Privacy Policy

1. Introduction

Welcome to SHFcollections ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application SHFcollections (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

We respect your privacy and are committed to protecting your personal data. This policy will inform you about how we handle your personal data, your privacy rights, and how the law protects you.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you:

• Register for an account: Name, email address, phone number, shipping address
• Make a purchase: Payment information (processed securely by third-party payment processors)
• Contact customer support: Email, name, and message content
• Submit data deletion requests: Email address and request details

2.2 Information Automatically Collected

When you use our App, we may automatically collect:

• Device Information: Device model, operating system version, unique device identifiers
• Usage Data: App features used, time spent, pages viewed, crash reports
• Location Data: Approximate location (only with your permission)
• IP Address: For security and analytics purposes

2.3 Information from Third Parties

We may receive information about you from third parties such as:

• Google Play Store (app installation and purchase verification)
• Payment processors (Stripe, PayPal, etc.)
• Social media platforms (if you choose to log in via social media)

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our App: Account management, order processing, and customer support
• To improve our services: Analyzing usage patterns and fixing bugs
• To communicate with you: Sending order confirmations, updates, and responding to inquiries
• To comply with legal obligations: Tax reporting, fraud prevention, and responding to legal requests
• To process data deletion requests: As required by Google Play policy
• For marketing purposes: Only with your explicit consent (you can opt out anytime)

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our App:

• Payment Processors: Stripe, PayPal, Razorpay (for secure payment processing)
• Hosting Providers: AWS, DigitalOcean, or similar (for app infrastructure)
• Email Services: SendGrid, Mailgun (for transactional emails)
• Analytics Providers: Google Analytics, Firebase (for app performance tracking)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained until you request deletion, plus 30 days for recovery period
• Transaction Data: Retained for 7 years to comply with tax laws
• Usage Data: Retained for 12 months for analytics purposes
• Deletion Requests: Retained for 3 years for compliance audit purposes

After the retention period, your data will be securely deleted or anonymized.

6. Your Data Deletion Rights

In compliance with Google Play Developer Policy, you have the right to request deletion of your account and associated data.

What happens when you request deletion:

• Your account will be permanently deactivated
• All personal data will be removed from our active systems
• Anonymized transaction records may be retained for legal compliance
• You will receive a confirmation email once deletion is complete
• Deletion requests are processed within 30 days as required by Google

7. Your Privacy Rights

Depending on your location, you may have the following rights:

For EEA/UK Residents (GDPR):

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request data deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests

For California Residents (CCPA):

• Right to Know: What personal information we collect and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

8. Children's Privacy

Our App is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately, and we will delete such information.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: All data transmitted using TLS 1.2+ encryption
• Secure Storage: Passwords hashed using bcrypt, sensitive data encrypted at rest
• Access Controls: Strict employee access policies and regular audits
• Regular Updates: Security patches and vulnerability assessments

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Third-Party Links and Services

The App may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We recommend reviewing their privacy policies before providing any information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for transfers from the EEA.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and login status
• Analyze app usage and improve performance
• Provide personalized content (with your consent)

You can manage cookie preferences through your device settings or our consent manager.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top
• Sending an email notification for significant changes

You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

15. Complaints

If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.

• EEA: Your local Data Protection Authority
• UK: Information Commissioner's Office (ICO)
• USA: Federal Trade Commission (FTC)