1.      briz Privacy Policy

This Privacy Policy is published in accordance with applicable Indian privacy, data protection, information technology, and consumer protection requirements, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, the Consumer Protection Act, 2019, and the Consumer Protection (E-Commerce) Rules, 2020, to the extent applicable to briz.

At briz, we respect your privacy and are committed to handling your personal information responsibly.

This Privacy Policy explains how briz collects, uses, stores, shares, protects, and manages your personal information when you interact with us, including through our website, OTP-based checkout, product orders, customer support channels, marketing communications, surveys, cookies, pixels, marketplaces, offline retail channels, and other briz-related interactions.

This Privacy Policy applies to personal information processed by briz in connection with its website, products, services, orders, customer support, marketing communications, and related business activities. briz currently offers its products and services to customers in India.

Where consent is required under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, or applicable Information Technology Rules, briz will seek your consent for the relevant processing activity through an appropriate action, notice, form, checkbox, OTP flow, cookie choice, communication preference, or other consent mechanism.

If you do not agree with this Privacy Policy, you should not use our website, place an order, or provide your personal information to briz, except where you choose to contact us for privacy-related requests or grievances.

This Privacy Policy should be read together with the briz Terms & Conditions, Shipping Policy, Return & Refund Policy, and other customer-facing policies, where applicable.

2.      Definitions and Interpretation

In this Privacy Policy, references to “briz,” “we,” “us,” or “our” mean the briz brand owned and operated by Mastra Media LLP.

References to “you,” “your,” or “customer” mean any individual who visits our website, places an order, verifies through OTP, contacts us, subscribes to our communications, participates in surveys, purchases or interacts with briz through marketplaces or offline retail channels, or otherwise interacts with briz.

“Personal information” means any information that relates to an identified or identifiable individual. This Privacy Policy explains the categories of personal information we may collect and how we use, share, retain, and protect it.

“Website” means briz’s website through which you may browse products, place orders, verify through OTP, contact us, or otherwise interact with briz online.

“Services” means briz’s products and related services, including website interactions, order placement, checkout, delivery-related support, customer support, marketing communications, surveys, and other briz-related customer interactions.

“Processing” means any operation performed on personal information, including collection, recording, storage, use, disclosure, sharing, updating, deletion, or other handling of personal information.

“Data Fiduciary” means the person or entity that determines the purpose and means of processing personal information. For this Privacy Policy, Mastra Media LLP acts as the Data Fiduciary for personal information processed in connection with briz.

“Data Processor” means a third party that processes personal information on behalf of a Data Fiduciary.

Where the Digital Personal Data Protection Act, 2023 or the Digital Personal Data Protection Rules, 2025 uses similar or related terms, including “Data Principal,” “Data Fiduciary,” or “Data Processor,” those terms should be understood in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

3.      Who We Are

briz is an Indian personal-care product owned and operated by Mastra Media LLP.

Mastra Media LLP sells, markets, and retails personal-care products under the briz brand through its own website, marketplaces, and offline retail channels.

Our contact address is:

Mastra Media LLP

Floor No.: 18th, Building No./Flat No.: 1805/1806,

Goregaon Mulund Link Road, near Nahur Station,

Mulund East, Mumbai 400081, India.

You may contact us for customer care queries at:

Email: contact@feelbriz.com

Phone: 1800 309 2205

4.      Our Role in Processing Personal Data

Mastra Media LLP, which owns and operates the briz brand, is responsible for deciding why and how personal information is collected and used for briz-related business activities, including website operations, order processing, customer support, marketing communications, delivery-related support, fraud prevention, compliance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, tax and accounting requirements, and related business operations.

briz may engage third-party service providers, vendors, platforms, partners, and business-support providers to help us operate our website, process orders, enable checkout, receive payment confirmations, arrange delivery, send customer communications, support marketing and advertising activities, conduct analytics, maintain technology systems, manage customer support, and improve our products and services.

Where such third parties process personal information on behalf of briz, we take reasonable steps to require them to process such information only for authorized purposes and in accordance with applicable contractual, confidentiality, security, and data protection obligations under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and applicable Information Technology Rules.

Certain third-party websites, platforms, marketplaces, payment pages, logistics portals, advertising platforms, social media platforms, retail partners, or other services may be owned, operated, or controlled independently by those third parties. When you access or interact with such independently controlled third-party services, those third parties may process your personal information in accordance with their own privacy policies, cookie policies, terms of use, and business practices.

This section explains how briz handles your personal information. You can find more information about third-party links, third-party services, and the responsibilities of third parties in the “Third-Party Links and Services” section of this Privacy Policy.

5.      Our Privacy Commitment

At briz, we aim to collect personal information only where it is relevant to your interaction with briz and to use it for clear, lawful, and stated purposes.

We take reasonable steps to protect personal information in our control and to handle it in a fair and transparent manner.

We also aim to provide appropriate ways for you to contact us, raise privacy-related requests or grievances, and exercise choices available to you under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

6.      Personal Data We Collect

We collect personal information that is relevant to your interaction with briz. The information we collect may depend on how you use our website, place an order, verify through OTP, contact us, receive marketing communications, participate in surveys, or interact with briz through marketplaces or offline retail channels.

We may collect information that you provide directly to us, such as your name, mobile number, email address, shipping address, billing address, OTP verification details, customer-care communications, marketing preferences, survey responses, and any other information you choose to provide when interacting with briz.

We may collect order and transaction-related information, such as products ordered, order status, delivery details, order history, payment status, transaction reference number, payment confirmation, refund status, payment method type, and return, refund, replacement, or cancellation-related information, where applicable.

briz does not directly collect or store sensitive payment credentials such as full card numbers, UPI PINs, net banking passwords, CVV, or similar payment authentication credentials. Such information is processed by the relevant payment service provider.

When you use our website or interact with briz digitally, we may collect certain technical and usage information, such as device type, browser type, IP address, approximate location, pages viewed, products viewed, links clicked, website interaction information, and cookie, pixel, tag, or advertising-related information.

We may also receive information about you from third parties where relevant to your interaction with briz, such as marketplaces, payment providers, logistics partners, e-commerce platforms, communication providers, marketing or advertising providers, technology vendors, and retail or offline channel partners.

You are responsible for ensuring that the personal information you provide to briz is accurate, complete, and up to date. If your information changes, such as your mobile number, email address, shipping address, billing address, or other order-related details, please update the information where possible or contact us for assistance.

7.      How We Use Personal Data

We use your personal information for the purposes described below.

·       We use personal information to enable OTP-based checkout, process your orders, confirm purchases, arrange delivery, and support returns, refunds, replacements, or cancellations, where applicable.

·       We use personal information to communicate with you about your orders and interactions with briz, including order confirmations, payment updates, delivery updates, refund updates, service messages, and other transaction-related communications.

·       We use personal information to respond to your queries, complaints, feedback, requests, and other customer-support communications.

·       We may use personal information to send you marketing communications through WhatsApp, SMS, or email where permitted under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, applicable Information Technology Rules, and applicable telecom and commercial communication regulations issued by competent authorities in India, and subject to your communication choices.

·       We may use personal information to conduct surveys and understand customer feedback or preferences, where you choose to participate in such surveys.

·       We may use personal information to understand how customers use our website, improve website performance, resolve technical issues, and improve our products, services, and customer experience.

·       We may use personal information to measure advertising performance and improve our marketing communications.

·       We use personal information to detect suspicious activity, prevent fraud or misuse, protect our website and systems, prevent unauthorized access, and maintain the safety and integrity of our business operations.

·       We may use personal information to comply with requirements under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, tax, accounting, audit, regulatory, record-keeping, dispute-resolution, and rights-enforcement requirements.

8.      Legal Basis / Consent for Processing

We process your personal information with your consent where consent is required under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and applicable Information Technology Rules, and for the purposes described in this Privacy Policy.

Your consent may be collected when you take clear action, such as entering your details, verifying through OTP, placing an order, submitting a form, choosing to receive marketing communications, participating in a survey, or accepting cookies or similar technologies where applicable.

Some processing is necessary to provide briz products and services to you. For example, if you place an order, we need to process relevant personal information to enable checkout, confirm your order, receive payment confirmation, arrange delivery, provide order updates, and support returns, refunds, replacements, or cancellations, where applicable.

Some processing is optional, such as promotional marketing communications, survey participation, and certain cookies, pixels, tags, or advertising-related technologies, where applicable.

You may withdraw your consent for a specific processing activity by using the unsubscribe link, opt-out option, communication preference setting, or applicable opt-out keyword provided in our communications, where available, or by contacting us using the details provided in the Grievance Redressal and Contact Details section of this Privacy Policy.

Please note that opting out of promotional communications will not prevent briz from sending transaction-related or service-related messages, such as OTPs, order confirmations, payment updates, delivery updates, refund updates, return, replacement or cancellation updates, customer-support responses, account or security-related messages, or important policy or safety notices.

Where the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, tax, accounting, or other applicable Indian laws permit or require us to process personal information without consent, we may do so for the relevant permitted or required purpose, such as compliance with legal obligations, record-keeping, fraud prevention, dispute resolution, or protection of our rights, users, business, or systems.

9.      Cookies, Pixels, Tags and Similar Technologies

We use cookies, pixels, tags, and similar technologies on our website to operate the website, improve your browsing experience, understand how the website is used, support security and checkout functions, and measure marketing and advertising performance.

Cookies are small files or similar identifiers that may be stored on your browser or device when you visit a website. Pixels, tags, and similar technologies may help us understand website interactions, product views, clicks, and responses to our advertisements.

We may use these technologies for the following purposes:

·       Strictly necessary purposes, such as website operation, cart, checkout, OTP-based flows, payment-related steps, security, fraud prevention, and order-related functionality.

·       Preference and functionality purposes, such as remembering certain choices or improving your browsing experience.

·       Analytics and performance purposes, such as understanding website traffic, product views, clicks, and general interaction patterns.

·       Advertising and marketing purposes, such as measuring campaign performance and improving marketing communications.

·       Social media or embedded content purposes, where our website includes social media features, sharing features, embedded content, or similar third-party integrations.

Some cookies, pixels, tags, and similar technologies may be provided by third-party platforms or service providers that support our website, e-commerce operations, payments, logistics, analytics, advertising, customer communications, social media features, marketplaces, or other business activities.

Where required under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, or applicable Information Technology Rules, we will seek your consent for optional cookies, pixels, tags, or similar technologies.

You may control or limit cookies and similar technologies through your browser settings, device settings, or advertising preference tools made available by third-party platforms. Disabling or blocking certain cookies may affect website features such as browsing, cart, checkout, OTP verification, payment flow, order placement, or other website functions.

Cookies and similar technologies may remain on your browser or device for different periods depending on their purpose and settings. Some may last only for your browsing session, while others may remain for a longer period unless deleted or blocked through your browser or device settings.

For more information about how third-party services handle personal information, please review the “Third-Party Links and Services” section of this Privacy Policy and the privacy or cookie notices of the relevant third parties.

10.   How and Why We Share Personal Data

We may share your personal information with third parties where this is necessary for the purposes described in this Privacy Policy, including to operate briz, provide our products and services, comply with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, tax and accounting requirements, consumer protection requirements, or protect our rights, users, business, and systems.

·       We may share personal information with website and e-commerce service providers who help us operate the briz website, online store, checkout flow, and related technology systems.

·       We may share personal information with payment service providers who help process payments, payment confirmations, refunds, transaction references, and payment-related communications.

·       We may share personal information with logistics and delivery partners who help ship, deliver, track, return, replace, or fulfil briz orders.

·       We may share personal information with communication and marketing service providers who help us send customer updates, service messages, WhatsApp communications, SMS, emails, promotional communications, and survey communications.

·       We may share or make available limited website interaction, cookie, pixel, tag, or advertising-related information to advertising and measurement partners, including tools such as Meta Pixel, to measure campaign performance and improve marketing communications.

·       Where briz products are sold or fulfilled through marketplaces or offline retail channels, personal information may be shared with marketplace operators, retail partners, or related service providers in connection with your order, enquiry, support request, or other interaction with briz.

·       Where a third party independently determines the purposes and means of processing your personal information, such third party may process your personal information under its own privacy policy and terms. briz is not responsible for independent processing activities carried out by third parties that we do not own or control, except where responsibility cannot be excluded under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, or other applicable Indian laws.

·       We may share personal information with technology, operational, and business-support service providers who help maintain systems, support internal processes, improve website functionality, and manage business operations.

·       We may share personal information with professional advisers, such as legal advisers, auditors, accountants, consultants, insurers, or other professional service providers, where required for business, legal, compliance, audit, accounting, or risk-management purposes.

·       We may disclose personal information to government authorities, regulatory bodies, law-enforcement agencies, courts, tribunals, or other legal authorities where required or permitted under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, legal process, court order, regulatory request, or to protect our rights, users, business, systems, or the public.

If briz or Mastra Media LLP undergoes a merger, acquisition, restructuring, financing, sale of assets, transfer of business, or similar transaction, personal information may be shared with parties involved in that transaction, where relevant and subject to the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, contractual confidentiality obligations, and other applicable Indian laws.

11.   International / Cross-Border Data Transfers

briz currently offers its products and services to customers in India.

Some service providers, technology platforms, or business-support systems used by briz may process, store, or access personal information from locations outside India, depending on how their systems, infrastructure, and support operations are configured.

Where personal information is transferred, stored, or accessed outside India, we take reasonable steps designed to ensure that such processing is carried out in accordance with Section 16 of the Digital Personal Data Protection Act, 2023, Rule 15 of the Digital Personal Data Protection Rules, 2025, any transfer-related restrictions or requirements notified by the Central Government, and this Privacy Policy.

We will not knowingly transfer personal information in a manner that is prohibited under Section 16 of the Digital Personal Data Protection Act, 2023, Rule 15 of the Digital Personal Data Protection Rules, 2025, or any applicable restriction notified by the Central Government.

12.   Data Security

We take reasonable steps to protect personal information in our control from unauthorized access, use, disclosure, alteration, loss, or misuse.

Our safeguards may include technical, organizational, and operational measures appropriate to the nature of the personal information and the processing activity involved.

We work with service providers who are expected to apply appropriate safeguards and handle personal information only for authorized purposes.

However, no website, system, platform, method of transmission, or method of electronic storage is completely secure. While we take precautions to protect your personal information, we cannot guarantee absolute security.

If we become aware of a security incident or personal data breach affecting your personal information, we will take appropriate steps to assess, contain, and address the incident, and notify affected users, the Data Protection Board of India, or other competent authorities where required under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, or applicable Information Technology Rules.

13.   Data Retention and Deletion

We retain personal information only for as long as it is needed for the purposes described in this Privacy Policy, or as required or permitted under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, applicable Information Technology Rules, tax and accounting requirements, consumer protection requirements, dispute-resolution needs, fraud-prevention needs, and business record-keeping requirements.

The retention period may vary depending on the nature of the personal information, the purpose for which it was collected, the status of your order or request, legal or accounting requirements, dispute-resolution needs, fraud-prevention needs, and business record-keeping needs.

For example, we may retain information relating to orders, payments, refunds, returns, customer-support interactions, marketing preferences, complaints, and legal or accounting records for as long as needed for the relevant purpose.

When personal information is no longer required, we may delete it, anonymize it, or retain it securely where continued retention is required or permitted under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, applicable Information Technology Rules, tax and accounting requirements, consumer protection requirements, dispute-resolution needs, fraud-prevention needs, or other applicable Indian laws.

If you withdraw consent or request deletion of your personal information, we will review and act on the request in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. We may continue to retain certain information where necessary for legal compliance, tax or accounting records, order records, fraud prevention, dispute resolution, enforcement of rights, or other lawful purposes.

14.   Third-Party Links and Services

Our website, communications, advertisements, social media pages, marketplace listings, customer-support interactions, or other briz related interactions may contain links or references to third-party websites, platforms, applications, payment pages, logistics portals, advertising platforms, marketplaces, retail partner pages, or other services that are not owned or controlled by briz.

These links and references are provided for your convenience only. The inclusion of any third-party link, page, platform, service, product listing, supplier reference, advertisement, or integration does not imply that briz, Mastra Media LLP, our affiliates, partners, officers, employees, or representatives endorse, approve, recommend, verify, or assume responsibility for the referenced content, product, service, supplier, website, platform, application, or third-party service.

When you access or interact with third-party websites, platforms, applications, payment pages, marketplaces, logistics portals, advertising platforms, social media platforms, or other third-party services, those third parties may independently collect, use, store, disclose, or otherwise process your personal information in accordance with their own privacy policies, cookie policies, terms of use, and business practices.

briz is not responsible for the content, availability, accuracy, security, privacy and data-handling practices, policies, products, services, suppliers, or operations of any third-party website, platform, application, marketplace, payment page, logistics portal, advertising platform, social media platform, retail partner, or service that we do not own or control, except where responsibility cannot be excluded under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, or other applicable Indian laws.

Where you interact with briz products or services through marketplaces, offline retail channels, retail partners, delivery partners, payment service providers, advertising platforms, or other third-party channels, those third parties may process personal information independently or in connection with the relevant transaction, support request, delivery, return, refund, replacement, marketing activity, or legal requirement.

We encourage you to review the applicable privacy policies, cookie policies, and terms of any third-party website, platform, application, marketplace, payment page, logistics portal, advertising platform, social media platform, retail partner, or other service before sharing personal information, clicking on links, relying on third-party content, or completing any transaction through them.

15.   Children’s Privacy

briz’s website, products, and services are not directed at children under the age of 18.

We do not knowingly collect personal information from children. If we become aware that personal information of a child has been collected, we will take appropriate steps to delete it or handle it in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

We do not knowingly undertake tracking, behavioral monitoring, or targeted advertising directed at children.

16.   Your Privacy Rights and How to Exercise Them

You have certain rights in relation to your personal information under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

You can request access to information about the personal information briz processes about you, where required under the Digital Personal Data Protection Act, 2023.

You can request correction, completion, or updating of personal information that is inaccurate, incomplete, or outdated.

You can request deletion or erasure of your personal information, subject to the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and any retention required for legal compliance, tax or accounting records, order records, fraud prevention, dispute resolution, enforcement of rights, security, or other lawful purposes.

You can withdraw consent for a specific processing activity in the manner described in the Legal Basis / Consent for Processing section of this Privacy Policy.

You can opt out of promotional communications, such as WhatsApp, SMS, or email marketing, by using the unsubscribe or opt-out options provided in our communications, where available, or by contacting us.

Where applicable under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you can nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise your rights, please contact us using the details provided in the Grievance Redressal and Contact Details section of this Privacy Policy. We may ask you to provide information reasonably necessary to verify your identity and process your request.

We may not be able to fulfill a rights request where retaining or processing certain information is required or permitted under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, applicable Information Technology Rules, tax or accounting requirements, consumer protection requirements, order records, fraud prevention, dispute resolution, enforcement of rights, security, or other lawful purposes.

Your rights are subject to conditions, limitations, and exceptions under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable Indian laws. We will review and respond to your request in accordance with those requirements and our internal process.

17.   Grievance Redressal and Contact Details

For any questions, requests, or grievances relating to this Privacy Policy or the handling of your personal information, you may contact us at:

Email: contact@feelbriz.com

You may also write to us at the contact address listed in the Who We Are section of this Privacy Policy.

When you contact us, please provide enough information to help us understand and respond to your request or grievance. We may ask for additional information where needed to verify your identity or process your request.

We will review and respond to privacy-related requests and grievances in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and our internal process.

Where applicable under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, if you are not satisfied with our response to your privacy-related grievance, or if you do not receive a response within the period prescribed under those requirements, you may have the right to approach the Data Protection Board of India after first exhausting the grievance-redressal mechanism provided by briz.

In accordance with the Information Technology Act, 2000, applicable Information Technology Rules, the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Consumer Protection Act, 2019, and the Consumer Protection (E-Commerce) Rules, 2020, the name and contact details of the Grievance Officer are provided below.

Grievance / Nodal Officer - Customer Services

Name: Shaziya Khatun Shah
Designation: Grievance Officer
Email: shaziya@mastramedia.com
Phone: 1800 309 2205
Address: Mastra Media LLP, Floor No.: 18th, Building No./Flat No.: 1805/1806, Goregaon Mulund Link Road, near Nahur Station, Mulund East, Mumbai 400081.

Consumer grievances will be acknowledged within 48 hours and redressed within one month from the date of receipt, in line with the Consumer Protection (E-Commerce) Rules, 2020. Privacy-related requests and grievances will be reviewed and responded to in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

18.   Fraud Awareness and Customer Safety Notice

briz does not require your UPI PIN, net banking password, card PIN, CVV, full card number, or similar payment authentication details to provide customer support.

briz’s official representatives will not ask you to transfer money to personal accounts or share payment authentication details through phone calls, WhatsApp messages, SMS, emails, social media messages, third-party links, or payment requests.

Please do not share sensitive payment or authentication information with anyone claiming to represent briz, including through phone calls, WhatsApp messages, SMS, emails, social media messages, links, or payment requests.

Fraudsters may attempt to impersonate brands or customer-support representatives to obtain personal information, payment details, OTPs, passwords, or other confidential information. Please verify any suspicious communication through briz’s official contact channel before taking any action.

If you receive a suspicious communication claiming to be from briz, or if you believe your personal information or payment details may have been misused, you can contact us using the details provided in the Grievance Redressal and Contact Details section of this Privacy Policy.

briz may not be responsible for losses arising from disclosure of OTPs, passwords, payment authentication details, or other confidential information to unauthorized persons, except where liability cannot be excluded under the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, or other applicable Indian laws.

19.   Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology, privacy practices, or requirements under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, applicable Information Technology Rules, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020, or other applicable Indian laws.

When we update this Privacy Policy, we will post the revised version on our website and update the “Last Updated” date.

We encourage you to review this Privacy Policy periodically to stay informed about how briz handles your personal information.

Where required under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, applicable Information Technology Rules, or other applicable Indian laws, we will notify you of material changes through appropriate means.

20.   Effective Date, Last Updated and Version Control

This Privacy Policy is effective from the date mentioned below.

Last Updated: 26 July 2026

Version: 1.0