## 1. Introduction & Overview Welcome to **shopCore** ("we", "us", or "our"). We operate an enterprise e-commerce platform and multi-vendor marketplace. This Privacy Policy outlines our policies regarding the collection, use, disclosure, and protection of your personal information when you use our website, mobile apps, seller portal, or APIs. By accessing or using shopCore, you agree to the collection and use of information in accordance with this policy. ## 2. Information We Collect We collect several types of information to provide, secure, and improve our multi-vendor marketplace services: ### A. Personal Data Provided by You | Category | Details | |---|---| | Identity & Contact Details | Full name, email address, phone number, shipping address, billing address, and account credentials. | | Merchant & Seller KYC Data | Government-issued tax ID (GSTIN/PAN), business registration documents, bank account details, and proof of address. | | Transaction & Payment Info | Payment method tokens, transaction history, invoice details, refund logs, and credit balances. | ### B. Automated & Technical Data | Category | Details | |---|---| | Device & Usage Data | IP address, browser type, operating system, referral URLs, device identifiers, and page visit duration. | | Cookies & Tracking | Session cookies, preference cookies, and security tokens (detailed in our Cookie Policy). | ## 3. How We Use Your Information We use the collected data for the following legitimate business purposes: 1. **Order Processing & Fulfillment** — Processing payments, delivering orders, and routing consignment shipments to sellers and logistics partners. 2. **Account Security & Fraud Prevention** — Verifying identity, detecting suspicious transactions, preventing unauthorized access, and maintaining audit logs. 3. **Customer Support & Communication** — Responding to support tickets, order updates, SMS shipping notifications, and dispute resolution. 4. **Platform Analytics & Personalization** — Improving catalog search, product recommendations, seller scorecards, and interface usability. ## 4. Data Sharing & Third-Party Vendors <div class="alert-box success"> <strong>We do not sell your personal data.</strong> We share data only with authorized parties necessary to perform core platform services. </div> | Recipient | Purpose of Sharing | |---|---| | Merchants / Sellers | Only the necessary shipping address and item details to fulfill customer orders. | | Logistics Partners | Name, phone number, and delivery address to complete package transport. | | Payment Processing Gateways | Encrypted payment authorization data sent via PCI-DSS compliant gateways (Stripe, Razorpay). | | Legal Compliance & Authorities | When required by applicable law, court order, or government regulation. | ## 5. Your Data Rights & Choices Depending on your jurisdiction, you have the following rights regarding your personal data: - **Right to Access & Export** — Request a copy of all personal data held about your account. - **Right to Rectification** — Correct incomplete or inaccurate profile information via account settings. - **Right to Erasure (Account Deletion)** — Request permanent account deletion, subject to tax and financial retention laws. - **Opt-Out of Marketing** — Unsubscribe from promotional newsletters at any time. ## 6. Data Retention We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. | Data Category | Retention Period | |---|---| | Account & Profile Data | Duration of active account, plus 90 days after account deletion request. | | Transaction & Invoice Records | 7 years, in accordance with applicable tax and financial regulations. | | Seller KYC Documentation | 5 years after termination of the seller relationship. | | Support Tickets & Communication Logs | 24 months from the date of last interaction. | ## 7. Data Security We implement industry-standard administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. - **Encryption** — Data is encrypted in transit (TLS 1.2+) and at rest using AES-256. - **Access Controls** — Role-based access restricts internal data access to authorized personnel only, on a need-to-know basis. - **Monitoring** — Continuous security monitoring, intrusion detection, and periodic third-party audits. - **Incident Response** — A documented breach-notification process to inform affected users and regulators as required by law. ## 8. Children's Privacy shopCore is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a minor has provided us with personal data without verified parental consent, we will take steps to delete such information promptly. ## 9. Changes to This Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other operational needs. Material changes will be communicated via email or a prominent notice on our platform at least 15 days prior to the effective date. Continued use of shopCore after changes take effect constitutes acceptance of the revised policy. ## 10. Governing Law & Disputes This Privacy Policy is governed by and construed in accordance with applicable data protection laws of the jurisdiction in which shopCore is registered. Any disputes arising from or related to this policy shall first be addressed through our internal Grievance Desk before pursuing formal legal remedies. ## 11. Contact & Grievance Officer If you have questions, concerns, or requests regarding this Privacy Policy, contact our Data Protection Officer: <div class="grid-contact-card"> <div> <div class="leg-label">EMAIL</div> <div class="fw-bold">privacy@shopcore.com</div> </div> <div> <div class="leg-label">GRIEVANCE DESK</div> <div class="fw-bold">shopCore Legal Department, Headquarters</div> </div> </div> <div class="alert-box ack-box mt-4"> <strong>Acknowledgement:</strong> By using the shopCore platform, website, mobile applications, or seller portal, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. </div>