Privacy Policy
Last updated: 1 April 2026 · Effective: 1 April 2026
This Privacy Policy explains how ShopperSmart Technologies Pvt. Ltd. ("ShopperSmart", "we", "us") collects, uses, and protects your personal information when you use our website and services.
1. Information We Collect
- Account information: name, mobile number, email address when you register.
- Order information: delivery address, payment method (not card numbers — processed by Razorpay), purchase history.
- Device & usage data: IP address, browser type, pages visited, time on site — collected via cookies and analytics tools.
- Communications: WhatsApp messages and support interactions you initiate with us.
2. How We Use Your Information
- To process and deliver your orders, and send order confirmations and tracking updates.
- To personalise your shopping experience and product recommendations.
- To send promotional communications — only with your consent, and you can opt out anytime.
- To improve our website and detect fraud or abuse.
- To comply with legal obligations including GST reporting and law enforcement requests.
3. Information Sharing
- We do not sell your personal data to third parties — ever.
- We share data with service providers necessary to operate our business: Shiprocket (delivery), Razorpay (payments), MSG91 (OTP), Supabase (database hosting), Vercel (hosting). All are bound by data processing agreements.
- We may share data with law enforcement when required by valid legal process.
4. Data Retention
- Account data is retained as long as your account is active. You may delete your account at any time from Account Settings.
- Order data is retained for 7 years to comply with GST and tax law requirements.
- Marketing consent and communication history is retained for 3 years from your last interaction.
5. Cookies
- We use essential cookies for login sessions and cart persistence.
- We use analytics cookies (anonymised) to understand how users navigate the site.
- We do not use third-party advertising cookies.
- You can clear cookies at any time via your browser settings. Essential cookies cannot be disabled without affecting site functionality.
6. Your Rights
- Access: request a copy of all personal data we hold about you.
- Correction: update incorrect information via your Account Settings or by contacting us.
- Deletion: request deletion of your account and associated data (subject to legal retention requirements).
- Portability: receive your data in a machine-readable format.
- To exercise any of these rights, email privacy@shoppersmart.in or WhatsApp us.
7. Security
- All data in transit is encrypted via TLS/SSL. Data at rest is encrypted in our Supabase database.
- Payment card details are never stored on ShopperSmart servers — they are tokenised and processed entirely by Razorpay (PCI-DSS Level 1 certified).
- We conduct periodic security audits and penetration tests.
8. Children's Privacy
- ShopperSmart is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at privacy@shoppersmart.in.
9. Changes to This Policy
- We may update this policy periodically. When we make material changes, we will notify you via email or a prominent notice on the site at least 14 days before the change takes effect.
- Continued use of ShopperSmart after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
- Data Controller: ShopperSmart Technologies Pvt. Ltd.
- Email: privacy@shoppersmart.in
- WhatsApp: +91-9XXXXXXXXX
- Address: [Registered Office Address], Mumbai, Maharashtra — 400001