Privacy Policy – Zappwala Listings & Booking

Effective Date: [23/02/2026]

This Privacy Policy describes how Zappwala (“Platform”, “we”, “us”, “our”) collects, processes, stores, shares, and protects personal data in accordance with:

• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Information Technology Act, 2000
• IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
• Consumer Protection Act, 2019
• Consumer Protection (E-Commerce) Rules, 2020

1. Data Fiduciary Information

Zappwala acts as a Data Fiduciary under the DPDP Act, 2023.

Platform Name: Zappwala
Email: [email protected]
Phone: +91-8877432254
Location: Assam, India

2. Categories of Personal Data Collected

• Full Name
• Mobile Number
• Email Address
• Delivery/Service Address
• Booking & Order Details
• Vendor Registration Documents
• Payment Transaction References (processed via third-party gateways)
• IP Address & Device Information
• Location Data (only with permission)

We do not intentionally collect sensitive personal data unless legally required or with explicit consent.

3. Purpose of Data Processing

• Account creation and management
• Booking processing and service coordination
• Vendor onboarding and verification
• Payment processing
• Customer support & dispute resolution
• Fraud prevention and security monitoring
• Legal compliance obligations
• Marketing communication (only with consent)

4. Lawful Basis & Consent

By registering or using Zappwala, users provide free, specific, informed, and unambiguous consent to process personal data for specified purposes under the DPDP Act, 2023.

Users may withdraw consent anytime by contacting [email protected]. Withdrawal may impact service access.

5. Data Sharing & Disclosure

We may share personal data with:

• Registered Vendors (for service fulfillment)
• Payment Gateway Providers
• Logistics & Delivery Partners
• Government or regulatory authorities (when legally required)

Zappwala does not sell personal data.

6. Vendor Data Processing Clause

Vendors registered on Zappwala may act as Data Processors under the DPDP Act.

• Vendors shall process data only for order/service fulfillment.
• Customer data shall not be reused for unauthorized marketing.
• Vendors must implement reasonable security safeguards.
• Customer data must be deleted after service completion unless legally required.
• Data breaches must be reported to Zappwala within 24 hours.

7. Data Retention Timeline

8. Rights of Data Principals (Under DPDP Act, 2023)

• Right to access personal data
• Right to correction & updating
• Right to erasure
• Right to withdraw consent
• Right to grievance redressal
• Right to nominate a representative

9. Children’s Data

Zappwala does not knowingly collect personal data from individuals below 18 years without verifiable parental consent.

10. Security Safeguards

• HTTPS encryption
• Access control mechanisms
• Secure payment gateway integration
• Periodic monitoring and audits

11. Cross-Border Data Transfer

Personal data may be transferred outside India only in compliance with restrictions notified under the DPDP Act, 2023.

12. Intermediary Status

Zappwala operates as an intermediary under Section 79 of the IT Act, 2000 and shall not be liable for third-party vendor content or services, subject to due diligence compliance.

13. Grievance Redressal Officer

As required under IT Rules, 2021 and DPDP Act, 2023:

Name: [Sachin Kr Singh]
Designation: Grievance Officer – Zappwala
Email: [email protected]
Phone: +91-8877432254
Location: Assam, India

• Complaints acknowledged within 24 hours
• Resolved within 15 days

14. Changes to Policy

Zappwala reserves the right to modify this Privacy Policy. Users are encouraged to review periodically.

15. Contact Information

Email: [email protected]
Phone: +91-8877432254
Website: www.zappwala.com

By using Zappwala, you agree to this Privacy Policy.