Privacy policy

Last Updated: January 10, 2026

1. Introduction

ZXX ("we", "our", "us") operates the website zxxcosmo.com (collectively, our "Services"). We are committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you use our Services.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with these terms, please do not use our Services.

2. Information We Collect

We collect information to provide better services and enhance your shopping experience. The information we collect includes:

2.1 Personal Information You Provide

· Account Information: Name, username, password, email address, phone number, date of birth, gender, and security questions

· Contact Information: Shipping and billing addresses

· Payment Information: Payment details (such as card, UPI, or net banking information) are processed securely by our authorized payment partners. ZXX does not store full card details on its servers. We receive limited transaction-related information such as payment status, order ID, and amount for record-keeping purposes.

· Profile Information: Beauty preferences, skin type, product reviews, Wishlist items, and personalized settings

· Communication Data: Messages through customer support, feedback, surveys, and marketing preferences

2.2 Information Collected Automatically

· Device Information: IP address, device type, operating system, browser type and version, unique device identifiers

· Usage Information: Pages visited, products viewed, search queries, time spent on site, click-through rates

· Location Data: General location based on IP address (with your consent for precise location)

· Cookies and Tracking: As detailed in our Cookie Policy below

2.3 Information from Third Parties

· Social media: If you connect through social media platforms, we may receive profile information as permitted by your privacy settings

· Marketing Partners: Demographic and interest information from trusted advertising partners

· Service Providers: Order fulfilment, payment processing, and delivery status information

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

· Consent: When you have given clear consent for specific purposes (e.g., marketing communications, cookies)

· Contract Performance: To fulfil our obligations under purchase agreements and provide services

· Legal Obligation: To comply with applicable laws, regulations, and legal processes

· Legitimate Interest: To operate our business, prevent fraud, improve services, and ensure security

· Vital Interest: To protect your life, health, or safety in emergency situations

4. How We Use Your Information

4.1 Service Provision

· Process and fulfil orders, handle payments, and arrange delivery

· Manage your account, preferences, and order history

· Provide customer support and respond to inquiries

· Send transactional communications (order confirmations, shipping updates)

4.2 Service Improvement

· Personalize your shopping experience and product recommendations

· Analyse usage patterns to improve website functionality and user experience

· Conduct market research and gather feedback to enhance our products and services

· Develop new features and services

4.3 Marketing and Communications

· Send promotional emails, newsletters, and special offers (with your consent)

· Display personalized advertisements on our platform and partner sites

· Notify you about new products, sales, and events

· Conduct promotional campaigns and contests

4.4 Security and Legal Compliance

· Detect, prevent, and investigate fraud, unauthorized transactions, and security threats

· Enforce our terms of service and protect our legal rights

· Comply with legal obligations, court orders, and regulatory requirements

· Maintain business records and resolve disputes

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers and Business Partners

· E-commerce Platform: Shopify Inc. for website hosting and payment processing

· Payment Processors: Razor pay, PayU, and other authorized payment gateways. All payments are handled by secure, PCI-DSS compliant payment gateways. ZXX does not collect or store sensitive payment information such as full card numbers or CVV details.

· Logistics Partners: Delhivery, or other courier services for order fulfilment

· Marketing Services: Google Analytics, Facebook Ads, and email marketing platforms

· Customer Support: Third-party support platforms and tools

5.2 Legal Requirements

· Government authorities, law enforcement, or courts when required by applicable law

· To protect our rights, property, or safety, or that of our users or the public

· In response to legal process, subpoenas, or official investigations

5.3 Business Transactions

· In connection with mergers, acquisitions, asset sales, or other business transactions

· To successors or assigns in the event of business restructuring

5.4 International Transfers

Currently, we primarily store and process data within India. However, some third-party service providers we use (such as website hosting, payment processing, or analytics tools) may be located outside India, which could result in your personal information being transferred to countries including the United States or European Union.

When international transfers occur, we ensure appropriate safeguards through:

Standard Contractual Clauses with service providers
Selecting providers with strong data protection certifications
Contractual obligations requiring equivalent protection standards

For current information about which specific services involve international transfers, please contact us at info@zxxcosmo.com

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

· Essential Cookies: Necessary for website functionality and security

· Performance Cookies: Help us analyse how you use our website

· Functional Cookies: Remember your preferences and settings

· Marketing Cookies: Used to deliver personalized advertisements

6.2 Cookie Management

You can control cookies through:

· Browser Settings: Most browsers allow you to refuse or delete cookies

· Opt-Out Tools: Industry opt-out mechanisms for advertising cookies

· Our Cookie Preference Centre: Available in your account settings

6.3 Third-Party Tracking

We use third-party analytics and advertising services, including Google Analytics, Facebook Pixel, and other tracking technologies. These services have their own privacy policies governing their use of information.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

· Request copies of your personal information in our possession

· Receive your data in a structured, machine-readable format

· Transfer your data to another service provider

7.2 Correction and Deletion

· Correct inaccurate or outdated personal information

· Request deletion of your personal information (subject to legal limitations)

· Update your account information and preferences

7.3 Processing Restrictions

· Object to or restrict certain data processing activities

· Withdraw consent where processing is based on consent

· Opt-out of marketing communications and targeted advertising

7.4 Exercising Your Rights

To exercise your rights, contact us at:

· Email: info@zxxcosmo.com

· Phone: +91-98939 39388

· Address: B-38 Majlis Park, Adarsh Nagar, New Delhi - 110033, India

Response Time: We will respond to your requests within 30 days of receipt. Complex requests may require additional time, and we will inform you of any delays.

8. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child under 18, please contact us immediately, and we will take steps to delete such information promptly.

Parental Consent: If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@zxxcosmo.com. We will promptly review and delete such information.

9. Data Security and Protection

9.1 Security Measures

We implement comprehensive security measures including:

· Encryption: SSL/TLS encryption for data transmission and AES-256 encryption for data storage

· Access Controls: Role-based access restrictions and multi-factor authentication

· Regular Audits: Periodic security assessments and vulnerability testing

· Secure Infrastructure: Cloud hosting with enterprise-grade security standards

9.2 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will:

· Notify relevant authorities within 72 hours

· Inform affected users without undue delay

· Provide clear information about the breach and remedial actions

· Take immediate steps to contain and remediate the breach

10. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

10.1 Retention Periods

· Account Information: Retained while your account is active, plus 3 years after account closure

· Transaction Data: Retained for 7 years for accounting and legal compliance

· Marketing Data: Retained until you withdraw consent or 2 years of inactivity

· Technical Logs: Retained for 12 months for security and performance analysis

10.2 Deletion Process

When retention periods expire, we securely delete or anonymize your information using industry-standard methods.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

12. Updates to This Privacy Policy

12.1 Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through:

· Email Notification: To registered users at least 30 days before changes take effect

· Website Notice: Prominent notice on our homepage

· In-App Notification: For mobile app users

12.2 Continued Use

Your continued use of our Services after policy changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

· Email: info@zxxcosmo.com

· WhatsApp or call: +91-98939 39388

· Hours: Monday-Saturday, 10:00 AM - 6:00 PM IST

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

Last Updated: January 2026 | Policy Version: 1.0