Privacy Policy
Table of Contents
- Definitions
- Notice of Collection
- Personal Data We Collect
- Purpose of Processing
- Consent & Withdrawal
- Cookies & Tracking
- Sharing of Personal Data
- Children’s Data
- Your Rights
- Your Responsibility for Accuracy
- Data Retention
- Security Measures
- Data Breach Notification
- Cross-Border Data Transfer
- Updates to Policy
- Contact Us
1. Definitions (As per DPDP Act)
- Personal Data: Any information about an identifiable individual.
- Data Principal: You, the individual whose data is collected.
- Data Fiduciary: SHEYEL, which determines the purpose and means of processing personal data.
- Data Processor: Third-party service providers who process data on behalf of SHEYEL.
2. Notice of Collection
As required under the DPDP Act, we provide clear notice at or before the time of collecting your personal data. This notice includes the purpose for which your data is being collected and how it will be processed.
3. Personal Data We Collect
We collect the following categories of personal data to provide and enhance our services:
a) Personal Information
- Name
- Email address
- Phone number
- Shipping and billing addresses
b) Payment Information
- Payment details processed securely through third-party gateways
- We do not store card numbers or sensitive payment details
c) Technical & Usage Data
- IP address, browser type/version, device type, operating system
- Pages viewed, time spent, clicks, and interactions
d) Behavioural & Preference Data
- Order history, wishlist items, and product preferences
- Email engagement, marketing interactions, and advertisement responses
4. Purpose of Processing Personal Data
- Process, verify, and deliver orders
- Prevent fraud and ensure transaction security
- Provide customer support and resolve inquiries
- Send service notifications and marketing messages (with consent)
- Personalize product recommendations and shopping experience
- Improve website functionality, performance, and user experience
- Comply with applicable laws and regulatory requirements
- Maintain platform security, integrity, and misuse prevention
5. Consent & Withdrawal of Consent
We obtain your consent before processing personal data for purposes that require it. You may withdraw consent anytime by contacting us at support@sheyel.com.
Withdrawal of consent does not affect previous lawful processing but may limit our ability to provide certain services (e.g., order fulfillment).
Where applicable, you may also manage your consent through authorized consent management platforms.
6. Cookies & Tracking Technologies
We may use third-party services such as analytics and advertising providers that place cookies on your device. You can opt out of certain targeted advertising through industry-standard opt-out tools or by adjusting your browser and device settings.
We use cookies and similar technologies for:
- Essential website functionality
- Analytics and performance monitoring
- Personalization and product recommendations
- Marketing and advertising (with consent where applicable)
Non-essential cookies are used only with your consent where required. You may manage cookie preferences through your browser settings.
7. Sharing of Personal Data
We do not sell, rent, or trade your personal data for monetary consideration. We may share data with trusted third parties, including:
- Payment gateways
- Shipping and logistics partners
- Customer service platforms
- Analytics, advertising, and marketing providers
These partners process data only for authorized purposes and comply with the DPDP Act.
8. Children’s Data
Our services are not intended for individuals under 18 years. We do not knowingly collect data from minors. If you believe a minor has shared personal data, notify us for prompt deletion.
9. Your Rights as a Data Principal
You have the right to:
- Access your personal data
- Correct or update inaccurate information
- Request deletion of personal data
- Withdraw consent at any time
- Nominate another person to exercise your rights if you are unable
- File a complaint with the Data Protection Board of India
To exercise your rights, contact us at support@sheyel.com. Verification may be required for security.
10. Your Responsibility for Data Accuracy
Under the DPDP Act, you are responsible for providing accurate, complete, and updated personal data while interacting with our services. Incorrect information may affect service quality or completion.
11. Data Retention
We retain personal data only as long as necessary or legally required:
- Order & transaction data: 7 years (as per Indian tax regulations)
- Marketing and behavioural data: Up to 3 years or until consent is withdrawn
- Support-related data: 2 years
After retention, data is securely deleted or irreversibly anonymized.
12. Security Measures
We apply reasonable technical and organizational safeguards, including encryption, secure servers, limited access controls, and regular audits, to protect your personal data from unauthorized access or misuse.
13. Data Breach Notification
If a data breach occurs that may harm your rights, we will notify you and the Data Protection Board of India as required under the DPDP Act.
14. Cross-Border Data Transfer
Your personal data may be processed or stored outside India only with trusted partners located in jurisdictions permitted by the Government of India. All transfers comply with safeguards prescribed under the DPDP Act.
15. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be posted with a revised "Last Updated" date. Significant changes may also be communicated via email or website notification.
16. Contact Us
- Email: support@sheyel.com
- Address: SHEYEL, 248 Race Course Colony, Bulandshahr, Uttar Pradesh, India
- Data Protection Contact: SHEYEL Office