Effective Date: January 1, 2026
Last Updated: January 1, 2026

1. Introduction

Zumbido Limited (“Zumbido,” “We,” “Us,” or “Our“), a corporation incorporated under the laws of Ontario, Canada, with registered office at 1857 Parkside Drive, Pickering, Ontario, Canada – ON L1V 3N9, is committed to transparency in Our use of cookies and similar tracking technologies.

This Cookie Policy applies to www.zumbido.ca, www.zumbidoexpress.biz, and all associated domains, subdomains, mobile applications (Android and iOS), and SaaS platforms (collectively, “Websites,” “Applications,” or “Services”).

This Cookie Policy explains what cookies are, how We use them, the types of cookies We use, how You can control Your cookie preferences, and Your rights under applicable data protection laws.

This Cookie Policy complies with:

• India’s Digital Personal Data Protection Act (DPDPA) 2023
• European Union General Data Protection Regulation (GDPR) and ePrivacy Directive
• California Consumer Privacy Act (CCPA)
• Personal Information Protection and Electronic Documents Act (PIPEDA), Canada

By using Our Services, You acknowledge that You have read and understood this Cookie Policy. Your continued use of Our Services constitutes Your consent to Our use of cookies as described herein, subject to Your ability to manage and withdraw consent as outlined below.

2. What Are Cookies?

Cookies are small text files that are placed on Your computer, smartphone, tablet, or other internet-connected device when You visit a website or use an application. Cookies help websites recognize Your device and store information about Your preferences, login information, and browsing behavior.

Cookies are safe and cannot be used to run programs, deliver viruses, or access Your hard drive. They are widely used to make websites work more efficiently, provide analytics, and enhance user experience.

3. Why We Use Cookies

We use cookies and similar tracking technologies for the following purposes:

Essential Operations: To enable core functionality of Our Websites and Applications, including security, authentication, network management, and accessibility.

Performance and Functionality: To enhance the performance and user experience of Our Services, such as remembering Your preferences, language settings, and login details.

Analytics and Insights: To understand how You use Our Services, analyze traffic patterns, measure effectiveness of marketing campaigns, and improve Our products.

Personalization: To provide a customized experience tailored to Your interests, preferences, and browsing history.

Marketing and Advertising: To deliver relevant advertisements, identify prospects, personalize marketing communications, and measure advertising effectiveness.

Social Media Integration: To enable social media features, track conversions from social media platforms, and allow You to share content.

4. Types of Cookies We Use

We use the following categories of cookies:

4.1 Essential Cookies (Strictly Necessary)

These cookies are strictly necessary for the operation of Our Websites and Applications. They enable core functionality such as:

• User authentication and security
• Network management and load balancing
• Session management and shopping cart functionality
• Fraud prevention and detection
• Cookie consent preferences

Legal Basis: These cookies are necessary for contract performance (to provide Services You have requested) and do not require explicit consent under GDPR or DPDPA. However, You may disable them through Your browser settings, which may affect the functionality of Our Services.

4.2 Performance and Functionality Cookies

These cookies enhance the performance and functionality of Our Services but are not strictly necessary. They enable:

• Remembering Your preferences (e.g., language, region, layout)
• Providing enhanced features (e.g., video playback, interactive content)
• Improving page load speed and responsiveness
• Remembering items in Your shopping cart or wishlist

Legal Basis: Legitimate interest (to improve user experience). You have the right to object or withdraw consent.

4.3 Analytics and Customization Cookies

These cookies collect information about how You use Our Services. They help Us understand:

• Which pages are visited most frequently
• How long You spend on each page
• Navigation patterns and user flows
• Sources of traffic (e.g., search engines, referrals, direct visits)
• Error messages and technical issues

We use analytics tools including:

• Google Analytics
• Mixpanel
• Hotjar (heatmaps and session recordings)

Legal Basis: Consent under DPDPA and GDPR. You may opt out through cookie settings or browser settings.

4.4 Marketing and Advertising Cookies

These cookies are used to deliver relevant advertisements and measure the effectiveness of marketing campaigns. They:

• Track Your online activity across websites and applications (interest-based advertising)
• Build targeted audiences for advertising campaigns
• Prevent the same advertisement from appearing repeatedly
• Measure conversions and return on investment (ROI) for advertising
• Remarket to users who have previously visited Our Services

We use advertising platforms including:

• Google Ads
• Facebook Pixel
• LinkedIn Insight Tag
• Twitter (X) Conversion Tracking

Legal Basis: Consent under DPDPA and GDPR. You may opt out through cookie settings, ad settings on advertising platforms, or industry opt-out tools.

4.5 Social Media Cookies

These cookies enable social media features and track conversions from social media platforms. They are set when You:

• Share content using social media buttons (Facebook, Twitter, LinkedIn)
• Link Your social media account to Our Services
• View embedded social media content (e.g., YouTube videos)

Legal Basis: Consent under DPDPA and GDPR. These cookies are controlled by third-party social media platforms, which have their own privacy policies.

5. First-Party vs. Third-Party Cookies

5.1 First-Party Cookies

First-party cookies are set directly by Zumbido and are used to operate and improve Our Services. We have full control over these cookies.

5.2 Third-Party Cookies

Third-party cookies are set by external service providers and partners, including:

• Analytics providers (Google Analytics, Mixpanel)
• Advertising networks (Google Ads, Facebook)
• Social media platforms (Facebook, LinkedIn, Twitter)
• Payment processors (Stripe, PayPal, Razorpay)
• Content delivery networks (CDNs)

We do not control third-party cookies. These cookies are governed by the privacy policies of the respective third parties.

6. Session Cookies vs. Persistent Cookies

6.1 Session Cookies

Session cookies are temporary cookies that expire when You close Your browser. They are used to maintain Your session state while You navigate Our Services.

6.2 Persistent Cookies

Persistent cookies remain on Your device until they expire or You delete them. Expiration periods vary:

• Some expire after a few minutes
• Others may remain for months or years
• You can view and delete persistent cookies through Your browser settings

7. Cookie Consent and Withdrawal

7.1 Consent Requirement (DPDPA and GDPR)

Under DPDPA 2023 (India) and GDPR (EU), We are required to obtain Your informed consent before placing non-essential cookies on Your device. When You first visit Our Services, You will see a cookie consent banner that allows You to:

• Accept all cookies
• Reject non-essential cookies
• Customize Your cookie preferences by category

Your consent is obtained through a clear affirmative action (e.g., clicking “Accept” or “Save Preferences”). We do not use pre-ticked boxes or implied consent.

7.2 Withdrawal of Consent

You may withdraw Your consent at any time by:

• Clicking the “Cookie Settings” link in the footer of Our website
• Accessing cookie preferences in Your account settings
• Contacting Us at connect@zumbido.ca

Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

8. How to Manage and Control Cookies

You have several options to manage and control cookies:

8.1 Cookie Consent Tool

Use Our cookie consent tool (banner or preference center) to:

• Accept or reject cookies by category
• View detailed information about each cookie
• Change Your preferences at any time

8.2 Browser Settings

You can manage cookies through Your browser settings. Most browsers allow You to:

• Block all cookies
• Block third-party cookies
• Delete existing cookies
• Set preferences for specific websites

Browser-specific instructions:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Microsoft Edge: Settings > Cookies and site permissions

Important: Blocking or deleting cookies may affect the functionality of Our Services. You may not be able to access certain features, and Your user experience may be degraded.

8.3 Opt-Out of Interest-Based Advertising

You can opt out of interest-based advertising through:

• Your Online Choices (EU): www.youronlinechoices.com
• Network Advertising Initiative (NAI): www.networkadvertising.org/choices
• Digital Advertising Alliance (DAA): www.aboutads.info/choices
• Google Ad Settings: adssettings.google.com
• Facebook Ad Preferences: www.facebook.com/ads/preferences

8.4 Do Not Track (DNT) Signals

Some browsers offer “Do Not Track” (DNT) signals. At present, there is no universal standard for responding to DNT signals. We currently do not respond to DNT signals, but We provide alternative methods to control cookies as outlined above.

9. Detailed Cookie Table

Below is a table of key cookies used on Our Services:

Cookie Name	Purpose	Category	Duration	Provider
_session_id	Maintains user session	Essential	Session	Zumbido (1st party)
csrf_token	Security protection	Essential	Session	Zumbido (1st party)
user_prefs	Stores user preferences	Functional	1 year	Zumbido (1st party)
_ga	Google Analytics tracking	Analytics	2 years	Google (3rd party)
_fbp	Facebook Pixel tracking	Marketing	3 months	Facebook (3rd party)
_gcl_au	Google Ads conversion tracking	Marketing	3 months	Google (3rd party)
cookie_consent	Stores cookie consent preferences	Essential	1 year	Zumbido (1st party)

Note: This table represents key cookies and is not exhaustive. For a complete list of cookies, please use Our cookie consent tool or contact connect@zumbido.ca.

10. Your Rights Under Data Protection Laws

10.1 Rights Under DPDPA (India)

Under India’s DPDPA 2023, You have the right to:

• Obtain a summary of personal data processed through cookies
• Request correction or deletion of cookie data
• Withdraw consent for non-essential cookies at any time
• File a complaint with the Data Protection Board of India

10.2 Rights Under GDPR (EU/EEA)

Under GDPR, You have the right to:

• Access personal data collected through cookies
• Request deletion of cookie data (Right to be Forgotten)
• Object to processing based on legitimate interests
• Withdraw consent for non-essential cookies
• Lodge a complaint with Your local data protection authority

10.3 Rights Under CCPA (California)

Under CCPA, California residents have the right to:

• Know what personal information is collected through cookies
• Request deletion of personal information
• Opt out of the “sale” of personal information (We do not sell personal data)

11. Children’s Privacy

Our Services are not directed to children under 18 years of age. We do not knowingly collect personal data from children through cookies or other means. If We become aware that We have collected cookie data from a child without verified parental consent, We will promptly delete such data.

If You are a parent or guardian and believe Your child has provided cookie data, contact connect@zumbido.ca immediately.

12. International Data Transfers

Cookie data may be transferred to and processed in countries outside India, the EEA, or Your country of residence, including Canada (where Our headquarters are located).

We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• DPDPA-compliant cross-border transfer mechanisms
• Data processing agreements with third-party cookie providers

13. Security of Cookie Data

We implement reasonable technical and organizational measures to protect cookie data from unauthorized access, loss, or misuse, including:

• Encryption of sensitive cookie data
• Secure transmission protocols (HTTPS)
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments

However, no system is 100% secure. While We use commercially reasonable efforts to protect Your data, We cannot guarantee absolute security.

14. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in Our practices, technologies, legal requirements, or business operations.

We will notify You of material changes by:

• Posting the updated Cookie Policy on Our website with a revised “Last Updated” date
• Displaying a notice on Our Services
• Sending an email notification (if You have provided Your email address)

Your continued use of Our Services after the effective date of the updated Cookie Policy constitutes Your acceptance of the changes. If You do not agree with the updated Cookie Policy, You may withdraw Your consent for non-essential cookies.

15. Contact Us

For questions, concerns, or requests regarding this Cookie Policy or Our use of cookies, please contact:

Zumbido Limited
125, Village Green Square, Scarborough, Toronto, Ontario M1S 0G3 Canada
Email: connect@zumbido.ca
DPO: dpo@zumbido.ca

16. Regulatory Authorities

India: Data Protection Board of India (www.dpb.gov.in)
EU/EEA: Your local supervisory authority (list at https://edpb.europa.eu)
California: California Attorney General (oag.ca.gov)
Canada: Office of the Privacy Commissioner of Canada (www.priv.gc.ca)

17. Acknowledgment

By using Our Services, You acknowledge that You have read, understood, and agree to the use of cookies as described in this Cookie Policy. You may manage Your cookie preferences or withdraw consent at any time through the methods outlined above.

18. Document Control

Document Title	Zumbido Cookie Policy
Version	1.0 (DPDPA + GDPR Compliant)
Effective Date	January 1, 2026
Last Updated	January 1, 2026
Prepared By	Zumbido Legal & Compliance Team
Review Frequency	Annually or as required by law
Jurisdiction	India, EU/EEA, California, Canada