Privacy Policy

Last Updated: September 14, 2026

1. Introduction

At Curozip (operated by Finixia Dedecons Private Limited), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://curozip.com), use our logistics services, or make payments through our platform.

By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please refrain from accessing or using our services.

2. Information We Collect

We collect the following categories of personal information that you voluntarily provide when booking a shipment, making a payment, contacting customer support, or interacting with our website:

• Personal Details: Full name, email address, and mobile number.
• Logistics Data: Sender and receiver addresses, city locations, parcel descriptions, weight, dimensions, and item value declarations.
• Payment Information: When you make a payment through our platform, our third-party payment processors may collect your payment card details, UPI ID, bank account information, or wallet details. Curozip does not store your full card number, CVV, or banking credentials on its servers. All payment data is handled securely by our PCI-DSS compliant payment gateway partners.
• Transaction Data: Payment amounts, transaction IDs, payment status, refund history, and billing records.
• Technical Data: IP address, browser type and version, device information, operating system, referring URLs, pages visited, and timestamps when accessing our digital platforms.
• Communication Data: Records of your interactions with our customer support, including emails, WhatsApp messages, and phone call logs.

3. How We Use Your Information

Your information is used strictly to facilitate, improve, and secure our logistics and payment operations. Specifically, we use it to:

• Process your bookings, pickups, and deliveries efficiently.
• Process payments and issue invoices, receipts, and refunds where applicable.
• Send important transit updates, tracking links, payment confirmations, and delivery notifications via SMS/WhatsApp/Email.
• Respond to your customer service inquiries and resolve complaints.
• Prevent fraud and verify the authenticity of transactions.
• Comply with legal and regulatory obligations, including tax and financial reporting.
• Analyze website usage to improve our digital booking and payment experience.
• Send promotional communications (only with your explicit consent; you can opt out at any time).

4. Payment Data & Third-Party Payment Processors

To process your payments securely, we use trusted third-party payment gateway providers. These include, but are not limited to, services that are fully compliant with the Payment Card Industry Data Security Standards (PCI-DSS).

• Your payment details (card number, UPI, net banking credentials) are collected and processed directly by the payment gateway and are never stored on Curozip's servers.
• We only receive a transaction confirmation (success/failure), transaction ID, and the payment amount from the payment gateway.
• These third-party payment processors have their own privacy policies governing the data they collect. We encourage you to review their policies.
• Curozip ensures that all payment processing complies with RBI (Reserve Bank of India) guidelines and applicable financial regulations.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to any third party. We only share your information with trusted partners necessary to complete your delivery and process payments, including:

• Transport Partners: Fleet operators and last-mile delivery agents handling your specific package (only name, phone, and address of sender/receiver).
• Payment Processors: Third-party payment gateways that process your online payments securely.
• Communication Providers: IT infrastructure and communication platforms (e.g., WhatsApp Business API, SMS gateway providers) used to send you updates.
• Analytics Providers: Services that help us understand website usage patterns (data is anonymized).
• Legal Obligations: If required by law, court order, government regulation, or to protect our legal rights.

6. Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for the website to function properly (session management, form submissions).
• Analytics Cookies: Help us understand how visitors interact with our website, which pages are most popular, and how to improve navigation.
• Preference Cookies: Remember your settings and preferences for a more personalized experience.

You can control cookie preferences through your browser settings. Disabling cookies may affect some functionality of our website. We do not use cookies to collect payment information.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Booking & Transaction Data: Retained for a minimum of 8 years as required by Indian tax and financial regulations.
• Customer Communication Records: Retained for up to 3 years for dispute resolution and service improvement.
• Technical/Analytics Data: Retained for up to 2 years in anonymized form.
• Marketing Preferences: Retained until you withdraw your consent.

After the retention period, data is securely deleted or anonymized so that it can no longer be associated with you.

8. Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we hold about you and with whom it has been shared.
• Right to Correction: You may request correction of any inaccurate or incomplete data.
• Right to Erasure (Be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to Withdraw Consent: You may withdraw your consent for processing at any time.
• Right to Grievance Redressal: You may file a complaint with our Data Protection Officer or the Data Protection Board of India if you believe your data has been mishandled.

To exercise any of these rights (including Data Deletion requests), please contact us at support@curozip.com or use the "Request Data Deletion" button in your Customer Dashboard profile. We will respond within 48 hours.

9. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Secure database access controls with restricted permissions.
• Regular security audits and vulnerability assessments.
• Employee training on data protection best practices.

While we strive to use commercially acceptable means to protect your data, please remember that no method of transmission over the internet or electronic storage is 100% secure.

10. Children's Privacy

Curozip's services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a minor has provided us with personal data without parental consent, we will take immediate steps to delete such information from our records.

11. Changes to This Policy

Curozip reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may also notify you via email or a prominent notice on our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Data Protection Officer & Grievance Redressal

In accordance with applicable data protection laws and the Information Technology Act, 2000, the Data Protection Officer (DPO) and Grievance Officer for Curozip is:

• Name: Bhaskarjyoti Saikia (Data Protection Officer)
• DPO Email: info@curozip.com
• Grievance & Support Email: support@curozip.com
• Phone: +91 91810 57123 / 91810 57124
• Address: Finixia Dedecons Private Limited, Guwahati, Assam, India

The DPO shall address your concerns and resolve data-related grievances promptly in compliance with Indian law.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Support Email: support@curozip.com
• DPO/Privacy Email: info@curozip.com
• WhatsApp/Phone: +91 91810 57123 / 91810 57124
• Company: Finixia Dedecons Private Limited
• Address: Guwahati, Assam, India