Privacy policy

Last Updated: 19th Jan'26

This Privacy Policy describes how personal data is collected, used, stored, disclosed, and protected when you visit or make a purchase from https://thezencrystals.com (“Website”).

The Zen Crystals is a brand operated by The Noobs Company, a business registered in India (“Company”, “we”, “our”, “us”).
For the purpose of applicable data protection laws, The Noobs Company is the Data Fiduciary and is legally responsible for processing personal data collected through this Website.

This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable Indian laws.

By using this Website, you consent to the processing of your personal data in accordance with this Privacy Policy.

---

1. Definitions

• Personal Data: Any data about an identifiable individual collected or processed digitally.

• Processing: Any operation performed on personal data including collection, storage, use, disclosure, or deletion.

• Data Principal: The individual whose personal data is being processed.

• Data Fiduciary: The Noobs Company, which determines the purpose and means of processing personal data.

• Consent: Free, specific, informed, unconditional, and unambiguous agreement by the Data Principal.

---

2. Information We Collect

a) Information You Provide

• Full name

• Email address

• Phone number

• Billing and shipping address

• Order details and purchase history

• Communication via email, WhatsApp, forms, or chat

• Payment confirmation references (we do not store card, UPI, or banking credentials)

b) Automatically Collected Information

• IP address

• Browser type and device data

• Pages visited and interaction behavior

• Cookies and tracking technologies

• Referral sources

c) Third-Party Information

• Payment gateway confirmations

• Courier delivery updates

• Website analytics data

---

3. Purpose of Processing

Personal data is processed strictly for:

1. Order processing and fulfillment

2. Shipping and delivery coordination

3. Customer support and grievance handling

4. Transaction communication and account management

5. Legal compliance (taxation, accounting, regulatory obligations)

6. Website performance analysis and optimization

7. Marketing communication with explicit consent

8. Fraud prevention and platform security

Only data necessary for these purposes is collected.

---

4. Lawful Basis for Processing (India)

We process personal data based on:

• Your explicit consent

• Performance of contractual obligations

• Compliance with legal obligations

• Legitimate business interests including security, fraud prevention, and service improvement

Consent may be withdrawn at any time.

---

5. Cookies and Tracking

We use cookies to improve website functionality, analytics, and user experience.
You may disable cookies through browser settings, though some features may not function properly.

---

6. Data Sharing and Disclosure

We may share personal data with:

• Payment service providers

• Logistics and courier partners

• Technology and hosting vendors

• Analytics and marketing platforms

• Government or regulatory authorities when legally required

We do not sell personal data.
All service providers are required to maintain reasonable security standards.

---

7. International Data Transfers

Personal data of Indian users is primarily stored and processed in India.
Where international transfer is required, it will be done only in accordance with applicable Indian laws and approved jurisdictions with appropriate safeguards.

---

8. Data Retention

We retain personal data only for as long as necessary:

• Order and invoice records: up to 7 years

• Customer communications: up to 3 years

• Marketing data: until consent is withdrawn

• Analytics data: aggregated or anonymized

Data is securely deleted or anonymized when no longer required.

---

9. Rights of Data Principals

You have the right to:

• Access your personal data

• Correct or update inaccurate data

• Request deletion (subject to legal obligations)

• Withdraw consent

• Seek grievance redressal

Requests can be made using the contact details in Section 13.

---

10. Data Security

We implement reasonable security practices including:

• Encrypted systems and secure servers

• Restricted access controls

• Secure payment processing

• Periodic security reviews

However, no digital system can be guaranteed to be completely secure.

---

11. Data Breach Notification

In the event of a personal data breach, we will take prompt remedial action and notify affected individuals and authorities as required by applicable law.

---

12. Children’s Privacy

This Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

---

13. Grievance Officer & Contact Information

For privacy-related queries, rights requests, or complaints, contact:

Grievance Officer – Data Protection
The Noobs Company (Operating as The Zen Crystals)
Email: hello@thezencrystals.com
Phone: +91-9871356030
Registered Address: 459/30, Lane 3, Sangam Vihar Colony, Jonesganj, Ajmer, Rajsthan - 305001 

We aim to respond within reasonable timelines as mandated by law.

---

14. Policy Updates

This Privacy Policy may be updated periodically. Changes will be published on this page with the revised effective date. Continued use of the Website constitutes acceptance of the updated policy.