Privacy Policy

Originz Corporation Private Limited ("Originz", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit originz.store or make a purchase from us. This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information We Collect

Personal Information You Provide

When you place an order, sign up for our newsletter, or contact us, we collect:

• Name, email address, mobile number
• Shipping and billing address (including city, state, pincode)
• Order details and purchase history
• Communications with our customer support team

Information Collected Automatically

• Device and browser information (IP address, browser type, device type)
• Pages visited, time spent, and navigation patterns
• Cookies and similar tracking technologies (see Cookie Policy below)

Payment Information

We do not store your card numbers, CVV, UPI PIN, or banking credentials. All payments are processed by our PCI-DSS compliant payment gateway partner (MMADPay). We comply with RBI Tokenisation Guidelines.

2. How We Use Your Information

• To process and deliver your orders
• To send order confirmations, shipping updates, and customer service communications
• To verify identity and prevent fraud
• To respond to your inquiries and complaints
• To improve our website, products, and services
• To send you marketing communications (only if you opt in)
• To comply with legal obligations and tax requirements

3. Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and optional features
• Contract: To fulfil orders and provide customer service
• Legal obligation: For tax, accounting, and regulatory requirements
• Legitimate interest: For fraud prevention and service improvement

4. Sharing Your Information

We do not sell your personal data. We share information only with:

• Logistics partners (couriers) for order delivery
• Payment processors (MMADPay) for transaction processing
• Email service providers for transactional and marketing emails
• Analytics providers (Google Analytics) for anonymous traffic insights
• Government authorities when legally required

All third parties are contractually bound to protect your data and use it only for the specified purpose.

5. Data Security

We implement industry-standard security measures including:

• HTTPS/SSL encryption across the entire website
• Secure password hashing for all user accounts
• Restricted access to personal data on a need-to-know basis
• Regular security audits and software updates

6. Cookies & Tracking

We use cookies to remember your preferences, keep your shopping cart active, and analyse site traffic. You can disable cookies in your browser settings, though some features may not work properly. We use Google Analytics 4 (GA4) for anonymised traffic analysis.

7. Your Rights Under DPDP Act

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your data (subject to legal retention requirements)
• Withdraw consent for marketing or optional processing at any time
• Grievance redressal through our designated officer

To exercise these rights, email us at grievance@originz.store.

8. Data Retention

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations (such as tax records — typically 8 years), and resolve disputes. After this period, your data is securely deleted or anonymised.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has shared data with us, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the latest revision. Material changes will be notified via email or website banner.

11. Contact Us

This Privacy Policy is governed by the laws of India. Any disputes will be subject to the exclusive jurisdiction of the courts of Indore, Madhya Pradesh.