KASHOPS Privacy Policy

2. INFORMATION WE MAY COLLECT

KASHOPS seeks to limit collection and processing of personal data to information reasonably necessary for relevant Platform functionality, legitimate operational purposes and applicable legal obligations.

3. WHY WE PROCESS PERSONAL DATA

Depending on the feature, processing activity and applicable law, KASHOPS may process personal data to:

• create and manage accounts;
• establish and verify Seller accounts;
• operate shops and Listings;
• provide marketplace and discovery functionality;
• connect Customers with Sellers;
• facilitate communications between Users and Sellers;
• provide location-based discovery;
• authenticate and secure accounts;
• prevent fraud, scams and abuse;
• investigate complaints and reports;
• moderate Content and Platform activity;
• provide customer and Seller support;
• maintain and improve Platform functionality;
• maintain technical and security systems;
• comply with legal and regulatory obligations;
• maintain records;
• resolve disputes;
• protect legal rights;
• protect Users, Sellers and Platform security; and
• send promotional communications where lawfully permitted and where required consent or another lawful basis exists.

KASHOPS will not use personal data for materially unrelated purposes merely because the information is available to it.

4. LEGAL BASIS AND CONSENT

Depending on the processing activity and applicable Indian law, KASHOPS may process personal data based on:

• consent;
• provision of requested Platform functionality;
• compliance with legal obligations;
• other legally recognised grounds or purposes permitted under applicable law; or
• other lawful grounds available to KASHOPS under applicable law.

Where applicable law requires consent, KASHOPS will seek consent through an appropriate notice and consent mechanism.

Consent requests will be presented in a clear and reasonably understandable manner.

Where legally permitted, you may withdraw consent through available mechanisms. Withdrawal of consent may affect features that depend on the relevant processing.

KASHOPS may continue processing information where another lawful basis or legal requirement permits or requires continued processing.

KASHOPS does not rely on consent as the basis for every processing activity.

5. LOCATION DATA

If you choose to provide location information, KASHOPS may use it to improve local discovery and show relevant nearby shops and products.

Location access can generally be managed through your device or browser settings.

Where available, KASHOPS may provide alternative methods for selecting a locality or area without granting precise device-location access.

KASHOPS will not use precise location information for unrelated purposes merely because access has been granted, except where permitted by applicable law and appropriately disclosed.

KASHOPS does not claim to continuously monitor precise location unless a future feature expressly introduces such functionality and the relevant notice and legal requirements are satisfied.

6. COMMUNICATIONS

KASHOPS may send service-related communications necessary for:

• account security;
• authentication;
• Platform operation;
• customer or Seller support;
• important legal or policy notices; or
• other necessary service purposes.

Where marketing or promotional communications require consent or another specific legal requirement, KASHOPS will comply with the applicable requirement and provide an appropriate means to withdraw consent or opt out where required.

Users generally cannot opt out of communications that are necessary for legal compliance, account security or essential Platform operation.

7. SHARING OF PERSONAL DATA

KASHOPS may disclose personal data where reasonably necessary and lawfully permitted to:

• provide Platform functionality;
• facilitate communications between Users and Sellers;
• support marketplace discovery;
• use service providers supporting KASHOPS;
• maintain hosting, database, security and technical infrastructure;
• provide communications services;
• investigate fraud, scams or abuse;
• investigate security incidents;
• comply with legal obligations;
• respond to lawful governmental, regulatory or law-enforcement requests;
• comply with court orders or other legally valid processes;
• establish, exercise or defend legal rights;
• protect the rights, safety and security of KASHOPS, Users, Sellers or others; or
• support a lawful corporate restructuring, merger, acquisition or transfer of relevant business assets, subject to applicable law.

KASHOPS will not disclose personal data merely for unrelated purposes without an appropriate lawful basis.

Where reasonably practicable and legally permissible, KASHOPS may seek to limit disclosure to information reasonably necessary for the relevant purpose.

KASHOPS does not sell personal data merely as a commercial product. Personal data may nevertheless be disclosed to service providers, Users, Sellers or authorities where necessary for Platform functionality, lawful purposes or as otherwise described in this Privacy Policy.

8. SELLER AND CUSTOMER VISIBILITY

Certain information may be visible to other Platform users as part of KASHOPS’s marketplace functionality.

For example, depending on the relevant feature, the following may be publicly or semi-publicly displayed:

• Seller shop name;
• business information;
• product Listings;
• product photographs;
• product descriptions;
• prices;
• reviews;
• ratings; and
• Seller-provided business contact information where appropriate.

KASHOPS will seek to avoid unnecessarily publishing personal information that is not required for the relevant Platform function.

When a User chooses to contact a Seller, certain information may be made available to the Seller where reasonably necessary to facilitate that interaction.

KASHOPS does not automatically provide Sellers with a User’s entire account or profile merely because the User views a Listing or shop.

Users should avoid placing sensitive personal information in public Listings, reviews, comments, photographs or other publicly visible Content.

Information intentionally made publicly available may be accessible to other Users and may potentially be copied, reproduced or indexed by third parties.

9. DATA RETENTION

KASHOPS will retain personal data only for as long as reasonably necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by applicable law.

Retention periods may vary according to:

• the type of information;
• purpose of processing;
• account status;
• legal requirements;
• tax or accounting requirements where applicable;
• security requirements;
• fraud-prevention requirements;
• complaints;
• investigations;
• disputes;
• regulatory requirements;
• enforcement requirements; and
• backup or disaster-recovery requirements.

Where personal data is no longer reasonably required, KASHOPS will seek to delete, anonymise or otherwise dispose of it where reasonably practicable and legally permissible.

KASHOPS may retain limited information where necessary to comply with law, establish or defend legal claims, prevent fraud or maintain legitimate security and operational records.

10. DATA SECURITY

KASHOPS will implement reasonable technical and organisational measures appropriate to the nature of personal data and the risks associated with its processing.

Depending on the actual technical implementation, these measures may include appropriate access controls, authentication controls, security monitoring, logging, backups, encryption or other security measures.

KASHOPS will not represent that a particular security measure exists unless it has actually been implemented.

However, no online system, internet transmission or storage system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and should notify KASHOPS if they reasonably believe their account has been compromised.

11. USER RIGHTS

Subject to applicable law and the applicable commencement and enforcement of relevant provisions, individuals may have rights concerning their personal data, including rights relating to:

• access to information concerning processing;
• correction, completion or updating;
• erasure or deletion where applicable;
• withdrawal of consent where consent is the applicable basis;
• grievance redressal;
• nomination; and
• other rights provided by applicable law.

The availability, scope and procedure for exercising these rights may depend on the applicable law and whether the relevant legal provisions are currently in force.

KASHOPS may require reasonable verification before acting on a request where necessary to protect the account or personal data from unauthorised access.

Requests will be handled within the timelines prescribed by applicable law.

KASHOPS will not require Users to provide passwords, payment-card details or unnecessary sensitive information merely to submit a privacy request.

12. CHILDREN

For purposes of applicable Indian data-protection law, a Child generally means an individual below 18 years of age, subject to the applicable law and provisions in force.

KASHOPS does not knowingly seek to process children’s personal data in violation of applicable law.

Where applicable law requires verifiable parental or lawful guardian consent before processing a child’s personal data, KASHOPS will implement appropriate measures as required by law.

KASHOPS will not knowingly undertake processing of children’s personal data that is prohibited by applicable law.

Where and to the extent applicable and legally effective, KASHOPS will take appropriate measures concerning restrictions on:

• tracking of children;
• behavioural monitoring of children; and
• targeted advertising directed at children.

KASHOPS may restrict, suspend or disable accounts where it reasonably believes that applicable age requirements have not been met or that an account is being used in violation of applicable child-safety requirements.

KASHOPS does not claim to have implemented a specific age-verification or parental-consent technology unless such functionality is actually implemented.

Parents or lawful guardians who believe that a child’s personal data has been processed inappropriately may contact:

contact@kashops.com

13. THIRD-PARTY SERVICES

KASHOPS may use third-party service providers for functions such as:

• hosting;
• databases;
• authentication;
• security;
• analytics, where implemented;
• communications;
• email or SMS services;
• cloud infrastructure;
• customer support; and
• other Platform operations.

The actual providers and services may change as KASHOPS develops its Platform.

Such providers may process information on KASHOPS’s behalf or otherwise process information in connection with their services, subject to applicable contractual, security and legal requirements.

KASHOPS will not represent a provider as a data processor or otherwise describe the legal relationship in a particular manner unless that classification is appropriate to the actual relationship and applicable law.

14. COOKIES AND SIMILAR TECHNOLOGIES

KASHOPS may use cookies, local storage and similar technologies for purposes such as:

• authentication;
• security;
• maintaining preferences;
• session management;
• Platform functionality;
• analytics, where implemented; and
• improving user experience.

The specific technologies used will depend on KASHOPS’s actual technical implementation.

Where applicable law requires consent for particular technologies or purposes, KASHOPS will provide an appropriate consent mechanism.

KASHOPS will not claim to use advertising, behavioural tracking or analytics technologies unless such technologies are actually implemented.

Users may be able to manage certain cookie or local-storage settings through their browser or device settings, although disabling certain technologies may affect Platform functionality.

15. DATA BREACHES AND SECURITY INCIDENTS

KASHOPS will handle personal-data breaches and security incidents in accordance with applicable legal requirements.

Where legally required, KASHOPS will notify affected individuals, relevant authorities or other legally prescribed recipients through prescribed or appropriate channels.

KASHOPS may take reasonable steps to:

• identify and investigate incidents;
• contain unauthorised access;
• mitigate potential harm;
• remediate affected systems;
• preserve relevant evidence;
• document incidents; and
• implement appropriate corrective measures.

KASHOPS will not promise a specific breach-notification period unless that period is required by the applicable law in force at the relevant time.

16. INTERNATIONAL PROCESSING

Some KASHOPS service providers or infrastructure may process, store or access personal data outside India.

Where this occurs, KASHOPS will comply with applicable Indian legal requirements concerning such processing, access or transfer.

KASHOPS will not represent that all personal data is stored exclusively in India unless this has been technically verified.

17. DISPUTE RESOLUTION

Any dispute relating to this Privacy Policy is subject to the dispute-resolution, arbitration and jurisdiction provisions set out in the KASHOPS Terms of Use, to the extent applicable and legally enforceable.

Nothing in this Privacy Policy prevents an individual from exercising mandatory statutory rights or approaching a regulator, authority, consumer forum/commission, court or other legally competent body where applicable law permits or requires such access.

Nothing in this Privacy Policy is intended to waive or exclude any mandatory privacy or data-protection right or remedy.

18. CHANGES TO THIS PRIVACY POLICY

KASHOPS may update this Privacy Policy when its:

• data practices;
• technology;
• Platform functionality;
• service providers;
• security practices; or
• legal obligations

change.

The updated policy will identify the applicable:

• Effective Date;
• Last Updated date; and
• Version number.

Material changes will be communicated through reasonable means where required by law.

Where renewed or express consent is legally required for a material change in processing, KASHOPS will obtain such consent through an appropriate mechanism.

KASHOPS will seek to ensure that the published Privacy Policy remains consistent with its actual data-processing practices.

20. IMPORTANT INFORMATION

This Privacy Policy describes KASHOPS’s intended data practices as of the Last Updated date.

The final published policy must accurately reflect KASHOPS’s actual technical implementation.

KASHOPS’s development and operations teams must ensure that material changes to the following are reviewed against this Privacy Policy:

• database fields;
• authentication providers;
• hosting providers;
• cloud infrastructure;
• analytics tools;
• cookies;
• local storage;
• location services;
• messaging systems;
• email/SMS providers;
• third-party APIs;
• logging systems;
• security systems;
• data retention mechanisms;
• deletion mechanisms; and
• other systems that collect, use, disclose, store or otherwise process personal data.

The Privacy Policy must be updated where KASHOPS’s actual data practices materially change.

This Privacy Policy must not be interpreted as a statement that KASHOPS uses a particular technology, service provider, tracking system, security measure or processing method unless that technology or practice has actually been implemented.

KASHOPS will seek to maintain appropriate contractual, organisational and technical measures for third-party service providers processing personal data on its behalf, where applicable.