Privacy Policy

Privacy Policy

At Eshop ("Eshop", "we", "us", or "our"), we respect your privacy and are committed to protecting the personal information you provide to us when you access or use our website, mobile application, products, services, or otherwise interact with us.

This Privacy Policy explains what information we collect, how we use it, when we may share it, how we protect it, and the choices and rights available to you.

By accessing or using, creating an account, placing an order, contacting us, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy.

1. About Eshop

2. Information We Collect

Depending on how you use Eshop, we may collect the following categories of information:

A. Information You Provide Directly

When you create an account, place an order, contact us, or use our services, we may collect:

  • Full name

  • Mobile number

  • Email address

  • Billing and shipping address

  • Delivery location

  • Account login information

  • Order and purchase details

  • Payment and transaction information

  • Information provided when contacting customer support

  • Reviews, feedback, or other information you voluntarily provide

We only request information that is reasonably necessary for the relevant purpose.

B. Information Collected Automatically

When you visit or use our website or application, certain technical information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Website pages visited

  • Date and time of visits

  • Referring website or source

  • Approximate location information derived from technical data

  • Cookies and similar technologies

  • Website usage and interaction information

C. Information From Third Parties

Where permitted by applicable law, we may receive information from third parties such as:

  • Payment service providers

  • Delivery and logistics partners

  • Authentication providers

  • Advertising and analytics providers

  • Technology and hosting service providers

  • Fraud-prevention and security service providers

We will use such information only for legitimate and disclosed purposes.

3. How We Use Your Personal Data

We may process your personal data for purposes including:

  1. Creating and managing your Eshop account.

  2. Processing and fulfilling your orders.

  3. Arranging delivery of products to your requested address.

  4. Processing payments and refunds.

  5. Providing customer support.

  6. Communicating with you about your orders, account, payments, delivery, returns, refunds, or other service-related matters.

  7. Sending service notifications and important account information.

  8. Improving our website, application, products, and services.

  9. Understanding how customers use our website and improving user experience.

  10. Detecting, preventing, and investigating fraud, abuse, security incidents, and other unlawful activities.

  11. Maintaining business, accounting, tax, audit, and other legally required records.

  12. Complying with applicable laws, regulations, legal processes, and governmental requests.

  13. Sending promotional communications where permitted and where the necessary consent or other lawful basis is applicable.

  14. Carrying out other purposes that are disclosed to you at the time your information is collected.

We will seek to process personal data only for specified and legitimate purposes and only to the extent reasonably necessary for those purposes.

4. Consent

Where processing of your personal data is based on consent, we will seek consent in an appropriate manner and provide information about the purpose for which your data is being processed.

Where applicable, you may withdraw your consent. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Depending on the nature of the service, withdrawing consent may affect our ability to provide certain services or features where the relevant data is necessary for providing them.

5. Order and Payment Information

When you place an order through Eshop, we process information necessary to complete your transaction, including your contact details, delivery information, order details, and transaction information.

Payments may be processed through third-party payment service providers. Eshop generally does not need to receive or store your complete payment-card credentials when payment processing is handled by such providers.

You should review the privacy policies of the relevant payment provider for information about how it processes payment information.

6. Cookies and Similar Technologies

Eshop may use cookies, pixels, local storage, and similar technologies to operate and secure the website, remember preferences, understand website usage, and improve our services.

Cookies may be used for purposes such as:

  • Keeping you signed in

  • Maintaining your shopping cart

  • Remembering preferences

  • Improving website performance

  • Understanding website traffic and usage

  • Measuring marketing campaigns

  • Providing relevant advertising, where applicable

You may be able to control cookies through your browser or device settings. Disabling certain cookies may affect the functionality of the website.

7. Promotional Communications

Where permitted by applicable law and where required, Eshop may send promotional communications about products, offers, discounts, new services, or other marketing activities.

You may opt out of promotional communications at any time by:

  • Using the unsubscribe option provided in an email;

  • Following the opt-out instructions in a promotional message;

  • Adjusting available communication preferences in your Eshop account; or

  • Contacting us at [Privacy/Support Email].

Even if you opt out of promotional communications, we may continue to send essential service-related communications, such as order confirmations, payment notifications, delivery updates, security alerts, and important changes to our services.

8. Sharing of Personal Data

We do not sell your personal data as a commodity.

We may share personal data with appropriate third parties where reasonably necessary for providing our services or complying with applicable law, including:

Service Providers

We may use third-party service providers for:

  • Website and application hosting

  • Cloud storage

  • Payment processing

  • Order fulfilment

  • Shipping and delivery

  • Customer support

  • Analytics

  • Marketing and communications

  • Fraud prevention

  • Cybersecurity

  • Information technology services

Such service providers may process personal data on our behalf and only for relevant business purposes.

Legal and Regulatory Authorities

We may disclose information where required or permitted by applicable law, including in response to valid legal processes, governmental requests, court orders, or regulatory requirements.

Business Transactions

If Eshop undergoes a merger, acquisition, restructuring, sale of assets, financing, or similar business transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

9. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide our services, maintain appropriate business and transaction records, resolve disputes, enforce agreements, prevent fraud, and comply with applicable legal, tax, accounting, and regulatory obligations.

When personal data is no longer required, we will take reasonable steps to delete, anonymize, or otherwise dispose of it in accordance with applicable law.

10. Data Security

Eshop takes reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, alteration, disclosure, loss, destruction, or other unauthorized processing.

Security measures may include access controls, authentication, encryption where appropriate, monitoring, secure infrastructure, and internal security practices.

However, no website, application, electronic transmission, or storage system can be guaranteed to be completely secure.

11. Data Breaches and Security Incidents

If Eshop becomes aware of a personal-data breach or security incident requiring notification under applicable law, we will take appropriate steps to investigate, contain, mitigate, and notify the relevant persons or authorities as required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any conditions or limitations prescribed by law, you may have rights relating to your personal data, including the right to:

  • Request information about the personal data processed by us;

  • Request correction of inaccurate or incomplete personal data;

  • Request deletion of personal data where applicable;

  • Withdraw consent where processing is based on consent;

  • Request information about how your personal data is processed;

  • Exercise applicable grievance or complaint rights; and

  • Nominate another individual to exercise applicable rights on your behalf, where permitted by applicable law.

To exercise an applicable right, please contact us using the details provided in the Contact Us section below.

We may need to verify your identity before processing certain requests in order to protect your account and personal data.

13. Children's Privacy

Eshop's services are not intended to be used by children where applicable law prohibits such use.

We do not knowingly collect personal data from children in circumstances where parental or guardian consent is legally required without obtaining the required consent.

If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us so that we can take appropriate action.

14. Third-Party Websites and Services

Our website or application may contain links to websites, applications, payment services, social-media platforms, or other third-party services.

Eshop is not responsible for the privacy practices, security, or content of third-party services.

We encourage you to review the privacy policies of third-party websites and services before providing them with your personal information.

15. International Data Transfers

Some of our service providers or technology infrastructure may be located outside India or may process information outside India.

Where personal data is transferred or processed outside India, Eshop will take such measures as may be required under applicable law.

16. Changes to This Privacy Policy

Eshop may update or modify this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.

When we make changes, we will update the "Last Updated" date shown at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

Your continued use of Eshop after an updated Privacy Policy becomes effective will be subject to the updated Privacy Policy, to the extent permitted by applicable law.

Important: This Privacy Policy should be read together with Eshop's Terms & Conditions, Shipping Policy, Return & Refund Policy, Cancellation Policy, and Cookie Policy, where applicable.

This document is intended as a general privacy-policy draft and should be reviewed by an Indian lawyer or privacy professional before publication, particularly to confirm Eshop's actual data practices, business structure, payment providers, marketing practices, retention periods, and obligations under applicable Indian law.