Privacy Policy

Effective date: 19 September 2026 · Version 1.0. Text in [square brackets] must be completed before this policy is final.

Kavizi ("we", "us") sells a packaged food product at kavizi.com. This policy explains what personal data we collect when you use the site or buy from us, why we collect it, who we share it with, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules under it, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

1. Who is responsible for your data

The data fiduciary is [Legal entity name], [registered office address], India ("Kavizi"). For anything about your data, write to hello@kavizi.com or to the Grievance Officer named in section 11.

2. What we collect

• Identity and contact: name, email address, mobile number, billing and delivery address.
• Order and payment: what you ordered, when, the amount, the payment method type (for example UPI, card, net banking, cash on delivery), the transaction reference from the payment gateway, GST invoice details. We never see or store your full card number, CVV, UPI PIN or net-banking password. Those are handled by our payment gateway, [Razorpay / PayU], and by Shopify, which are PCI-DSS certified.
• Account data: if you create an account, your login email and order history. Passwords are stored only as a one-way hash by Shopify.
• Subscription data: if you join the monthly plan, your plan, billing date, the payment token issued by the gateway under the RBI e-mandate framework, and your skip, pause and cancel history.
• Communications: emails, WhatsApp messages, calls and reviews you send us, and our replies.
• Technical data: IP address, device and browser type, pages viewed, time on page, referring site, and cookie identifiers (see section 6).
• Marketing preferences: whether you have opted in to emails, SMS or WhatsApp from us.

We do not ask for, and do not want, information about your health, medical conditions or medication. Kavizi is a food, not a medicine. If you send us health information in a message, we will use it only to reply to you and will delete it as soon as the conversation is closed.

3. Why we use it

4. Who we share it with

We share personal data only with the parties needed to serve you, and only the data they need:

• Shopify Inc. and its affiliates, which host the store, checkout and customer accounts. Shopify stores data on servers outside India, including in the United States and Canada.
• Payment gateway [Razorpay Software Pvt. Ltd. / PayU Payments Pvt. Ltd.], which processes payments and recurring mandates.
• Courier partners [for example Delhivery, Blue Dart, DTDC, Shiprocket], which receive your name, phone number and address to deliver the parcel and send tracking updates.
• Messaging providers for transactional and, with your consent, marketing email, SMS and WhatsApp.
• Analytics and advertising tools [for example Google Analytics, Meta Pixel], only if you accept non-essential cookies.
• Professional advisers, auditors and insurers, under confidentiality.
• Government bodies and courts when the law requires it, for example FSSAI, tax authorities or a consumer commission.

We do not sell personal data and we do not share it with anyone for their own marketing.

5. Transfers outside India

Because Shopify and some of our tools store data outside India, your personal data may be transferred to and stored in other countries. The Digital Personal Data Protection Act, 2023 permits this except to countries the Central Government restricts. We use providers with written data-protection commitments and security certifications.

6. Cookies

Essential cookies keep your cart, checkout session and login working. They cannot be switched off. Analytics cookies tell us which pages people visit and where the site is slow. Marketing cookies let us measure and show ads. You can control non-essential cookies through the cookie notice on the site and through your browser settings. Blocking cookies may stop parts of the checkout from working.

7. How long we keep it

• Order, invoice and payment records: at least 6 years after the financial year of the order, as required by the Central Goods and Services Tax Act, 2017 and the Income-tax Act, 1961.
• Account data: until you delete your account or ask us to erase it, then within 30 days.
• Subscription mandates: until you cancel, plus the period the RBI framework and the gateway require.
• Marketing data: until you unsubscribe or withdraw consent.
• Support conversations: 2 years after the conversation closes.
• Technical logs: 12 months.

When a retention period ends we erase the data or make it anonymous, unless a law, a dispute or a recall requires us to keep it longer.

8. How we protect it

The site runs over HTTPS. Payments go through PCI-DSS certified gateways. Access to customer data inside Kavizi is limited to the people who need it for their job and is logged. Shopify maintains ISO 27001 certified controls for the platform. If a breach affects your personal data we will inform you and the Data Protection Board of India as the law requires.

9. Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

• tell you what personal data we hold about you and who we have shared it with;
• correct, complete or update it;
• erase it, unless we must keep it under a law;
• withdraw consent you gave earlier, as easily as you gave it, for example by clicking unsubscribe or writing to us. Withdrawing consent does not affect processing done before the withdrawal, and we may still need to process data to complete an order you have already placed;
• nominate a person to exercise these rights for you if you die or are unable to;
• have a grievance about our handling of your data heard and resolved.

Write to hello@kavizi.com with the subject line "Data request". We will verify that it is you and respond within 30 days. If you are not satisfied with our response you can complain to the Data Protection Board of India.

10. Children

The site and our products are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

11. Grievance Officer

In line with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

[Name], [Designation]
[Legal entity name], [Address]
Email: grievance@kavizi.com · Phone: [+91 XXXXX XXXXX], [Monday to Saturday, 10 am to 6 pm IST]

We acknowledge every grievance within 48 hours and resolve it within 30 days of receipt.

12. Changes to this policy

We will post any change here with a new effective date. If a change materially affects how we use your data, we will email registered customers before it takes effect.

13. Governing law

This policy is governed by the laws of India. Courts and forums in [City, State] have jurisdiction, without affecting your right to approach the Data Protection Board of India or a consumer commission.