Nagi ZamZam Traders (“we”, “us”) runs nagizamzam.com. We collect only what we need to take, pack and deliver your order and to answer your messages. We do not sell your personal data.
This policy follows the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under it. For this policy, we are the Data Fiduciary for your personal data.
What we collect
| When | What | Why |
|---|---|---|
| You place an order | Name, billing address, phone number, email, and the items you ordered | To pack, deliver and support your order, and to issue an invoice |
| You create an account | Email, password (stored encrypted, never readable by us), saved addresses and order history | So you can see past orders and check out faster |
| You send an enquiry | What you type into the contact or wholesale form: name, email, phone, company, GSTIN if given, and your message | To reply to you. Enquiries are stored on the site and emailed to our team. |
| You browse the site | IP address, browser type, pages requested, and the time of each request | Security, preventing fraud and fixing problems |
We do not collect card or bank details. Cash-on-delivery orders need no payment details at all. If we add online payment later, card and UPI details will be handled by the payment provider and never stored on this site. This policy will be updated before that happens.
Who else sees it
We share personal data only with the people and services we need to fulfil your order, and only as much as each one needs:
- Courier partners: your name, delivery address and phone number, so they can deliver your parcel.
- Our hosting provider: the site and its database run on servers operated by Hostinger.
- Email delivery: order and enquiry emails are sent through an email service on our behalf.
- Our accountant and the tax authorities: invoice records, as GST law requires.
- Law enforcement: only when Indian law requires us to share data.
We do not sell, rent or trade personal data, and we do not share it with advertisers.
Cookies and local storage
| Name | Purpose | Kept for |
|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart | Remember what is in your cart | Your browsing session |
| wp_woocommerce_session_* | Link your cart to your visit so checkout works | 2 days |
| wordpress_logged_in_* | Keep you signed in to your account | 2 days, or 14 days if you tick “Remember me” |
| nagi-announce-dismissed (local storage) | Remember that you closed the announcement bar | Until you clear your browser data |
| Saved items (local storage) | Your wishlist, which is kept only in your browser | Until you clear your browser data |
All of these are needed for the site to work. We do not use advertising or tracking cookies. If we add analytics, we will list them here first.
How long we keep it
- Orders and invoices: for as long as GST and accounting law requires, currently at least six years after the relevant financial year.
- Accounts: until you ask us to close yours. Order records are kept after that for the tax period above.
- Enquiries: up to two years after our last exchange, unless they lead to an order.
- Server and security logs: a short rolling period, typically days to weeks.
How we protect it
The site runs over HTTPS. Account passwords are stored encrypted. The site is protected by a firewall and login security, and administrative access is limited to the people who run the business. No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India as the law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask for a summary of the personal data we hold about you and who we have shared it with;
- ask us to correct, complete or update it;
- ask us to erase it, except where the law requires us to keep it (such as invoices);
- withdraw consent you gave for anything that relies on consent;
- nominate another person to exercise these rights if you die or become incapacitated;
- raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
To use any of these rights, contact the Grievance Officer below. We may ask you to confirm your identity first.
Children
This site is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
Grievance Officer
For any question or complaint about your personal data:
The Grievance OfficerNagi ZamZam Traders
Nagi ZamZam Traders, Nadiad, Gujarat, India
Or write through our contact page, marking the message “Grievance”.
We acknowledge a grievance within 48 hours and aim to resolve it within one month.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. Significant changes will also be shown on the site before they take effect.