This privacy notice (“Privacy Notice”) describes the policies and procedures applicable to the collection, use, storage, disclosure, and protection of your information shared with us while you use the Zuvy Platform.

For the purpose of this Privacy Notice, “We”, “Us”, or “Our” refers to BBV Edup Eduverse Private Limited, operating under the brand name Zuvy Store, including its subsidiaries, holding company, and affiliates wherever the context so requires.
The terms “You”, “Your”, “Yourself”, or “User” refer to users of the Platform.

We value the trust you place in us. That is why we maintain reasonable security practices to ensure the safety of your information and transactions.

Please read this Privacy Notice carefully before using, registering on, or accessing any material, information, or services through the Platform.

This Privacy Notice specifies the manner in which your information is collected, received, stored, processed, disclosed, transferred, dealt with, or otherwise handled by us.

This Privacy Notice does not apply to any information collected by third parties through the Platform or through any third-party sites that you access or use in connection with the services offered on the Platform.

By visiting or using the Platform or setting up an account (“Account”), you accept and agree to be bound by this Privacy Notice and consent to Zuvy collecting, storing, processing, transferring, and sharing information, including your Personal Information, in accordance with this Privacy Notice.

If you are under the age of 18 years, you acknowledge that you are accessing the Platform under the supervision of a parent or legal guardian who is of legal age to form a binding contract under the Indian Contract Act, 1872, and who has accepted this Privacy Notice on your behalf.

We may update this Privacy Notice from time to time to comply with business, regulatory, or administrative requirements.
If we make significant changes, we may notify you via a prominent notice on the Platform or through other communication channels.
To the extent permitted by applicable law, your continued use of the services after publication or notification of such changes shall constitute your consent to the updated Privacy Notice.

This Privacy Notice is incorporated into and subject to the Terms of Use available on the Platform (“Terms”), and shall be read in conjunction with the Terms.

All capitalized terms used but not defined here shall have the meaning ascribed to them under the Terms.

1. COLLECTION OF INFORMATION

We collect various information from you when you access, register, or use the Platform.
You may browse certain sections of the Platform without registering, but some services require you to create an Account.

This Privacy Notice applies to information collected about you, including but not limited to:

• Personal Information

You may voluntarily provide certain information to us, including but not limited to:

• Full name, email address, mobile number
• Address details, date of birth, gender, business or store name
• KYC details such as PAN, Aadhaar, Passport, or other government-issued IDs
• Business registration information (GSTIN, UDYAM, etc.)
• Payment and billing details (bank, UPI, wallet, or card information)
• Device identifiers, IP address, and browser type

The act of providing your information is voluntary, and we will collect, use, and store such details only in accordance with applicable law and this Privacy Notice.

• Sensitive Personal Information

Sensitive Personal Information includes, but is not limited to:

• Passwords
• Financial details (bank account, debit/credit card, UPI ID)
• Biometric or authentication data
• Health or physiological data (if required for service customization)
• Any other information defined as sensitive under the DPDP Act or prevailing law
• Information that is publicly available, accessible under the Right to Information Act, 2005, or disclosed voluntarily in the public domain shall not be regarded as Sensitive Personal Information.
• Transactional Information

When you use the Platform to avail services, we collect data such as:

• Transaction and order details
• Payment status and preferences
• Usage behavior, interactions, and preferences
• Communications and feedback
• Location-Based Information

When you access the Platform through a mobile or smart device, we may receive your location data, IP address, or device model for personalization, analytics, or fraud prevention.
You may withdraw consent by disabling location access in your device settings, but this may affect certain features.

• Cookies and Tracking Technologies

We use cookies and similar tools to:

• Authenticate users
• Remember preferences
• Analyze traffic and trends
• Enhance promotional relevance

You may disable cookies in your browser, but some Platform features may not function properly.

2. USE OF INFORMATION

We use your information in accordance with law and for legitimate business purposes, including to:

• Create and manage your Account;
• Verify your identity and provide secure access;
• Enable services, offers, and delivery;
• Process transactions and payments;
• Provide AI-based personalization and analytics;
• Detect and prevent fraud, misuse, or illegal activity;
• Respond to customer support and grievances;
• Send service updates, alerts, and offers;
• Improve our services, algorithms, and platform functionality;
• Comply with applicable legal and regulatory obligations.
• for any other purpose after obtaining Your consent at the time of collection

We may also use aggregated, anonymized data for research, testing, and performance analysis.

3. SHARING OF INFORMATION

We value your privacy and share personal or business data only as necessary to provide our services, comply with legal obligations, or support business operations.

• Business Partners and Service Providers
  To operate and deliver the Platform effectively, Zuvy may share limited data with trusted third parties, including:
• Cloud infrastructure and hosting providers;
• Payment processors and verification partners;
• Customer support, communication, and analytics providers;
• Delivery, logistics, or other operational partners (where applicable).

All such partners are contractually obligated to maintain strict confidentiality, implement appropriate security measures, and comply with applicable data protection laws.

• Legal and Regulatory Disclosures
  We may disclose information when required to:
• Comply with applicable laws, regulations, or lawful requests by public authorities, courts, or law enforcement agencies;
• Protect and defend the rights, property, or safety of Zuvy, its users, or the public;
• Detect, prevent, or investigate fraud, misuse, or security incidents.
• Business Transfers
  In the event of a merger, acquisition, restructuring, or sale of assets, user data may be transferred or disclosed to the acquiring or successor entity, subject to the commitments outlined in this Privacy Notice and applicable data protection standards.
• International Data Transfers
  Your data may be processed, stored, or transferred to secure servers hosted by reputable providers (such as AWS or Google Cloud) located outside India. Such transfers are conducted in compliance with applicable data protection laws and are subject to contractual safeguards ensuring adequate protection of your information.

4. SECURITY MEASURES

We adopt reasonable security practices as required under Section 43A of the Information Technology Act, 2000 and the DPDP Act, 2023, including:

• Encryption at rest and in transit
• Firewalls and intrusion detection systems
• Two-factor authentication for admin access
• Regular audits and penetration testing

While we take all feasible precautions, no system is completely secure.
In case of a breach, we will notify affected users and the Data Protection Board as required by law.

You are responsible for keeping your login credentials secure and must inform us immediately of any unauthorized access.

5. DATA RETENTION

Zuvy retains personal and business information only for as long as necessary to:

• Fulfill the purposes for which the data was collected or processed;
• Comply with applicable legal, regulatory, tax, or audit obligations; or
• Maintain legitimate business records consistent with internal retention policies.

Once the retention period expires or the purpose for processing no longer applies, Zuvy will securely delete, de-identify, or anonymize such information in accordance with applicable data protection laws and industry best practices.

6. YOUR RIGHTS

In accordance with the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act), you are entitled to exercise the following rights with respect to your personal data processed by Zuvy:

• Right to Access: Request confirmation of whether we process your personal data and obtain a copy of such data.
• Right to Correction: Request correction or completion of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data when it is no longer required for the purpose for which it was collected, or when consent has been withdrawn.
• Right to Withdraw Consent: Withdraw consent for processing activities that are based on your prior consent, without affecting the lawfulness of processing carried out before such withdrawal.
• Right to Nominate: Nominate another individual to exercise your data protection rights in the event of your death or incapacity.
• Right to Redress: Lodge a complaint or seek resolution for any grievance by contacting our designated Grievance Officer.

To exercise any of these rights, please contact us at privacy@zuvy.store  or grievance@zuvy.store.
We will acknowledge your request within forty-eight (48) hours and aim to resolve it within thirty (30) days, in accordance with applicable law.

7. CHILDREN’S INFORMATION

Our Platform is intended for individuals aged 18 years or older.
If we learn that we have collected data from minors, we will delete it promptly.
Minors may access the Platform only under parental or guardian supervision.

8. THIRD-PARTY LINKS AND INTEGRATIONS

The Platform may contain links to, or integrate with, third-party websites, applications, or services that are not operated or controlled by Zuvy. We do not endorse and are not responsible for the privacy practices, data security, or content of such third parties.

We encourage you to review the privacy policies and terms of any third-party service before accessing or providing your personal information through them. Your use of such third-party platforms is solely at your own discretion and risk.

9. CHANGES TO THIS PRIVACY NOTICE

We reserve the right to modify, update, or amend this Privacy Notice at any time.
Material changes will be notified via email, in-app alerts, or website notices.
Your continued use after such notification shall constitute acceptance.

10. GRIEVANCE OFFICER

In compliance with Rule 5(9) of the IT Rules, 2011 and Section 14 of the DPDP Act, 2023, the Grievance Officer appointed for this Privacy Notice is:

Name: [Appointed Officer’s Name]
Designation: Data Protection & Compliance Head
grievance@zuvy.store +91 96259 82274
Address: BBV Edup Eduverse Private Limited, Q1/28, Budh Vihar Phase 1, Delhi – 110086, India

All grievances will be acknowledged within 48 hours and resolved within 30 working days.

11. GOVERNING LAW AND JURISDICTION

This Privacy Notice shall be governed by and construed in accordance with the laws of India, without regard to any conflict of law principles.
Any dispute, claim, or controversy arising out of or in connection with this Privacy Notice shall be subject to the exclusive jurisdiction of the competent courts at Delhi, India.

12. CONTACT US

For questions, concerns, or complaints regarding this Privacy Notice or data practices:

BBV Edup Eduverse Private Limited (Zuvy Store)
Q1/28, Budh Vihar Phase 1, Delhi – 110086
privacy@zuvy.store www.zuvy.store