Privacy Policy

1. Who We Are

Zespo Agro and Crafts Pvt. Ltd. (CIN: U01100JK2022PTC014100) is the company behind the Zespo brand — India's premium natural health supplement brand headquartered in Jammu, Jammu & Kashmir. We are FSSAI registered, GMP certified, and operate under the highest standards of product quality and ethical business practices.

2. What Personal Information We Collect

A. Information You Provide Directly

• Full name, email address, mobile number
• Billing address, shipping address, and PIN code
• Payment information — processed and encrypted by our payment gateway partners (e.g., PayU); Zespo does not store card or UPI details
• Health goals, wellness preferences, or quiz responses submitted on our website
• Messages, feedback, or queries submitted via our Contact page or WhatsApp
• Reviews, ratings, or testimonials you choose to share

B. Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Referring URL and cookie data / session identifiers

C. Information from Third Parties

• Amazon, Flipkart, or other platform order details shared for fulfilment and after-sales service
• Social media interactions if you engage with our brand pages

3. When Do We Collect Your Information?

• When you create an account or register on www.zespo.in
• When you place an order — online, via WhatsApp, or through marketplace listings
• When you subscribe to our newsletter or email list
• When you complete our wellness quiz or recommendation tool
• When you contact us via email, WhatsApp, or phone
• When you submit a product review or survey response
• When you participate in a contest, giveaway, or promotional offer
• When you browse our website (via cookies and analytics tools)

4. How We Use Your Information

For Order Fulfilment & Customer Service

• To process and confirm your orders and arrange delivery
• To send order confirmation, shipping updates, and delivery notifications
• To respond to queries, complaints, or return/refund requests

For a Personalised Experience

• To recommend products aligned with your health goals and past purchases
• To personalise content, offers, and layout on our website

For Communication & Marketing

• To send newsletters, health tips, and educational content about natural wellness
• To inform you about new product launches, seasonal offers, and exclusive promotions
• All marketing communication is opt-in and you may unsubscribe at any time

For Legal, Safety & Business Operations

• To comply with applicable laws, regulations, and court orders
• To detect, investigate, and prevent fraudulent or unauthorised activity
• To maintain records for GST, accounting, and regulatory compliance

5. Legal Basis for Processing

• Contractual Necessity — to fulfil orders you have placed with us
• Legitimate Business Interest — to operate, maintain, and improve our services
• Consent — for marketing communications (you may withdraw consent at any time)
• Legal Obligation — to comply with applicable Indian laws and regulations

6. How We Protect Your Information

• SSL/TLS Encryption — All data on www.zespo.in is encrypted using 256-bit SSL technology
• Secure Payment Processing — PCI-DSS compliant gateways (PayU). We do NOT store card or UPI credentials
• Access Controls — Personal data accessible only to authorised Zespo personnel
• Regular Security Audits — Routine vulnerability scanning and malware checks
• Data Minimisation — We only collect what is strictly necessary for the stated purpose
• Vendor Agreements — All third-party vendors contractually bound to maintain data confidentiality

7. Cookies & Tracking Technologies

• Essential Cookies — Required for basic website functionality (shopping cart, account login)
• Preference Cookies — Remember your settings for a smoother experience
• Analytics Cookies — Help us improve site navigation (e.g., Google Analytics)
• Marketing Cookies — Allow relevant ads on platforms like Meta and Google

You can manage or disable cookies at any time through your browser settings.

8. Third-Party Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We share data only with trusted operational partners:

• Logistics & Delivery Partners (e.g., Delhivery, BlueDart, Shiprocket) — order fulfilment
• Payment Gateway Partners (e.g., PayU) — secure payment processing
• Email & SMS Service Providers — order updates and communications
• Website Analytics Providers (e.g., Google Analytics) — website performance
• Customer Support Tools — managing and resolving your queries

9. Data Retention

• Order and transaction data — 7 years (GST/tax compliance requirement)
• Account information — duration of account plus up to 2 years thereafter
• Marketing preferences — until you opt out or request deletion
• Website analytics data — anonymised form for up to 26 months

10. Your Rights as a Customer

• Right of Access — Request a copy of the personal data we hold about you
• Right to Correction — Ask us to correct inaccurate or incomplete information
• Right to Deletion — Request deletion of your personal data (subject to legal obligations)
• Right to Opt-Out — Unsubscribe from marketing at any time
• Right to Data Portability — Request your data in a structured, machine-readable format
• Right to Withdraw Consent — At any time, for consent-based processing

To exercise any of these rights, email contact@zespo.in with subject: 'Data Privacy Request'. We respond within 15 business days.

11. Children's Privacy

Our products are intended for adults aged 18 years and above. We do not knowingly collect personal information from individuals under 18.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make significant changes, we will notify you via email or a prominent notice on our website.