Privacy Policy

1. Information We Collect

We collect only what an order actually needs:

• Mobile number — to create your account and send one-time passwords.
• Name, and email address if you choose to give one.
• Delivery addresses — recipient name, phone, full address, pin code and any landmark you add.
• Approximate location— only if you tap “Use my current location” while adding an address. Your device's coordinates are sent to a mapping service to fill in the address fields for you, and stored with that address so we can help the courier find it. We never track your location in the background.
• Order and payment history — what you ordered, order status, and the payment method and reference. We never receive or store your card, UPI or bank credentials.
• Basic usage data — pages and products viewed, so we can show recently viewed items and improve the store.

2. How We Use Your Information

We use your information to:

• Verify your identity via OTP
• Fulfil and deliver your orders
• Send order confirmations and delivery updates
• Provide customer support
• Improve our platform and services

We do not sell your personal information to any third party.

3. WhatsApp & SMS Communication

We use WhatsApp and SMS to send you OTP verifications and order updates. By providing your mobile number and giving explicit consent on our platform, you agree to receive these communications. You may opt out at any time by contacting support@shopka.in, by replying STOP to any WhatsApp message, or from the WhatsApp updates switch in My Account. One-time passwords you request yourself are sent regardless, since they are how you sign in.

Our WhatsApp messaging is powered by authorized WhatsApp Business Solution Providers. Your number is used solely to deliver OTPs and order updates — never for unauthorized marketing.

4. Payments

Online payments are processed by Razorpay Software Private Limited. Card, UPI and bank details are entered on Razorpay's own PCI-DSS compliant checkout and are never sent to or stored on our servers — we keep only the payment reference and status. Cash on Delivery orders involve no payment data at all.

5. Cookies & Sessions

We use secure session cookies to keep you logged in. We do not use third-party advertising trackers.

6. Data Sharing

We do not sell your personal information. We share it only with the service providers needed to run the store:

• Razorpay — to take and refund online payments.
• Fast2SMS(an authorized WhatsApp Business Solution Provider on Meta's Cloud API) — to deliver WhatsApp one-time passwords and order updates. Meta Platforms processes WhatsApp messages as part of delivering them.
• Google Firebase — used for phone number verification on some sign-in paths.
• OpenStreetMap / Nominatim— when you use “Use my current location”, your coordinates are sent to this service to look up the matching address.
• Courier and logistics partners — the recipient name, phone number and delivery address for your order.
• Supabase (database) and Vercel (hosting) and Cloudinary (image delivery) — the infrastructure the site runs on.

Each of these receives only what it needs for that purpose, and only for order fulfilment, payment, verification or support — never for their own marketing.

7. How Long We Keep It

• One-time passwords — deleted within 24 hours. The code itself is stored only as a hash and expires in minutes.
• OTP request records used to rate-limit sending — deleted after 24 hours.
• Account, address and order records — kept while your account is open, and afterwards only as long as tax and accounting law requires us to retain invoice records.
• WhatsApp consent and opt-out timestamps — kept as the record that your choice was captured and honoured.

8. Data Security

We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, or disclosure.

9. Your Rights

You may view and correct your name, email and WhatsApp preference, and manage your delivery addresses, from My Account. To request a copy of your data, or deletion of your account and data, email support@shopka.in from the address on your account or write to us from shopka.in/contact. We act on such requests within 30 days.

10. Compliance

This Privacy Policy is in accordance with India's Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.

11. Changes to This Policy

We may update this policy from time to time. Continued use of Shopka after changes means you accept the updated policy.

12. Contact & Grievance Officer

Email: support@shopka.in

Website: shopka.in/contact

Grievance Officer (Consumer Protection (E-Commerce) Rules, 2020 and DPDP Act, 2023): Vikas Maurya, support@shopka.in
281, Vikas, Budhni Road, Hinchhapur, Babhanjot, Gonda, Uttar Pradesh - 271312