Privacy Policy & Data Protection
Effective Date: October 2026 • Last Revised: October 30, 2026 • Platform: ztoredigital.com
100% Zero Financial Data Storage Guarantee (PCI-DSS & RBI Aligned)
Ztore Digital never collects, captures, views, or stores your sensitive banking or payment card details. All transactions (UPI, Credit/Debit Cards, Net Banking) are conducted through bank-grade 256-bit encrypted sessions directly on the servers of Reserve Bank of India (RBI) authorized payment aggregators (Cashfree Payments, Razorpay Software, PayU India). Your card CVV, expiry dates, net banking passwords, and UPI PINs are processed exclusively on certified, PCI-DSS Level 1 compliant infrastructure.
1Introduction & Regulatory Framework
At Ztore Digital ("we", "us", "our"), protecting the personal privacy and data of our customers and visitors ("you", "user", "buyer") is a paramount priority. This Privacy Policy sets forth our practices regarding the collection, storage, use, and disclosure of information when you interact with our website (ztoredigital.com).
This document is prepared in strict accordance with:
- Section 43A of the Information Technology Act, 2000;
- Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- The Digital Personal Data Protection Act, 2023 (DPDP Act); and
- Relevant regulatory circulars on digital transactions issued by the Reserve Bank of India (RBI).
2Information We Collect
We adhere strictly to the principle of data minimization. We collect only the minimal information strictly required to process your order and fulfill your digital Google Drive access:
- Full Name: To identify the customer and address transaction invoices.
- Gmail / Email Address: Essential to grant instant permission access to the purchased Google Drive bundle folders and dispatch order confirmation emails.
- WhatsApp / Phone Number: Used to dispatch automated order status receipts, link delivery confirmations, and provide instant customer support.
When you browse our store, our servers automatically log certain non-sensitive technical data, including your Internet Protocol (IP) address, operating system, browser type and version, language preferences, referring URLs, and device identifiers. This data is utilized solely to maintain store security, prevent fraudulent transactions, and analyze system performance.
We explicitly do NOT capture, store, or have access to your bank account logins, debit or credit card CVV numbers, OTPs, or UPI security PINs. All financial checkout flows occur on the secure iframe or hosted gateway pages of authorized payment aggregators.
3How We Use Your Information
The information we collect is processed for the following legitimate business purposes:
- Digital Order Fulfillment: Granting lifetime access to the purchased video reels bundle via Google Drive cloud folders.
- Transaction Communications: Dispatching automated invoice receipts, order numbers, and download verification links via email and WhatsApp.
- Customer Support: Assisting you with download link recovery, file questions, or technical inquiries raised through our helpline.
- Security & Fraud Prevention: Detecting and mitigating unauthorized payment attempts, abusive bots, or malicious activity.
- Legal Compliance: Maintaining accurate financial transaction records required under Indian tax, accounting, and e-commerce laws.
4Sharing of Information & Third-Party Service Providers
We do not sell, rent, lease, or monetize your personal data. Your personal data is never disclosed to commercial data brokers. We share your data solely with vetted, industry-standard service providers strictly as necessary to operate our store:
6Data Retention & Security Measures
We implement comprehensive technical and organizational security measures to protect your personal information:
- Encryption in Transit: 256-bit Secure Socket Layer (SSL/TLS) encryption across all endpoints of our website.
- Database Protection: Customer records in Firestore are shielded by strict role-based access rules preventing public read or write access.
- Retention Period: Personal customer order records are retained only for the duration required to maintain your lifetime download access and satisfy mandatory accounting audits under Indian tax laws.
7Your Rights under the DPDP Act, 2023
Under Indian data protection laws, you possess the following rights regarding your personal information:
- Right to Access: You may request a summary of the personal data we hold regarding your purchases.
- Right to Correction & Rectification: You may request updating inaccurate contact details or updating your delivery Gmail address.
- Right to Erasure: You may request the deletion of your personal data from our active customer records, subject to retention required for accounting compliance.
- Right to Withdraw Consent: You may withdraw your consent for promotional updates at any time.
To exercise any of these rights, please contact our Grievance Officer via email with your registered Order ID.
8Protection of Minors
Ztore Digital is not directed towards children under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and become aware that your child has provided us with personal data without your consent, please contact us immediately to have the information expunged.
9Grievance Officer & Regulatory Redressal
In compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our designated Grievance Redressal Officer are provided below: