Legal

Privacy Policy

What we collect, why we collect it, who it reaches, and the control you have over it. Written to be read, not to be skimmed past.

Last updated

Effective from

Who this applies to

ZEROHORIZON LABS PRIVATE LIMITED ("Woohl", "we", "us") operates woohl.com and the Woohl mobile experience. This policy explains how we handle your personal data when you browse, buy, watch reels, or create an account.

It is written in line with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

What we collect

CategoryExamplesWhy we need it

Account data

Name, email address, phone number, password hash

To create and secure your account

Order data

Delivery address, order contents, invoices, order history

To fulfil, deliver and support your orders

Payment data

Payment method type, transaction reference, payment status

To confirm payment and process refunds

Activity data

Products viewed, reels watched, wishlist and cart contents, searches

To rank what you see and improve recommendations

Device and log data

IP address, browser and device type, timestamps, crash logs

Security, fraud prevention and debugging

Communications

Emails, WhatsApp messages and support tickets you send us

To answer you and keep a record of the issue

How we use it

  • Fulfilling orders — processing payment, sharing the delivery address with the brand and courier, issuing invoices and handling returns.

  • Running your account — authentication, saved addresses, wishlists, wallet balance and referral rewards.

  • Personalising discovery — ranking reels, products and brands against what you have shown interest in.

  • Support — answering questions, investigating complaints and honouring the timelines in our Grievance Redressal process.

  • Safety and fraud prevention — detecting fake orders, payment fraud and abuse of coupons or referrals.

  • Legal obligations — tax records, statutory reporting, and responding to lawful requests from authorities.

  • Marketing you can switch off — offers and drop announcements, sent only where you have not opted out. Every message carries an unsubscribe route.

Who we share it with

We share the minimum needed to complete what you asked for. We do not sell personal data, and we do not share it with advertisers for their own use.

RecipientWhat they receive

Brands and sellers on Woohl

Your name, delivery address and phone number for the specific order they fulfil

Logistics partners

Name, address and phone number, to deliver and to arrange return pickups

Razorpay

Payment and refund details needed to process the transaction

Infrastructure and analytics providers

Hosting, error monitoring and aggregate usage data under contract

Authorities

Only where required by law, a valid court order, or a lawful request

Cookies and similar technologies

Cookies keep you signed in, remember your cart between visits, and tell us which parts of the site are actually used. We group them as:

  • Essential — session, authentication and security. The site does not function without these.

  • Preference — your saved settings, such as recently viewed items.

  • Analytics — aggregate, de-identified measurement of page performance and usage.

You can clear or block cookies in your browser settings. Blocking essential cookies will sign you out and break checkout.

How long we keep it

  • Account data — for as long as your account is open, then up to 90 days after deletion to handle disputes and reversals.

  • Order and invoice records — up to 8 years, as required under Indian tax and company law.

  • Activity data — up to 24 months, after which it is aggregated or deleted.

  • Support conversations — up to 3 years from the date the ticket is closed.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

  • Access a summary of the personal data we hold about you and who we have shared it with

  • Correct anything inaccurate, incomplete or out of date

  • Erase your data where we no longer need it for a legal or contractual purpose

  • Withdraw consent you previously gave, including for marketing messages

  • Nominate another person to exercise these rights if you are unable to

  • Complain to us, and then to the Data Protection Board of India if you are unsatisfied

To exercise any of these, write to hello@woohl.com from your registered email address. We respond within 30 days. Account deletion can also be requested directly from the support screen inside your account.

How we protect it

  • Traffic is encrypted in transit with TLS.

  • Passwords are stored as salted hashes and are never recoverable in plain text.

  • Access to production data is limited to staff who need it, and is logged.

  • Payment credentials are handled entirely by our PCI-DSS compliant gateway.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India as required by law.

Children

Woohl is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

When this policy changes materially we update the date at the top of this page and, where the change affects how we use your data, tell you by email or in the app before it takes effect.

Contact us about privacy