Privacy Policy

1. Overview

Imazyn Ecommerce Pvt Ltd ("Gifteeng", "we", "our") operates www.gifteeng.com and the Gifteeng mobile applications for Android and iOS. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it across both web and mobile platforms.

By using our platform, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.

This policy was last updated in May 2026. We may update it periodically; continued use after an update constitutes acceptance.

2. Information We Collect

We collect information you provide directly and data generated automatically when you use our platform.

• Phone Number & OTP: We collect your mobile phone number for authentication. A one-time password (OTP) is sent via SMS (Twilio or similar provider) to verify your identity. We do not share your number for marketing purposes without consent.
• Profile Information: Name, email address, and delivery addresses you add to your account.
• Transaction Data: Orders placed, products purchased, payment method type (not card numbers), and order status history.
• Goins & Loyalty Data: Your Goins balance, earning and redemption history, spin wheel / Pick Me! game results, referral records, and review activity.
• Customisation Content: Images, text, and designs you upload for custom product creation. These are stored securely and used solely to fulfil your order.
• Device & Usage Data: IP address, browser type, operating system, pages visited, session duration, referring URL, and timestamps. Collected automatically via server logs and analytics tools.
• Cookies & Local Storage: We use cookies and browser local storage for authentication tokens, cart persistence, theme preference, and analytics. See Section 6 for details.
• WhatsApp Business: If you contact us or opt-in to notifications via WhatsApp, your WhatsApp number and message content are processed through the WhatsApp Business API. WhatsApp's privacy policy also applies.
• Payment Information: Payments are processed by Razorpay. We do not receive or store your card number, CVV, or net banking credentials. We receive only a transaction ID, payment status, and masked card/UPI identifier.

3. How We Use Your Information

We use the information collected for the following purposes:

• Authentication: Verifying your identity via phone OTP to secure your account.
• Order Fulfilment: Processing, packing, dispatching, and tracking your orders.
• Personalisation: Tailoring product recommendations, homepage content, and Goins offers based on your purchase history and preferences.
• Goins Programme: Tracking your Goins balance, game results, referrals, and redemptions.
• Customer Support: Responding to queries via email, WhatsApp, or phone.
• Communications: Sending order confirmations, dispatch notifications, and (with consent) promotional messages via SMS, WhatsApp, or email.
• Analytics & Improvement: Understanding how users navigate our platform to improve design, performance, and product offerings.
• Fraud Prevention: Detecting and preventing fraudulent orders, account exploits, and abuse of loyalty programmes.
• Legal Compliance: Meeting our obligations under Indian law, including tax, GST, and consumer protection requirements.

4. How We Share Your Information

We do not sell your personal data. We share it only in the following circumstances:

• Logistics Partners: Your name, address, and phone number are shared with our shipping and courier partners (e.g., Delhivery, Bluedart, Shiprocket) to enable delivery.
• Payment Processor: Transaction data is shared with Razorpay to process payments securely.
• SMS & Communication Providers: Your phone number is shared with SMS gateway providers (e.g., Twilio, MSG91) solely for OTP delivery and order notifications.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms (e.g., Google Analytics). Individual identities are not shared.
• Legal Requirements: We may disclose your data to government authorities, courts, or law enforcement when required by applicable law or a valid legal order.
• Business Transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5. Data Security

We implement industry-standard security measures to protect your data, including HTTPS encryption for all data in transit, secure server infrastructure, access controls, and regular security reviews.

Payment data is handled exclusively by Razorpay's PCI-DSS Level 1 compliant infrastructure. We never store raw card details.

However, no system is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security of data transmitted over the internet.

6. Cookies & Local Storage

We use the following technologies to enhance your experience:

• Authentication token: Stored in localStorage to keep you logged in across sessions.
• Cart data: Stored in localStorage so your cart persists between sessions and devices.
• Theme preference: Light/dark mode preference stored locally.
• Analytics cookies: Used to measure site traffic and user behaviour (e.g., Google Analytics). You can opt out via your browser settings or Google's opt-out tool.
• Session cookies: Short-lived cookies to maintain your browsing session.

7. Communication Preferences

We may send you communications via SMS, WhatsApp, and email for:

• Order confirmations, dispatch notifications, and delivery updates (transactional - cannot be opted out of)
• OTP messages for authentication
• Goins earned/redeemed notifications
• Promotional offers, new product launches, and seasonal campaigns (can be opted out of)

8. Third-Party Links

Our platform may contain links to third-party websites (e.g., social media, partner brands). We are not responsible for the privacy practices of these sites. We encourage you to read their respective privacy policies.

9. Children's Privacy

Our services are not intended for individuals under 13 years of age. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

10. Mobile Applications

Our Android and iOS apps share the same backend, account, and policies as our website. The app may request the following device permissions; you can grant or revoke each one in your phone settings at any time.

• Camera & Photo Library: Used only when you choose to upload a photo for product customisation (e.g. a personalised mug or frame). We do not access your camera or photo library otherwise. The photos you upload are stored securely and used solely to fulfil your order.
• Push Notifications: If you allow notifications, we send order updates, dispatch alerts, delivery confirmations, and (with your separate consent) promotional offers. Push tokens are stored against your account and dropped immediately if you revoke notification permission, log out, or delete your account.
• Network State: Read by the app to show offline messaging when you have no connection. We do not log network details.
• Crash & Performance Data: If enabled, the app sends anonymised crash reports and performance metrics so we can fix bugs. Toggle this off in Privacy & Data Controls under your account.
• App Tracking Transparency (iOS): On first launch, iOS will ask whether you allow Gifteeng to track activity across other apps and websites. Choosing "Ask App Not to Track" disables Meta Pixel and similar SDKs in the app - the app and your account work normally either way.
• Advertising ID: We do not use the Android Advertising ID or iOS IDFA for ad personalisation. We may include it in anonymised crash reports if you have enabled crash reporting.
• In-App Purchases: Physical-product orders placed through the app are processed by Razorpay, the same as on the website. Apple's In-App Purchase and Google Play Billing systems are not used because no digital goods or subscriptions are sold through the app.

11. Data Retention

We retain your data for as long as your account is active or as required to fulfil the purposes described in this policy. Order records are retained for 7 years as required by Indian tax law (GST). Customisation uploads are deleted 6 months after order completion. You may request deletion of your account at any time (see Section 12).

12. Your Rights

Under India's Digital Personal Data Protection Act (DPDP), 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data (subject to legal retention requirements). Visit gifteeng.com/account-deletion or your account's Privacy & Data Controls to request immediately.
• Data Export: Download a JSON file of everything we hold about you, on demand.
• Opt-out: Opt out of promotional communications at any time by contacting us or using the unsubscribe link in emails.
• Grievance: Lodge a grievance with our Data Protection Officer (details below).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with the revised date. We encourage you to review this policy periodically.

14. Contact & Grievance Officer

For privacy-related requests, complaints, or questions, please contact our Data Protection / Grievance Officer:

• Email: [email protected]
• WhatsApp: +91 80 700 11 777
• Address: D-03, Plot 12, Akurli Godavari CHS, Mhada Road No. 2, Opp. MTNL, Lokhandwala, Kandivali East, Mumbai – 400101
• Response time: We aim to respond to all privacy requests within 30 days.