Privacy Policy

1. Who We Are

Kezi Mart (“we”, “our”, or “us”) operates this website and online store. We are committed to protecting your privacy in accordance with India's Digital Personal Data Protection Act, 2023 (DPDPA).

2. Information We Collect

When you place an order, we collect:

• Name — to identify your order
• Phone number — to confirm and communicate with you
• Email address — to send confirmations
• Delivery address — to fulfill your order
• Notes — any special requests you provide

We do not collect payment card details, government IDs, or health information.

3. Why We Collect It

We use your information solely to:

• Confirm and manage your order
• Send confirmation and reminder messages
• Follow up if needed
• Maintain a record of your history for future visits

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. How We Protect Your Information

• All data is transmitted over encrypted HTTPS connections
• Access to customer records is restricted to authorized staff only
• Your contact details are masked by default in our management tools
• Our platform provider maintains SOC 2 Type II compliance

5. How Long We Keep Your Data

We retain your personal information for as long as necessary to provide our services — typically no longer than 3 years after your last order. You may request deletion at any time (see Section 7).

6. Cookies

This website uses only essential cookies necessary for cart functionality. We do not use advertising or tracking cookies.

7. Your Rights

Under India's Digital Personal Data Protection Act (DPDPA) 2023, you have the right to:

• Access — request a summary of personal data we process and the purposes
• Correction & Erasure — ask us to correct inaccurate data or erase data no longer needed
• Grievance Redressal — raise a complaint through our grievance mechanism
• Nominate — nominate another person to exercise rights on your behalf in case of death or incapacity
• Withdraw consent — opt out of future processing; we will stop using your data for that purpose

To exercise these rights, contact our Data Protection Officer (DPO) at the email address on our contact page. We will respond within 30 days.

8. Grievance Officer & Data Breaches

We have appointed a Grievance Officer to handle privacy complaints. In the event of a personal data breach, we will notify the affected Data Principal and report to the Data Protection Board of India as required by the DPDPA. Our Grievance Officer can be reached at the contact email on this page.

9. Contact Us

For privacy-related questions or requests, please contact us:

If you are unsatisfied with our response, you may approach the Data Protection Board of India once it is operational.