Privacy Policy



Introduction

Welcome to Dibbzy (www.dibbzy.com). We value your trust and are committed to protecting your personal data. This Privacy Notice explains how we collect, use, and protect your information when you browse our store, create an account, or make a purchase.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), Dibbzy acts as the Data Fiduciary. This means we decide how and why your data is processed. To ensure your data is kept secure, we use Quichub Innovations LLP as our secure backend infrastructure and data processor.


What Data We Collect

We only collect the data necessary to provide you with a great shopping experience.

  • Account & Contact Details: Name, email address, phone number, and account passwords.
  • Shipping & Billing Data: Delivery addresses, billing addresses, and order history.
  • Payment Information: Payment method details. (Note: Dibbzy does not store full credit card numbers. All payments are encrypted and routed directly through secure, PCI-DSS compliant payment gateways).
  • Device & Browsing Data: IP addresses, browser types, and interactions with our website (collected via cookies, subject to your consent).


How We Use Your Data

We process your personal data for the following lawful purposes:

  • Fulfilling Your Orders: To process payments, ship your products, and provide delivery updates (processed on the basis of legitimate use to full-fill our contract with you).
  • Customer Support: To process returns, refunds, and respond to your inquiries.
  • Marketing (With Your Consent): To send you promotional offers, newsletters, and personalized product recommendations. You can opt out of this at any time.
  • Platform Improvement: To analyse website traffic and improve our store's performance.


Who We Share Your Data With

We do not sell your personal data. We only share your data with trusted partners necessary to run our business:

  • Quichub Innovations LLP: Our core technology partner that hosts our website, secures our databases, and routes our orders.
  • Logistics Partners: Delivery and courier services (e.g., Shiprocket, Delhivery) to get your products to your door.
  • Payment Gateways: Providers (e.g., Razorpay, Phonepe) to process your financial transactions securely.
  • Telecommunication Partner: Secure transmission of communication (e.g., XOtel)


Your Rights Under the DPDP Act

As a Data Principal, Indian law grants you specific rights regarding your personal data:

  • Right to Access: You can ask us for a summary of the personal data we hold about you and the identities of any third parties we have shared it with.
  • Right to Correction: You can request that we update inaccurate data or complete incomplete data.
  • Right to Erasure: You can ask us to delete your personal data. (Please note: We may need to retain certain data, such as billing records, to comply with tax laws or resolve disputes).
  • Right to Nominate: You have the right to nominate another individual to exercise your privacy rights in the event of your death or incapacity.


Managing Your Preferences & Withdrawing Consent

Under the DPDP Act, you have the right to withdraw your consent for any data processing at any time. We have ensured that withdrawing your consent is just as easy as giving it.

How to Withdraw Consent (The Process):

  • Marketing Emails: You can withdraw consent for promotional emails instantly by clicking the "Unsubscribe" link located at the bottom of any marketing email from Dibbzy.
  • Account Preferences: Log into your Dibbzy account and navigate to the "Preference Centre" in your settings to toggle off marketing communications or data sharing.
  • Website Tracking (Cookies): You can withdraw consent for non-essential website tracking by clicking the "Manage Cookies" icon located in the footer of [dibbzy.com].


Conditions of Withdrawal:

  • Processing Timelines: We will update your preferences across our systems (and our processor, Quichub) within 24 hours of your request.
  • Prior Processing: Withdrawing your consent does not affect the lawfulness of any data processing we conducted before your withdrawal.
  • Impact on Services: If you withdraw consent for non-essential processing (like marketing or analytics), your ability to shop on Dibbzy remains completely unaffected. However, if you withdraw consent for the processing of data that is strictly necessary to provide our services (e.g., asking us to delete your shipping address while you have an active, unfulfilled order), we will be unable to deliver your products. In such cases, your withdrawal will result in the cancellation of your order and potential suspension of your Dibbzy account.


Data Security

Your data is stored on highly secure, AES-256 encrypted databases managed by our technology partner, Quichub. We implement strict role-based access controls to ensure that only authorized personnel can view your shipping or contact details.


Contact Our Grievance Officer

If you have any questions about this Privacy Notice, wish to exercise your rights, or want to file a complaint, please contact our designated Grievance Officer:

Name: Shalini Singh

Email: [email protected]

[We will acknowledge your request and resolve any grievances within the timelines prescribed by applicable law.]