Privacy Policy

Zappr Delivery Private Limited ("Zappr", "we", "us" or "our") is a third-party logistics (3PL) company based in Bengaluru. We help D2C brands store their products and deliver them to their customers.

This Privacy Policy explains what personal data we collect through our website www.zappr.delivery (the "Website") and while running our business, why we collect it, and the choices you have.

Our Website is purely informational. You cannot place orders or make payments on it.

We have written this policy to follow the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000.

This policy applies to:

• People who visit our Website
• Brands and business contacts who reach out to us, or whom we reach out to
• People who apply for jobs with us
• Customers of our brand partners whose orders we deliver (see Section 4)

Here is exactly what we collect, and what we use it for:

We do not ask for sensitive information such as passwords, bank or card details, government ID numbers or health information on the Website. Please do not share these in our forms or chat.

When you order from a brand that uses Zappr, the brand shares some of your details with us so we can deliver your order. This usually includes your name, phone number, delivery address and order details (such as items and delivery instructions). We may also record delivery status and proof of delivery (such as an OTP confirmation, photo or signature).

• We use this information only to store, pack and deliver your order, and to contact you about the delivery.
• Our delivery partners see only what they need to complete your delivery.
• We do not use this information to market to you, and we never sell it.

For this data, the brand you ordered from decides how it is used (under the DPDP Act, the brand is the "Data Fiduciary"), and we handle it on the brand's behalf as a "Data Processor". The brand's own privacy policy applies. If you want to access, correct or delete this data, please contact the brand, and we will help them handle your request. You are also welcome to write to us directly.

We sometimes reach out to businesses we think could benefit from Zappr. To do this, we may collect business contact details (such as name, job title, company and work email) from public sources like company websites and LinkedIn, or from B2B data providers. We may use email tools such as Instantly.ai to send these emails.

• We only contact you in your professional capacity, and only about our services.
• Every email includes an easy way to opt out. Click "unsubscribe" or simply reply "not interested".
• Once you opt out, we add you to a do-not-contact list so you do not hear from us again.

Cookies are small files stored in your browser. We and our partners use cookies and similar technologies to understand how people use the Website and to measure our marketing. We currently use:

We may add or change tools over time and will update this section when we do.

Your choices: You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. If the Website shows a cookie banner, you can also choose which cookies to allow there. Blocking cookies will not stop the Website from working.

We never sell or rent your personal data. We only share it:

• With service providers who help us run our business, such as website hosting (Vercel), analytics (Google, Microsoft), advertising (Meta), email and outreach tools, messaging (WhatsApp) and cloud storage. They may use your data only to provide their services to us.
• With our delivery partners and brand partners, only as needed to complete deliveries.
• When the law requires it, for example to comply with a court order or a lawful request from a government authority.
• If our business changes, for example in a merger or acquisition. In that case, your data will stay protected under this policy.

When you fill out a form, message us or apply for a job, you agree to us using your data for the purposes described in this policy. In some cases the law allows us to use data without consent, for example to meet a legal obligation.

You can withdraw your consent at any time, as easily as you gave it: email tech@zappr.delivery or click "unsubscribe" in any of our emails. Withdrawing will not affect anything we did before, but we may no longer be able to respond to your enquiry or consider your application.

We keep personal data only for as long as we need it:

• Enquiries and business contacts: while we are in touch, and up to 2 years after our last interaction
• Newsletter: until you unsubscribe
• Job applications: up to 12 months, unless you join us
• Analytics data: according to each tool's settings (for example, up to 14 months in Google Analytics)
• Delivery data: as long as our contract with the brand requires, or as the law requires

We may keep some records longer where the law requires it, such as tax records and security logs (which the DPDP Rules require us to keep for at least one year). After that, we delete the data or make it anonymous.

Under the DPDP Act, you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it
• Correct and update: fix data that is inaccurate, incomplete or out of date
• Erase: ask us to delete your data, unless we must keep it by law
• Withdraw consent: at any time
• Raise a grievance: complain to us if you are unhappy with how we handle your data
• Nominate: choose someone to exercise these rights on your behalf in case of death or incapacity

To use any of these rights, email tech@zappr.delivery, ideally from the email address you used with us. We may need to verify your identity first. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

We use reasonable security measures to protect your data, including encrypted (HTTPS) connections, limiting access to team members who need it, and working with trusted service providers. No system is 100% secure, but if a data breach affects you, we will inform you and the Data Protection Board as required by law.

We are based in India, but some of our service providers (such as Google, Meta, Microsoft and Vercel) may store data on servers outside India. We only use reputable providers, and we will follow any restrictions the Government of India places on transferring data abroad.

• Children: Our Website is meant for businesses and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has shared data with us, contact us and we will delete it.
• Other websites: Our Website may link to other websites. We are not responsible for how they handle your data, so please read their privacy policies.
• Language: This policy is in English. If you would like it in another language listed in the Eighth Schedule of the Constitution of India, email us and we will help.
• Governing law: This policy is governed by the laws of India, and the courts in Bengaluru, Karnataka have jurisdiction.

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If the changes are significant, we will also post a notice on the Website.

If you have any questions, requests or complaints about your personal data, please contact our Grievance Officer:

Shaheer AhmedFounder and Grievance OfficerZappr Delivery Private LimitedNo. 26/1a, Mangammanapalya Main RoadHSR Layout, Bengaluru 560068Karnataka, IndiaEmail: tech@zappr.delivery

We aim to acknowledge complaints within 48 hours and resolve them within 30 days.