Privacy Policy

1. GENERAL

1.1. This Privacy Policy describes how we collect, use, consult or process any personal information provided through the Website or through our Services. This Privacy Policy is intended to inform the Merchant(s) how we gather, define, and use the information that is provided to us when using our Services. Please take a moment to read this Privacy Policy carefully.

1.2. Shopflo may change or amend this Privacy Policy from time to time to incorporate necessary future changes. Shopflo’s use of the Merchant(s) Data shall be in adherence with the provisions of the relevant privacy policy under which the information was collected, regardless of new or conflicting provisions in an updated Privacy Policy.

1.3. Shopflo terms require all account owners to be at least eighteen (18) years of age (or have the permission and supervision of a responsible parent or legal guardian), therefore this policy does not discuss the use of our Services by minors.

1.4. For the purpose of this Privacy Policy, if you are using our Services of Shopflo to design and/or improve your website services and improve the experience of your customers; and/or have created a Shopflo account, you shall be classified as a Merchant;

It is strongly recommended that the Merchants go through this Privacy Policy to better understand what data we use and how we use your data for each of the above classifications.

2. COLLECTION OF THE MERCHANT(S) DATA

2.1. In the course of providing the Services to you, Shopflo collects the following information that you shall provide to us through (a) forms and emails; or (b) entering data into the content management system; (c) Shopflo’s sales team (“Merchant Data”):

a. Your contact details including first name, last name, telephone number, email.
b. Details about the business: Pan Card, TAN card, GST details, bank account information.
c. Details regarding your payment gateway including but not limited to payment gateway keys etc., used for collecting money from your customers.

2.2. When you access Shopflo, we may automatically collect certain information about your hardware devices. We collect certain information that does not reveal your specific identity (“Non-personal Information”) such as internet protocol (IP) address, operating system and platform, demographic information, information collected through cookies, time zone setting, etc. For instance, when you access our Services, through a third party service such as Google Analytics we may collect your internet protocol (“IP”) and the type of device you use, as well as your geographic location. This information is generally collected in an aggregate form, without identifying any Merchant. We may combine this automatically gathered information with other information, including other Merchant Data we have collected about you;

2.3. The Website may also collect non-personal information through “cookies” when you access the Website. Cookies are text files that are placed in your computer to identify your internet browser, store your preferences, and to improve your experience on the Website. Merchant Data in cookies may be read to authenticate user sessions or provide Service. A website may contain links to third-party trackers on their individual websites, such data shall be governed by the individual website’s policies and not through this Privacy Policy;

2.4. We may receive information through third-party service providers, (such as business partners of technical, payment and delivery services, social media service providers, advertising networks, analytics providers, and search information providers) about your usage trends.

2.5. We treat information collected by cookies and other similar technologies as Non-personal Information of the Merchant.

2.6. As Non-personal Information does not personally identify Merchant, we may use and disclose Non-personal Information for any purpose.

2.7. If you send us personal correspondence, such as emails, we may collate such information into a file specific to you.

3. USE OF THE MERCHANT DATA

3.1. In order to request a demo from Shopflo or send an enquiry to us through the Website or you can reach us at contact@shopflo.com. While making a request for demo we may ask you to provide us with some information, such as your name, business name, business email, and phone number, to enable you to access the online demo. In this case, the legal basis for our processing of your personal data is your consent and the performance of a contract with you, or to take steps at your request prior to entering into a contract. When you (on behalf of your organisation) proceed to request, purchase and/or use the right to use any of our products and/or services, further information may be requested from you (such as bank account, payment gateway information, and other information for invoicing and payment) and processed accordingly, based on the same legal grounds. In addition, invoices are stored to comply with legal (tax) obligations. These invoices might be shared with statutory and/or governmental authorities for compliance purposes, as and when requested.

3.2. We use your Merchant Data and Non-personal Information we obtain from your current and past activities through your use of our Services to:

a. Resolve disputes;
b. Troubleshoot problems;
c. Collect fees owed;
d. Measure consumer interest in the Services and features provided by us;
e. Inform you about our offers, products, services, and updates (if any);
f. Customize your experience;g. detect and protect us against error, fraud and other criminal activity.

3.3. We or our group companies, may collect, hold and use information you share with us in order to provide our Services and products to you.

3.4. Shopflo uses this data to deliver the Services to you upon request for the following purpose:

a. to customize the Services to your interests;
b. to measure traffic within our Services and provide insight to third-parties as to the distribution of the users of Services.

You agree that we may use your Merchant Data to contact you and deliver information to you, considering the information is targeted to your interests. Shopflo shall not provide Merchant Data, that may be personal or sensitive in nature, to any third party without obtaining prior consent of the concerned user unless the same is requested by a statutory and/or governmental authority. Merchant Data of a general nature may however be shared with third parties.
‍
3.5. We use or may use the data collected through cookies, log file, device identifiers, location data and information to: a. remember information so that you will not have to re-enter it during your visit or the next time you visit the site; b. provide custom, personalized content and information; c. provide and monitor the effectiveness of our Services; d. monitor aggregate metrics and demographic patterns; and e. diagnose or fix technological problems.

3.6. We may use third parties that we refer to as internal service providers to facilitate or outsource one or more aspects of the business, product and service operations that we provide as a part of our Services and therefore we may provide some of the Merchant Data directly to these internal service providers. Internal service providers are bound by confidentiality agreements with us and are further constrained by legal restrictions prohibiting the utilization of furnished information for any other purpose except to facilitate the specific outsourced Website related operation, unless an explicit consent or prior authorization has been granted by you for additional uses. If any additional information is provided to an internal service provider directly, the use of Merchant Data will be governed by the concerned internal service provider’s privacy policy.

3.7. If you choose to make use of our services and make payments via net banking, credit/debit card or online wallets, you shall be obligated to furnish information, including but not limited to payment instrument number (e.g., credit card or debit card), name and billing address, associated security codes and related details (“Payment Data”). The Payment Data along with other Data, as provided shall be used to complete the transaction and/or detect and prevent any form of fraud. While submitting Payment Data, you acknowledge that the designated payment gateway may gather your Payment Data; however, it is noted that such information is not stored on our servers.

4. COLLECTION OF END-USER DATA

‍4.1. While accessing and utilization of the Website, Shopflo collects the following information provided by you through utilization of the websites designed and created by us (“End User Data”): a. Contact details (for instance, last name, first name, telephone number, email, residential address) b. Details about mode of payment including payment gateway used etc., to place order.

4.2. We may automatically collect some information about your hardware devices when you access the websites. For example, when you utilize the website designed by us, hosted on third party services, we may collect your internet protocol (“IP”) address, device type, and geographic location. We may combine this automatically gathered information with other information, including other End User Data we have collected about you;

4.3. We may also collect non-personal information through “cookies” when you access the Website. Cookies are text files that are placed in your computer to identify your internet browser, store your preferences, and to improve your experience on the Website. A website may contain links to third-party trackers on their individual websites, such data shall be governed by the individual website’s policies and not through this Privacy Policy.

4.4. We may receive information from third parties (including, for example business partners, providers of technical, payment and delivery services, social media service providers, advertising networks, analytics providers, and search information providers) about your usage trends;

4.5. We may receive information when you fill up forms on websites designed by Shopflo, this data provided on those websites shall be stored on our systems. All such data shall be provided to the Merchant via email. The Merchant’s use of such data shall be governed by their individual privacy policies.

4.6. If you send us personal correspondence, such as emails or fill out forms, we may collate such information into a file or a system specific to you. Shopflo does not collect any payment information from you, and your disclosure of such information will be bound by the data collection/privacy policy of the relevant payment gateway.

4.7. Shopflo may retain certain records of the information collected about you for a period of five (5) years after termination of your account. However, Shopflo reserves the right to delete and destroy all of the information collected about you upon termination of your account unless you request otherwise.

4.8. Notwithstanding the foregoing provisions, you have the right to request the deletion of your data. You acknowledge that, upon deletion of your data we may be unable to provide our Services to you.

5. USE OF END-USER DATA

5.1. We use End User Data and other information we obtain from your current and past activities on the website designed by us to: a. resolve disputes; troubleshoot problems; b. collect fees owed; c. measure consumer interest in the services and features provided by us; d. inform you about our offers, products, services, and updates; e. customize experiences and to safeguard ourselves;f. to provide analytics data to the Merchant.

5.2. We or our group companies or affiliates, may collect, hold and use information you share on the websites designed by us in order to provide our services and products to users.

5.3. In addition to this Privacy Policy, End Users shall also be governed by the individual privacy policies of the relevant Merchant. The End User Data of a general nature may however be revealed to third parties and Shopflo.

5.4. We use or may use the data collected through cookies, log file, device identifiers, location data and clear gifs information to:
a. remember information so that an End User will not have to re-enter it during the next time they visit the Merchant’s platform;
b. provide custom, personalized content and information and offers of behalf of the Merchant;
c. provide and monitor the effectiveness of our services;
d. monitor aggregate metrics and demographic patterns; and
e. diagnose or fix technology problems.

5.5. We may use third parties that we refer to as internal service providers to facilitate or outsource one or more aspects of the business, product and service operations that we provide to you on the Merchant website and therefore we may provide some of the End User Data directly to these internal service providers. Internal service providers are bound by confidentiality agreements with us and are further constrained by legal restrictions prohibiting the utilization of furnished information for any other purpose except to facilitate the specific outsourced Merchant-related operation.

6. SHARING YOUR MERCHANT OR USER DATA

6.1. We do not sell, otherwise disclose, or share the Merchant or End User Data that we collect and hold, except as described in this Privacy Policy.

6.2. We may share the Merchant or End User Data and your information (including but not limited to, information from cookies, log files, device identifiers, location data, and usage data) with businesses that are legally affiliated with Shopflo or that become part of that group (“Affiliates”). Affiliates may utilize this information to help provide, understand, and improve the Service.

6.3. Additionally, we may share Merchant or End User Data as well as information from tools like cookies, log files, and device identifiers and location data, with third-party organizations (including but not limited to payment gateways channel managers, cloud telephony providers, domain providers, email service providers, etc.) that help us provide Services to you. Our service providers will be given access to your information as is reasonably necessary to provide the Services under reasonable confidentiality terms. We may share Merchant or End User with third party services such as email providers and network providers to send you confirmation emails, and text messages.

6.4. We may remove parts of data that can identify you and share anonymized data with other parties. We may also combine your information with other information in a way that it disassociates it from your identity, and subsequently share such aggregated information.

6.5. When you use our Services, we will process certain personal data belonging to your customers and/or potential customers for or on behalf of your organisation. This means we operate as a ‘Data processor’ for your organisation, while your organisation is a ‘Data Fiduciary’, in accordance with the Digital Personal Data Protection Act, 2023. Your organisation is responsible to ensure that you process personal data in accordance with applicable privacy laws and regulations, and that a valid legitimate basis applies for processing of your personal data and its utilization on our systems.

6.6. We use or may use Merchant or End User Data for dissemination of automated metric mailers, analytics, and any collected end user data on the Website. All Merchant or End User Data is stored on servers which may be located outside India, and might be processed outside the country. Some of our third party entities may track your IP address to provide you content from a server close to you in order to give you a fast experience. Consequently, your IP address may be stored in servers dispersed across various locations worldwide.

6.7. In the development of our products and services, our foremost objective is to enhance transactions on your website by helping your organisation in refining its transaction processes and enhance customer experience. Furthermore, we endeavour to personalise offers and interactions with potential customers to optimize engagement.

6.8. We recommend that your organisation furnishes all requisite information regarding processing of personal data, including our processing of personal data for or on behalf of your organisation. To facilitate this, we provide a standard explanation proposed by us, under the express condition that your organisation acknowledges and agrees that your organisation shall be solely responsible for any information provided or not provided by your organisation about its processing of personal data, including its use of our product and services and its own particular purpose it may have with them.

6.9. Shopflo does not collect, retain, or share data regarding a particular user’s activity across multiple websites or applications that are not owned by/affiliated to Shopflo.

6.10. Shopflo may share your sensitive information with any third party without obtaining your prior consent in the following limited circumstances:

a. When it is requested or required by law or by any court or governmental agency or authority to disclose, for the purpose of verification of identity, or for the prevention, detection, investigation including cyber incidents, or for prosecution and punishment of offences. These disclosures are made in good faith and belief that such disclosure is reasonably necessary for enforcing the terms, this Privacy Policy, or for complying with the applicable laws and regulations.

b. Shopflo proposes to share such information within its group companies and officers and employees of such group companies for the purpose of processing Merchant or End User on its behalf. Shopflo also ensures that the recipients of such information agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.

7. COMMUNICATION AND MARKETING

7.1. When you create an account and/or obtain access to our Services, you will be able to receive promotional emails regarding latest offers and discounts from us.

7.2. Please note that in case you don’t wish to receive such e-mail, you have the full liberty to opt-out of such communication at any time.

7.3. To unsubscribe from our email list, you can send us the email at [contact@shopflo.com]

7.4. Please note, that should you opt-out of our emailing list, as described here, we will not be able to remove your information from the databases of affiliates, franchisees or business partners with which we have already shared your Data, prior to the date of your opt-out request.

8. RIGHTS UNDER THE EU PRIVACY LAW

8.1. In addition to the above-mentioned rights the Digital Personal Data Protection Act (DPDP) grants you specific rights, summarised below, which you can in principle exercise free of charge, subject to statutory exceptions, regarding your data. To exercise any of your rights, you can file a request via email at [contact@shopflo.com].

8.2. Right to withdraw consent: Wherever we rely on your consent, you will be able to withdraw that consent at any time you choose and at your own initiative by contacting us at [contact@shopflo.com]. While you will not be able to withdraw consent for any transaction-based emails, you will be able to opt out of product update related communication.

8.3. Right to access and rectify your data: You have the right to access, review, and rectify your information. You may be entitled to ask us for a copy of your information, to review or correct it if you wish to rectify any information like your name, email address, passwords and/or any other preferences.

8.4. Right to erasure: You may request that we erase your information in certain circumstances, such as where we collected your information on the basis of your consent, and you withdraw your consent.

8.5. Right of grievance redressal: In the event of any act or omission of performance of obligations by us, you have the right to readily avail the means for addressing your grievance with a prescribed period of time.

8.6. Right to Nominate: You may nominate any individual to exercise your rights as a Data Principal, in the event of death.

9. SUB-PROCESSORS

9.1. Shopflo may engage and use data processors with access to certain Customer Data (each, a “Sub-processor”), for the purpose of delivering our Services. This section provides important information about the identity, location and role of each Sub-processor.

9.2. All our processors and sub-processors are required to take appropriate security measures to protect your personal information in line with our policies. We strictly prohibit our processors and sub-processors from utilizing your personal data for their own purposes. They are authorized solely to process your personal data for specified purposes and in accordance with our explicit instructions.

9.3. As our business grows and evolves, the Sub-processors we engage may also change. We endeavour notify the account owner of Customer regarding any new Sub-processors to the extent required by the Agreement, in addition to posting such updates here. We encourage you to check back regularly for any updates.
‍
10. SECURITY
‍
10.1. The security of your personal information is important to us. Your Shopflo account information is protected by a password. It is important that you protect against unauthorized access of your account and information by exercising caution in selecting your password carefully and ensuring the security of your password and computer secure by signing out after using our services.

10.2. We have implemented procedures to help in protection of information provided by you. Nevertheless, no method of electronic data transmission or storage is entirely impervious to security breaches, and we cannot guarantee that such information will never be accessed, used, or released in a manner that is inconsistent with this Privacy Policy. You agree and acknowledge that we may engage third-party service providers for the provision of cloud service storage solutions, and Shopflo is not responsible for any lapse in security on the part of such service providers. We expressly disclaim any representation or warranty, whether express or implied, regarding the assurance, guarantee, or promise of absolute security concerning your Information. YOU ARE SOLELY RESPONSIBLE FOR MAINTAINING THE SECRECY OF YOUR ACCOUNT INFORMATION AT ALL TIMES.

10.3. You shall be solely responsible for all activities performed by you through your Shopflo account. Shopflo assumes no responsibility or liability for the improper use of information relating to usage of credit cards and/or debit cards by you, whether online or off-line.

10.4. To protect your privacy and security, we will verify your identity prior to granting access or making changes to your personally identifying information. Upon your registrationwith Shopflo, your Shopflo ID and Password are required to access your profile information.

11. CONTACT US

11.1. We are happy to address any of your queries, concerns or questions relating to processing (including storing and using) of your information which shall be addressed by the Merchant(s) to [contact@shopflo.com].

11.2. Grievance Redressal Officer: Priy Ranjan, CEO, Shopflo Technologies Pvt. Ltd.