Privacy policy

Zeva Home, operating at https://zevahome.shop. Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the information described here.

Anything to do with your data reaches us at contact@zevahome.shop.

When you order: your name, email address, phone number and delivery address, along with what you ordered and what you paid.

When you sign in: your email address, and a one-time code we send to it to confirm the address is yours.

Automatically: ordinary web server logs, which include your IP address and the pages you requested.

We do not collect anything we do not need, we do not buy data about you from anyone, and we do not run advertising or analytics trackers on this site.

Your card, UPI or bank details. Payment happens inside Razorpay's own checkout. Those details go from you to Razorpay and never touch our servers, so we could not disclose them even if we were asked to.

We also never store your password, because there is no password. We verify you by emailing a code, and we store only a one-way hash of that code, never the code itself.

To take and deliver your order, to let a courier reach you, to send you the confirmation and any updates, to answer you when you contact us, and to keep the records that tax and consumer law require.

We do not send marketing email unless you ask us to. Ordering from us is not asking us to.

Razorpay, to take the payment.

The courier delivering your order, who needs your name, address and phone number to do it.

Our email provider, to deliver verification codes and order confirmations.

Nobody else, unless the law requires it. We do not sell or rent your data to anyone, for any purpose.

If you sign in, we set one cookie holding your session. It is httpOnly, meaning no script on the page can read it, and it expires after 30 days. Signing out cancels it immediately.

Your basket is kept in your own browser's storage, not on our servers. It never leaves your device until you check out.

We use no advertising or tracking cookies, so there is nothing here to consent to or opt out of.

Order records for as long as tax and consumer law requires, currently eight years. Verification codes expire in ten minutes and are deleted. Sessions expire after 30 days. Server logs are kept briefly for security and troubleshooting.

Under the DPDP Act 2023 you can ask us to:

Tell you what we hold about you and who we have shared it with; correct anything wrong or out of date; erase anything we no longer need for a legal reason; and nominate someone to exercise these rights if you cannot.

Write to contact@zevahome.shop and we will respond within 30 days. There is no charge.

Some data we cannot erase on request: a completed order is a tax record, and we are required to keep it. We will tell you plainly if that applies.

The whole site is served over HTTPS. Session tokens and verification codes are stored only as one-way hashes. Access to the database is limited to the people who run the shop.

No system is perfect. If a breach ever affects your data, we will tell you and the Data Protection Board, as the Act requires.

Zeva is not intended for anyone under 18, and we do not knowingly collect data about children. If you believe we have, tell us and we will delete it.

Write to contact@zevahome.shop. We aim to acknowledge within two working days and resolve within 30 days.

If you are not satisfied, you can complain to the Data Protection Board of India.

If we change this policy we will update the date at the top. If a change materially affects how we use data you have already given us, we will email you about it rather than quietly editing the page.