Transparency
Data Protection at PezeA
How privacy by design is built into this website.
Our approach
We collect the minimum needed for each purpose, ask for choices separately, and keep evidence of what you agreed to. This page explains the controls that exist in this website today.
Purpose limitation
Every field has a documented purpose. We do not collect data “just in case”.
Granular consent
Consent is recorded per purpose and per channel, with the wording version and timestamp.
Security
Verification is server-side. Secrets are encrypted at rest and never sent to the browser.
Retention
Retention periods are configurable and enforced. Data is not kept indefinitely by default.
Your rights
You can access, correct, erase, withdraw consent, or raise a grievance using our request workflow.
Indian data protection law
We follow the Digital Personal Data Protection Act, 2023 and its rules as our reference framework. These are being brought into force in phases. We design the system to support the requirements and to be ready for the obligations as they commence. Not every provision is in force today.
This website does not by itself make the service legally compliant. Before launch, the operator must confirm current applicability, the commencement schedule, and any sector-specific requirements with qualified Indian privacy counsel.
Security incidents
We maintain an incident response process covering identification, containment, investigation, assessment of affected data, escalation, notification where required, recovery, and post-incident review. The existence of a process is not a claim that every statutory notification obligation is automated.
Contact
- Privacy contact: privacy@pezea.store
- Grievance officer: grievance@pezea.store