Privacy
Policy.

We collect information you provide directly to us and information that is automatically collected when you use Shelves.

Information you provide:

• Name, email address, phone number, and delivery address when you register or place an order
• Payment information (processed securely via PCI-compliant third-party gateways — we do not store card numbers)
• Profile photo, preferences, and wishlist data
• Communications you send us, including support tickets and reviews
• Seller information if you register as a vendor on our platform

Information collected automatically:

• Device type, operating system, browser type and version
• IP address and approximate geographic location
• Pages visited, time spent, clicks, and search queries on Shelves
• Referral URLs and session data
• Crash reports and performance data to improve our platform

We use the information we collect for the following purposes:

• To create and manage your account and process transactions
• To deliver products and send order confirmations, shipping updates, and invoices
• To personalise your shopping experience and show relevant product recommendations
• To send promotional emails, offers, and early-access notifications — only if you opt in
• To respond to your queries and provide customer support
• To detect, investigate, and prevent fraudulent transactions and abuse
• To comply with applicable Indian laws and regulations including the IT Act, 2000 and DPDP Act, 2023
• To improve, test, and develop new features for the Shelves platform

We may share your information in the following limited circumstances:

• Sellers & Logistics Partners: Your name, address, and order details are shared with the seller fulfilling your order and the delivery partner shipping it
• Payment Processors: Encrypted payment data is shared with our PCI-DSS compliant payment gateway partners (Razorpay, etc.) solely to process transactions
• Analytics & Infra Providers: We use trusted services (e.g. Google Analytics, AWS) that process data on our behalf under strict data processing agreements
• Legal Obligations: We may disclose information if required by law, court order, or to protect the rights and safety of Shelves, its users, or the public
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred — you will be notified before it is subject to a different privacy policy

Shelves uses cookies and similar tracking technologies to enhance your experience and understand how our platform is used.

• Essential Cookies: Required for core functionality like login sessions and shopping cart — these cannot be disabled
• Analytics Cookies: Help us understand traffic patterns and improve the platform. You can opt out via browser settings
• Preference Cookies: Store your language, currency, and display preferences
• Marketing Cookies: Used to show relevant ads on third-party platforms. These are only activated with your explicit consent

You can manage or disable cookies through your browser settings at any time. Disabling essential cookies may affect platform functionality.

We implement industry-standard security measures to protect your personal information:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS)
• Sensitive data at rest is encrypted using AES-256
• Payment data is handled exclusively by PCI-DSS Level 1 certified gateways
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• We conduct regular security audits and penetration testing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time via the unsubscribe link in any email
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India
• Right to Nominate: Nominate an individual to exercise rights on your behalf in the event of death or incapacity

To exercise any of these rights, email us at privacy@theshelves.in. We will respond within 30 days.

Shelves is not intended for use by individuals under the age of 18 years. We do not knowingly collect personal data from minors.

If we become aware that we have inadvertently collected data from a child under 18 without verifiable parental consent, we will take prompt steps to delete that information. If you believe we have collected data from a minor, please contact us at privacy@theshelves.in immediately.

The Shelves platform may contain links to third-party websites, seller storefronts, or social media pages (including our Instagram @theshelves.in).

We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information. This Privacy Policy applies only to information collected directly through the Shelves platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send a notification to your registered email address
• Display a prominent notice on the Shelves homepage for 30 days after the change

Your continued use of Shelves after any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree, you may close your account by contacting us.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us through any of the channels below.