Free delivery on orders over ₹499 • Taste the Tradition
Home/Compliance/Data Protection

Privacy & Data Protection Policy

Governed under the Digital Personal Data Protection (DPDP) Act & Information Technology Act, 2000.

Entity: Zyqa Foods Pvt. Ltd.

CIN/Reg: Central Food Compliance

Last Revised: January 2026

Statutory Preamble

1. Scope of Privacy Governance

Zyqa Foods Private Limited (“Zyqa”, “Company”, “we”, or “us”) operates with strict fidelity towards the security of digital consumer interactions. This policy establishes the lawful grounds under which personal data is handled during the order placement, cold-milled spice processing, and transit fulfillment cycle on our digital store.

2. Categories of Information Collected

In compliance with the principle of Data Minimization, we restrict intake solely to data points necessary for accurate spice dispatch and regulatory taxation:

Consignment Records

Full legal name, destination postal address, landmark, PIN code, and active telephone number for courier alerts.

Taxation & Invoices

GST billing invoice particulars, digital transaction references, and specific spice items packed within each order.

Financial Data Protection

3. PCI-DSS Compliance & Zero Card Retention

Zyqa adheres to the Reserve Bank of India (RBI) tokenization guidelines and PCI-DSS Level 1 specifications:

  • All digital payments (UPI, Credit/Debit Cards, NetBanking) are processed via licensed tier-1 gateways (Razorpay / Cashfree).
  • No card numbers, CVVs, expiry dates, or banking credentials are ever recorded or stored on Zyqa internal systems.

4. Third-Party Logistics Isolation

Your delivery particulars are transmitted only to verified national logistics partners (Blue Dart, Delhivery, DTDC) exclusively under signed Data Protection Agreements (DPAs) preventing secondary marketing use.

Under no circumstances does Zyqa sell, rent, monetize, or exchange customer telephone rosters or email registries with external brokers or ad syndicates.

Statutory Rights

5. Rights Under the Digital Personal Data Protection Act

Consumers hold comprehensive legal entitlement concerning their personal identifiers retained on our platform:

  • Right to Summary: Request an official record of all personal information and past order histories logged with us.
  • Right to Correction: Rectify inaccurate shipping designations, wrong email accounts, or phone numbers.
  • Right to Erasure: Seek deletion of digital account credentials, subject to mandatory 7-year statutory GST audit retention laws under the Companies Act.
Compliance Wing

6. Grievance Redressal & Data Protection Officer

In compliance with Rule 5(9) of the Information Technology (Intermediary Guidelines) Rules, escalations regarding privacy or data concerns may be directed to our appointed compliance authority:

Official DesignationData Protection & Regulatory Officer
DepartmentLegal & Consumer Compliance Wing
Direct Compliance Deskcare@zyqaspices.com
Registered UnitZyqa Foods Pvt. Ltd., Processing Unit, Bareilly, UP – 243001