Privacy Policy

1. Introduction

This Privacy Policy describes how Zyventra Tech Pvt. Ltd. ("we," "us," or "Furry Joy") collects, uses, stores, discloses, and protects your personal data when you visit, browse, or make purchases on furryjoy.store (the "Website").

By accessing or using our Website, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with these practices, please do not use our Website.

This policy has been drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and all applicable Indian laws and regulations.

2. Data Fiduciary Information

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Identity Data: Full name as provided during checkout or account creation
• Contact Data: Phone number, email address (when provided)
• Shipping Data: Delivery address, pincode, city, and state
• Order Data: Products ordered, order history, payment method selected (Cash on Delivery or UPI)
• Communication Data: Messages sent through our contact form, order-related notes, and delivery instructions

3.2 Information Collected Automatically

• Device Data: Browser type, operating system, device type, screen resolution
• Usage Data: Pages visited, products viewed, time spent on pages, click patterns, and navigation paths
• Technical Data: IP address, referring URLs, access timestamps
• Analytics Data: Aggregated data collected through Google Analytics (GA4) for understanding traffic patterns and improving user experience

3.3 Information We Do Not Collect

4. Purpose of Data Collection

We collect and process your personal data for the following specific purposes:

• Order Fulfilment: To process, ship, and deliver your orders, including coordination with logistics partners
• Communication: To send order confirmations, shipping updates, delivery notifications, and respond to your queries
• Customer Support: To address complaints, process returns or refunds, and resolve disputes
• Website Improvement: To analyze usage patterns and improve website functionality, product offerings, and user experience
• Legal Compliance: To comply with applicable laws, including tax regulations (GST), consumer protection requirements, and legal proceedings
• Fraud Prevention: To detect and prevent fraudulent orders, unauthorized access, and security threats

We will not use your personal data for any purpose other than those specified above without obtaining your prior consent.

5. Lawful Basis for Processing (DPDP Act Compliance)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on the following lawful grounds:

• Consent: By placing an order or using our Website, you provide consent for us to process your data as described in this policy. You may withdraw your consent at any time by contacting us.
• Legitimate Uses: Certain data processing is necessary for legitimate purposes such as order fulfilment, fraud prevention, and legal compliance as permitted under Section 7 of the DPDP Act.

6. Data Storage and Retention

• Storage Location: Your data is stored on secure servers hosted by our hosting provider (Hostinger) with data centres that comply with industry-standard security practices.
• Retention Period: We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, typically for a period of 3 years from the date of your last transaction with us, or as required by applicable tax and legal regulations.
• Order Records: Order-related data is retained for a minimum of 8 years to comply with Indian tax and accounting regulations.
• Data Deletion: Once the retention period expires or the purpose for which data was collected is fulfilled, your personal data will be securely deleted or anonymised.

7. Data Sharing and Disclosure

We may share your personal data with the following categories of third parties, strictly for the purposes outlined in this policy:

• Logistics Partners: Shipping and delivery service providers who require your name, address, and phone number to deliver your orders
• Payment Processors: Third-party payment gateways (such as MMADPay) that process your electronic payments. We share only the minimum data required for payment processing.
• Analytics Providers: Google Analytics (GA4) for aggregated, anonymised website usage analysis
• Legal Authorities: Government agencies, law enforcement, or regulatory bodies when required by law, court order, or to protect our legal rights

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

8. Cookies and Tracking Technologies

Our Website uses the following technologies:

• Local Storage: We use browser local storage to maintain your shopping cart data (products added, quantities). This data is stored locally on your device and is not transmitted to our servers until you place an order.
• Google Analytics: We use Google Analytics (GA4) to collect anonymised usage statistics. This uses cookies to track page views, session duration, and user interactions. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
• Essential Cookies: Basic cookies required for website functionality, security, and session management.

9. Your Rights Under the DPDP Act

As a Data Principal, you have the following rights under the Digital Personal Data Protection Act, 2023:

• Right to Access: You have the right to obtain a summary of your personal data being processed and the processing activities undertaken.
• Right to Correction and Erasure: You have the right to request correction of inaccurate or misleading personal data, and to request erasure of personal data that is no longer necessary for the purpose for which it was collected.
• Right to Grievance Redressal: You have the right to have any grievance regarding the processing of your personal data addressed in a timely manner.
• Right to Nominate: You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time by contacting us. Please note that withdrawal of consent may affect our ability to provide certain services to you, including processing pending orders.

To exercise any of these rights, please contact us at info@furryjoy.store with the subject line "Data Rights Request." We will respond to your request within 30 days.

10. Data Security

We implement reasonable security practices and procedures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure database storage with access controls and authentication
• Regular security assessments of our systems and processes
• Limited access to personal data on a need-to-know basis among authorised personnel
• No storage of payment card data on our servers (RBI Tokenisation compliance)

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your personal data.

11. Children's Privacy

Our Website is not intended for use by children under the age of 18. We do not knowingly collect personal data from children. If you are under 18, please use our Website only with the involvement and consent of a parent or legal guardian. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete such data promptly.

12. Third-Party Links

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the contact details of the Grievance Officer are as follows:

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana, India.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: