PRIVACY POLICY

Effective Date: September 11, 2026
Last Updated: September 11, 2026

This Privacy Policy constitutes an electronic record and a legally binding agreement under the provisions of the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

This Privacy Policy is published and maintained by Navsoft Technologies (operating under the commercial trading and brand identity Shopper Cart, hereinafter collectively referred to as the “Company”, “Shopper Cart”, “we”, “us”, or “our”). This document governs the collection, receipt, possession, storage, dealing, handling, processing, transfer, and disclosure of personal data acquired from users, visitors, buyers, and account holders (hereinafter referred to as “you”, “your”, or “User”) through our website, mobile interface, and associated shopping platforms (collectively, the “Platform”).

By accessing, browsing, registering an account, or placing an order on the Platform, you expressly consent to the collection, processing, and handling of your information strictly in accordance with this Privacy Policy. If you do not agree with the terms herein, you must immediately terminate use of the Platform.

1. CATEGORIES OF PERSONAL DATA COLLECTED

We collect only such personal information as is relevant, adequate, and strictly necessary to provide retail services, complete your transactions, and maintain platform security.

• Customer Identifiers & Contact Details: Full legal name, billing address, shipping/delivery address, active mobile telephone number, and email address.
• Transactional & Order Data: Details of products viewed, ordered, or cancelled; order values; purchase frequency; transaction identifiers; and communication history regarding order status or customer care inquiries.
• Financial & Payment Processing Data: Modalities of payment selected (such as electronic funds transfer, credit/debit card, unified payments interface, or cash-on-delivery instructions). The Company operates solely through authorized, PCI-DSS-compliant electronic payment processors and does not collect, record, or retain sensitive card numbers, expiration credentials, or personal identification numbers (CVV/PIN).
• Device & Technical Telemetry: Internet Protocol (IP) address, operating system, browser variant, geographic network location, device identifiers, session timestamps, navigation paths, clickstream actions, and interaction duration.

2. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is collected and processed under established legal grounds, including contractual necessity, legitimate compliance, and direct consent, for the following objectives:

• Facilitating, confirming, processing, packaging, and dispatching orders placed on the Platform.
• Communicating mandatory operational updates, dispatch milestones, airway tracking details, and estimated delivery schedules through electronic transmissions, including Short Message Service (SMS) and instant messaging protocols.
• Executing automated order-verification workflows, including One-Time Password (OTP) verification and interactive order confirmation for Cash-on-Delivery (COD) requests to mitigate non-delivery risks and fraudulent purchases.
• Investigating, processing, and executing reverse logistics, product exchanges, or financial refunds pursuant to our operational policies.
• Detecting, preventing, and addressing technical faults, site vulnerability issues, fraud, security compromises, or violations of platform terms.
• Complying with statutory fiscal directives, GST mandates, audits, and legal notices issued by judicial, statutory, or law enforcement bodies within India.

3. THIRD-PARTY DISCLOSURE & DATA PROCESSORS

The Company does not sell, rent, license, or monetize your personal data to any external commercial entity. Information is shared strictly on a need-to-know basis with trusted data processors and execution partners bound by strict contractual confidentiality and data security obligations:

• Warehousing & Supply Chain Fulfillment: Your customer identifiers (name, destination address, and contact number) are transmitted to contracted fulfillment centers, consolidation hubs, and packaging facilities strictly to prepare and assemble your consignments.
• Logistics & Express Courier Carriers: Customer delivery data is provided to designated domestic and regional express courier companies to ensure the physical transport, tracking, and final delivery of packages.
• Authorized Payment Gateways: Financial payment workflows are handled by licensed, accredited payment aggregator partners operating under applicable Reserve Bank of India (RBI) regulations.
• Telecommunication & Messaging Integrations: Contact telephone numbers are routed through automated programmatic messaging gateways to deliver transactional text alerts, OTP authentications, and shipping notifications.
• Statutory & Legal Requirements: Personal data may be released without prior notice if required by applicable statutory mandates, court subpoenas, warrants, or written directives from authorized law enforcement or judicial authorities.

4. COOKIES, BEACONS, AND ANALYTICAL TECHNOLOGIES

The Platform employs cookies, pixel tags, web beacons, and embedded session tracking mechanisms to enhance user navigation and assess system responsiveness:

• Operational & Essential Cookies: Session identifiers essential to maintain authentication, execute shopping-cart functions, and sustain checkout flows.
• Performance & Behavioral Telemetry: Web analytical tools, screen interaction analytics, and heatmap technologies deployed to monitor server loads, session paths, scroll patterns, and conversion efficiency.
• Digital Advertising & Conversion Tags: Pixel tracking mechanisms implemented to measure promotional campaign effectiveness and track aggregated sales metrics.

Users hold the statutory right to configure, block, or delete cookies through individual browser preferences. Restricting essential cookies, however, may impair core Platform checkout processes.

5. DATA RETENTION AND SECURITY SAFEGUARDS

• Security Controls: The Company enforces industry-standard technical, managerial, and physical security measures, including transport layer encryption (SSL/TLS), to safeguard personal information from unauthorized access, unlawful disclosure, alteration, or data destruction.
• Retention Standard: Personal data is retained solely for the duration necessary to satisfy the commercial purposes for which it was gathered, handle warranty or claim cycles, resolve contractual disputes, and comply with statutory retention terms mandated by Indian tax and e-commerce laws. Upon expiration of applicable statutory terms, personal information is permanently deleted or irreversibly anonymized.

6. RIGHTS OF THE DATA PRINCIPAL

Under the provisions of the Digital Personal Data Protection Act, 2023, you are entitled to the following statutory rights regarding your personal information:

• Right to Access: Obtain confirmation on whether your personal data is being processed, along with a summary of the data and categories of entities with whom it has been shared.
• Right to Correction and Rectification: Request the correction, completion, or updating of inaccurate, outdated, or misleading personal data.
• Right to Erasure: Request the permanent removal of your personal data where continuing retention is no longer justified by contractual necessity or statutory compliance mandates.
• Right to Grievance Redressal: Access designated internal dispute resolution mechanisms to submit grievances regarding your personal data.
• Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.

To submit a verified request under these rights, contact the compliance office using the details set forth below.

7. AGE RESTRICTION & MINOR PROTECTION

The Platform is intended exclusively for individuals legally competent to enter into binding contracts under the Indian Contract Act, 1872. We do not intentionally solicit, collect, or store personal data from minors under eighteen (18) years of age without verifiable consent from a parent or legal guardian. If it is established that a minor’s data has been gathered without required consent, that data will be expunged from our operational registers.

8. GRIEVANCE REDRESSAL & REGULATORY COMPLIANCE

Pursuant to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, all notices, inquiries, or statutory grievances regarding this policy or data processing should be submitted to the designated compliance desk:

• Data Fiduciary Entity: Navsoft Technologies
• Commercial Brand Designation: Shopper Cart
• Registered Office Address: Innov8, Aurum Q Parć, Thane – Belapur Rd, Reliance Corporate Park, MIDC Industrial Area, Ghansoli, Navi Mumbai, Maharashtra 400701
• Compliance & Grievance Department: Legal & Privacy Compliance Cell
• Compliance Email: [email protected]
• Operational Helpline: +919080409092
• Regulatory Resolution Period: Received grievances will be acknowledged within 2 working days (Monday to Friday) and resolved within thirty (30) days from formal electronic receipt.

For terms governing product returns, reverse logistics inspections, and replacement criteria, please refer to our independent Shipping & Refund Policy.