Privacy Policy – Your Data Protection at BooksZest
At BooksZest, your privacy is not just a policy – it’s a fundamental right that we are committed to protecting. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our website, make purchases, or engage with our services.
We believe in complete transparency about our data practices. This policy is written in plain language to help you understand exactly what information we collect, why we need it, and how we protect it. Your trust is the foundation of our business, and we work every day to earn and maintain it.
Your Privacy Rights
Last Updated: September 2025 | GDPR Compliant | Indian Privacy Laws Compliant
Information We Collect
Information You Provide Directly
When you interact with BooksZest, you may provide us with the following information:
Account Information
- Full name and contact details
- Email address and phone number
- Password (encrypted and secure)
- Date of birth (optional)
- Profile preferences and settings
Shipping & Billing Details
- Shipping and billing addresses
- Payment information (processed securely)
- Order history and preferences
- Delivery instructions
- Gift recipient information
Communication Data
- Customer service interactions
- Reviews and ratings you submit
- Survey responses and feedback
- Newsletter subscriptions
- Social media interactions
Business Information
- Company name and details (for bulk orders)
- Business requirements and preferences
- Purchase order information
- Authorized user details
- Corporate communication preferences
Information We Collect Automatically
When you visit our website, we automatically collect certain technical information:
Technical Information
- IP address and geographic location
- Device type and operating system
- Browser type and version
- Screen resolution and device settings
Usage Analytics
- Pages visited and time spent
- Books viewed and searched
- Click patterns and navigation flow
- Shopping cart and checkout behavior
Cookie Information
- Session cookies for functionality
- Preference cookies for customization
- Analytics cookies for website improvement
- Marketing cookies (with consent)
How We Use Your Information
Primary Uses of Your Data
️ Order Processing & Fulfillment
- Process and fulfill your book orders
- Send order confirmations and updates
- Coordinate shipping and delivery
- Handle returns and exchanges
- Provide customer support
Personalization & Recommendations
- Recommend books based on your interests
- Customize website experience
- Create personalized book lists
- Send relevant content and offers
- Improve search results
Communication & Support
- Respond to your inquiries and requests
- Send important account notifications
- Provide technical and customer support
- Conduct satisfaction surveys
- Send promotional emails (with consent)
Security & Legal Compliance
- Prevent fraud and unauthorized access
- Comply with legal obligations
- Maintain account security
- Resolve disputes and enforce terms
- Protect intellectual property rights
Legal Basis for Processing Your Data
⚖️ Why We’re Legally Allowed to Process Your Information
We process your personal data based on the following legal grounds under Indian privacy laws and GDPR:
- Contract Performance: To fulfill our obligations when you purchase books from us
- Legitimate Interest: To improve our services, prevent fraud, and provide customer support
- Legal Compliance: To comply with tax laws, consumer protection laws, and other regulations
- Consent: For marketing communications and non-essential cookies (you can withdraw anytime)
- Vital Interests: In rare cases, to protect someone’s life or prevent serious harm
Information Sharing & Disclosure
We Never Sell Your Personal Data
BooksZest does not sell, rent, or lease your personal information to third parties for their marketing purposes.
However, we may share your information in the following limited circumstances:
Service Providers
Who: Shipping companies, payment processors, IT service providers
What: Only information necessary to provide services
Why: To fulfill orders and provide customer support
Protection: Bound by strict confidentiality agreements
⚖️ Legal Requirements
When: Required by law, court order, or government request
What: Minimum information necessary
Why: Legal compliance and law enforcement
Notice: We’ll notify you unless legally prohibited
Business Transfers
When: If BooksZest is sold or merged
What: Customer data as part of business assets
Why: Business continuity
Protection: New owner bound by this privacy policy
️ Protection & Safety
When: To protect rights, safety, or property
What: Relevant information only
Why: Prevent fraud, abuse, or harm
Scope: BooksZest, customers, or public safety
Cookies & Tracking Technologies
What Are Cookies and Why We Use Them
Cookies are small text files stored on your device that help us provide a better browsing experience.
Essential Cookies
Purpose: Website functionality
- Shopping cart management
- User authentication
- Security features
- Load balancing
These cannot be disabled as they’re required for the website to work.
Analytics Cookies
Purpose: Website improvement
- Page views and traffic patterns
- Popular books and categories
- User experience optimization
- Performance monitoring
Help us understand how visitors use our website.
Marketing Cookies
Purpose: Personalized advertising
- Personalized book recommendations
- Targeted advertisements
- Social media integration
- Email marketing optimization
Used only with your consent and can be disabled.
⚙️ Preference Cookies
Purpose: Remember your choices
- Language preferences
- Display settings
- Location settings
- Previously viewed books
Remember your preferences for a better experience.
Cookie Control
You have full control over cookies:
- Manage cookie preferences in your browser settings
- Use our cookie consent banner to customize settings
- Disable non-essential cookies without affecting core functionality
- Clear cookies anytime through your browser
Data Security & Protection
️ How We Protect Your Information
We implement multiple layers of security to protect your personal data:
Technical Safeguards
- 256-bit SSL encryption for all data transmission
- Secure servers with regular security updates
- Encrypted password storage
- Regular security vulnerability assessments
- Firewall protection and intrusion detection
Administrative Controls
- Limited access on need-to-know basis
- Employee training on data protection
- Background checks for staff with data access
- Regular privacy and security policy updates
- Incident response procedures
Physical Security
- Secure data centers with access controls
- 24/7 monitoring and surveillance
- Backup systems in multiple locations
- Environmental controls and power protection
- Secure disposal of hardware
⚠️ Data Breach Notification
In the unlikely event of a data breach, we will:
- Notify affected customers within 72 hours
- Report to relevant authorities as required by law
- Provide clear information about what happened and what we’re doing
- Offer free credit monitoring if financial data is involved
Data Retention & Deletion
How Long We Keep Your Information
We retain your personal data only as long as necessary for legitimate business purposes or as required by law:
| Data Type |
Retention Period |
Reason |
| Account Information |
Until account deletion + 30 days |
Service provision and legal requirements |
| Order History |
7 years |
Tax compliance and warranty support |
| Payment Data |
Not stored (processed by payment gateway) |
Security best practice |
| Marketing Communications |
Until unsubscribe + 30 days |
Compliance and suppression list |
| Website Analytics |
26 months |
Business insights and improvement |
| Customer Support |
3 years |
Service quality and training |
Your Privacy Rights
You Have Control Over Your Data
Under Indian privacy laws and GDPR, you have the following rights:
Access Rights
- View all data we have about you
- Understand how we use your information
- Get copies of your personal data
- Know who we share data with
✏️ Correction Rights
- Update incorrect information
- Complete incomplete data
- Modify outdated details
- Correct any inaccuracies
️ Deletion Rights
- Delete your account and data
- Remove specific information
- “Right to be forgotten”
- Stop processing your data
Control Rights
- Opt out of marketing emails
- Restrict certain data processing
- Object to automated decision-making
- Withdraw consent anytime
How to Exercise Your Rights
Contact us through any of these channels:
- Email: privacy@bookszest.com
- Phone: +91-9990115559 (ask for privacy team)
- Mail: Privacy Officer, BooksZest, 156-D, Sarai Julaina, New Delhi – 110025
- Online: Use the privacy request form on our website
We’ll respond to your request within 30 days.
Children’s Privacy
Protecting Children Online
BooksZest is committed to protecting children’s privacy online:
- Age Requirement: Our services are intended for users 18 years and older
- No Intentional Collection: We do not knowingly collect personal information from children under 18
- Parental Rights: Parents can contact us to review, delete, or stop collection of their child’s information
- Immediate Action: If we discover we’ve collected a child’s information, we’ll delete it immediately
- Parental Consent: Any collection from children under 18 requires verifiable parental consent
If you believe we’ve collected your child’s information, contact us immediately at privacy@bookszest.com
International Data Transfers
Cross-Border Data Protection
Your personal data is primarily stored and processed in India. However, some of our service providers may be located outside India:
- Adequate Protection: We only transfer data to countries with adequate data protection laws
- Contractual Safeguards: Standard contractual clauses with international service providers
- Security Measures: Same level of protection regardless of location
- Your Rights: Your privacy rights remain the same regardless of where data is processed
- Notification: We’ll inform you of any significant changes to international transfers
Third-Party Services & Links
External Services We Use
BooksZest integrates with several third-party services to provide you with the best experience:
Payment Processors
Services: Razorpay, PayU, Stripe
Data Shared: Transaction details, billing information
Purpose: Secure payment processing
Protection: PCI DSS compliant, encrypted transactions
Analytics Services
Services: Google Analytics, Facebook Pixel
Data Shared: Anonymized usage data
Purpose: Website optimization, advertising
Control: Can be disabled via cookie preferences
Shipping Partners
Services: BlueDart, DTDC, India Post
Data Shared: Name, address, phone number
Purpose: Package delivery
Protection: Confidentiality agreements, limited use
Communication Tools
Services: Email marketing platforms, SMS services
Data Shared: Contact information, preferences
Purpose: Customer communication
Control: Unsubscribe anytime
⚠️ External Links: Our website may contain links to third-party websites. We’re not responsible for their privacy practices. Please review their privacy policies before sharing personal information.
Marketing Communications
✉️ How We Communicate with You
We send different types of communications based on your relationship with us:
Essential Communications
(Cannot be opted out as they’re required for service)
- Order confirmations and updates
- Shipping notifications
- Account security alerts
- Legal notices and policy updates
Marketing Communications
(Require your consent – opt-in basis)
- Book recommendations and new arrivals
- Special offers and discounts
- Educational content and tips
- Event invitations and announcements
Preference Management
(You have full control)
- Choose communication frequency
- Select content preferences
- Update contact information
- Unsubscribe from any category
Easy Unsubscribe
You can stop marketing communications anytime:
- Click “Unsubscribe” in any marketing email
- Update preferences in your account settings
- Email us at unsubscribe@bookszest.com
- Call +91-9990115559 and ask to be removed
Note: You’ll still receive essential service-related communications.
Policy Updates & Changes
Keeping You Informed of Changes
We may update this Privacy Policy from time to time. Here’s how we handle changes:
Notification Process
- Minor Changes: Updated policy posted on website with revision date
- Significant Changes: Email notification to all registered users
- Major Changes: Prominent website notice + email + 30-day advance notice
- Continued Use: Using our services after changes indicates acceptance
What Constitutes Significant Changes
- New ways of collecting or using personal data
- Changes to data sharing practices