Privacy Policy

This Privacy Policy applies to information relating to:

1.1Sellers / Merchants Individuals or businesses who register with HaveAStore.in, create or manage a Store, list Products, receive Orders, use Platform features or otherwise use our Services.

1.2Customers / Store Visitors Individuals who visit, browse or interact with a Store created through HaveAStore.in, add Products to a cart, submit an Order, make or attempt to make a payment, contact a Seller or otherwise interact with a Store.

1.3Platform Visitors Individuals who visit the HaveAStore.in website or interact with our public pages without necessarily creating an account.

Depending on how you use HaveAStore.in, we may collect different categories of information.

2.1Information Provided by Sellers When a Seller registers or uses the Platform, we may collect information such as:

• Full name;
• Mobile number;
• Email address;
• Username and login credentials;
• Business or Store name;
• Store address;
• Business address;
• Residential or correspondence address, where required;
• PAN details;
• GST details, where applicable;
• Business registration information;
• Government-issued identification information, where required for verification;
• Bank account information;
• Payment settlement information;
• Store domain information;
• Product and catalogue information;
• Seller-provided logo, photographs, banners and other content;
• Shipping and fulfilment information;
• Customer support communications;
• Information provided during verification or KYC processes;
• Other information reasonably required to provide or secure the Services.

We may request additional documents or information where required for identity verification, fraud prevention, payment settlement, legal compliance or other legitimate purposes.

When a Customer purchases or attempts to purchase a Product from a Store powered by HaveAStore.in, we may collect information necessary to process and fulfil the Order. This may include:

• Name;
• Mobile number;
• Email address;
• Delivery address;
• Billing address, where applicable;
• Order details;
• Product information;
• Quantity and price;
• Shipping information;
• Transaction reference information;
• Payment status;
• Refund information;
• Customer communications with the Seller or Platform;
• Information submitted through forms or checkout pages;
• Other information necessary to complete or support the transaction.

The specific information requested may vary depending on the Store, Product, payment method and applicable legal requirements.

Payments made through HaveAStore.in may be processed through third-party payment service providers or payment infrastructure providers.

Depending on the payment arrangement, payment providers may process information such as:

• Payment method;
• Transaction amount;
• Payment reference;
• UPI or VPA information;
• Card-related information;
• Bank-related information;
• Payment status;
• Refund or chargeback information;
• Other information required to process the transaction.

Unless expressly stated otherwise, HaveAStore.in does not need to store complete card credentials or other sensitive payment credentials when such information is directly processed by the applicable Payment Partner.

Payment processing may be subject to the privacy policies and terms of the relevant payment provider.

Certain Sellers may be required to provide additional information for identity verification, payment settlement, fraud prevention or legal and regulatory compliance. This may include:

• PAN;
• Government-issued identification;
• Business registration documents;
• GST information;
• Bank account information;
• Address information;
• Business ownership information;
• Other documents reasonably required for verification.

We may use third-party verification, payment or compliance service providers to verify such information where permitted by applicable law.

We will take reasonable measures to restrict access to KYC and verification information and will not intentionally publish such information on a Seller's public Store except where disclosure is legally required or otherwise permitted.

When you access the Platform or a Store powered by HaveAStore.in, certain technical and usage information may be collected automatically. This may include:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Screen resolution;
• Language settings;
• Time zone;
• Approximate location derived from technical information, where applicable;
• Referring website or page;
• Pages visited;
• Store pages viewed;
• Products viewed;
• Cart activity;
• Checkout activity;
• Date and time of access;
• Session information;
• Error logs;
• Device identifiers;
• Network information;
• Other technical information necessary for operating, securing and improving the Platform.

We may use this information to understand Platform usage, detect suspicious activity, maintain security, troubleshoot technical problems and improve our Services.

HaveAStore.in may use cookies, local storage, pixels, tags and similar technologies.

Cookies may be used for purposes including:

• Maintaining login sessions;
• Maintaining shopping carts;
• Remembering Store or user preferences;
• Enabling essential Store functionality;
• Improving website performance;
• Understanding how users interact with the Platform;
• Analytics and measurement;
• Security and fraud prevention;
• Detecting abuse or suspicious activity;
• Supporting advertising or marketing activities, where applicable.

Some cookies may be placed by third-party service providers used by HaveAStore.in or by services integrated into individual Stores.

You may be able to control or disable certain cookies through your browser or device settings. However, disabling essential cookies may affect the functionality of a Store or certain Platform features.

A Seller may provide HaveAStore.in with information relating to its Store and Customers in connection with the Services. Such information may include:

• Product information;
• Customer names;
• Customer contact details;
• Delivery information;
• Order information;
• Shipping information;
• Refund information;
• Customer communications;
• Product images and descriptions;
• Other information necessary for operating the Seller's Store.

Sellers are responsible for ensuring that they have an appropriate legal basis and authority to provide Customer information to HaveAStore.in where required by applicable law.

We may receive information from third parties where permitted by applicable law. Such sources may include:

• Payment service providers;
• Payment and financial institutions;
• Identity verification providers;
• Fraud prevention and security providers;
• Analytics providers;
• Hosting and infrastructure providers;
• Communication providers;
• Domain providers;
• Shipping or logistics providers;
• Advertising and marketing providers;
• Social-media platforms;
• Service providers supporting Platform operations;
• Publicly available sources.

The information received may be used for the purposes described in this Privacy Policy.

We may use Personal Data for the following purposes:

10.1Providing the Platform To:

• create and maintain Seller accounts;
• create and operate Stores;
• provide dashboards and Store-management features;
• process Orders;
• support shopping carts and checkout;
• provide payment-related functionality;
• facilitate Seller settlement;
• provide Store hosting and technical services;
• provide customer support;
• otherwise provide the Services requested by users.

10.2Order Processing and Fulfilment We may use information to:

• process Orders;
• provide Order notifications;
• communicate Order information to Sellers;
• provide delivery information to Sellers;
• support shipping and fulfilment;
• process cancellations and refunds;
• resolve Order-related issues;
• assist with customer complaints and disputes.

10.3Seller Verification and Compliance We may use information to:

• verify Seller identity;
• perform KYC checks;
• verify business information;
• facilitate payment settlement;
• prevent fraud;
• detect suspicious activity;
• comply with legal and regulatory obligations;
• respond to lawful requests from authorities;
• enforce our Terms and policies.

10.4Security and Fraud Prevention We may process information to:

• protect accounts;
• detect unauthorised access;
• identify fraudulent transactions;
• prevent abuse;
• detect prohibited Products;
• investigate suspicious activities;
• protect Customers, Sellers and the Platform;
• maintain the security and integrity of our systems.

10.5Platform Improvement We may use aggregated, statistical or appropriately anonymised information to:

• understand Platform usage;
• analyse trends;
• improve features;
• improve Store performance;
• test new functionality;
• identify technical problems;
• improve the overall user experience.

10.6Communications We may use contact information to send:

• account-related communications;
• Order notifications;
• payment and settlement notifications;
• security alerts;
• service notifications;
• policy or Terms updates;
• technical notifications;
• customer support responses;
• other communications necessary to provide the Services.

10.7Marketing Where permitted by applicable law, we may use contact information to communicate information about:

• new Platform features;
• products and services;
• plans and pricing;
• promotions;
• offers;
• educational content;
• events;
• other information that may be relevant to users.

Where required, users may opt out of promotional communications through the available unsubscribe mechanism or by contacting us.

Depending on the applicable law and circumstances, we may process Personal Data where such processing is:

• necessary to provide the Services;
• necessary to perform an agreement with you;
• necessary to comply with a legal or regulatory obligation;
• necessary to protect the security of the Platform;
• necessary to prevent fraud or misuse;
• based on consent where consent is required;
• necessary for legitimate operational purposes where permitted by law;
• otherwise permitted or required under applicable law.

Where consent is relied upon and applicable law provides a right to withdraw that consent, withdrawal will not affect processing already carried out before the withdrawal.

We do not sell Personal Data as a standalone commercial product.

However, we may disclose or share information where reasonably necessary to provide the Services, fulfil Orders, process payments, protect users, operate the Platform or comply with applicable law. Recipients may include:

12.1Payment Partners Payment service providers and financial institutions may receive information required to process payments, refunds, chargebacks and Seller settlements.

12.2Hosting and Infrastructure Providers We may share information with hosting, cloud, database, storage, security and infrastructure providers supporting the Platform.

12.3Communication Providers We may use third-party providers to deliver:

• SMS;
• email;
• WhatsApp messages;
• notifications;
• authentication messages;
• other communications.

12.4Analytics Providers We may use analytics and measurement providers to understand Platform usage and improve our Services.

12.5Shipping and Logistics Providers Where shipping-related integrations or services are used, relevant Order and delivery information may be shared with the applicable logistics provider.

12.6Professional Service Providers We may share information with:

• auditors;
• accountants;
• lawyers;
• consultants;
• compliance providers;
• security providers;
• other professional advisers,

where reasonably necessary for legitimate business, legal, compliance or security purposes.

12.7Affiliates and Business Partners Where applicable, information may be shared with our affiliates, service partners or technology partners to provide or support the Services, subject to applicable law.

12.8Government and Law-Enforcement Authorities We may disclose information where required or permitted by law, including in response to:

• court orders;
• legal notices;
• regulatory requirements;
• lawful government requests;
• law-enforcement requests;
• other legally valid processes.

We may also disclose information where reasonably necessary to investigate fraud, security incidents, unlawful activity or serious violations of our Terms.

HaveAStore.in operates technology that enables Sellers to receive and fulfil Customer Orders.

When a Customer places an Order, information reasonably necessary to fulfil that Order may be made available to the relevant Seller. This may include:

• Customer name;
• Delivery address;
• Contact information;
• Order details;
• Product details;
• Shipping information;
• Other information necessary for fulfilment.

Sellers must use Customer information only for legitimate purposes connected with the Order and applicable legal obligations. Sellers must not:

• sell Customer information;
• use Customer information for unrelated marketing without an appropriate legal basis;
• disclose Customer information unlawfully;
• misuse Customer information;
• use Customer information for fraudulent purposes;
• retain Customer information longer than reasonably necessary, subject to applicable legal requirements.

Sellers may have independent privacy obligations in relation to Customer information and are responsible for complying with applicable laws.

Information that a Seller chooses or is required to publish through its Store may be publicly accessible. This may include:

• Store name;
• Business name;
• Logo;
• Product information;
• Product images;
• Product prices;
• Business contact information;
• Store address;
• Business hours;
• Shipping information;
• Return/refund information;
• Other information intentionally published by the Seller.

Sellers should avoid publishing sensitive personal information that is not necessary for operating their Store.

HaveAStore.in is not responsible for Personal Data that a Seller voluntarily publishes publicly through its Store.

The Platform may contain integrations, links or services provided by third parties. These may include:

• Payment providers;
• Analytics services;
• Communication providers;
• Shipping providers;
• Domain providers;
• Social-media services;
• Authentication services;
• Cloud infrastructure;
• Advertising services;
• Other third-party technologies.

Third-party services may collect or process information according to their own privacy policies.

HaveAStore.in does not control the privacy practices of independent third parties. Users should review the relevant third party's privacy policy before using such services where appropriate.

We take reasonable technical and organisational measures designed to protect Personal Data against:

• unauthorised access;
• unauthorised disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse;
• other unlawful processing.

Security measures may include, where appropriate:

• encryption in transit;
• access controls;
• authentication mechanisms;
• firewalls;
• monitoring;
• logging;
• backups;
• security testing;
• restricted administrative access;
• other reasonable security practices.

However, no internet-based service, transmission or storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect Personal Data, we cannot guarantee absolute security against every possible security incident, attack or unauthorised access.

Where applicable law requires notification or other action following a data-security incident, we will take reasonable steps consistent with those legal requirements.

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including:

• providing the Services;
• maintaining accounts;
• processing Orders;
• processing payments and settlements;
• resolving disputes;
• preventing fraud;
• maintaining security;
• complying with legal obligations;
• maintaining business and financial records;
• enforcing our agreements.

After the applicable purpose is completed, information may be deleted, anonymised or securely retained where continued retention is required or permitted by law.

Different categories of information may be retained for different periods depending on their purpose and applicable legal requirements.

A Seller may request closure of their HaveAStore.in account, subject to outstanding Orders, payments, disputes, legal obligations and other legitimate requirements.

Account closure does not necessarily result in immediate deletion of all information. We may retain information where reasonably necessary to:

• comply with legal or regulatory obligations;
• maintain financial or tax records;
• resolve disputes;
• prevent fraud;
• investigate security incidents;
• enforce our Terms;
• protect our legal rights;
• comply with payment-partner requirements.

Where applicable law gives you a right to request deletion of Personal Data, you may contact us using the details provided in this Privacy Policy.

We may use service providers, cloud infrastructure or technology systems that process or store information in locations outside the state or country in which you are located.

Where Personal Data is transferred or processed outside India, such processing will be carried out subject to applicable law and appropriate contractual, technical or organisational safeguards where required.

By using the Services, you acknowledge that such transfers may occur where reasonably necessary to provide the Services, subject to applicable law.

HaveAStore.in is intended for use by individuals and businesses that are legally capable of using the Services.

We do not knowingly seek to collect Personal Data from children in circumstances where such collection is prohibited by applicable law.

If we become aware that Personal Data has been collected from a child in violation of applicable requirements, we may take reasonable steps to delete or restrict such information.

Users are responsible for ensuring that information submitted to HaveAStore.in is:

• accurate;
• complete;
• current;
• lawful;
• not misleading.

Sellers are additionally responsible for ensuring that information they collect or provide relating to their Customers is handled in accordance with applicable privacy and data-protection requirements.

Users should protect their account credentials and immediately notify us if they suspect unauthorised access or misuse.

If HaveAStore.in or a portion of its business is involved in a:

• merger;
• acquisition;
• restructuring;
• financing;
• sale of assets;
• transfer of business;
• similar corporate transaction,

Personal Data may be transferred as part of the relevant transaction, subject to applicable law and appropriate protections.

We may create aggregated, statistical or anonymised information from Personal Data. Such information may be used for purposes including:

• analytics;
• business intelligence;
• Platform improvement;
• reporting;
• research;
• security analysis;
• understanding general usage trends.

Where such information no longer identifies an individual and is not treated as Personal Data under applicable law, we may use it for legitimate business purposes.

Depending on your location and applicable law, you may have rights relating to your Personal Data, which may include:

• requesting access to Personal Data;
• requesting correction of inaccurate information;
• requesting deletion where legally applicable;
• withdrawing consent where processing is based on consent;
• requesting information regarding processing;
• raising a grievance;
• requesting restriction of certain processing where legally available;
• exercising other rights available under applicable law.

The availability and scope of these rights may depend on the applicable law and the circumstances of the processing.

To exercise a privacy-related right or submit a request, contact us using the details provided below.

We may need to verify your identity before processing certain requests in order to protect your information and prevent unauthorised access.

We may send promotional communications through:

• Email;
• SMS;
• WhatsApp;
• Push notifications;
• Platform notifications;
• Other available communication channels,

where permitted by applicable law.

You may opt out of promotional communications by using the unsubscribe mechanism provided in the communication or by contacting us.

Even if you opt out of promotional communications, we may continue to send essential service-related communications, including:

• Order notifications;
• Account notifications;
• Security alerts;
• Payment notifications;
• Policy updates;
• Service announcements;
• Other communications necessary to provide the Services.

Information relating to Orders and transactions may be retained and processed for purposes including:

• Order fulfilment;
• Payment processing;
• Seller settlement;
• Refunds;
• Chargebacks;
• Accounting;
• Tax compliance;
• Customer support;
• Fraud prevention;
• Dispute resolution;
• Legal compliance;
• Platform security.

Transaction records may be retained for the period required or permitted by applicable law and relevant payment arrangements.

To protect Customers, Sellers, Payment Partners and HaveAStore.in, we may monitor transactions and Platform activity for indicators of:

• Fraud;
• Payment abuse;
• Fake Orders;
• Account compromise;
• Unauthorised access;
• Prohibited Products;
• Suspicious shipping activity;
• Fake tracking information;
• Money laundering;
• Abuse of Platform features;
• Other unlawful or harmful activity.

We may use automated systems, rules, manual review and third-party security or fraud-prevention services for these purposes.

Where necessary, we may restrict transactions, request additional verification, suspend accounts or Stores, or disclose information to relevant authorities or service providers as permitted or required by law.

For security, operational and troubleshooting purposes, we may maintain records relating to:

• Login activity;
• IP addresses;
• Device information;
• API requests;
• Store activity;
• System events;
• Error logs;
• Security events;
• Order activity;
• Other technical interactions with the Platform.

Such records may be used to investigate security incidents, troubleshoot problems, prevent abuse and maintain the reliability of the Services.

We may update this Privacy Policy from time to time to reflect:

• changes to the Platform;
• new features or services;
• changes in technology;
• changes in legal or regulatory requirements;
• changes in our data practices;
• other legitimate business requirements.

When we make changes, we may update the “Effective Date” and “Last Updated” displayed at the beginning of this Policy.

Where required by applicable law, we may provide additional notice or obtain consent for material changes.

We encourage users to review this Privacy Policy periodically.

If you have any questions, concerns, requests or complaints relating to this Privacy Policy or the processing of your Personal Data, you may contact our designated grievance contact.

Grievance Officer: Fasil Chola Designation: Grievance Officer Email: grievance@haveastore.in Phone: +91 62383 77830 Address: Kannur, Kerala, India – 670595

For general Platform support:

HaveAStore.in Email: support@haveastore.in Website: https://haveastore.in Operating Base: Kannur, Kerala, India – 670595

We will take reasonable steps to review and respond to privacy-related requests and grievances within the period prescribed by applicable law.

This Privacy Policy shall be governed by the laws applicable in India, subject to applicable data-protection and consumer-protection laws.

Any dispute relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts specified in the applicable HaveAStore.in Terms of Service, subject to applicable law.

For questions concerning this Privacy Policy, Personal Data, privacy rights or data-related requests, please contact:

HaveAStore.in Operated by FasLax Digital Solutions Kannur, Kerala, India – 670595

Privacy / Grievance: grievance@haveastore.in General Support: support@haveastore.in Website: https://haveastore.in

By creating an account, creating a Store, placing an Order, submitting information, using a Store powered by HaveAStore.in, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, storage and disclosure of information as described herein, subject to applicable law.