Welcome to Shift and Shop (“ShiftAndShop,” “we,” “us,” or “our”). We value your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website https://shiftandshop.com and any related services, including business listings, listing claims, lead forms, customer support, promotional communication, wallet/reward features, and e-commerce product purchases.
By using our website or services, you agree to the terms of this Privacy Policy.
1. Who We Are
Shift and Shop is a platform that may:
- list businesses and services on its website,
- allow business owners to claim and manage listings,
- connect users with businesses,
- provide lead generation and enquiry forwarding,
- offer wallet, reward, or promotional benefit features,
- sell products online through its website,
- communicate with users and businesses by email, phone, WhatsApp, forms, or other channels.
For the purpose of applicable data protection law, Shift and Shop acts as the entity deciding how and why your personal data is processed in relation to our platform activities. The DPDP Act applies to digital personal data collected online, and also to offline data that is later digitised.
2. Scope of This Privacy Policy
This Privacy Policy applies to:
- website visitors,
- customers,
- business owners,
- people submitting forms or enquiries,
- persons claiming a listing,
- product buyers,
- support request senders,
- users participating in offers, rewards, or promotional campaigns.
This Privacy Policy does not apply to third-party websites, apps, payment gateways, business websites, or external services linked from our platform. Their privacy practices are governed by their own policies.
3. Information We Collect
We may collect the following categories of information:
A. Personal Information You Provide Directly
When you use our website, contact us, submit an enquiry, claim a listing, place an order, or communicate with us, we may collect:
- your full name,
- phone number,
- email address,
- billing address,
- shipping address,
- business name,
- business owner name,
- GST or business registration details, where applicable,
- information provided in forms, messages, or support requests,
- profile information or account details,
- any documents or proofs submitted during listing claim or verification,
- any information shared during customer support interaction.
B. Transaction and Order Information
If you purchase products or services through our website, we may collect:
- order details,
- product details,
- payment status,
- transaction reference details,
- delivery details,
- invoice-related information,
- refund, cancellation, or dispute-related information.
C. Listing and Claim Information
Where a business listing is created or claimed, we may collect:
- publicly available business information,
- listing details,
- category and location details,
- ownership confirmation details,
- claim request details,
- communication records related to claim approval, rejection, or update.
D. Publicly Available Business Information
We may create business listings using information that is publicly available from public sources, such as:
- business name,
- publicly listed business phone number,
- publicly available business address,
- public website,
- public business email,
- public category or service information,
- social media or directory references.
We do not intend to publish personal or private information that is not publicly available or that is not reasonably relevant to a business listing. Under Indian law, digital personal data processing must be for lawful purposes and accompanied by notice/consent or another permitted basis where applicable.
E. Automatically Collected Information
When you use the website, we may automatically collect:
- IP address,
- browser type,
- device type,
- operating system,
- pages visited,
- referral URLs,
- session duration,
- click activity,
- approximate location based on IP,
- cookies and similar tracking data.
F. Communication Data
We may store records of your communications with us, including:
- email messages,
- WhatsApp messages,
- support tickets,
- call notes,
- feedback,
- complaint details,
- chat or form submissions.
4. How We Collect Information
We may collect information through:
- website forms,
- account registration,
- checkout pages,
- listing submission forms,
- listing claim forms,
- newsletter signups,
- enquiry forms,
- cookies and analytics tools,
- direct communication by email, call, WhatsApp, or social media,
- public sources used for business directory listings,
- third-party tools or service providers used to operate our platform.
5. Why We Use Your Information
We may use your information for the following purposes:
- to operate, maintain, and improve our website and services,
- to create and display business listings,
- to process listing claims and verify ownership,
- to connect users with businesses,
- to respond to enquiries and support requests,
- to process orders, payments, shipping, and refunds,
- to send order updates, service updates, and administrative messages,
- to provide wallet, reward, coupon, or promotional features,
- to improve platform safety, quality, and trust,
- to detect fraud, misuse, spam, and unauthorized activity,
- to analyze website usage and improve user experience,
- to comply with legal obligations,
- to resolve disputes and enforce our policies,
- to send promotional or marketing messages where permitted.
The DPDP Act requires notice and consent or another lawful ground for processing, and also places obligations on entities to keep data accurate, secure, and limited to what is necessary for the stated purpose.
6. Legal Basis / Grounds for Processing
Where applicable, we process personal data on one or more of the following grounds:
- your consent,
- performance of a contract or pre-contractual steps,
- compliance with legal obligations,
- legitimate business purposes such as fraud prevention, service operation, claim verification, or customer support,
- publicly available business information used for directory listing and discovery purposes, subject to applicable law.
Where consent is required, you may withdraw it by contacting us, subject to legal or operational limitations. The DPDP Act centers notice and consent, while also recognizing certain legitimate uses in specified situations.
7. Business Listings Created from Public Information
Shift and Shop may publish business listings based on publicly available business information.
Important points:
- such listings may be created to help users discover relevant businesses,
- listing information may come from public web sources, directories, business pages, public maps, or other publicly accessible sources,
- we aim to use business-related public information only,
- if a business owner believes any information is inaccurate, outdated, unauthorized, misleading, or should be removed, they may contact us for correction, claim, update, or review,
- claiming a listing may help confirm ownership and improve accuracy.
This practice should still be handled carefully and transparently, since users and businesses should be informed how data is used and be given a way to seek correction or removal where appropriate. Indian privacy law emphasizes notice, lawful purpose, and data accuracy obligations.
8. Listing Claims and Verification
If you claim a business listing, we may ask you to provide information to verify that you are authorized to represent that business.
This may include:
- your name,
- phone number,
- email address,
- business role,
- ownership proof,
- authorization documents,
- government or business registration details,
- social profile or website proof,
- communication history.
We may use this information to:
- review and verify your claim,
- contact you regarding the claim,
- update the listing,
- approve or reject the claim,
- show a claimed or verified-style status on the listing if approved.
We reserve the right to request additional proof, refuse a claim, or remove a claim status if information appears false, misleading, incomplete, or unauthorized.
9. E-Commerce and Product Sales
If we sell products through our website, we may collect and process information necessary to:
- display products,
- accept and fulfill orders,
- process payments,
- arrange shipping and delivery,
- provide invoices,
- handle cancellations, returns, and refunds,
- provide customer support,
- prevent fraud and abuse.
Consumer-facing e-commerce operations in India are also subject to consumer protection rules around transparency and fair practices.
10. Payments
Payments made on our website may be processed through third-party payment gateways or payment service providers. We generally do not store full card, UPI PIN, or banking credentials on our own servers unless explicitly stated.
However, we may receive limited payment-related information such as:
- payment status,
- transaction ID,
- masked payment details,
- billing name and address,
- refund status.
Please review the privacy policy of the payment provider you use during checkout.
11. Cookies and Tracking Technologies
We may use cookies, pixels, tags, and similar technologies to:
- keep users logged in,
- remember preferences,
- measure website traffic,
- analyze user behavior,
- improve performance,
- personalize content,
- support remarketing or advertising campaigns.
You may disable cookies through your browser settings, but some parts of the website may not function properly.
12. Marketing Communications
We may send promotional or service-related messages by:
- email,
- SMS,
- WhatsApp,
- push notifications,
- phone calls,
- website banners.
You can opt out of marketing communications by:
- clicking the unsubscribe link in emails,
- replying with an opt-out request where applicable,
- contacting us directly.
Please note that even if you opt out of marketing, we may still send service-related or transactional communications such as order updates, security notices, support responses, or listing claim updates.
13. Sharing of Information
We may share your information with:
- service providers and vendors,
- hosting providers,
- analytics providers,
- payment gateways,
- shipping and logistics partners,
- customer support tools,
- verification or fraud prevention partners,
- legal or regulatory authorities where required,
- business owners or users where necessary to facilitate a lead or enquiry,
- internal staff, contractors, or platform administrators on a need-to-know basis.
We do not sell personal information in the ordinary sense unless expressly disclosed and permitted by law.
14. Third-Party Services
Our website may use or integrate third-party services such as:
- payment gateways,
- shipping partners,
- maps,
- analytics tools,
- WhatsApp integrations,
- social media plugins,
- CRM tools,
- email marketing tools,
- anti-spam or security plugins.
These third parties may process data according to their own privacy policies. We encourage you to review those policies before using such services.
15. Data Retention
We keep personal information only for as long as reasonably necessary for:
- the purpose for which it was collected,
- legal and regulatory compliance,
- accounting and tax records,
- dispute resolution,
- fraud prevention,
- enforcement of agreements.
When data is no longer needed, we may delete, anonymize, or securely archive it, subject to legal or operational requirements. The DPDP Act expects data to be retained only as long as necessary for the relevant purpose, unless retention is required by law.
16. Data Security
We use reasonable technical, organizational, and administrative safeguards to help protect your information from unauthorized access, loss, misuse, disclosure, alteration, or destruction.
However, no online platform or method of transmission is completely secure, and we cannot guarantee absolute security.
The IT security rules historically required reasonable security practices for certain sensitive data handling, and current Indian privacy law also imposes data security obligations.
17. Your Rights
Subject to applicable law, you may have rights to:
- request access to your personal information,
- request correction or update of inaccurate data,
- request deletion of your personal data,
- withdraw consent where processing is based on consent,
- request grievance handling,
- object to certain communications,
- request review of listing-related inaccuracies affecting you or your business.
The DPDP Act provides rights such as access to information about processing, correction and erasure, grievance redressal, and a way to nominate another person in certain cases.
To exercise your rights, contact us using the details in the “Contact Us” section below.
18. Business Owner Rights Regarding Listings
If you are a business owner or authorized representative and your business appears on our platform, you may contact us to:
- claim your listing,
- correct inaccurate information,
- update public business details,
- submit proof of ownership,
- request review of misleading content,
- request removal where appropriate and legally justified.
We may ask for verification before making changes.
19. Children’s Privacy
Our website is not intended for children who are not legally permitted to provide valid consent under applicable law.
We do not knowingly collect personal data from children in violation of applicable law. If we learn that such data has been collected improperly, we may delete it or take other appropriate action.
The DPDP Act contains additional obligations for processing children’s personal data.
20. International Transfers
If any of our service providers, hosting systems, software tools, or partners are located outside India, your data may be transferred to or processed in other jurisdictions, subject to appropriate safeguards and applicable legal requirements.
The DPDP Act allows cross-border transfers except to territories that may be restricted by the Central Government.
21. Grievance and Complaints
If you have any complaint, concern, correction request, listing issue, privacy request, or objection to data processing, please contact us.
We will try to review and respond within a reasonable period.
Grievance Contact / Privacy Contact
Email: reeti@shiftandshop.com
For e-commerce operators, grievance mechanisms and transparent consumer-facing disclosures are an important part of the regulatory framework in India.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes in law,
- changes in our business model,
- new website features,
- new product lines,
- listing claim features,
- updated data practices.
The updated version will be posted on this page with a revised “Last Updated” date. Continued use of the website after changes may mean you accept the updated policy, to the extent permitted by law.
23. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Shift and Shop
Website: https://shiftandshop.com
Email: reeti@shiftandshop.com
24. Suggested Extra Clause for Your Exact Model
Because your platform may list businesses first and ask them to claim later, I strongly suggest adding this extra section exactly or nearly exactly:
Public Business Listing Notice
Shift and Shop may publish business listings using publicly available business information for discovery, directory, and lead generation purposes. If you are the owner or authorized representative of a listed business and would like to claim, correct, update, or request review of your listing, please contact us. We aim not to publish private personal information that is not relevant to the business listing.