Privacy Policy
This Privacy Policy explains how IDLE ("we", "us", "our") collects, uses, processes, stores, shares, and protects personal data when you visit our website, use our services, purchase our products, or otherwise interact with our brand.
This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India. It should be read together with our Terms & Conditions and any other policies published on our website, which form an integral part of your use of our services.
If you do not agree with this Policy, please do not use or access our website or services.
IDLE is the data fiduciary responsible for the personal data collected under this Policy through our website and services. This Policy applies uniformly to our website, mobile site, and any applications or other digital mediums through which we provide our services.
By using our website or services, or by providing your personal data to us, you give your free, specific, informed, and unambiguous consent to the collection, use, processing, sharing, and storage of your personal data in the manner described in this Policy.
Any data we collect is need-based and limited to what is necessary to serve your requests. If we intend to use your personal data for a purpose different from those listed in this Policy, we will seek your consent in advance for that purpose.
You may choose not to share certain information with us, or withdraw consent you have previously given. However, this may restrict your ability to register, place orders, or access some or all features of our website and services.
Information you provide directly
- Contact details — name, email address, phone number, shipping and billing address
- Profile details — date of birth (where age verification or offers require it), preferences
- Order details — order history, purchase preferences, and transaction references
- Communications — feedback, reviews, and your interactions with our support team
- Participation data — information submitted through contests, giveaways, campaigns, or newsletter sign-ups
Information collected automatically
- Device and technical data — IP address, browser type, operating system, device identifiers
- Usage data — pages visited, time spent on site, referral source, and anonymous site statistics
- Cookies — and similar tracking technologies (see section 08)
Information from third parties
- Payment confirmation, transaction reference, and transaction status from our payment partners (see section 05)
- Delivery and logistics updates from our shipping partners
- Aggregated, anonymized audience insights from advertising and analytics platforms
- Process and fulfil your orders and requests
- Verify and complete payment transactions
- Communicate order status, delivery updates, and customer support
- Resolve disputes and troubleshoot concerns
- Detect and protect against error, fraud, and other unauthorized or criminal activity, and promote safe use of our services
- Send promotional offers, newsletters, or updates about our products and services (only with your consent — you may opt out anytime)
- Customize your experience and measure interest in our products and services
- Improve our website, services, and offerings, and develop new ones
- Enforce our terms and conditions
- Comply with legal and regulatory obligations
We will not use your email address or mobile number for unsolicited communications. Any messages we send will relate to the services you have requested, or to marketing you have consented to receive.
Payments on our website are processed through reputed, RBI-authorised Indian payment platforms.
When you make a payment, you are redirected to or interact with the secure checkout interface of one of these payment partners. Your payment details (card number, CVV, UPI ID, PIN, net banking credentials) are collected, processed, and stored directly by these payment partners, in accordance with their own privacy policies and industry security standards, including PCI-DSS compliance. IDLE does not have access to, and does not store, your full payment credentials.
IDLE only receives confirmation of transaction status (success/failure), transaction reference, and amount from these partners in order to fulfil and record your order.
Personal data collected by a payment partner at checkout is governed by that partner's own privacy policy. We encourage you to review the privacy policy of the payment platform you use, available on their respective websites.
We share personal data only on a need-to-know basis, and only to the extent necessary for the purposes described in this Policy, with:
- Payment partners — to process transactions
- Logistics and delivery partners — to fulfil and ship your orders
- Service providers — who assist in operating our website, communications, and customer support, under appropriate confidentiality obligations
- Marketing and analytics providers — in aggregated or anonymized form, to improve our services
- Government authorities, regulators, or law enforcement — where required under applicable law or legal process
- Professional advisors (legal, audit) — on a need-to-know basis
We store and retain your personal data for no longer than is necessary to fulfil the purpose for which it was collected, to answer your queries or resolve issues, and to provide our services to you.
We may retain certain data beyond this period where we believe it is necessary to prevent fraud or future abuse, where required by applicable law (such as tax and accounting requirements), during the pendency of any legal or regulatory proceeding, or pursuant to a legal or regulatory direction.
Once personal data has reached the end of its retention period, it is deleted or anonymized in line with our internal data retention practices. You may request deletion of your data at any time, subject to the legal retention obligations above (see section 09).
A cookie is a small piece of information stored by a web server on your browser so it can later be read back. Our website uses cookies and similar technologies to:
- Remember your preferences and cart items
- Improve the responsiveness of the website for you
- Understand website usage and improve user experience
- Deliver relevant advertisements
No personal data is collected through cookies themselves; however, if you have previously provided personal data, cookies may be tied to that data. Aggregate, non-identifying cookie information may be shared with analytics providers.
You can control or disable cookies through your browser settings. Disabling cookies may affect certain website functionalities, such as cart persistence.
As a data principal, you have the right to:
- Access — request a summary of the personal data we hold about you and how it has been processed
- Correct or update — have inaccurate or incomplete data corrected, updated, or completed
- Request deletion — have your personal data erased, subject to legal retention requirements
- Withdraw consent — at any time, for processing based on consent, including marketing communications; withdrawal may affect services that depend on that consent
- Grievance redressal — raise concerns about how your data is handled (see section 13)
- Nominate — designate another individual to exercise your rights in the event of death or incapacity
To exercise any of these rights, contact us at beverages@zin8.com. We may need to request specific information from you to confirm your identity before acting on a request. We will make good-faith efforts to respond within a reasonable time and to reflect requested changes in our active databases as soon as reasonably possible.
You are responsible for providing information that is accurate, complete, and up to date, and for informing us of any changes to it at the earliest.
We take reasonable physical, technical, managerial, and operational measures, as required under applicable laws of India, to protect the integrity and security of the personal data we collect and maintain, including:
- SSL/TLS encryption for data transmitted through our website
- Restricted, role-based access to personal data internally, on a need-to-know basis
- Secure payment processing through PCI-DSS-compliant partners
- Regular review of our policies and practices on collection, storage, and processing of personal data
We have procedures in place to deal with any suspected personal data breach, and will notify you and the applicable regulator or authority of a breach where we are legally required to do so.
While we take data protection seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You play an important role in keeping your data safe. If you create an account with us, you are responsible for maintaining the confidentiality of your login credentials, and for all activity under your account.
- Do not share your account password or one-time passwords (OTPs) with anyone. IDLE will never ask you for your password, OTP, card number, CVV, or UPI PIN over phone, email, or message.
- Notify us promptly if you suspect any unauthorized use of your account or any actual or suspected compromise of your personal data.
- Keep your contact details up to date so that order and security communications reach you.
Our website and services are not directed at individuals under the age of 18, and are available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. We do not knowingly solicit or collect personal data from minors.
We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action, including deletion of such data.
If you have any concerns, questions, or complaints regarding the processing of your personal data or this Privacy Policy, you may write to us at:
We will make reasonable efforts to acknowledge and address your concern within a reasonable timeframe, in accordance with applicable law.
Our website may contain links to third-party websites, plug-ins, and applications, including those of our payment partners. By clicking on those links or enabling those connections, you may allow third parties to collect or share data about you.
We do not have oversight of these third-party websites and are not responsible for their content, privacy practices, or processing of your personal data. Any information collected by a third party in this manner is subject to that third party's own policies, and we encourage you to read them before use.
As our business and the law evolve, this Privacy Policy may change. We reserve the right to change, modify, add, or remove portions of this Policy from time to time. The most current version will always be published on this page with a revised "Last updated" date.
We encourage you to review this Policy periodically to stay informed. Continued use of our website or services after changes are posted constitutes acceptance of the updated Policy. Where required by applicable law, we will notify you of material changes or seek fresh consent.
If you have any questions about this Privacy Policy or how your data is handled, please reach out to: