Privacy Policy

Crozsi Ecommerce Private Limited ("we", "us", "our", or "Crozsi") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website crozsi.in ("Platform").

This Privacy Policy is published in accordance with Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("IT Rules").

By using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2.1 Information You Provide Directly

• Name, email address, and password when creating an account
• Phone number and billing/shipping address when completing your profile
• Company name and GST number (if applicable)
• Payment information (processed securely through Razorpay/PayU — we do not store card details)
• Domain names and authorization codes for transfer requests
• Communications you send us via support channels

2.2 Information Collected Automatically

• IP address and approximate location
• Browser type and version
• Pages visited and time spent on the Platform
• Referring URLs
• Device information
• Cookies and similar tracking technologies

2.3 Information from Third Parties

• If you sign in using Google, we receive your name, email, and profile picture
• Payment status and transaction IDs from Razorpay and PayU
• Domain registration and WHOIS data from our registrar

We use the information we collect to:

• Create and manage your account
• Process domain registrations, renewals, and transfers
• Process payments and issue GST-compliant invoices
• Send transaction confirmations, invoices, and domain expiry reminders
• Provide customer support
• Verify your identity and prevent fraud
• Comply with legal obligations including GST filing requirements
• Improve the Platform and our services
• Send service-related announcements (you may opt out of marketing communications)
• Enforce our Terms of Service

As a GST-registered business (GSTIN: 33AAMCC0041J1ZZ), we are required by law to collect and retain certain financial information for tax compliance purposes, including:

• Your billing name and address
• GST number (if provided)
• Invoice details and transaction records
• Payment information for GST filing

This financial data is retained for a minimum of 8 years as required under the GST Act, 2017 and the Income Tax Act, 1961.

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

5.1 Service Providers

• Domain registrars — for processing domain registrations, transfers, and renewals. Your WHOIS contact details may be submitted to the registrar and stored in the public WHOIS database unless WHOIS privacy is enabled
• Payment processors — for processing payments securely
• Email service providers — for sending transactional emails
• Cloud hosting providers — for operating the Platform infrastructure

5.2 Legal Requirements

We may disclose your information when required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

When you register a domain, your contact information is required by ICANN policy to be submitted to the public WHOIS database. We enable WHOIS privacy protection by default on all domain registrations at no additional cost, which replaces your personal contact details with our privacy service contact details in the public WHOIS record.

If you choose to disable WHOIS privacy, your name, address, email address, and phone number will become publicly accessible to anyone who queries the WHOIS database.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmission
• Encrypted storage of sensitive credentials
• Secure, hashed storage of passwords (we never store plain-text passwords)
• Access controls limiting who can access personal data
• Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information for the following periods:

• Account information — for as long as your account is active, plus 3 years after closure
• Transaction and invoice records — minimum 8 years as required by GST and tax laws
• Domain registration records — for the duration of domain ownership plus 3 years
• Support communications — 2 years from the date of last communication
• Marketing preferences — until you unsubscribe or request deletion

After the applicable retention period, we will securely delete or anonymize your personal information.

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies — necessary for the Platform to function (e.g., session authentication)
• Functional cookies — to remember your preferences
• Analytics cookies — to understand how users interact with the Platform

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Platform.

Under applicable Indian law, you have the following rights regarding your personal information:

• Right to access — request a copy of the personal information we hold about you
• Right to correction — request correction of inaccurate or incomplete information
• Right to deletion — request deletion of your personal information (subject to legal retention requirements)
• Right to withdraw consent — withdraw consent for processing where consent is the legal basis
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing of your personal information in certain circumstances

To exercise any of these rights, please contact us at support@crozsi.in. We will respond to your request within 30 days.

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below:

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: