Privacy policy

ZOQOLO® is run by NDEDGE INFORMATICS PVT LTD ("we", "us"). This policy explains what personal data we collect when you use our website and buy from us, why we collect it, who we share it with and the choices you have. It follows the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

Account details: your name, email address and phone number, and the fact that you verified them. If you sign in with Google, Google shares your name, email address and profile picture link with our sign-in service; we use your name and email address.
Delivery addresses you save or use at checkout.
Orders: what you bought, prices, coupons used, invoices, delivery and tracking details, refunds.
Payments: payments are taken by Razorpay. We receive the payment's reference and status; we never see or store your card number, CVV, UPI PIN or net banking password.
Messages you send us, and your newsletter subscription if you choose to subscribe.
Technical data: your browser and device type, pages visited and approximate location from your IP address, used to keep the site secure and working. If you allow analytics cookies, Google Analytics and Microsoft Clarity collect similar usage data, and Clarity also records how pages are used (see "Cookies and local storage").
Orders placed on Amazon.in: if you buy one of our products on Amazon.in, Amazon shares with us what we need to pack, ship and invoice that order: the items, prices and taxes, and the delivery name, address and phone number. Amazon takes the payment; we never receive your Amazon password or payment details.

Why we use it

To create and secure your account, including sign-in codes and two-step verification.
To take payment, pack, ship and track your order, and to handle returns and refunds.
To issue GST invoices and credit notes and keep the records tax law requires, including for orders placed on Amazon.in.
To answer your questions and complaints.
To prevent fraud and misuse of the site.
To see which pages and products people look at and where the site is hard to use, so we can improve it, only if you allow analytics cookies.
To send you news and offers, only if you subscribed. You can unsubscribe at any time.
To remind you by email about pieces left in your bag, only if you asked for these reminders (at most one a week). Every reminder has a link to stop them, and you can turn them off in your account.

We use your data only for these purposes, with your consent or where the law allows it.

Who we share it with

Razorpay, to process payments and refunds.
Courier partners, who receive your name, phone number and delivery address to deliver your order.
Google (Firebase and Google Cloud), which provide sign-in, hosting and file storage, and our database provider. They process data only on our instructions.
Google Analytics, only if you allow analytics cookies.
Microsoft Clarity, only if you allow analytics cookies. It records how our pages are used — clicks, scrolling, mouse movements and replays of visits — with your device, browser and approximate location. What you type into forms is hidden, and your account, checkout and sign-in pages are never recorded. We tell Clarity you have not agreed to advertising use. Microsoft stores this data on its own servers, which may be outside India, under the Microsoft Privacy Statement.
Amazon (Amazon Seller Services), for orders placed on Amazon.in only. We send Amazon what it needs about those orders, such as packing, shipping and stock updates, and use Amazon's shipping labels and invoices for them. Amazon's own privacy notice covers what it does with your data. We don't share details of people who shop on this website with Amazon.
Google Customer Reviews, only if you allow analytics cookies: on the order confirmation page Google asks whether you'd like to rate your experience with us. For that it receives your email address, order number, country and expected delivery date, and it emails you a short survey only if you agree.
Our email delivery service (Resend or Brevo), which delivers the emails we send you.
Government authorities, when the law requires us to.

We do not sell your personal data.

Cookies and local storage

Essential (always on, because the shop can't work without them): keeping you signed in (Firebase Authentication), remembering your bag, checkout and coupon, taking payment (Razorpay), security checks during phone sign-in (Google reCAPTCHA), and remembering your cookie choice.

Analytics (optional, off until you allow it):

Google Analytics cookies (named _ga and _ga_…, kept for up to two years) that count visits, pages and products viewed and checkout steps — never your name, email, phone number or address.
Microsoft Clarity cookies (named _clck, kept for a year, and _clsk, kept for a day) that link the pages of one visit, so Clarity can show heatmaps and replays of how the site is used. What you type is hidden, and your account, checkout and sign-in pages are never recorded.

We don't use advertising cookies. If you withdraw your consent, we stop Clarity and Google Analytics and remove their cookies from this site.

You choose when you first visit, and can change or withdraw your choice at any time from Cookie settings at the bottom of every page. Your choice is kept in your browser for 12 months, then we ask again. Rejecting analytics doesn't affect shopping, checkout, payment or your account.

How long we keep it

We keep your account details while your account is open. Order, invoice and payment records are kept for as long as tax and accounting laws require, even if you close your account. Other data is deleted or anonymised when it is no longer needed.

Security

Data is encrypted in transit. Access is limited to the people who need it, and staff access to the admin is protected by two-step verification and logged.

Your rights

You can ask us to:

tell you what personal data we hold about you and how we use it;
correct or update it;
erase it, unless we must keep it by law (for example invoices);
withdraw a consent you gave, such as for the newsletter, bag reminders or analytics cookies;
nominate someone to exercise these rights for you in case of death or incapacity.

Write to arunava.b@zoqolo.com. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

Children

Our shop is meant for adults. If you are under 18, please use it with a parent or guardian's consent.

Changes

We may update this policy. The date at the top shows when it last changed.

Contact and grievance officer

Arunava banerjee, —
arunava.b@zoqolo.com

NDEDGE INFORMATICS PVT LTD
lp 110/36/3 manikpur manashbhumi po.italgacha
kolkata, West Bengal 700079
India