SameSite, so it cannot be read by scripts and is only ever sent back to our own login endpoint. It is strictly necessary for the site to work — you cannot place an order without being signed in.
  • Your basket, stored in your browser. Items you add are kept in your own browser’s local storage so the basket survives a page reload. It stays on your device until you clear it or sign in, at which point it is merged into your account.
  • Phone sign-in. Sign-in is delivered by Google Firebase, which runs a reCAPTCHA check to stop automated abuse and may set its own cookies for that purpose. Google acts as our processor for this.

You can clear all of it at any time through your browser’s site-data settings. Clearing it signs you out and empties your basket; nothing else is lost.

5. Who we share it with

We share the minimum necessary with service providers who help us operate:

  • Razorpay — payment processing
  • Shiprocket and its delivery partners — shipping (name, address, phone)
  • Twilio and Meta (WhatsApp) — OTP and order notifications
  • Cloud infrastructure and analytics providers — hosting, error tracking, usage analytics

Some providers process data outside India. Where that happens, we rely on the provider’s contractual safeguards.

6. How long we keep it

Order and transaction records are retained as long as required by Indian tax and accounting law. Account data is retained while your account is active. You may ask us to delete your account at any time (see below).

7. Your rights

Under the DPDP Act you may:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • request erasure of your data
  • withdraw consent for non-essential processing
  • nominate another person to exercise these rights on your behalf
  • raise a grievance with us, and escalate to the Data Protection Board of India

To exercise any of these, email zisunstudio@gmail.com. We respond within 30 days. Note that we may need to retain certain order records even after deletion, where the law requires it.

8. Security

Traffic is encrypted in transit (HTTPS). Sign-in uses one-time passwords rather than stored passwords, and payment credentials never reach our servers. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as required by law.

9. Children

The store is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy. Material changes will be notified on this page with a revised “last updated” date.

11. Grievance Officer

As required by the DPDP Act and the Information Technology Act, 2000:

ZISUN
35, RMV 2nd Stage, Railway Men's Colony, near Lottegollhalli Railway Station, Bengaluru, Karnataka 560094
Email: zisunstudio@gmail.com
Phone: +91 93636 08792
GSTIN: 29BAYPT2026A1ZH
Hours: Monday–Saturday, 10:00–18:00 IST