Privacy Policy

Last updated 09 August 2026 · BAYZONS PRIVATE LIMITED · bayzonstores.online

1. Information we collect

We collect only what we need to sell to you, deliver to you and support you after purchase.

• Identity and contact data: your name, email address and mobile number.
• Delivery data: shipping address, city, state and PIN code.
• Order data: the Products you view and buy, order value, order number and order history.
• Payment data: the payment method used, the transaction reference and the success or failure status returned by the payment gateway. We never receive or store your full card number, CVV, UPI PIN or net banking password.
• Account data: your email address and a securely hashed version of your password, if you choose to create an account. We never store your password in readable form.
• Support data: the content of any support request, complaint or correspondence you send us.
• Technical data: IP address, browser type, device type, referring page and pages visited, collected through server logs for security and diagnostics.

2. Optional business verification documents

Creating an account is optional, and verification is optional within it. Business and bulk buyers who want a verified trade account may choose to submit a PAN or GST identifier and a supporting document. This is entirely voluntary — you can browse, order, pay and receive delivery without submitting any identity document.

Where you do choose to submit a document, we treat it as sensitive personal data. It is stored outside the public web root, is accessible only to authorised personnel for the purpose of verifying the trade account, is never used for marketing or profiling, is never sold or shared with any third party, and is deleted within 90 days of your account being closed or your written request to erase it.

3. How we use your information

We do not sell your personal data. We do not share it with advertisers or data brokers. We do not use it to make any automated decision that produces a legal or similarly significant effect on you.

• to process, pack, dispatch and deliver your order;
• to take payment and, where necessary, to process a refund;
• to send transactional messages about your order — confirmation, dispatch, delivery and refund updates;
• to answer your support requests and resolve complaints;
• to detect, investigate and prevent fraud, chargeback abuse and misuse of the Website;
• to meet our legal, tax, accounting and regulatory obligations;
• to understand which Products and pages are popular so that we can improve the Website.

4. Legal basis for processing

We process your data on the basis of your consent, which you give when you submit information to us; on the basis that processing is necessary to perform our contract with you; and, where applicable, to comply with a legal obligation or to protect our legitimate interest in preventing fraud. You may withdraw consent at any time as described in section 8, although withdrawing consent may prevent us from fulfilling an order in progress.

5. Who we share information with

We share the minimum data necessary with a small number of service providers, each of whom is contractually bound to protect it and to use it only for the purpose we specify:

• Payment gateway: your name, email, phone, order number and order amount, so that the payment can be processed.
• Courier and logistics partners: your name, delivery address and phone number, so that the parcel can be delivered.
• Hosting and infrastructure providers: data stored on secure servers located in India.
• Professional advisers: accountants and auditors, where required for statutory compliance.
• Law enforcement and regulators: only where we are legally compelled to disclose, or where disclosure is necessary to protect our rights or the safety of others.

6. Cookies

We use a strictly necessary session cookie to keep your shopping cart and, if you are signed in, your session active. Without it the Website cannot function. We do not use third-party advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings, but the cart and sign-in will stop working if you do.

7. Data retention

• Order and invoice records: retained for 8 financial years, as required by Indian tax and companies legislation.
• Account data: retained while your account is active, and deleted within 90 days of account closure.
• Optional verification documents: deleted within 90 days of account closure or of your erasure request.
• Support correspondence: retained for 3 years from the date the matter is closed.
• Server and security logs: retained for 180 days.

8. Your rights

Subject to applicable law, you may exercise the following rights by writing to grievance@bayzonstores.online from the email address registered with us:

• Access — request a copy of the personal data we hold about you.
• Correction — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data, except where we are legally required to retain it.
• Withdrawal of consent — withdraw consent to any processing based on consent.
• Grievance — raise a complaint about how we have handled your data.
• Nomination — nominate a person to exercise your rights in the event of your death or incapacity.

We respond to every request within 30 days. We may ask you to verify your identity before we act on a request, to make sure we are not disclosing your data to someone else.

9. How we protect your data

No method of transmission or storage is completely secure. While we use reasonable and appropriate safeguards, we cannot guarantee absolute security. If a breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.

• All traffic to and from the Website is encrypted in transit using TLS (HTTPS).
• Passwords are stored only as salted one-way hashes and are never recoverable in readable form.
• Order records, uploaded documents and configuration files are stored outside the public web root and cannot be reached from a browser.
• Access to customer data is restricted to authorised personnel who need it to do their job.
• We apply security patches to our servers and review access logs regularly.

10. Children

The Website is not directed at children under 18 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please write to grievance@bayzonstores.online and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. The current version and its effective date are always shown at the top of this page. Where a change is material, we will take reasonable steps to bring it to your attention.

12. Contact and grievance officer

Data fiduciary: BAYZONS PRIVATE LIMITED, CIN U46498MH2026PTC470353, Unit No. A-203, 204, Kotia Nirman Commercial, Andheri, Mumbai, Maharashtra 400053, India.

Nodal Grievance Officer — email grievance@bayzonstores.online. We acknowledge within 48 hours and resolve within 30 days.

Registered entity