Privacy
Privacy policy
Your body data stays on your device. Here's exactly what we collect, why we collect it, and the control you have over it — in line with India's DPDP Act 2023.
Version 2026-08-14 · effective 14 August 2026
Who we are
Ceezon.com is operated by Ceezon Apparels Private Limited (“Ceezon”, “we”, “us”). We handle your personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, and we apply GDPR-equivalent protections for our users in the UK and EU.
What we collect
Account & identity
Your name, email, phone number, and account credentials.
Order & transaction
Delivery addresses, order history, and billing details. We never store full payment card numbers.
Usage
How you browse and interact with the platform, to help us improve it.
Body measurements
Sensitive data used for fit — processed on your device with your explicit consent.
Body measurements stay on your device
Our camera-based fit scan runs entirely on your device using on-device AI (Google MediaPipe). No camera image or video is ever transmitted to our servers. Because body measurements are sensitive data, we ask for your explicit consent before any scan begins. You can withdraw that consent at any time from Account → Privacy & data, where the AI-fit processing consent has a withdraw control (or email support@ceezon.com).
How we use your data
We use your data to create and manage your account, process and deliver your orders, provide AI fit recommendations, offer customer support, meet our legal and tax obligations, and improve the platform. We do not sell your personal data, and we do not use it for third-party advertising.
When we share data
We share only what is necessary to run the service. Each partner below processes your data solely to perform its stated function:
- Payment processing
- Razorpay
- Delivery & logistics
- Xpressbees, Shiprocket
- Email delivery
- Resend
- SMS & WhatsApp messaging
- MSG91
- Hosting & infrastructure
- Vercel, DigitalOcean
- Database & identity
- Neon
- Media storage
- Cloudflare R2
- Sign-in (optional)
We never share your body profile, full payment card numbers, or personal profile data with vendors. We may also disclose data where required by law.
Where your data is processed
Most processing happens in India. Some of the partners above operate outside India, so running the service involves a cross-border transfer of the limited data each one needs:
- Vercel — Global edge (US-primary control plane)
- Neon — Singapore (AWS ap-southeast-1)
- Cloudflare R2 — Global (Cloudflare; jurisdiction configurable)
- Resend — United States
- Google — United States
Where data is transferred internationally we rely on the provider's contractual data-protection terms, and we transfer only the minimum each partner needs to do its job. Your on-device body measurements are never part of any such transfer.
Your rights under the DPDP Act
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Request erasure of your data
- Withdraw consent you have previously given
- Request a portable copy of your data
Most of these are self-serve in Account → Privacy & data: withdraw any consent, choose how we contact you (per channel and category), download a machine-readable copy of everything we hold, review and revoke active sessions, and delete your account. You can also email support@ceezon.com; we respond to verified requests within 30 days.
How long we keep your data
When you delete your account we permanently erase your fit profiles, family members, wishlist, preferences, saved addresses and login. However, the law requires us to keep certain records: books of account for 8 years (Companies Act, 2013) and GST records for at least 6 years. So your tax invoices are retained — but the customer record behind them is anonymised (your name, email, phone and GSTIN removed), no longer identifies you, and is never used again. Your body profile is otherwise kept only until you delete it, or until 2 years of account inactivity — whichever comes first.
How we keep your data secure
Your data is encrypted in transit using TLS/SSL and at rest using AES-256. Row-level database security ensures that one user can never access another user's data.
Company & legal identity
- Legal entity
- Ceezon Apparels Private Limited
- CIN
- U85100DL2022PTC402341
- GSTIN
- 07AAJCD4632M1ZD
- Registered office
- Connaught Place, New Delhi — 110001
- Data protection contact
- support@ceezon.com