Privacy policy

Before I write it, a few flags — Indian privacy law changed recently and most Shopify privacy policies floating around are outdated.

1. DPDP Act, 2023. India now has the Digital Personal Data Protection Act. It requires notice at the point of collection, consent, a named Grievance Officer with contact details, and clear rights for the user (access, correction, erasure, grievance redressal). I've built all of that in. Most template policies you'll find online only cover the old IT Rules, 2011 — those are weaker and increasingly out of date.

2. Grievance Officer. Both the DPDP Act and the E-Commerce Rules require a named officer with an email and response timeline. I've used your support contact as a placeholder — the client should insert an actual person's name. Leaving it blank is a compliance gap.

3. Health data. Shilajit is a wellness product. If the store ever collects health information through a quiz, consultation form, or "tell us your concern" field, that becomes sensitive data with stricter handling rules. I've added a short clause covering it. Tell me if there's no such form and I'll remove it.

Assumptions filled in — correct any and I'll revise:

Standard Shopify stack: Shopify, Razorpay/Shopify Payments, Meta Pixel, Google Analytics, WhatsApp/SMS for order updates
No data sold to third parties
Marketing emails and WhatsApp messages sent only with consent
Minimum age to purchase: 18

Privacy Policy

Last updated: 28 July 2026

At ShilZen, we take your privacy seriously. This policy explains what information we collect when you visit or buy from shilzen.in, why we collect it, how we protect it, and what control you have over it.

By using our website, you agree to the practices described below.

1. Who We Are

ShilZen
Muzaffarnagar, Uttar Pradesh – 251001, India
📧 support@shilzen.in
📞 +91 75058 78657

We are the data fiduciary responsible for the personal information collected through this website.

2. Information We Collect

a) Information you give us

Name, email address, and phone number
Shipping and billing address
Order details and purchase history
Bank or UPI details shared only for COD refunds
Messages you send us over email, phone, or WhatsApp
Reviews, ratings, and feedback you submit

b) Information collected automatically

Device type, browser, and operating system
IP address and approximate location
Pages viewed, time spent, and links clicked
Referring website or advertisement
Cookie and session data

c) Payment information

We do not store your card, UPI PIN, or netbanking credentials. All payments are processed directly by our payment partners on their secure, PCI-DSS compliant systems. We only receive a confirmation of whether the payment succeeded or failed.

d) Health-related information

If you share any health or wellness details with us through a form, enquiry, or consultation request, we treat that information with extra care. It is used only to respond to your query and is never used for advertising.

3. Why We Collect It

We use your information to:

Process and deliver your order
Send order confirmations, dispatch alerts, and delivery updates
Handle returns, exchanges, and refunds
Respond to your questions and support requests
Verify claims raised under our Return & Refund Policy
Detect and prevent fraud, fake orders, and misuse
Improve our website, products, and customer service
Send offers and updates, only if you have opted in
Meet our obligations under Indian law

4. Consent

When you place an order, create an account, or subscribe to our updates, you give us consent to use your information for the purposes listed above.

You can withdraw consent at any time by writing to support@shilzen.in. Once you withdraw, we stop using your data for marketing. Some information may still be retained where the law requires us to keep it, such as invoices and tax records.

Marketing emails carry an unsubscribe link. WhatsApp and SMS updates can be stopped by replying STOP or contacting our support team.

5. Who We Share Your Information With

We never sell or rent your personal data. We share it only with partners who help us run the store:

Partner type	What they receive	Why
Payment gateways	Order value, contact details	To process payments and refunds
Courier partners	Name, address, phone number	To deliver your order
E-commerce platform	Order and account data	To host and run the website
Communication tools	Email, phone number	To send order and support updates
Analytics and advertising	Anonymous browsing data	To understand traffic and show relevant ads

We may also disclose information if required by a court order, a government authority, or applicable law.

6. Cookies

Cookies are small files stored on your device that help the website work properly. We use them to:

Keep items in your cart
Remember your login and preferences
Measure which pages perform well
Show relevant ads on other platforms

You can block or delete cookies through your browser settings. Some parts of the site, such as checkout, may not work correctly if cookies are disabled.

7. How Long We Keep Your Data

Order and invoice records: retained as required under tax and accounting laws
Account information: retained while your account is active
Marketing data: retained until you unsubscribe or withdraw consent
Support conversations: retained for a reasonable period to help with future queries

Once data is no longer needed and there is no legal reason to keep it, we delete or anonymise it.

8. How We Protect Your Data

The website runs on a secure SSL-encrypted connection
Payment data is handled entirely by certified payment gateways
Access to customer data is limited to team members who need it
Systems are reviewed and updated regularly

No system online is completely risk-free. While we take strong measures to protect your information, we cannot promise absolute security.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

Know what personal data we hold about you
Correct information that is wrong or incomplete
Request deletion of your data, where no legal obligation requires us to keep it
Withdraw consent for marketing communication
Nominate another person to exercise these rights on your behalf if you are unable to
Raise a grievance and receive a response

To use any of these rights, email support@shilzen.in with your registered name and order details. We respond within a reasonable time and usually within 7 working days.

10. Children

Our products and website are meant for individuals aged 18 and above. We do not knowingly collect data from children. If you believe a minor has shared information with us, write to us and we will remove it.

11. Third-Party Links

Our website may link to other websites, such as social media pages or payment partners. We are not responsible for how those websites handle your data. Please read their privacy policies before sharing anything with them.

12. Grievance Officer

If you have a complaint about how your data is handled, contact:

Grievance Officer: [Insert Full Name]
ShilZen
Muzaffarnagar, Uttar Pradesh – 251001, India
📧 support@shilzen.in
📞 +91 75058 78657
🕐 Monday to Saturday, 10:00 AM to 6:00 PM IST

We acknowledge every complaint within 48 hours and work to resolve it within 30 days.

13. Updates to This Policy

We may revise this policy as our business, technology, or the law changes. The updated version will be published on this page with a new date at the top. Please check back from time to time.

14. Contact Us

Questions about this policy? We're happy to help.