Data Encrypted in Transit
All communications use TLS 1.3 / 256-bit SSL protocols.
Zero Data Selling
We never sell, rent, or trade your personal data to brokers or advertisers.
PCI-DSS Tokenization
Card details handled via RBI-authorized Razorpay. No PIN/CVV stored.
Account Deletion
In-app & direct web deletion portal at /delete-account.
App & Data Safety At-A-Glance
Scope & Legal Framework
This Privacy Policy ("Policy") governs the collection, processing, storage, and transfer of personal data by ABC Shoppings Private Limited ("Company", "we", "us", or "our"), operating the e-commerce website at https://abcshoppings.com, the ABC Shoppings Android application distributed on Google Play Console / Google Play Store, customer dashboards, and associated shopping and token reward APIs.
We adhere strictly to:
- The Digital Personal Data Protection Act, 2023 (DPDP) and the Information Technology Act, 2000 (including the Reasonable Security Practices and Procedures and Sensitive Personal Data Rules).
- The Google Play Developer Program Policies, specifically including the User Data Policy, Data Safety Section requirements, Account Deletion Policy, and Families Policy.
- Applicable Consumer Protection (E-Commerce) Rules and Reserve Bank of India (RBI) payment security directives.
Personal & Sensitive Data We Collect
In compliance with Google Play's Data Safety disclosures, we collect only the minimal data required to fulfill orders, facilitate deliveries, secure payments, and provide customer support:
Data collected: Full Name, Email Address, Mobile Phone Number, Account Username, and Avatar Photo (if chosen).
Purpose: Account authentication, order status SMS/email, delivery notifications, and customer identification.
Data collected: Street address, city, state, postal PIN code, landmark, and recipient contact number. Approximate or precise location is accessed only if you choose "Use My Current Location" to auto-fill your delivery PIN code.
Purpose: Order shipping, logistics routing, doorstep parcel delivery, and delivery OTP verification.
Data collected: Payment method selected (UPI, Credit/Debit Card, Netbanking), Razorpay transaction/order IDs, invoice records, and token wallet ledger balances.
Important: ABC Shoppings never collects, sees, or stores complete credit/debit card numbers, ATM PINs, CVV codes, or banking passwords. All card handling is processed strictly by certified PCI-DSS Level 1 gateway partners (Razorpay).
Data collected: IP address, operating system version, device model, Firebase Cloud Messaging (FCM) push token, Android Advertising ID (AAID), app version, and crash diagnostic logs.
Purpose: Fraud prevention, account security, session stability, sending transactional push notifications, and crash remediation.
Data collected: Profile avatar image or product condition photos uploaded by you when submitting a replacement/return request or customer support inquiry.
Purpose: Resolving product return claims, verifying parcel damage, and profile customization.
Android App Permissions & Disclosures
In alignment with Google Play Store policies, our Android mobile app requests only runtime and manifest permissions that are necessary for its e-commerce functionality:
| Android Permission | Requirement | Justification & Purpose |
|---|---|---|
| INTERNET | Mandatory | Enables secure API communication with ABC Shoppings servers to load products, process shopping carts, and display orders. |
| ACCESS_NETWORK_STATE | Mandatory | Detects whether the device is online or offline, preventing data loss during network disruptions. |
| POST_NOTIFICATIONS | Opt-In (Android 13+) | Delivers instant shipment tracking alerts, parcel out-for-delivery notifications, order OTPs, and promotional deals. Can be turned off anytime in Android settings. |
| CAMERA | Optional Runtime | Requested only if you choose to take a photo directly for your profile avatar or capture an image of a damaged product when requesting a return. |
| READ_MEDIA_IMAGES / STORAGE | Optional Runtime | Requested only when you manually select an image file from your device gallery to upload for your account or a return claim. |
| ACCESS_COARSE / FINE_LOCATION | Optional Runtime | Used exclusively when you tap "Locate Me" to auto-detect your delivery PIN code and city. Location is not tracked in the background. |
How We Use Your Personal Information
We process your personal information strictly under lawful bases recognized by the DPDP Act 2023:
- ✓Order Fulfillment & Logistics: Processing orders, packaging, courier dispatch, real-time shipment tracking, and delivery OTP authentication.
- ✓Payment Settlement: Facilitating electronic payment capture via certified gateways, validating transaction status, and processing refunds.
- ✓Loyalty & Token Economy: Tracking customer rewards, A-Coin / token balances, referral earnings, and lucky draw entries.
- ✓Statutory & Tax Compliance: Generating GST-compliant tax invoices, e-way bills, and maintaining audit ledgers required under Indian commercial law.
- ✓Account Security & Fraud Prevention: Protecting your account credentials against credential stuffing, automated bots, and payment fraud.
- ✓Customer Communications: Sending order confirmations, parcel dispatches, security alerts, and responding to helpdesk inquiries.
Third-Party Disclosures & Integrated SDKs
We do not sell, trade, or rent your personal data. Personal data is shared strictly with vetted third-party service providers and software development kits (SDKs) necessary to operate our service:
Used for core Android app integrity, Firebase Cloud Messaging (push notifications), and app crash telemetry. Governed by Google Privacy Policy.
Payment gateway for processing cards, UPI, and net banking. Compliant with PCI-DSS Level 1. Governed by Razorpay Privacy Policy.
We share only the recipient's name, delivery address, and contact number solely for the purpose of completing parcel delivery and communicating delivery OTPs.
Server hosting, DDoS mitigation, and encrypted network transit.
We may disclose information if required under valid statutory legal processes, court subpoenas, or national tax audits pursuant to Indian law.
Payment & Financial Security
ABC Shoppings does NOT capture, process, or store your unencrypted card numbers, ATM PINs, CVV codes, or net banking credentials. All electronic payments are processed through Razorpay, which is certified under the Payment Card Industry Data Security Standard (PCI-DSS Level 1).
All domestic payments adhere strictly to the Reserve Bank of India (RBI) mandates for Two-Factor Authentication (AFA/OTP) and card-on-file tokenization protocols.
Account & Data Deletion Policy (Google Play Mandatory)
In strict compliance with Google Play's Account and Data Deletion Policy and the DPDP Act 2023, all registered users have the unequivocal right to request permanent deletion of their account and all associated personal data.
Visit our official deletion portal at:
https://abcshoppings.com/delete-accountYou can submit your deletion request directly without having to install or log in to the app.
Inside the Android App: Navigate to My Account > Profile Settings > Request Account Deletion.
Method 3: Direct EmailEmail our Data Protection team at privacy@abcshoppings.com with the subject "Account Deletion Request".
- Your account credentials, login passwords, and authentication tokens.
- Your personal identity data (name, email address, phone number, and avatar image).
- Your saved delivery address book and recipient details.
- Your shopping cart, wishlist items, and marketing communication preferences.
In compliance with Section 36 of the Indian Central Goods and Services Tax (CGST) Act, 2017, the Companies Act, and anti-fraud financial regulations, completed tax invoices, financial transaction logs, and GST audit records must be retained for up to 7 years. These records are archived securely in read-only form and decoupled from any marketing or active profile use.
Children's Privacy (Google Play Families & COPPA)
Our website and Android application are not directed to children under 13 years of age (or under 18 years of age without parental/guardian consent under applicable Indian law). We do not knowingly solicit, collect, or process personal data from children.
If we discover that a child under 13 has inadvertently provided personal information without verified parental consent, we will promptly delete that information from our servers. Parents or legal guardians who believe their child has submitted personal information may contact our Grievance Officer at privacy@abcshoppings.com for immediate deletion.
Data Retention & Storage Policy
Your personal data is stored on secure servers located in India and certified cloud regions that maintain technical standards equivalent to ISO/IEC 27001. We retain data only as long as necessary:
- Active Account Data: Retained for the duration your account remains active and open.
- Statutory Invoices & Tax Ledgers: Retained for 7 to 8 years pursuant to the Indian CGST Act 2017 and Income Tax Act 1961.
- Customer Support Logs & Tickets: Retained for 180 days after resolution for quality assurance and training.
- Technical & Security Logs: Retained for 90 days for audit and intrusion detection.
Data Security & Encryption Safeguards
We implement comprehensive administrative, physical, and technical safeguards to protect your personal data against unauthorized access, destruction, loss, or alteration:
- Encryption in Transit: Mandatory HTTPS / TLS 1.3 encryption across all website endpoints and mobile app API calls.
- Password Protection: One-way cryptographic hashing (bcrypt with high salt factors) for all user credentials.
- Access Controls: Strict role-based access control (RBAC), multi-factor authentication for administrators, and audited database access.
- Vulnerability Management: Continuous network monitoring, automated patch updates, and regular penetration testing.
Cookies & Web Tracking Technologies
When using our website, we use secure HTTP-only cookies and local browser storage strictly for:
- Authenticating and maintaining your active shopping session.
- Preserving products in your shopping cart between visits.
- Remembering your preferred currency and display preferences.
You can configure your browser to block or alert you about cookies; however, disabling essential cookies will prevent checkout and account features from functioning properly.
Your Privacy Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act, 2023 and global privacy standards, you have the following rights:
View a summary of your personal data processed, invoices, and saved details in your Customer Portal.
Update inaccurate data or request deletion of obsolete information through our profile editor or deletion portal.
Seek swift resolution of complaints from our designated Grievance Redressal Officer within 48 hours.
Nominate an individual to exercise your privacy rights in the event of death or incapacity.
Grievance Redressal Officer & Corporate Contact
In compliance with the Information Technology Act, 2000, the DPDP Act, 2023, and the Google Play Developer Policies, the contact details of the designated Grievance Officer are:
ABC Shoppings Commercial Center, Main Road, Chhatrapati Sambhajinagar, Maharashtra, India - 431001
This policy may be amended periodically to reflect statutory updates or new app features. When material changes are made, we will notify users through our website header banner or via in-app notification.