How Ceezon Apparels Private Limited collects, uses, stores and protects your personal data — including body measurements and camera data.
This Privacy Policy is published by Ceezon Apparels Private Limited, a company incorporated under the Companies Act 2013, operating the website ceezon.com and any associated mobile applications (collectively, the "Platform").
| Detail | Information |
|---|---|
| Legal name | Ceezon Apparels Private Limited |
| CIN | U85100DL2022PTC402341 |
| GSTIN | 07AAJCD4632M1ZD |
| Registered office | Dwarka, New Delhi — 110078 |
| privacy@ceezon.com | |
| Grievance Officer | Sunita — grievance@ceezon.com |
By accessing or using ceezon.com, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform.
This is sensitive personal data. Under the Digital Personal Data Protection Act 2023 (DPDP Act), body measurements derived from camera imaging are treated as sensitive personal data. We collect this only with your explicit, informed consent and for the sole purpose of recommending clothing sizes and styles.
When you choose to use the camera-based body scan, your phone camera activates locally in your browser. The MediaPipe body landmark detection model (provided by Google, running entirely on your device) analyses your pose and estimates body proportions. No camera image or video is ever transmitted to our servers. Only the resulting numerical measurements (e.g. estimated height ratio, shoulder width proportion) are sent to Ceezon for storage in your profile.
Before any camera scan is initiated, you must actively tick a consent checkbox stating: "I consent to Ceezon processing my body measurement data derived from this camera scan, solely to recommend clothing sizes and styles." This consent is logged with a timestamp. You may withdraw consent at any time by deleting your body profile from your account settings.
Body measurement data is stored in encrypted form in our secure database (Supabase). It is used exclusively to:
Body measurement data is never shared with vendors, advertisers, or any third party in identifiable form.
You can delete your body profile at any time by going to Account Settings > My Fit Profile > Delete. Deletion is permanent and immediate. We retain no backup of body data after deletion.
Ceezon allows one account holder to maintain a "Family Vault" — a collection of body profiles for family members, to facilitate gifting and shared shopping.
If you manually enter measurements for a family member, you confirm (via a consent checkbox) that you have their permission to store this data. The family member may contact us at privacy@ceezon.com to request deletion of their profile at any time.
If you send a measurement request link to a family member, they will see a disclosure before filling in any measurements: "Your measurements will be stored in [Name]'s Ceezon account to help them shop for you." By submitting the form, they provide their own consent. Their mobile number or email is recorded as the consent identifier.
When you share a try-on result with another person, only a generated avatar silhouette (based on body dimensions) is shared — not any camera image or photograph. The recipient sees the garment overlaid on a stylised silhouette only.
If you add a profile for a child under 18, you represent that you are their parent or legal guardian and consent on their behalf. We store only the minimum data needed (age band, height, approximate size) for children's profiles.
| Purpose | Data used | Basis |
|---|---|---|
| Processing your order and delivery | Name, address, order details, payment info | Contract performance |
| AI fit and size recommendations | Body profile, browsing behaviour, occasion preference | Consent |
| Virtual try-on feature | Body profile (on-device only for camera; stored dimensions for avatar) | Consent |
| Order tracking and status updates | Mobile number, email, order ID | Contract performance |
| Customer support | Account data, order history, communications | Legitimate interest |
| Legal compliance (GST, invoicing) | Name, address, GSTIN if applicable | Legal obligation |
| Platform improvement (anonymised) | Aggregated usage and fit accuracy data | Legitimate interest |
| Marketing emails (if opted in) | Email, purchase history, style preferences | Consent |
We do not sell your personal data. We do not use your data for advertising on third-party platforms. Ceezon products are ad-free.
Under the DPDP Act 2023 and GDPR (for users in UK/EU), we process your data on the following grounds:
We share your data only as follows:
| Provider | Purpose | Data shared |
|---|---|---|
| Razorpay | Payment processing (India) | Order amount, name, contact |
| Stripe | Payment processing (NRI / international) | Order amount, name, contact |
| Shiprocket / Delhivery / DTDC | Shipping and logistics | Name, delivery address, order ID |
| Supabase | Secure database hosting | All profile and order data (encrypted) |
| Brevo / WATI | Email and WhatsApp order notifications | Name, email, mobile, order status |
| Google (MediaPipe / TensorFlow.js) | On-device body scan AI — runs in your browser only | No data sent to Google |
When an order is placed, we share only the delivery address and order details with the relevant vendor. We never share your body profile, payment information, or personal profile data with vendors.
We may disclose your data to government authorities or law enforcement when required by law, court order, or to protect our rights and the safety of our users.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.
| Data type | Retention period |
|---|---|
| Account and order records | 7 years from last transaction (GST / tax compliance) |
| Body measurement profiles | Until you delete them, or 2 years from last login — whichever is earlier |
| Family member profiles | Until deleted by account holder or by request from the member |
| Camera scan images | Never stored — processed on-device only |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Customer support communications | 2 years from resolution |
| Cookie and session data | See Cookie Policy |
Under the DPDP Act 2023 and applicable law, you have the following rights. To exercise any of these, email privacy@ceezon.com. We will respond within 30 days.
You may request a copy of all personal data we hold about you, including your body profile, order history, and consent records.
You may correct inaccurate or incomplete data through your Account Settings at any time, or by contacting us.
You may request deletion of your account and all associated data. We will delete within 30 days, except data we are legally required to retain (e.g. GST transaction records).
You may withdraw consent for body data processing or marketing communications at any time. Withdrawal does not affect prior lawful processing.
You may request your personal data in a structured, machine-readable format (JSON or CSV).
If you are dissatisfied with how we handle your data, you may contact our Grievance Officer. If unresolved, you may approach the Data Protection Board of India (once constituted under DPDP Act 2023), or, for UK/EU users, your local Data Protection Authority.
For NRI users in the UK: You have additional rights under UK GDPR, including the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We use only essential cookies required to operate the Platform (session management, login state). We do not use advertising, tracking, or analytics cookies. For full details, see our Cookie Policy.
If you access Ceezon from outside India (UK, USA, UAE, Singapore, Canada etc.), your data is transferred to and stored on servers in India. By using the Platform, you consent to this transfer. We ensure that data is protected under standards equivalent to those required in your country of residence.
For UK and EU users, we rely on the adequacy framework and Standard Contractual Clauses where required under UK GDPR / EU GDPR for cross-border transfers.
For UAE users, data processing complies with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection to the extent applicable.
The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verified parental consent. If you are a parent or guardian and believe your child has provided data without your consent, contact us at privacy@ceezon.com and we will delete it promptly.
For family vault profiles of minors (aged 13–17), the account holder — as parent or guardian — provides consent on the minor's behalf. We collect only the minimum data needed for size recommendations.
We implement industry-standard security measures to protect your data, including:
Despite our best efforts, no system is completely secure. If you suspect a breach of your account, contact us immediately at privacy@ceezon.com.
In accordance with the Consumer Protection (E-Commerce) Rules 2020 and the Information Technology Act 2000, we have appointed a Grievance Officer:
| Detail | Information |
|---|---|
| Name | Sunita |
| Designation | Grievance Officer |
| Organisation | Ceezon Apparels Private Limited |
| grievance@ceezon.com | |
| Response time | Within 48 hours of receipt |
| Resolution time | Within 30 days of receipt |
For all other privacy queries: privacy@ceezon.com
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our platform. When we make material changes, we will notify you by email (if you have an account) or by a prominent notice on ceezon.com at least 14 days before the changes take effect.
Continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the changes.
You may always access the current version of this policy at ceezon.com/privacy-policy.html.