Privacy Policy

1. Information we collect

We collect only the information needed to run the marketplace and deliver your orders:

• Account details: your name, email address and mobile number when you register.
• Delivery details: shipping address, PIN code and — only if you choose to drop a pin — GPS coordinates of your delivery location, so our SHG logistics partners can find you accurately.
• Order details: products purchased, quantities, amounts, order status and communication history.
• Payment references: for online payments we store only the Razorpay payment id, order id and payment status. We never see or store your card number, CVV, UPI PIN or netbanking credentials.
• Device and usage data: basic, aggregated usage information that helps us improve the store.

2. How we use your information

• To process and deliver your orders, including status updates.
• To enable secure payments through our payment gateway, Razorpay.
• To provide customer support, handle returns, refunds and disputes.
• To onboard and settle payments to SHG sellers for the products you buy.
• To meet legal, tax and accounting obligations applicable in India.
• To detect fraud and keep the marketplace safe for buyers and makers.

3. Who we share your data with

We do not sell your personal data. We share it only with the parties needed to fulfil your order:

• Razorpay Software Private Limited — our payment gateway — which processes payments under its own PCI-DSS compliant privacy policy.
• Logistics and courier partners, who receive your name, delivery address, PIN code, GPS coordinates (if saved) and phone number solely to deliver your order.
• The specific SHG or entrepreneur who fulfils your order, receiving only the details needed to pack and ship it.
• Government or law-enforcement authorities, where disclosure is required by Indian law.

4. Data security

Your data is stored on secured infrastructure with encryption in transit, role-based access controls and audit logging. Access to personal data is limited to trained personnel and, for SHG sellers, strictly to the delivery information of the orders they must fulfil. Payment instrument data is handled exclusively by Razorpay and never touches our servers.

5. Data retention

Order and payment records are retained for the period required under Indian tax and accounting laws. Account information is retained while your account is active; you may request deletion at any time, subject to these legal retention requirements.

6. Your rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023, you may:

• Request a summary of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, unless retention is required by law.
• Withdraw consent for optional data uses (such as marketing) at any time.
• Nominate another individual to exercise your rights in case of incapacity or death.

7. Cookies and local storage

We use essential cookies and browser local storage to keep you signed in and remember your cart and wishlist. We do not use third-party advertising trackers.

8. Children's privacy

SHGeshop is not directed at children under 18. Accounts must be created by adults; where a child receives a product, the transaction is made by a parent or guardian.

9. Grievance redressal

If you have a privacy concern or wish to exercise any right above, contact our grievance officer with the subject “Privacy Request”. We respond within 30 days.

10. Changes to this policy

We may update this policy as the marketplace evolves. The “Last updated” date at the top always reflects the current version, and material changes will be highlighted on this page.