What we hold, why we hold it, and how you may take it back. Last updated 16 August 2026.
ZANAR is the brand of Zanar Rituals Private Limited (CIN U20239DL2026PTC466844, GSTIN 07AADCZ0333M1Z7), 400-A, 4th Floor, 12 Ajit Singh House, Yusuf Sarai Commercial Complex, New Delhi 110016.
We are the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023. You are the data principal.
Payments are processed by Razorpay, authorised by the Reserve Bank of India. Your card number, CVV, PIN, UPI PIN and OTP are entered on Razorpay's systems. ZANAR never receives, sees or stores them.
We receive only the transaction reference, amount, status and payment method, for accounting and refunds. Saved cards are tokenised by Razorpay and your bank under RBI rules, not by us.
To take and deliver your order, issue invoices, handle returns and refunds, answer your enquiries, keep the tax and company records the law requires, secure the site, and, only if you ask for it, send you brand email. We do not profile you, and we make no automated decisions about you.
Where we rely on consent, it is given by a clear affirmative act, a ticked box or an accepted cookie category. Nothing is pre-ticked.
You may withdraw consent at any time, as easily as you gave it, by writing to concierge@zanar.in or reopening your cookie preferences. Withdrawal does not undo processing already carried out, or affect records we must keep by law.
We do not sell personal data. We share only what is needed, with:
Each is bound by contract to use the data only for that purpose.
Some providers operate servers outside India, so the technical logs generated by your visit may be handled abroad. Such transfers are made only as the Digital Personal Data Protection Act, 2023 permits. Razorpay stores payment data in India under RBI rules.
Covered in full in our Cookie Policy, with the controls to accept or refuse each category. We use no analytics or advertising technologies on this site at present, and will not add any without asking you first.
Invoices and tax records for eight financial years, as the Companies Act and GST law require. Customer and enquiry records for twenty-four months. Marketing consent until you withdraw it. Everything else only as long as it serves the purpose it was collected for, then erased.
The site runs on HTTPS. Payment credentials never enter our systems. Access to customer records is limited to those who need it.
No system is perfectly secure, and we do not claim otherwise. If a breach occurs we will notify the Data Protection Board of India and everyone affected, as the law requires.
You may ask us to tell you what we hold, correct or complete it, erase it, or stop using it, and you may nominate someone to exercise these rights for you.
Write to concierge@zanar.in with "Data Request" in the subject line and your order number or the email address you used. We reply within thirty days, free of charge. If we must keep something by law, we will tell you why.
ZANAR is for adults. This site is not directed at children, and we do not knowingly collect data from anyone under eighteen or sell to minors. Where a child's data is processed we obtain verifiable parental or guardian consent first, and we never track or advertise to children. If you believe a child has given us data, write to us and we will delete it.
We update this policy as our practices or the law change. The current version always sits here, with the date at the top. Material changes are notified before they take effect.
Please tell us first. We would rather fix it. Grievance Officer: [NAME], [DESIGNATION]. Email concierge@zanar.in or telephone +91 98188 44346.
We acknowledge every complaint within 48 hours and resolve it within one month, as the Consumer Protection (E-Commerce) Rules, 2020 require. You may also approach the Data Protection Board of India, and nothing here affects your rights under the Consumer Protection Act, 2019.
Questions about anything on this page may be sent to concierge@zanar.in, or raised with the Concierge.