Zupimars International Privacy Policy

1. Information Collection and Detailed Usage

We collect various types of information for distinct purposes to provide and improve our service to you. The collection methods and the purposes for processing are detailed below:

1.1 Personal Information Provided Directly by You

When you engage in activities such as making a purchase, creating an account, subscribing to our newsletter, participating in surveys, or contacting customer support, you provide us with information that identifies you:

• Identification and Contact Data: Includes your full name, shipping address, billing address, email address, and telephone number. This is essential for fulfilling your orders, sending transactional updates, and ensuring accurate delivery to jurisdictions including India, Dubai, Canada, and the USA.
• Transactional Data: Details about the products you purchase, the time and date of the order, payment confirmation details (excluding full payment card numbers), and order history.
• Account Registration Data: Information provided when creating a Zupimars account, including usernames, passwords (stored securely and encrypted), and any preferred settings.
• Communications and Feedback: Any information you include in correspondence with us, such as emails to customer service or product reviews submitted on our site.

1.2 Automatically Collected Data (Usage and Technical Data)

When you browse our website, we automatically receive and record non-personal, technical information via cookies, logs, and other tracking technologies:

• IP Address: Your computer’s Internet Protocol (IP) address is collected to identify your general geographic location, help diagnose server problems, and administer our website. This assists us in complying with geo-specific legal requirements.
• Browser and Device Information: Includes the type of browser (e.g., Chrome, Safari), operating system (e.g., Windows, iOS), device type (e.g., mobile, desktop), screen resolution, and language settings.
• Usage Data: Information on how you interact with our website, such as pages viewed, time spent on pages, links clicked, referring URL (the website that brought you to us), and clickstream data. This helps us optimize site performance and user experience.

1.3 Data from Third-Party Sources

We may receive limited information from third-party partners to supplement the data you provide directly, such as:

• Payment Processors: We receive confirmation of successful payment (but not full card details).
• Shipping Carriers: We receive updates on the status and delivery confirmation of your order.
• Marketing/Advertising Partners: We may receive demographic or interest data to better tailor our marketing campaigns, always in compliance with applicable data protection laws.

2. Legal Basis and Purpose of Processing

We rely on several legal bases to process your personal data, depending on the jurisdiction and the specific context of the processing activity:

• Contractual Necessity: Processing your name, address, and payment details is necessary to fulfill the contract of sale you enter into with Zupimars when you purchase a product.
• Legitimate Interests: We process data for legitimate business interests, such as fraud prevention, ensuring the security of our network and services, analyzing website traffic for improvement, and conducting marketing activities (where consent is not required).
• Consent: We process data based on your specific, unambiguous consent, particularly for email marketing, personalized advertising, and certain non-essential cookies. You have the right to withdraw this consent at any time (see Section 3).
• Legal Obligation: We process and retain certain data when required by law, such as retaining transaction records for tax and accounting purposes.

2.1 Specific Uses of Personal Data

Your information is used for the following specific purposes:

• Order Fulfilment: Processing transactions, shipping products, and managing returns and exchanges.
• Account Management: Creating and maintaining your user account, enabling order history viewing, and managing preferences.
• Customer Support: Responding to your inquiries, complaints, and requests, and providing technical assistance.
• Security and Fraud Prevention: Protecting our website, customers, and business from security breaches, fraudulent transactions, and unauthorized access.
• Marketing and Communications: Sending promotional emails, newsletters, special offers, or other updates, only with your explicit permission.
• Analytics and Improvement: Analyzing user behavior to understand and improve our product offerings, website navigation, and service delivery.

3. Consent, Withdrawal, and Your Rights

3.1 Obtaining Your Consent

When you provide us with personal information to complete a transaction, verify your payment card, place an order, arrange for delivery, or process a return, you imply that you consent to our collecting and using it for that specific, transactional reason only.

If we seek to use your personal information for a secondary reason, such as direct email marketing, we will always ask you directly for your expressed, affirmative consent or provide you with a clear opportunity to decline or opt-out.

3.2 Withdrawal of Consent and Opting Out

If you have previously given your consent for us to use your personal data (e.g., for email marketing) and you change your mind, you may withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

• Marketing Emails: You may opt-out of marketing communications by clicking the “unsubscribe” link provided at the bottom of every marketing email.
• General Withdrawal: You may withdraw consent for the continued collection, use, or disclosure of information by contacting our Privacy Compliance Officer via our contact page or by emailing us at: [email protected].

3.3 International Data Subject Rights (GDPR & CCPA Alignment)

Depending on your location (especially residents of the EU/EEA, UK, and California), you may have the following rights regarding the personal data we hold about you:

• Right to Access (GDPR/CCPA): The right to request copies of your personal data we hold.
• Right to Rectification (GDPR): The right to request that we correct any information you believe is inaccurate or incomplete.
• Right to Erasure (‘Right to be Forgotten’) (GDPR/CCPA): The right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing (GDPR): The right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing (GDPR/CCPA): The right to object to our processing of your personal data, particularly when processing is based on legitimate interests or direct marketing.
• Right to Data Portability (GDPR): The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Non-Discrimination (CCPA): The right not to receive discriminatory treatment for exercising any of your CCPA rights.

To exercise any of these rights, please contact our Privacy Compliance Officer at [email protected]. We will respond to all legitimate requests within the timeframe required by applicable law (e.g., 30 days under GDPR, 45 days under CCPA).

4. Disclosure and Sharing of Your Information

We disclose your personal information only to the extent necessary and only to the following categories of third parties who assist us in operating our business:

• Service Providers: We employ third-party companies and individuals to facilitate our services (“Service Providers”). These include:
  • Payment processors (e.g., PayPal, Stripe) for secure transaction handling.
  • Shipping and logistics companies (e.g., FedEx, DHL, local postal services) for order delivery across international borders.
  • IT and Cloud Hosting providers (e.g., website hosting, data storage).
  • Marketing and Advertising platforms (e.g., Google, Facebook) for campaign optimization and remarketing purposes.
• Legal Requirements and Protection: We may disclose your personal information if we are required by law to do so (e.g., responding to a subpoena or court order) or if we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of our customers or the public.
• Business Transfers: If Zupimars is acquired by or merged with another company, your information may be transferred to the new owners so that we may continue to sell products and services to you. We will ensure the new entity adheres to a privacy policy consistent with this one.

All Service Providers are restricted from using your personal data for any purpose other than providing the services contracted by Zupimars and are required to maintain the confidentiality and security of your information.

5. International Data Transfers

Zupimars is an international entity. Your information, including Personal Data, may be processed, transferred to, and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Specifically, our primary operations are conducted from our headquarters, but we use international service providers. For customers in the European Economic Area (EEA), the UK, or Canada, this means your data may be transferred to and processed in a country outside of your home jurisdiction.

When transferring data across borders, we ensure the transfer is protected by appropriate safeguards, such as:

• The use of Standard Contractual Clauses (SCCs) approved by the European Commission.
• Ensuring the recipient country has been deemed to provide an adequate level of protection for Personal Data by the relevant authorities (e.g., Adequacy Decisions).

By providing your Personal Data, you consent to this transfer, storing, and processing.

6. Security, Payment, and Data Retention

6.1 Privacy and Security Measures

Safeguarding your personal information is a priority at Zupimars International Private Limited. We employ stringent technical and organizational security measures to protect your data from unauthorized access, misuse, alteration, or destruction.

• Encryption: We use industry-standard encryption (SSL/TLS) technologies for data in transit (when you send information to us) and robust encryption protocols for data at rest (when data is stored on our servers).
• Access Control: We restrict access to personal information to authorized Zupimars personnel and Service Providers only, on a need-to-know basis, and subject them to strict contractual confidentiality obligations.
• Regular Review: We regularly review and update our security protocols and procedures to anticipate and defend against emerging cyber threats and comply with evolving regulatory requirements.

6.2 Payment and Transactions

We use third-party payment processors to handle transactions. Neither Zupimars nor the Payment Processor store your full credit card data on our servers. All sensitive payment data is encrypted during processing through the Payment Card Industry Data Security Standard (PCI-DSS).

Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction and for required accounting and regulatory record-keeping. Our payment gateways adhere to the standards set by PCI-DSS. We strongly recommend you review the privacy policies of our payment processors for full insight into their data handling practices.

6.3 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for satisfying any legal, accounting, or reporting requirements. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you (e.g., as long as you have an active account).
• The necessity of retaining data to comply with legal obligations (e.g., retaining transaction records for 7-10 years as required by tax laws in various jurisdictions).
• The length of time required for any potential legal claims or disputes.

7. Cookies and Tracking Technologies

Cookies are small text files placed on your device (computer, phone) when you visit a website. At Zupimars, we use cookies and similar tracking technologies (pixels, web beacons) to enhance your browsing experience, remember your preferences, and analyze site traffic and marketing effectiveness.

7.1 Types of Cookies We Use:

• Strictly Necessary Cookies (Essential): These are essential for our website to function properly, enabling core functionality like security, network management, and accessibility. They cannot be switched off in our systems. They are typically set in response to actions made by you, such as setting your privacy preferences, logging in, or filling out forms.
• Performance and Analytics Cookies: These allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
• Functionality Cookies: These enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages (e.g., remembering your language preference).
• Targeting and Advertising Cookies: These may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.

7.2 Managing Your Preferences

You have the right to decide whether to accept or reject cookies. You can exercise your cookie preferences by:

• Browser Settings: You can control and/or delete cookies through your browser settings. Consult your browser’s help menu for instructions. Please note that disabling Strictly Necessary Cookies may affect some core functionalities of our website, such as cart management.
• Cookie Consent Manager: For non-essential cookies (Performance, Functionality, Targeting), you will be presented with a consent management banner upon your first visit, allowing you to customize your preferences.

8. Children’s Privacy and Age of Consent

Our website and services are not intended for individuals under the age of majority in their respective jurisdiction. We do not knowingly collect Personal Data from children. By using this site, you represent that you are at least the age of majority in your state or province of residence (e.g., 18 in most jurisdictions), or that you are the age of majority and you have given us your consent to allow any of your minor dependents to use this site.

If we become aware that we have collected Personal Data from a child without verification of parental consent, we will take steps to remove that information from our servers immediately.

9. Third-Party Services and Links

9.1 Third-Party Service Providers

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers (e.g., payment gateways) have their own privacy policies regarding the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies. Remember that if you elect to proceed with a transaction that involves the services of a third-party provider, your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located (e.g., if you are in Canada and your payment processor is based in the USA, your transaction data may be governed by U.S. law).

9.2 Third-Party Links

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites, applications, or platforms and encourage you to read their privacy statements. Once you leave our store’s website or are redirected to a third-party website or application, this Privacy Policy and our website’s Terms of Service no longer govern you.

10. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, in response to legal, technical, or business developments. Changes and clarifications will take effect immediately upon their posting on the website, with the “Effective Date” updated at the top of the policy.

If we make material changes to this policy (changes that affect your rights or the way we handle your data), we will notify you by email (if you have provided us with one) or by a prominent notice on our website homepage prior to the change becoming effective. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

11. Questions, Complaints, and Contact Information

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or would like to register a complaint, please contact our designated Privacy Compliance Officer:

Privacy Compliance Officer:

• Email: [email protected]
• Mailing Address: [Insert Full Official Mailing Address of Zupimars International Private Limited]

If you are an EU/UK resident and believe we have not adequately addressed your complaint, you have the right to lodge a complaint with your local data protection supervisory authority.