Security Policy

Scope

This Policy applies to ZodiacVilla.com, our hosting and cloud systems, email delivery, internal tools, and all employees or service providers who handle Website operations or personal data.

Our Security Commitments

We aim to comply with applicable data protection and cybersecurity requirements, including the Digital Personal Data Protection Act, 2023 and related rules, as they apply to our operations. We maintain reasonable security safeguards to protect personal data from unauthorised access, loss, alteration, or misuse.

Key Security Measures We Use

We use layered safeguards that match the sensitivity of the data we process, such as birth details and relationship data.

• Access control. Only authorised team members may access systems and user data, based on role need.
• Strong authentication. Administrative access is protected through unique credentials and multi-factor authentication where supported and appropriate.
• Encryption. Data is encrypted in transit. Sensitive data is encrypted at rest where appropriate.
• Secure hosting. We use reputable hosting providers, firewalls, malware protection, and regular patching.
• Backups and recovery. We maintain backups and periodically review restoration procedures based on operational needs.
• Monitoring and logs. Where supported by our systems, we maintain security logs and review suspicious activity.
• Secure development. Our tech team follows secure coding practice and reviews changes before release.
• Vendor controls. We select established payment, email, analytics, and hosting providers and rely on their contractual, privacy, and security commitments.
• Data minimisation. We collect only data needed for the Service and keep it only for a justified period.

Incident Response and Breach Notification

If we detect a security incident, we act quickly to contain it, assess impact, and restore services.

Where legally required, we will notify affected users and the relevant authorities in accordance with applicable breach-notification requirements.

Reportable cyber incidents will be handled in accordance with applicable CERT-In directions and prescribed timelines.

Your Role in Keeping Data Secure

You can help keep your data safe by doing the following:

• Use a strong password for your email and any Website account you create.
• Do not share your login details, OTPs, or payment credentials with anyone.
• Be cautious of phishing or fake pages that claim to be Zodiac Villa.
• Contact us if you notice any suspicious activity linked to your account or order.

No Absolute Guarantee

No website or internet transmission is fully secure. While we use strong safeguards, we cannot guarantee absolute security. We will keep improving controls as threats evolve.

Responsible Disclosure

If you believe you have found a security weakness, please report it to support@zodiacvilla.com with details. Please avoid exploiting the issue or disclosing it publicly before we have had a reasonable opportunity to investigate and address it.

Updates to This Policy

We may update this Policy to reflect new risks, legal requirements, or system changes. The revised Policy will be posted on this page with a new effective date.

Governing Law and Jurisdiction

This Policy is governed by the laws of India. Courts at Ahmedabad, Gujarat have exclusive jurisdiction over disputes connected to this Policy or Website security.

Contact

For security questions, reporting concerns, or policy-related communication, contact us at support@zodiacvilla.com.