Storeflea Mart Privacy Policy
This Privacy Policy explains how Storeflea ("Storeflea", "we", "us", "our") collects, uses, shares and protects your personal data when you use Storeflea Mart, our online shop-discovery marketplace available at shopping.storeflea.com and the Storeflea Mart app (together, the "Platform"). Storeflea Mart is a product of Storeflea.
Storeflea is the Data Fiduciary for the personal data processed through Storeflea Mart under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made thereunder. Please read this Policy together with our Terms & Conditions and Cookie Policy.
1. What Storeflea Mart is (and is not)
Storeflea Mart is a discovery and lead-generation marketplace. You can browse products listed by local shops, filter by location and rating, and choose to contact a shop. Storeflea Mart does not offer a cart, checkout, online payment or order fulfilment. Any purchase, price, delivery or after-sale matter is agreed directly between you and the shop. This affects what data we collect: we collect what is needed to help you discover shops and to pass your enquiry to a shop, not payment or transaction data.
2. Personal data we collect
2.1 Data you provide
Account details — when you sign in with Google, we receive your name, email address and profile photo from your Google account.
Phone number — we collect your mobile number so a shop can respond to your enquiry.
Enquiry content — the shop you contact and any message or product you enquire about.
Communications — messages you send to our support or grievance channels.
2.2 Data we collect automatically
Location — your chosen city, and (only if you grant browser permission) your approximate GPS location, used to show nearby shops. You can decline location and browse by city instead.
Usage & activity — pages and products you view, searches, filters, and shops you contact, used to run and improve the Platform.
Device & technical data — IP address, device and browser type, and diagnostic data.
Cookies & similar technologies — see our Cookie Policy.
We do not knowingly collect payment card, bank or financial account information through Storeflea Mart.
3. How we use your personal data
To create and secure your Storeflea Mart account and keep you signed in.
To show you relevant shops and products based on your location and preferences.
To pass your enquiry to the shop you choose to contact, so it can respond to you.
To operate, maintain, troubleshoot and improve the Platform and prevent fraud and abuse.
To communicate service messages, respond to support requests, and handle grievances.
To comply with applicable law and enforce our Terms.
4. Legal basis for processing
We process your personal data on the basis of the consent you give when you sign in and use Storeflea Mart, and, where applicable, for legitimate uses permitted under the DPDP Act (such as providing a service you have requested, security, and legal compliance). You may withdraw your consent at any time (see Section 8); withdrawal does not affect processing already carried out.
5. When we share your data
5.1 With shops you contact
This is the most important disclosure. When you choose to contact a shop, we share your name, phone number and enquiry details with that shop (shopkeeper) so it can respond to you, including via WhatsApp. The shop is an independent business and becomes a separate controller of the information you share with it; its use of your details is governed by its own practices, not this Policy. Only contact a shop if you are comfortable with the shop receiving your name and phone number.
5.2 With service providers (Data Processors)
We use trusted third parties who process data on our behalf under contract, including:
Google LLC — sign-in (Google Identity Services).
Meta Platforms / WhatsApp — to deliver enquiry and service messages.
Amazon Web Services (AWS) — cloud hosting and storage (India region).
Analytics and communication providers that help us run and improve the Platform.
5.3 Legal and safety
We may disclose personal data where required by law, court order or a lawful government request, or to protect the rights, safety and property of Storeflea, our users or the public.
5.4 Business transfers
If Storeflea is involved in a merger, acquisition or asset sale, personal data may be transferred, subject to this Policy.
We do not sell your personal data.
6. Data retention
We retain your account data for as long as your account is active.
Enquiry / lead records are retained to provide the service and for our records, and are shared with the relevant shop at the time of enquiry.
Your sign-in session (stored in a secure cookie) lasts up to 30 days, after which you sign in again.
When you delete your account (Section 8), we delete or anonymise your personal data within a reasonable period, except where retention is required by law or for the establishment or defence of legal claims. Note that details already shared with a shop before deletion remain with that shop.
7. Data security
We use reasonable technical and organisational safeguards to protect your data, including encryption in transit (HTTPS), httpOnly session cookies, access controls and hosting within India. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
8. Your rights under the DPDP Act
Subject to the DPDP Act, you have the right to:
Access a summary of the personal data we process about you and how.
Correct, complete, update or erase your personal data.
Withdraw consent at any time, as easily as it was given.
Nominate another person to exercise your rights in the event of death or incapacity.
Grievance redressal — raise a complaint with our Grievance Officer (below).
You can exercise these rights from within the app (including deleting your account) or by contacting our Grievance Officer. If unsatisfied, you may complain to the Data Protection Board of India.
9. Children
Storeflea Mart is intended for users aged 18 and over. We do not knowingly process the personal data of children without verifiable parental/guardian consent as required by the DPDP Act. If you believe a child has provided us data, contact our Grievance Officer and we will take appropriate action.
10. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where required, ask you to re-consent within the app before you continue using Storeflea Mart.
11. Contact us
For any question about this Policy or your personal data, contact our Grievance Officer:
Grievance Officer: Akshansh Gupta
Email: support@storeflea.com
Phone: 9755598800
Registered address: 381-382 Amrakunj Colony, Indore
Data Fiduciary: Storeflea. Storeflea Mart is a product of Storeflea.