Welcome to ZENKAI Studio ("ZENKAI", "we", "us", or "our"), an automotive-inspired apparel and streetwear label operating out of Bengaluru, India. This Privacy Policy serves as the statutory notice required under Section 5 of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the accompanying DPDP Rules.
We are committed to safeguarding your personal data and ensuring transparent, lawful, and purpose-bound processing. This document details what personal data we collect, our lawful grounds, how your data is handled, your legal rights as a Data Principal, and how you may contact our designated Grievance Officer.
1. Categories of Personal Data Collected
We adhere strictly to the principle of data minimisation. We only collect personal data that is directly necessary to operate our store, fulfil orders, and communicate with you:
Collected when you place an order for apparel or posters:
- Full Name
- Email Address
- Phone Number (used for courier delivery updates & Cashfree OTP authentication)
- Shipping Address (Street, City, State, Pincode)
- Order contents, selected sizes, quantities, and transaction identifiers
When you log in via Google OAuth:
- Verified Name and Email Address
- Google Profile Image URL
- Secure session tokens (encrypted at rest, never plaintext)
All transactions are encrypted and processed through Cashfree Payments India Pvt. Ltd. (a PCI-DSS Level 1 certified payment gateway). ZENKAI Studio does not receive, process, or store raw credit card numbers, CVV codes, bank login credentials, or UPI PINs on its servers.
Vehicle specifications (make, model, modifications), reference notes, and email address submitted via the Custom Commissions portal.
Essential local browser storage keys (zenkai_cart_v1, zenkai_shipping, zenkai_theme) to preserve your shopping bag and chosen display preferences across browser reloads.
2. Lawful Grounds and Specific Purposes for Processing
Under Sections 4 and 6 of the DPDP Act 2023, personal data is processed solely under the following lawful grounds:
- Performance of Contract / Essential Service: Processing your delivery address, phone number, and name to manufacture, package, and deliver your purchased apparel and posters.
- Compliance with Legal & Statutory Obligations: Retaining mandatory tax invoices, payment logs, and transaction details pursuant to the Goods and Services Tax (GST) Act, Indian Income Tax Act, and Prevention of Money Laundering rules.
- Affirmative Informed Consent: Sending newsletter drop alerts and editorial studies only where you have explicitly opted in via our subscription form.
- Security & Fraud Prevention: Protecting our systems against unauthorized access, abusive bot traffic, and payment fraud.
3. Third-Party Data Processors & Sharing
We do not sell, rent, or trade your personal information. Data is shared exclusively with verified data processors contracted to provide specialized infrastructure:
4. Data Retention & Deletion Policy
We retain personal data only for as long as is necessary to satisfy the specific purpose for which it was collected, or to satisfy legal retention mandates:
- Order & Invoicing Records: Retained for a minimum period of 7 years in accordance with Indian commercial, tax, and GST compliance regulations.
- Marketing & Newsletter Subscriptions: Retained until such time as you withdraw consent via the unsubscribe mechanism or contact our Grievance Officer.
- Local Browser Storage: Managed entirely on your device. You may clear your shopping bag or saved shipping autofill at any time via your browser settings.
5. Your Rights as a Data Principal under the DPDP Act, 2023
As an individual whose personal data is processed by ZENKAI Studio, you possess statutory rights enforceable under Indian law:
6. Children's Data Protection (Section 9)
ZENKAI Studio is a commerce platform intended for individuals aged 18 and older. We do not knowingly collect, track, or process personal data belonging to children (individuals below 18 years of age) without verifiable parental authorization, nor do we engage in targeted advertising directed at minors.
7. Grievance Officer & Data Redressal Mechanism
In accordance with the DPDP Act 2023 and the DPDP Rules 2025, ZENKAI Studio has established a direct grievance redressal channel:
If your grievance is not resolved satisfactorily by our Grievance Officer within the prescribed timeframe, you have the statutory right to escalate the matter to the Data Protection Board of India (DPBI).
8. Amendments to this Notice
We may revise this Privacy Policy periodically as regulatory standards or technical capabilities evolve. Any changes will be posted on this URL with an updated revision date.
Questions regarding this document? Email privacy@zenkaistudio.in
Back to Store