Privacy policy

Last updated: October 15, 2026

This Privacy Policy explains how REEF GROUP, trading as The Rizz Club ("we", "us"), collects, uses, shares and protects your personal data when you visit therizzclub.in, buy from us, join our club or contact us. It is written to meet the requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its Rules, and we will keep it updated as those Rules come into force.

1. Who is responsible for your data

We are the "Data Fiduciary" for your personal data.

  • Legal entity: REEF GROUP (GSTIN 27EWLPA1993P1ZS), brand: The Rizz Club
  • Address: Shop No. 8/71, First Floor, BMC Colony Gate No. 1, Marve Madh Road, Malad (West), Mumbai 400095, Maharashtra, India
  • Email: contact@therizzclub.in  |  Phone / WhatsApp: +91 91525 27111

2. What personal data we collect

  • Contact and delivery details: name, email, phone number, shipping and billing address.
  • Order details: products you buy, amounts, discount codes, delivery status. Your member number if you are a club member.
  • Payment details: payments are handled by our payment partners (Shopify Payments / Cashfree and your bank or UPI app). We do not see or store your full card number, CVV, UPI PIN or bank password.
  • Account details: your email and, if you choose "Sign in with Google", the basic profile Google shares (name and email).
  • Messages you send us: emails, WhatsApp messages and contact-form messages.
  • Reviews you choose to post.
  • Device and usage data: IP address, browser, device type, pages viewed, and cookies (see section 6).

3. Why we use it

  • To complete your order (take payment, pack, ship, send order and delivery updates, handle damage claims and support). This is necessary to do what you asked for.
  • To comply with the law: GST invoicing, tax and accounting records, and responses to lawful requests from authorities.
  • To keep the store secure and prevent fraud.
  • To send you marketing (new batches, offers, discount codes) only if you agree: by joining the club, subscribing in the footer, or leaving the marketing box ticked at checkout. You can say no or change your mind at any time (section 8).
  • To improve the website, using analytics (section 6).

We use your data only for these purposes. We do not sell your personal data.

4. Who we share it with

We share data only with service providers who need it to serve you, and only for that purpose:

  • Shopify (store, checkout, customer accounts, email delivery)
  • Cashfree and payment/UPI/card networks (payments)
  • Shiprocket and courier partners (shipping and delivery: name, address, phone)
  • Judge.me (review requests and review display)
  • Google Analytics and Microsoft Clarity (website analytics)
  • Google (only if you use "Sign in with Google")
  • Our accountants and legal advisers, and government authorities where the law requires.

These providers act on our instructions and are bound by their own security and privacy terms. Some of them store or process data on servers outside India.

5. How long we keep it

  • Order, invoice and tax records: for the period Indian tax and accounting law requires (at least 6 years).
  • Customer account and club membership: until you ask us to delete it.
  • Marketing contact details: until you withdraw consent, or if we see no activity from you for 3 years.
  • Support messages: up to 2 years after the issue is closed.
  • Analytics data: as set by the analytics provider, normally up to 14 months.

When the purpose is over, or you withdraw consent (and no law requires us to keep it), we erase the data or make it anonymous. Where required, we will warn you before erasing an account.

6. Cookies and analytics

We use cookies that make the store work (cart, checkout, login, security) and analytics cookies (Google Analytics, Microsoft Clarity) that show us in aggregate how people use the site. You can block or delete cookies in your browser settings; the store's essential features may stop working if you block the essential ones. You can also opt out of Google Analytics with Google's browser add-on.

7. Your rights under the DPDP Act

You have the right to:

  • Access a summary of the personal data we hold about you and who we share it with;
  • Correct inaccurate or incomplete data, and update it;
  • Erase your data when it is no longer needed for the purpose (unless the law requires us to keep it);
  • Withdraw consent at any time. Withdrawing is as easy as giving it; it does not affect what was done before you withdrew;
  • Get your grievance resolved (section 9);
  • Nominate another person to exercise these rights for you if you die or cannot act for yourself.

To use any right, email contact@therizzclub.in from the email address linked to your account, or message +91 91525 27111. We may ask you to confirm your identity first. We will acknowledge your request within 2 working days and complete it within 30 days.

8. Marketing choices

Every marketing email has an unsubscribe link. You can also email us, or untick the marketing box when you check out. If you unsubscribe we will still send order, shipping and account messages, because you need those to receive your purchase.

9. Grievance redressal

If you have a concern about how we handle your personal data, contact our Grievance Officer first:

  • Grievance Officer: Fahaad Azam, REEF GROUP (The Rizz Club)
  • Email: contact@therizzclub.in (subject: "Data grievance")  |  Phone: +91 91525 27111
  • Address: Shop No. 8/71, First Floor, BMC Colony Gate No. 1, Marve Madh Road, Malad (West), Mumbai 400095

We will acknowledge your grievance within 48 hours and resolve it within 30 days. If you are not satisfied after using our grievance process, you may complain to the Data Protection Board of India as provided under the DPDP Act, once it is operational.

10. Children

The Rizz Club is for adults. Under the DPDP Act a child is anyone under 18. We do not knowingly collect personal data from anyone under 18, and we do not direct advertising or behavioural tracking at children. If you are a parent or guardian and believe your child has given us data, write to us and we will delete it.

11. How we protect your data

We use reasonable security safeguards: the store runs over encrypted HTTPS on Shopify's secured platform, card and UPI details never reach us, access to our store admin is limited to the proprietor and protected by login, and we only give service providers the data they need. If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, as the law requires.

12. Changes to this policy

We may update this policy as our practices or the law change. We will post the new version here with a new "Last updated" date, and tell you directly if a change affects how we use data you have already given us.

13. Contact

REEF GROUP, trading as The Rizz Club
Shop No. 8/71, First Floor, BMC Colony Gate No. 1, Marve Madh Road, Malad (West), Mumbai 400095, Maharashtra, India
contact@therizzclub.in  |  +91 91525 27111