Privacy Policy

ShipIndia ("we", "us", "our") operates the ShipIndia e-commerce platform accessible at shipindia.co. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, Malaysia's Personal Data Protection Act 2010 (PDPA MY). By using our platform, you consent to the practices described in this policy.

We collect personal data that you provide directly and data generated through your use of the platform: • **Account data:** name, email address, password (hashed), phone number, profile photo. • **Order data:** shipping address, order history, payment method type (we do not store full card numbers — payment is processed by Stripe or Airwallex). • **Communication data:** messages you send us via email, WhatsApp, or our support channels. • **Device & usage data:** IP address, browser type, pages visited, session duration, referring URLs. • **Vendor data:** business name, GST/UEN number, bank details for payouts, warehouse address. We do not collect sensitive personal data (e.g. race, religion, health information) and do not target users under 18.

We use your personal data to: • Process and fulfil orders, including coordinating shipping via Delhivery. • Send transactional communications (order confirmation, shipping updates, password resets). • Provide customer support. • Verify vendor identity and manage vendor accounts. • Detect and prevent fraud and abuse. • Comply with legal and regulatory obligations. • Improve our platform through analytics (aggregate, non-identifiable data). We do not sell your personal data to third parties.

We share your data only as necessary to operate our service: • **Shipping partners** (Delhivery, SingPost, etc.) receive your name and delivery address. • **Payment processors** (Stripe, Airwallex) receive your payment details under their own privacy policies. • **Cloud infrastructure** (AWS, Vercel) host our platform and data in secure data centres. • **CRM / analytics** (Zoho CRM) for vendor and customer relationship management. • **Law enforcement or regulators** when legally required. All third parties are contractually bound to handle your data in accordance with applicable law.

We retain your personal data for as long as your account is active or as needed to provide services. Order records are retained for 7 years to comply with Singapore accounting and tax obligations. You may request deletion of your account and personal data at any time (see Section 7); statutory records will be anonymised but retained for the required period.

Under the PDPA (Singapore) and applicable laws you have the right to: • **Access** the personal data we hold about you. • **Correct** inaccurate or incomplete data. • **Withdraw consent** for non-essential processing at any time. • **Request deletion** of your personal data (subject to statutory retention obligations). • **Data portability** (where technically feasible). To exercise these rights, contact us at hello@shipindia.co.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, role-based access controls, and regular security reviews. However, no system is completely secure; please use a strong, unique password and keep your login credentials confidential.

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some platform features may not function correctly.

For privacy-related queries or to exercise your rights, contact our Data Protection Officer at: Email: hello@shipindia.co WhatsApp: +65 9445 4869 We will respond within 10 business days.