Privacy Policy
Privacy Policy — ShopMitra
July 5, 2026
1. Information We Collect
- Name, email address, phone number, and shipping/billing address
- Account login details (username, password — stored in encrypted/hashed form)
- Order history, product preferences, and Wishlist items
- Payment details processed via our payment gateway (we do not store full card numbers — see Section 6)
- Messages you send us via email, contact forms, or WhatsApp for support or returns
- IP address, browser type, device type, and operating system
- Pages visited, time spent on site, and referring/exit pages
- Cookies and similar tracking technologies (see Section 4)
- Delivery status updates from our shipping and logistics partners
- Payment confirmation from our payment gateway provider
- Verification data from our Common Services / government portal integrations, where applicable
We do Not knowingly collect sensitive personal data (such as health information, biometric data, or caste/religious information) unless you voluntarily provide it, and even then only where strictly necessary for order fulfilment.
2. How We Use Your Information
We use your personal data only for the purposes below:
- Order fulfilment: To process payments, pack, ship, and schedule deliveries.
- Customer support: To answer questions, handle returns or refunds, and resolve disputes.
- Account management: To manage logins, order history, and saved addresses.
- Communication: To send order confirmations, delivery updates, and notify you of policy changes.
- Marketing (only if you opt in): To send offers and new product announcements, but only with your consent.
- Fraud prevention & security: To detect suspicious activity and prevent unauthorized access.
- Legal compliance: To keep tax records, resolve disputes, and respond to legal requests when required.
Importantly: ShopMitra does not sell, rent, or trade your personal data to third parties for their own marketing purposes.
4. Cookies and Tracking Technologies
- Keep you logged in and remember your cart
- Understand site usage and improve performance
- Measure the effectiveness of promotions (only with consent, where required)
You can disable cookies through your browser settings. Note that some site features (like checkout) may not work properly without essential cookies.
5. Sharing Your Information
- Payment gateway providers(to process transactions securely)
- Shipping and logistics partners(to deliver your order)
- IT/hosting service providers(to run and secure the website)
- Government or regulatory authorities only when legally required (e.g., court order, tax audit)
All third parties are contractually bound to protect your data and use it only for the stated purpose — they cannot use it for their own marketing.
6. Data Security
- Encryption in transit— all data exchanged with our site is protected via HTTPS/TLS
- PCI-DSS compliant payment processing— we never store full card numbers or CVV on our servers; payments are handled by our certified payment gateway partner
- Access controls— customer data is accessible only to authorized personnel on a need-to-know basis
- Password protection— account passwords are stored using industry-standard hashing, never in plain text
- Regular security reviews— we periodically review our systems for vulnerabilities
- Data breach response— in the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Rules, 2025
if you suspect unauthorized access to your account.
7. Data Retention
- Access— request a summary of the personal data we hold about you.
- Account data— retained until you request deletion or your account remains inactive for an extended period.
- Marketing data— retained until you withdraw consent.
8. Your Rights
You have the right to:
- Access— request a summary of the personal data we hold about you.
- Correction— request correction of inaccurate or outdated data.
- Erasure— request deletion of your data, subject to legal retention requirements.
- Withdraw consent— at any time, without affecting the lawfulness of prior processing.
- Grievance redressal— raise a complaint with us, and if unresolved, escalate to the Data Protection Board of India.
- Nominate— nominate another individual to exercise your rights in the event of death or incapacity.
We aim to resolve grievances within a reasonable time, and in any case within the timeframe prescribed under applicable law. If you are in India (DPDP Act, 2023):
If you are in the European Union (GDPR):
Consistent with the 3-day cooling-off right in our Returns Policy, EU customers additionally have the right to:
- Access, rectify, or erase their personal data.
- Restrict or object to processing.
- Data portability (receive your data in a portable format).
- Lodge a complaint with your local data protection authority.
To use any of these rights, email ShopMitra at support@shopmitra.net. with the subject line "Privacy Request."
9. Children's Privacy
ShopMitra is not directed at children under 18. We do not knowingly collect personal data from minors without verifiable parental/guardian consent. If you believe a child has provided us data without consent, contact us and we will delete it promptly.
10. International Data Transfers
If you are ordering from outside India, your data may be processed on servers located in India. We take reasonable steps to ensure such processing meets the security standards described in this policy.
11. Third-Party Links
Our site may link to third-party websites (e.g., social media, payment providers). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies separately.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices orlegal requirements. The "Last Updated" date at the top will reflect the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
13. Grievance Officer / Contact Us
Mobile: +919731778410
For any privacy-related questions, data requests, or complaints, please reach out using the details above. We aim to acknowledge all requests promptly and resolve them within reasonable time frame.