Privacy & Data Protection Policy

🔍 1. Information We Collect

When you browse or complete a purchase on GenZstore, we collect only the information necessary to process orders, verify customer identity, and comply with statutory tax regulations:

• Customer Identity & Shipping Data: Full legal name, delivery shipping address, billing address, active mobile number, and email address for dispatch notification.
• Payment & Financial Data: Order transaction IDs, selected payment method (Prepaid vs. COD), and transaction timestamps. We do not capture, store, or process credit/debit card numbers, CVVs, or net-banking credentials. All online payments are securely processed through RBI-authorized, PCI-DSS compliant aggregators.
• Technical & Session Data: IP address, device type, operating system, and browser fingerprint to safeguard against fraudulent cart activity and automated checkout bots.

🎯 2. Legal Grounds & How We Use Your Data

Your personal data is handled strictly in accordance with Indian e-commerce consumer directives and is used for the following operational objectives:

• Packaging, dispatching, and routing parcels through national 3PL courier partners under our Shipping & Delivery Policy.
• Sending automated order confirmations, AWB tracking links, and delivery verification OTPs via SMS and WhatsApp.
• Authenticating exchange eligibility and processing reverse pickups under our Refund & Return Policy[cite: 7].
• Detecting and mitigating high-risk Cash on Delivery fraud, address discrepancies, and bot checkout attempts.

🚚 3. Third-Party Disclosures & Logistics Handover

We enforce a strict non-disclosure policy. Customer records are never leased, bartered, or monetized to marketing syndicates or external ad exchanges. Data sharing is limited to certified service partners under non-disclosure obligations:

• Fulfillment & Logistics Partners: Tier-1 couriers (Delhivery, Blue Dart, Xpressbees) receive only recipient names, delivery addresses, and mobile numbers necessary for transit handover and OTP verification.
• Statutory Authorities: Disclosures are made only when legally mandated by judicial orders, the Ministry of Finance (GST compliance), or state law enforcement authorities under the Information Technology Act, 2000.

💳 4. Payment Security & Encryption Standards

All sensitive transactions are protected by end-to-end 256-bit Secure Sockets Layer (SSL) encryption certificates:

• Card data tokenization operates in strict compliance with Reserve Bank of India (RBI) mandates.
• For Cash on Delivery (COD) transactions, no advance financial credentials are required; verification occurs directly via phone authentication prior to warehouse dispatch.

🍪 5. Cookies & Tracking Technology

Our website utilizes functional session cookies to maintain your shopping cart contents, preserve customer login sessions, and optimize storefront page load speeds. We do not use intrusive spyware or deceptive tracking pixels. You can modify or purge stored cookies at any time via your browser preferences without losing access to browse our catalog.

🛡️ 6. Consumer Rights & Data Retention

Under Indian data protection jurisprudence, you maintain full authority over your personal information:

• Right of Rectification: You may correct inaccurate shipping information prior to dispatch by messaging our helpdesk.
• Right of Erasure: Customers may submit an account deletion or data removal request by emailing support@genzstore.in. Required commercial billing records will be retained solely for statutory GST retention windows.

⚖️ 7. Statutory Data Protection & Grievance Officer

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Consumer Protection (E-Commerce) Rules, 2020, our official Grievance and Data Security desk details are provided below[cite: 45]: