Close Cookie Popup
Cookie Settings
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage and assist in our marketing efforts. More info
Last Updated: 15th May 2026
Shopflo Technologies Private Limited (“Shopflo”, “We”, “Us”, “Our”, and “Ourselves”), operating its checkout platform accessible at www.shopflo.com and integrated into the websites of third-party merchants (the “Platform”), places the utmost importance on maintaining the confidentiality, integrity, and security of your (collectively, “You”, “Your”, “Yourself”, and “Users”) personal data and information that You share with Us when You use Our Platform or Checkout Services (defined below).
This document (“Privacy Notice”) explains how Personal Information (defined below) is collected, received, stored, processed, disclosed, transferred, dealt with, or otherwise handled by Us in connection with Our services. It also describes the choices available to You regarding Our use of Your Personal Information and how You can access and update such Personal Information.
This Privacy Notice is incorporated into and subject to Our Terms and Conditions (“Terms”) (available at https://www.shopflo.com/terms-conditions ). This Privacy Notice is meant to be read with the Terms. All capitalised terms used herein but not defined under this Privacy Notice shall have the meaning ascribed to them under the Terms.
Please read this Privacy Notice carefully before using Our Platform or availing of any of Our Services. This Privacy Notice: (i) will be considered to be an electronic record under the Indian data privacy laws, including the Information Technology Act, 2000, read with the rules and regulations made thereunder; (ii) will constitute a ‘Notice’ under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), when applicable, read with the rules and regulations made thereunder; and (iii) will not require any physical, electronic, or digital signature by Shopflo.
This Privacy Notice broadly lays out the following:
This Privacy Notice does not cover information You may directly provide to third-party websites, applications or services that are not owned or controlled by Us, including the merchant websites from which You were redirected to Us. If You choose to contact Us or engage with Us through such third-party sites, the respective third parties’ policies will govern Your use of those sites.
1. UNDERSTANDING OUR PLATFORM AND OUR ROLE
1.1. Shopflo provides a technology-enabled checkout platform (“Checkout Services”) that is integrated into the storefronts of select third-party online brands and retailers (“Merchants”). The Merchants collectively comprise the “Shopflo Network Merchants”. When You are in the process of completing your online purchase of goods/services from a Merchant, You may be redirected to Our checkout platform that we have provided to the Merchant to enable seamless Merchant checkouts by adding items to cart, reviewing and confirming orders and then proceeding to make the payment back on the Merchant’s platform (being either provided to You directly by the Merchant or by some other third party engaged therefor by the Merchant). When accessing this checkout platform, the Merchant may require You to log in as a user with Us. When You log-in to access the Merchant’s checkout flow, we may process Your data on behalf of, and as per the instructions of the Merchant, and in such cases, all Your recourses shall lie with the Merchant, as We will only act in the capacity of a data processor. However, there are limited instances where We may process Your information for our own purposes to enable a more comprehensive service offering to the Shopflo Network Merchants and in some instances, You, as detailed in this Privacy Notice.
1.2. You acknowledge that the Merchant from whose platform You were redirected is an independent data fiduciary. You should read the privacy policy and terms of use of the Merchant to understand how they process Your Personal Information.
2. PERSONAL INFORMATION COLLECTED
2.1. “Personal Information” means any information about an individual if such individual is identifiable: (i) by such information; or (ii) in relation to such information.
2.2. Accordingly, We have laid out below the exact data sets of Personal Information that We collect from You (collectively “Personal Information”):
(a) Identity and Contact Data:
We collect and process Your full name, email ID, and phone number. Your phone number is used as a primary identifier to verify Your identity via a One-Time Password (“OTP”) at the time of checkout, as required by the Merchants we service for enabling Your onboarding and supporting You in Your platform engagement, checkout and purchase journeys. We also use this information to offer Our comprehensive services to other Shopflo Network Merchants and also to directly service You across the Shopflo Network Merchants by enabling seamless access to your information.
(b) Address and Location Data:
We collect and process Your residential and delivery address, including physical address details, for the purpose of supporting the Merchant in fulfilling Your orders, and also for the purpose of enabling You to readily access your address details across the Shopflo Network Merchants. We also collect Your IP address and device-based location signals, including cookies or similar technologies that may identify Your browser or device for this purpose.
(c) Order and Transaction Data:
We collect and process information pertaining to Your order history across the Shopflo Network Merchants (and their third party vendors and partners) as required by them, including information on past orders, payment preferences, return-to-origin (“RTO”) instances, transaction identifiers, and session source data to understand User behaviour, and improve service quality and features of the Shopflo Network Merchant. We do not collect payment card information directly; such information is collected and governed by the privacy policy of the relevant payment service provider engaged by the relevant Merchant/ on the relevant Merchant’s behalf.
(d) Behavioural and Session Data (including via cookies):
Once You log in/ create an account with Us through any Shopflo Network Merchant’s website, We are able to collect and process Your data relating to Your activity across all Merchant websites within Our network via back-end tracking technologies, including cookies placed on Your device at the time of your first log-in. This includes information relating to: (i) Your checkout journey from cart addition to order placement or drop-off; (ii) items You have viewed or left in an abandoned cart; (iii) Your payment method preferences across the Shopflo Network Merchants; (iv) Your product browsing preferences and interest signals derived from Your interaction with Merchant platforms; and (v) session metadata, including the web source (such as Google, social media sites etc.) through which You accessed any particular Merchant’s website.
(e) Cross-Merchant Network Data:
We collect and process Personal Information provided by You on any single Merchant platform within the Shopflo Network and use it across the network for the purposes described in this Privacy Notice, including to pre-fill checkout information and enable cross-merchant login.
2.3. We will not sell or market Your Personal Information to any third parties.
3. ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL INFORMATION?
3.1. Consent: We will process Your Personal Information based on Your prior, free, specific, informed, unconditional, unambiguous, and explicit consent, and in accordance with applicable Indian law. Please note that You can withdraw Your consent at any time. While You have the right to withdraw the consent You have given, certain Personal Information may be necessary to provide You with Our Checkout Services, and We may not be able to continue providing such Services if the Personal Information requested is essential for their provision.
3.2. Certain Legitimate Uses: Notwithstanding anything contained herein, We may, in compliance with applicable laws in India, process Your Personal Information without obtaining Your consent in the event:
4. WHEN DO WE COLLECT YOUR PERSONAL INFORMATION AND HOW DO WE USE IT?
We will only collect Your Personal Information as set out in Section 2 and in accordance with applicable laws. We collect and use Your Personal Information in the following manner and for the following purposes:
4.1. Directly from You — when You access the cart/ checkout on any Shopflo Network Merchant’s platform that uses Our Checkout Services:
When You are redirected to Our checkout platform from a Merchant’s website, We collect Your Personal Information, including Your phone number, name, delivery address, and email, in order to process Your transaction.
How We use this Personal Information:
4.2. Information Generated About You or Collected About You:
We collect and generate information about You when You engage with any Shopflo Network Merchant, through Our back-end systems and cookies that we have placed on Your device based on Your first interaction with Our Checkout Services when accessing the platform of any Shopflo Network Merchant.
How We use this Personal Information:
4.3. We (including Our affiliates, group companies, holding companies, and successors, as described in this Privacy Notice) may use Your information certain other purposes such as: unified business operations and service delivery, including providing, operating, maintaining, and improving products and services, as well as internal administration and customer support; customer experience enhancement, including analytics related to business operations; dispute resolution and grievance handling; risk and security management, including monitoring, investigating, detecting, preventing, or reporting fraud, misrepresentations, security breaches or incidents, and other potentially prohibited or illegal activities; marketing, cross-selling and offering products or services, whether for Us, Our affiliates, or pursuant to a change of control.
5. COOKIES AND TRACKING TECHNOLOGIES
5.1. We use cookies and similar tracking technologies to store and retrieve Your Personal Information. We collect cookies only after You create a user account with Us as part of completing the purchase of goods/services from the Merchant. Cookies are small text files stored on Your device that help Us recognise You across the Shopflo Network. Cookies enable Us to retrieve Your Personal Information by default on Your next checkout, enabling a faster and smoother experience.
5.2. We use the following categories of cookies:
Type of Cookie
Purpose
Strictly Necessary Cookies
Required for the operation of Our Platform. These cookies enable basic functions like page navigation, secure access, and OTP-based authentication. You cannot withdraw consent to the collection of necessary cookies as they are essential for the Platform to function on Your browser.
Functional / Preference Cookies
Used to remember Your preferences across Merchant platforms within Our network, including delivery address pre-fill and cross-merchant login.
Analytics and Performance Cookies
Used to trace Your checkout journey and analyse drop rates and session behaviour to improve Our Platform and the Merchant’s checkout experience.
Targeting / Marketing Cookies
Used to track Your browsing preferences and product interest signals, and to enable Merchants to send targeted communications and product recommendations via third-party marketing platforms.
5.3. You can change Your cookie preferences through Your browser settings (for example, Chrome, Safari, or Internet Explorer) or Your mobile device settings. However, disabling certain cookies may significantly impact Your checkout experience and the availability of certain features.
5.4. We may also use third-party analytics service providers who use cookies, web beacons, and other tracking technologies to collect information, including Your IP address, identifiers associated with Your device, the browsers You use to access Our Services, webpages viewed, time spent on webpages, links clicked, and conversion information. We encourage You to review the privacy policies of such third-party service providers to understand their data practices:
5.5. You shall also have the right to withdraw consent to the collection of non-essential cookies at any time by contacting Us at the details set out in Section 16 below.
6. WHY AND TO WHOM DO WE DISCLOSE YOUR INFORMATION?
6.1. We only share Personal Information when We have Your express consent, or as otherwise provided in this Privacy Notice.
6.2. Disclosure to Merchants and Their Fulfilment Partners: We share Your Personal Information with the Shopflo Network Merchants and their permitted third parties that operate their stores, such as Shopify, logistics partners, and marketing partners. This includes Your name, phone number, delivery address, email address, and order-related information, for the purpose of tracking preferences, customisation of services and products, order completion, order fulfilment, cart recovery and customer outreach. Each Merchant with whom Your data is shared is an independent Data Fiduciary bound by its own privacy practices and policies.
6.3. Disclosure to Affiliates, Employees and Third-Party Service Providers: We may disclose Your Personal Information to Our employees, third-party contractors, vendors, or service providers (“Permitted Third Parties”), affiliates, and group companies (and their Permitted Third Parties), who have been authorised by Us to undertake certain functions on Our behalf and who are bound by the limitations associated with the use of Your Personal Information as indicated in this Privacy Notice. All such third parties and employees are subjected to strict disciplinary action, including termination, in the event of non-compliance with this Privacy Notice or any other applicable policy or in case of any breach of their data protection obligations.
6.4. Disclosure During Change of Control: Subject to applicable law and any consents (as may be required from You), We may share Your Personal Information with Our parent, subsidiaries, affiliates, or successors in connection with a sale of some or substantially all our business or assets, acquisition, merger, consolidation, reorganisation, restructuring or other change of control, including in respect of any due diligence process, to ensure the continuity of Our operations and services to You, the Shopflo Network Merchants and any other service recipients.
6.5. Disclosures Required by Law: We may access, use, preserve, transfer, and disclose Your information (including Personal Information) to governmental authorities or instrumentalities: (i) to satisfy any applicable law, regulation, court order, governmental request, order from government authorities or investigative agencies, or legal process, if in Our good faith opinion it is required or permitted by law; (ii) to protect and/or defend Our Terms before any court or governmental or regulatory authority; (iii) to protect the safety, rights, property, or security of Our Platform or any third party; and/or (iv) to detect, prevent, or otherwise address fraud, security, or technical issues. Such disclosures may be carried out without notice to You.
6.6. Notification of Personal Data Breach: We maintain reasonable technical and organisational measures to prevent unauthorised access, alteration, disclosure, or destruction of such data. In the event of an actual or suspected data breach, We will take all measures required under applicable laws, including notification to You and to the relevant regulatory authorities within the timelines and in the manner as prescribed under applicable law.
7. INFORMATION BELONGING TO CHILDREN AND PERSONS WITH DISABILITY
7.1. Our Platform and Our Checkout Services are not intended for children (i.e., persons below 18 (eighteen) years of age). We neither collect their Personal Information nor encourage children to interact with Our Platform. We do not owe any responsibility to any such User who is a child, or towards the parents or lawful guardians of such a child, as applicable.
7.2. Our Platform is inclusive and caters to all persons, including persons with disabilities. For the purpose of this Privacy Notice, a “person with disability” refers to someone with long-term physical, mental, intellectual, or sensory impairment that may hinder their full and effective participation equally with others. If You are a lawful guardian (appointed by a court of law, or by a designated authority or by a local level committee, under the law applicable to guardianship) acting on behalf of a person with disability, please contact Us using the details provided in Section 16. We will be happy to assist You in connection with Your request.
8. FOR HOW LONG DO WE RETAIN YOUR PERSONAL INFORMATION?
8.1. We ensure that Your Personal Information, which is in Our possession or under Our control, is destroyed and/or anonymised as soon as: (i) the purpose for which that Personal Information was collected is no longer being served by its retention; and (ii) retention is no longer necessary for any other reason, including under applicable law.
8.2. We shall retain Your Personal Information, associated traffic data, and other logs of processing for a minimum period of one (1) year from the date of such processing, in accordance with applicable law, after which We shall erase such Personal Information and logs, unless further retention is required for compliance with any other applicable law or for the continued defence of legal claims.
8.3. Notwithstanding the above, We will not use Your Personal Information to interact with You once the purpose for which it was provided has been fulfilled, however, We may be required to retain it to meet Our obligations under applicable laws.
9. YOUR RIGHTS
We provide You with the following rights in respect of Your Personal Information as per applicable law. You can exercise these rights by writing to us as per Section 16 below. Your rights are:
9.1. Right to Access Information: You have the right to ask Us: (i) for a summary of Your Personal Information being processed by Us and the processing activities undertaken by Us with respect to such Personal Information; and (ii) for the identities of all other third-party entities with whom Your Personal Information has been shared by Us, along with a description of the Personal Information so shared. However, this right has certain limitations as prescribed under applicable law.
9.2. Right to Modify / Rectify Information: You have the right to correct or update any information, including Your Personal Information. In the event that You notice that any Personal Information already provided by You is inaccurate, incomplete, or needs to be updated, You can ask Us to rectify such Personal Information (if the same cannot be done at Your end online) by contacting Us. We urge You to ensure that You always provide Us with accurate and correct information to ensure that Your use of Our Services is uninterrupted. In case of any such modification of Personal Information, You may be required to furnish supporting documents relating to the change for verification.
9.3. Right to Erasure: You have the right to request the deletion or removal of Your Personal Information where there is no compelling reason for Us to keep it. Such right of erasure can be exercised in a format prescribed under applicable law. On such an erasure request, We shall delete all of Your Personal Information stored by Us and shall also ensure that any third-party service provider processing Your Personal Information on Our behalf deletes all Your Personal Information, unless retention of the same is necessary for providing Our Services or for compliance with any applicable law for the time being in force. Please note that We may not be able to provide You with Our Services subsequent to Your exercising of this right.
9.4. Right with Respect to Consent: In certain instances, before collecting Your Personal Information, We take Your free, specific, informed, unconditional, unambiguous, and explicit consent. You can deny consent for the use of any particular information or revoke the consent already given. You shall have the following rights:
If You do not provide Your consent or later withdraw Your consent, We reserve the right not to offer You Our Services or any information sought. In such a scenario, We may delete Your Personal Information or other information We had earlier collected and stored, or de-identify it so that it is anonymous and not attributable to You. Upon receiving a request for deletion of Your Personal Information or withdrawal of consent for processing, We shall not retain Your Personal Information if We no longer need it and there is no legal requirement to retain the same.
9.5. Use of Consent Manager: You are permitted to give, manage, review, or withdraw Your consent provided to Us to process Your Personal Information through a ‘consent manager’ when available. A consent manager is an entity that is registered with the Data Protection Board of India. The consent manager is accountable to You and can assist You in providing or withdrawing Your consent, on Your behalf. Such consent managers must comply with the obligations imposed on them as prescribed by the Central Government.
9.6. Right to Nominate: You shall have the right to nominate any other individual who shall, in the event of Your death or incapacity, exercise Your rights in relation to Your Personal Information, per applicable law in India.
9.7. Do note that where we act only as a data processor to the Merchants, all your rights will lie with the Merchants, and we will only act upon the instructions of the Merchants.
10. YOUR DUTIES
10.1. The applicable laws prescribe certain duties that You must adhere to. As part of Your duties, You need to ensure that You:
11. SECURITY MEASURES
11.1. We have reasonable security measures and safeguards in place to protect Your privacy and Personal Information from loss, misuse, unauthorised access, disclosure, destruction, and alteration of the information in compliance with applicable laws.
11.2. As long as You use Our Services, it is also Your obligation, at all times, to take adequate physical, managerial, and technical safeguards at Your end, to preserve the integrity and security of Your information.
11.3. We do not assume any liability or responsibility for disclosure of Your Personal Information due to errors in transmission, unauthorised third-party access, or other causes beyond Our reasonable control. You understand and acknowledge that We cannot guarantee the security of any Personal Information that You transmit to Us or guarantee that Your Personal Information may not be accessed, disclosed, altered, or destroyed by a breach of any of Our security measures and safeguards. In the event of any actual or suspected security incident, including a data breach, We will take all measures required to be undertaken under applicable laws.
12. CROSS-BORDER TRANSFERS
12.1. Your Personal Information is currently stored on servers located in India, and is not transferred outside India as part of Our standard processing activities.
12.2. To the extent that any transfer of Your Personal Information outside India may become necessary (including by Our affiliates or service providers), We will ensure that such transfers are carried out in accordance with applicable law, in particular, the DPDP Act, and subject to appropriate safeguards, including contractual protections and other legally recognised transfer mechanisms, and subject to the restrictions that may be notified from time to time.
13. CHANGES TO THIS PRIVACY NOTICE
13.1. We reserve the right to amend this Privacy Notice from time to time to ensure that it is consistent with any developments to Our Services, the way We use Your Personal Information, or any changes to the applicable laws, including applicable data protection laws. We will make the updated Privacy Notice available on Our Platform. We will notify You of any material changes to this Privacy Notice by way of an email and/or a notice on Our Platform. You will be required to provide Your consent and accept the updated Privacy Notice before You can continue using Our Services after such change.
13.2. We encourage You to visit Our Platform from time to time to ensure that You are well informed about Our latest policies concerning personal data protection. All use of Our Services shall be subject to the latest version of this Privacy Notice in force at the time.
13.3. You may determine if any such revision has occurred by referring to the date on which this Privacy Notice was last updated.
14. LANGUAGE OPTIONS
14.1. This Privacy Notice is available in English and all twenty-two (22) languages specified in the Eighth Schedule to the Constitution of India. You may seek access to the Privacy Notice in Your preferred language by contacting Us using the details provided in Section 16.
15. GRIEVANCE REDRESSAL
15.1. In case of any grievances, complaints, or concerns with respect to Our Platform, Our Checkout Services, or this Privacy Notice, You can contact Our Grievance Redressal Officer, whose details are provided below:
Name:
Agnibha Bose
Designation:
Director of Engineering
Email:
agni@shopflo.com
Address:
BLOCK QUTUB VIHAR, PLOT NO S-151/A KH NO 14/22/5/3,
14/23 D, PHASE-I, GALI NO.10 NEWDELHI, South West Delhi,
South West Delhi, Delhi, 110071
15.2. By lodging a complaint, You agree to provide complete support to the Grievance Redressal Officer and such reasonable information as may be sought from You. We aim to resolve complaints as soon as possible.
15.3. The Grievance Redressal Officer shall acknowledge Your grievances, complaints, or concerns within twenty-four (24) hours of receipt of the same and shall endeavour to redress the same within a reasonable period not exceeding ninety (90) days from the date of receipt of the grievance.
15.4. If You have exhausted Your grievance redressal process with Us and remain unsatisfied with the resolution, You may raise Your concern with the Data Protection Board of India.
15.5. While you have the right to raise complaints with both Shopflo and the Data Protection Board of India, please note that registering false or frivolous complaints with the Data Protection Board is a punishable offence under the DPDP Act.
16. COMMUNICATE WITH US
16.1. If You have any questions, concerns, queries relating to, or wish to exercise any rights pursuant to this Privacy Notice, you can contact Us at:
Email:
contact@shopflo.com
Website: