Privacy Policy – Zyra Bags (zyrabags.in)
Effective Date: [01-01-2026]
Last Updated: [01-01-2026]
Zyra Bags (“we”, “our”, “us”) operates the website zyrabags.in and sells women’s wallets and sling handbags across India. We are committed to protecting your personal data and processing it responsibly in accordance with the Digital Personal Data Protection Act, 2023 (India) and applicable laws.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website or make a purchase.
By using our website, you consent to the collection and processing of your personal data as described below.
1. Data Fiduciary Details
Business Name: Zyra Bags
Website: https://zyrabags.in
Contact Email: [support@zyrabags.in]
Business Address: [3rd Floor Plot No. 10,4 Nivrutti Nagar, Pardi, Nagpur Maharastra 440035]
For purposes of the DPDP Act, Zyra Bags acts as the Data Fiduciary for the personal data collected through this website.
2. Personal Data We Collect
We collect only such personal data that is necessary for lawful purposes related to our business.
A. Data You Provide Directly
When you place orders or contact us, we may collect:
- Full name
- Mobile number
- Email address
- Billing address
- Shipping address
- Order details
- Payment confirmation data (not full card/bank details)
- Messages or support queries
B. Automatically Collected Data
When you use our website:
- IP address
- Device and browser type
- Usage behavior and pages visited
- Cookies and session data
3. Purpose of Processing Personal Data
We process your personal data only for lawful purposes, including:
- Processing and fulfilling your orders
- Delivering products across India through logistics partners
- Sending order and delivery updates
- Providing customer support
- Processing payments through secure gateways
- Preventing fraud and misuse
- Improving website and product experience
- Sending promotional communications (only with your consent)
We do not process personal data for purposes unrelated to our business without obtaining fresh consent.
4. Consent
By using our website and submitting your information, you provide free, specific, informed, and unambiguous consent to process your personal data for the stated purposes.
You may withdraw your consent at any time by contacting us at the email listed below. Withdrawal of consent will not affect processing already completed but may affect our ability to provide services.
5. Sharing of Personal Data
We do not sell personal data. We share personal data only as necessary:
- With logistics and courier partners for delivery
- With payment gateway providers for transaction processing
- With IT and hosting providers for website operations
- With legal or government authorities when required by law
- With service providers under confidentiality obligations
All such sharing is limited to the minimum data necessary.
6. Data Storage and Retention
We retain personal data only for as long as necessary to:
- Fulfill orders
- Comply with tax and legal obligations
- Resolve disputes
- Prevent fraud
When data is no longer required, it is securely deleted or anonymized.
7. Your Rights Under DPDP Act
As a Data Principal under the DPDP Act, you have the right to:
- Request access to your personal data
- Request correction or updating of inaccurate data
- Request erasure of personal data (where legally permitted)
- Withdraw consent
- Request grievance redressal
- Nominate another person to exercise rights in case of incapacity or death
To exercise your rights, contact us using the details below.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Enable website functionality
- Remember user preferences
- Analyze traffic and performance
You can control cookies through your browser settings.
9. Data Security Safeguards
We implement reasonable security safeguards including:
- Secure servers and hosting
- SSL encryption
- Restricted data access
- Trusted payment gateways
- Need-based employee access
While we take reasonable steps, no digital system is completely secure.
10. Children’s Data
Our website is not intended for children under 18 years. We do not knowingly collect personal data from children. If such data is discovered, it will be deleted.
11. Cross-Border Data Transfer
Some technology or payment providers may store or process data outside India. Such transfers are made only to permitted jurisdictions and with appropriate safeguards.
12. Grievance Officer (DPDP Compliance)
As required under applicable law, you may contact our Grievance Officer:
Name: [Lakhan Pahuja]
Email: [support@zyrabags.in]
Address: [3rd Floor Plot No. 10,4 Nivrutti Nagar, Pardi, Nagpur Maharastra 440035]
We aim to respond to complaints within a reasonable time period.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised effective date.