Klinzo One Private Limited

Privacy Policy

────────────────────────────────────────────────────────────

At Klinzo One Private Limited, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights in relation to it. It applies to all users of the Vastra Klinzo mobile application and related services.

By using the Vastra Klinzo App, you agree to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the App.

• Full name, mobile number, and email address (during registration).

• Home or delivery address(es) for pick-up and drop-off scheduling.

• Payment details (processed securely via third-party gateways; we do not store card data).

• Order history, service preferences, and special garment care instructions.

• Any feedback, ratings, or communications you share with us.

• Device information: model, operating system, app version, and device identifiers.

• Location data (with your permission) to enable pick-up and delivery services.

• App usage data: pages visited, buttons clicked, time spent on features.

• IP address and network information for security and fraud prevention.

• Push notification preferences and interaction data.

• Login data if you sign up via Google or other third-party authentication services.

• Analytics data from third-party providers to improve app performance.

• Fraud prevention data from payment service partners.

The information we collect is used for the following purposes:

• To create and manage your account and authenticate your identity.

• To process and fulfil your laundry service orders.

• To schedule and coordinate pick-up and delivery operations.

• To send order confirmations, status updates, and delivery notifications.

• To process payments and maintain transaction records.

• To respond to customer support queries, complaints, and feedback.

• To personalise app features and service recommendations.

• To analyse usage patterns and improve our App and services.

• To detect, prevent, and investigate fraudulent or unauthorised activity.

• To comply with legal, regulatory, and tax obligations applicable in India.

• To send promotional communications.

In accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian laws, we process your personal data on the following legal bases:

• Consent: For marketing communications, location access, and optional features.

• Contractual Necessity: To provide the services you have requested and fulfil your orders.

• Legal Obligation: To comply with applicable Indian laws, court orders, and regulatory requirements.

• Legitimate Interests: For fraud prevention, security monitoring, and service improvement.

We do not sell your personal data. We may share your information with:

• Delivery Partners & Field Agents: For pick-up and delivery of items, limited to address and contact details.

• Payment Gateway Providers: For secure processing of transactions.

• Technology Service Providers: Cloud hosting, analytics, and customer support tools operating under data processing agreements.

• Legal Authorities: When required by law, court order, or governmental directive under Indian law.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections being maintained.

All third parties with whom we share data are bound by contractual obligations to use your information only for the purposes specified and to maintain adequate security standards.

Your data is stored on secure servers located within India. We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, and resolve disputes.

• Account data is retained for the duration of your account and up to 3 years thereafter.

• Order and transaction records are retained for a minimum of 7 years for statutory compliance.

• Marketing preferences are retained until you withdraw consent.

Upon account deletion or at the end of the retention period, your personal data will be securely deleted or anonymised.

Klinzo One Private limited implements appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• Encrypted data transmission using industry-standard TLS/SSL protocols.

• Secure, access-controlled server environments with regular security audits.

• Multi-factor authentication for internal system access.

• Regular employee training on data protection and privacy practices.

While we make every effort to protect your data, no system is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

As a data principal under the DPDPA 2023 and other applicable Indian laws, you have the following rights:

• Right to Access: Request a summary of the personal data we hold about you.

• Right to Correction: Request rectification of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.

• Right to Withdraw Consent: Withdraw consent for data processing activities based on consent (e.g., marketing).

• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details below).

• Right to Nominate: Nominate another individual to exercise rights on your behalf in the event of your incapacity.

To exercise any of these rights, please contact us at support@vastraklinzo.com. We will respond within 30 days of receiving your request.

The Vastra Klinzo App and associated website may use cookies, pixel tags, and similar technologies to enhance your experience, remember preferences, and analyse usage patterns. You may control cookie settings through your device settings; however, disabling certain cookies may affect App functionality.

Vastra Klinzo's services are intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered on the App, we will promptly delete their account and associated data.

The App may include links to third-party websites or services. Vastra Klinzo is not responsible for the privacy practices or content of any third-party platforms. We encourage you to review the privacy policies of any external services you access.

We may revise this Privacy Policy from time to time to reflect changes in law, technology, or our services. Material changes will be communicated to you through the App or via email. Your continued use of the App after the effective date of the revised Policy constitutes your acceptance of the changes.

In accordance with the Information Technology Act, 2000, and the DPDPA 2023, the details of our Grievance Officer are as follows:

Email: support@vastraklinzo.com

Complaints will be acknowledged within 48 hours and resolved within 30 days of receipt.