1. Introduction

This Privacy Policy applies to personal information processed by SHUBHSANKET E-COMMERCE PRIVATE LIMITED in connection with the SHUBH SANKET brand and its website, online store, customer support channels, and related business activities.

In this policy, the words “Company”, “we”, “us”, and “our” refer to SHUBHSANKET E-COMMERCE PRIVATE LIMITED. The words “you” and “your” refer to a visitor, customer, account holder, or other individual whose information we process.

Please read this policy carefully before using our website or submitting personal information. Where consent is required by applicable law, we will seek it through an appropriate method.

2. Scope of This Policy

This policy applies when you:

• Visit or browse our website.
• Create an account or submit a form, where available.
• Purchase products or attempt to place an order.
• Make or attempt to make an online payment.
• Contact us through email, telephone, messaging, or customer support.
• Subscribe to updates or marketing communications, where offered.
• Participate in promotions, surveys, or other activities we offer.

This policy should be read alongside any applicable Terms and Conditions, Shipping Policy, Cancellation Policy, and Return and Refund Policy published on our website.

3. Information We Collect

The information we collect depends on how you interact with us. We aim to collect only information that is reasonably necessary for the relevant business purpose.

3.1 Personal and contact information

• Name and contact details, such as email address and telephone number.
• Billing address, delivery address, and relevant location details.
• Information you provide when contacting customer support.

3.2 Order and transaction information

• Products ordered, quantities, order numbers, and order history.
• Billing, shipping, delivery, cancellation, return, and refund records.
• Payment status, transaction reference numbers, and payment confirmation details supplied by payment providers.

We do not intend to collect or store your full card number, card security code, UPI PIN, banking password, or other payment authentication secrets on our own systems. Any payment information requested during checkout should be handled through the applicable payment provider's secure interface.

3.3 Technical and usage information

• IP address and approximate location derived from technical information, where available.
• Browser type, device type, operating system, and language settings.
• Pages visited, referring pages, session information, and interactions with our website.
• Cookie identifiers and similar technical information, subject to applicable settings and consent requirements.

3.4 Information you choose to provide

We may process additional information that you voluntarily include in messages, feedback, reviews, enquiries, or support requests. Please do not send passwords, payment authentication codes, or unnecessary sensitive personal information through ordinary email or messaging channels.

4. How We Collect Information

We may obtain information through the following methods:

• Directly from you: when you place an order, complete a form, contact us, or subscribe to updates.
• Automatically: through website logs, cookies, and similar technologies, depending on your settings and applicable requirements.
• From service providers: such as payment gateways, delivery partners, website hosting providers, and fraud-prevention services when they support a transaction or service.
• From authorised sources: where necessary to verify a transaction, prevent fraud, resolve a dispute, or comply with a legal obligation.

We do not represent that every category of information listed in this section is collected in every transaction. Actual collection depends on the features and services in use.

5. How We Use Information

We may use personal information for purposes including:

• Processing, confirming, fulfilling, and delivering orders.
• Communicating order confirmations, delivery updates, and service notices.
• Processing payments, refunds, cancellations, and transaction enquiries.
• Responding to questions, complaints, and customer support requests.
• Maintaining website operations, accounts, and customer records where applicable.
• Detecting suspicious transactions, preventing fraud, and protecting our customers and business.
• Improving our website, product information, customer experience, and services.
• Sending promotional communications where permitted and, where required, with your consent.
• Maintaining accounting, tax, audit, and other legally required records.
• Establishing, exercising, or defending legal claims and resolving disputes.
• Complying with applicable laws, lawful requests, and regulatory obligations.

We will not use personal information for a materially incompatible purpose unless permitted by applicable law or otherwise appropriately authorised.

6. Legal Grounds and Consent

We process personal information in accordance with applicable Indian data protection and other relevant laws. Depending on the circumstances, processing may be necessary to:

• Provide a service or fulfil an order requested by you.
• Take steps requested by you before entering into a transaction.
• Meet a legal or regulatory obligation.
• Prevent fraud, protect systems, handle disputes, or pursue other lawful purposes.
• Act on consent where consent is required or relied upon.

Where processing is based on consent, you may withdraw that consent through an available method or by contacting us. Withdrawal does not affect processing that took place lawfully before withdrawal, and some processing may continue where another lawful basis applies.

If you do not provide information necessary to fulfil an order or meet a legal requirement, we may be unable to complete the relevant transaction or provide the requested service.

7. Payments and Payment Security

If our website supports online payments, transactions may be processed by third-party payment gateways, banks, UPI service providers, card networks, or other payment service providers selected for checkout.

• Payment information may be collected directly by the payment provider through its checkout interface.
• We may receive limited transaction details, such as payment status, transaction ID, payment method category, and refund status, to manage orders and customer support.
• Payment providers may process information under their own privacy policies, security standards, and contractual terms.
• We may use transaction information to verify payment, reconcile accounts, prevent suspected fraud, and investigate payment disputes.

We take reasonable steps to protect information under our control. However, no online transmission or electronic storage method can be guaranteed to be completely secure. We do not claim that a payment gateway or security certification is in place unless it has actually been selected and verified.

8. When We Share Information

We do not sell personal information to third parties for money. We may share relevant information when reasonably necessary for the purposes described in this policy, including with:

• Payment providers and banks: to process and verify payments, refunds, and disputes.
• Delivery and logistics partners: to ship orders and provide delivery updates.
• Website and technology providers: for hosting, maintenance, security, backups, and technical support.
• Customer support and communication providers: to respond to enquiries and send service-related messages.
• Analytics and advertising providers: where used, subject to applicable requirements and cookie or consent settings.
• Professional advisers: such as accountants, auditors, insurers, or legal advisers when needed for legitimate business purposes.
• Government and regulatory authorities: where disclosure is required by law or a lawful order.
• Business successors: in connection with a merger, restructuring, financing, or transfer of business, subject to applicable law and appropriate safeguards.

We seek to share only information reasonably needed for the relevant purpose. Service providers may be required by contract or law to protect information and use it only as authorised.

9. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, and similar technologies to support website functionality and understand how visitors use our pages.

9.1 Why cookies may be used

• To support shopping-cart, checkout, session, and security functions.
• To remember selected settings and improve usability.
• To understand website traffic and performance, where analytics tools are used.
• To measure promotional activity or display relevant advertising, where such tools are used and permitted.

9.2 Managing cookies

You may be able to manage or block cookies through your browser settings and any cookie preference tool provided on our website. Blocking certain cookies may affect checkout, account access, or other website features.

The cookies and tracking tools actually used depend on the website configuration. Where required, non-essential cookies or similar technologies will be subject to appropriate consent or preference controls.

10. Marketing Communications

Where permitted by law, we may send promotional offers, product updates, news, or other marketing communications if you have subscribed or otherwise provided the required permission.

You can opt out of marketing communications by:

• Using the unsubscribe link included in an email, where available.
• Following the opt-out instructions provided in a message.
• Contacting us at shubhsanketpvtltd@gmail.com.

Even if you opt out of promotional messages, we may still send essential service communications about an existing order, payment, delivery, refund, security matter, or legal obligation.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, customer support, accounting, security, dispute resolution, and compliance with applicable legal requirements.

Retention periods may vary depending on the type of information, the nature of a transaction, legal requirements, and whether a dispute or investigation is ongoing.

When information is no longer required, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, subject to legal retention duties, legitimate recordkeeping needs, and technical limitations.

12. Data Security

We use reasonable technical, organisational, and administrative measures intended to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

Depending on the systems in use, safeguards may include:

• Access restrictions for authorised personnel.
• Website and system maintenance and security updates.
• Secure connections where HTTPS/TLS is configured.
• Use of appropriate third-party service providers.
• Procedures for handling customer enquiries and security concerns.

Security controls vary by system and provider. No method of transmission or storage is completely risk-free, and we cannot promise absolute security. You should also use a secure device, protect your email account, and avoid sharing account or payment credentials.

13. Data Breaches and Security Incidents

If we become aware of a personal data breach affecting information under our responsibility, we will assess the incident and take reasonable steps to contain, investigate, and mitigate its effects.

We will provide notifications to affected individuals and relevant authorities where and to the extent required by applicable law, including any applicable timelines and prescribed procedures.

If you believe your personal information or account has been compromised in connection with our website, please contact us promptly using the details in the Contact and Grievances section.

14. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information, including the ability to:

• Request information about personal data we process about you.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion of personal information where legally applicable and permitted.
• Withdraw consent where processing relies on consent.
• Raise a privacy-related grievance or complaint.
• Exercise any additional rights available under applicable law.

To make a request, email shubhsanketpvtltd@gmail.com with the subject line “Privacy Request”.

We may need to verify your identity or ask for additional information to protect your privacy and prevent unauthorised requests. We will respond in accordance with applicable legal requirements. Certain information may need to be retained where required by law or necessary for legitimate recordkeeping and dispute resolution.

Where applicable law provides a right to nominate another person to exercise rights in specified circumstances, that right may be exercised in accordance with the law.

15. Children's Privacy

Our website is intended for general customers and is not specifically directed at children. We do not knowingly seek to collect children's personal information in violation of applicable law.

Where applicable law requires verifiable parental or guardian consent or imposes other conditions before processing a child's personal information, we will follow those requirements.

If you believe a child has provided personal information in circumstances that are not permitted, please contact us so that we can review the matter and take appropriate action.

16. Third-Party Websites and Services

Our website may contain links to third-party websites, payment pages, delivery tracking services, social media platforms, or other external services.

These third parties may collect and process information under their own privacy policies and terms. We do not control third-party websites or their practices, and their inclusion does not mean we endorse every aspect of their services.

We encourage you to read the relevant third party's privacy policy before providing personal information or completing a transaction on its platform.

17. International Data Transfers

Some technology, hosting, analytics, communication, or payment service providers may process information using infrastructure located outside India.

Where personal information is transferred or processed internationally, we will take steps required by applicable law, including any applicable restrictions, safeguards, or contractual requirements.

The location of processing depends on the service providers and systems actually used by the website.

18. Orders, Returns, Refunds and Disputes

We may use order, contact, shipping, and transaction information to verify purchases, arrange delivery, process eligible cancellations and refunds, respond to complaints, investigate suspected fraud, and resolve payment disputes.

If you contact us about an order, please provide the relevant order number and enough information to help us identify the transaction. Avoid sending full card details, UPI PINs, passwords, or one-time authentication codes.

Any cancellation, return, replacement, shipping, and refund eligibility is governed by the applicable policies published on our website and by applicable law. This Privacy Policy explains information handling and does not independently guarantee a refund or a particular delivery outcome.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, website features, service providers, legal requirements, or privacy practices.

The updated policy will be published on this page with a revised effective date where appropriate. If a change requires additional notice or consent under applicable law, we will take the required steps.

We encourage you to review this page periodically so that you remain informed about how we handle personal information.

20. Contact and Grievances

If you have questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about the handling of personal information, contact our Company using the details below.

21. Applicable Law

This Privacy Policy is intended to operate in accordance with applicable laws of India, including applicable data protection, consumer protection, information technology, and e-commerce requirements, as relevant to our activities.

Nothing in this policy is intended to exclude, restrict, or override a right or obligation that cannot lawfully be excluded, restricted, or overridden.

If any provision of this policy is found to be unenforceable, the remaining provisions will continue to apply to the extent permitted by law.