Grievance Officer & Data Protection

Zziffy is committed to the responsible handling of personal data under the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This page identifies the officer designated to address concerns and explains how to raise one.

1. Designated Grievance Officer

Under Section 8(10) of the DPDPA and Rule 5(9) of the IT Rules, 2011, the following individual is the designated point of contact for all personal-data and privacy concerns relating to the Zziffy service:

• Name: Ms. Nafisa Mukadam
• Designation: Director, Zonafi Ventures (OPC) Private Limited
• Email: [email protected] (subject line: "Grievance — DPDPA")
• Postal address: Zonafi Ventures (OPC) Private Limited, F-1 Type, Shop No. 20, Sector 3/4, Vashi, Navi Mumbai, Maharashtra 400703, India

For business or product questions that are not data-protection matters, please use the regular support channels at [email protected] or WhatsApp +91 84335 50900.

2. What kinds of grievances we handle

You can use this channel for any of the following:

• Requests to access the personal data we hold about you
• Requests to correct, complete or update inaccurate personal data
• Requests to delete personal data we hold ("right to erasure")
• Withdrawal of previously granted consent
• Concerns about how data is being processed, stored or shared
• Reports of suspected unauthorised access, data leakage or security incidents
• Complaints about an employee, fellow user or third party misusing the service to access your data
• Requests for clarification on our Privacy Policy or Terms of Service

3. How to file a grievance

Send a message to [email protected] with the subject line "Grievance — DPDPA" and include the following so we can act quickly:

• Your full name and the mobile number / email registered with Zziffy
• The business name (if applicable) under which the account is registered
• Whether you are the business owner, an enrolled employee, or someone acting on their behalf
• A clear description of your concern or request
• Any supporting screenshots, dates or reference IDs
• Your preferred response channel (email is fastest; we will also accept postal mail)

For requests made on behalf of another person (e.g. by a parent, guardian or legal representative), please attach proof of your authority to act for them.

4. Our response timeline

We commit to the following service levels:

• Acknowledgement — within 48 hours of receiving your grievance, confirming we have it and providing a reference number.
• Initial substantive response — within 15 business days, either resolving the matter or explaining what further information we need.
• Final resolution — within 30 days, as required by Section 8(10) of the DPDPA and Rule 5(9) of the IT Rules.

Complex requests (for example, those requiring extensive data export or third-party coordination) may take longer, in which case we will keep you informed of progress and the expected resolution date.

5. Identity verification

Before acting on requests that affect personal data — particularly access, correction or deletion — we will verify your identity. This is to protect you against impersonation. We will use the minimum information necessary for this verification and will not request copies of identity documents unless absolutely required.

6. Escalation: Data Protection Board of India

If you are not satisfied with our response, or if you have not received a response within the timelines above, you may escalate the matter to the Data Protection Board of India established under Chapter V of the DPDPA. The Board's contact channels and complaint procedure are published on the Ministry of Electronics & Information Technology (MeitY) website at www.meity.gov.in.

You may also contact the Indian Computer Emergency Response Team (CERT-In) at [email protected] to report a cybersecurity incident under the IT Act.

7. Confidentiality

Grievances and any personal information shared as part of one are treated as confidential. We will only share details internally on a need-to-know basis to resolve the matter and will not disclose them to other users without your explicit consent or a binding legal order.

8. Updates to this page

Any change in the designated Grievance Officer, their contact details or our response timelines will be reflected here within 7 days of the change. The "Last updated" date at the top of this page indicates the most recent revision.

9. Related documents

• Privacy Policy — the full account of what we collect, why, and your rights
• Terms of Service — the agreement under which Zziffy is offered
• Security — technical and organisational measures we apply