Privacy Policy

01 Information We Collect

Shah Bi Handicrafts Producer Company Ltd. ("Shah Bi Handicrafts", "we", "us" or "our") operates the website https://shahbihc.com (the "Site"). This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our Site or make a purchase from us, in compliance with applicable data protection laws including the Information Technology Act 2000 (India), the IT (Amendment) Act 2008, and internationally recognised e-commerce privacy standards (GDPR principles).

1.1 Information You Provide Directly

• Account & Order Data: Name, email address, phone number, billing address, shipping address, and payment information when you register or place an order.
• Communications: Messages you send us via contact forms, email, or WhatsApp.
• Newsletter & Marketing Opt-ins: Email address and preferences when you subscribe.

1.2 Information Collected Automatically

• Log & Usage Data: IP address, browser type, operating system, referring URLs, pages visited, time spent, and click-stream data via server logs.
• Cookies & Tracking Technologies: We use cookies, web beacons and similar tools for session management, analytics (Google Analytics), and optional advertising. See Section 7.
• Device Data: Device identifier, screen resolution, and locale settings.

1.3 Information from Third Parties

• Payment processors (e.g. Razorpay, PayU) provide transaction confirmation; we do not store full card details.
• Social media platforms (Facebook, Instagram, YouTube) if you interact with our pages.

02 How We Use Your Information

We use collected information to:

• Process and fulfil orders, send order confirmations and shipping updates.
• Create and manage your account.
• Respond to enquiries, provide customer support.
• Send transactional emails and, with your consent, promotional newsletters (you may opt out at any time).
• Improve the Site, diagnose technical issues, and conduct analytics.
• Detect and prevent fraudulent transactions and abuse.
• Comply with legal obligations and enforce our Terms & Conditions.

03 Legal Basis for Processing (GDPR-aligned)

Where EU/UK GDPR applies, we process personal data under the following bases:

• Contract Performance: Necessary to fulfil an order or provide requested services.
• Legitimate Interests: Fraud prevention, Site security, internal analytics.
• Legal Obligation: Tax records, regulatory compliance.
• Consent: Marketing emails, non-essential cookies.

04 Sharing & Disclosure

We do not sell your personal data. We may share it with:

• Service Providers: Hosting (WordPress/WooCommerce), payment gateways, courier partners, email service providers — under strict confidentiality agreements.
• Legal Authorities: When required by law, court order, or to protect rights and safety.
• Business Transfers: In the event of a merger or acquisition, your data may transfer to the new entity under equivalent protections.

05 Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above and to comply with legal obligations (typically 7 years for financial records under Indian tax law). Account data is retained until you request deletion. You may request deletion at any time — see Section 8.

06 Data Security

07 Cookies & Tracking Technologies

We use the following types of cookies:

• Strictly Necessary: Session cookies for cart functionality and login — cannot be disabled.
• Analytics: Google Analytics (anonymised IP) to understand Site usage.
• Marketing: Facebook Pixel and similar — only with your consent via our cookie banner.

You can manage cookies through your browser settings or our cookie consent banner.

08 Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct or delete your personal data.
• Withdraw consent at any time.
• Object to or restrict processing.
• Data portability (receive your data in a structured format).
• Lodge a complaint with a supervisory authority.

To exercise any right, contact us at info@shahbihc.com. We will respond within 30 days.

09 Children's Privacy

Our Site is not directed at children under 13. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete it promptly.

10 Third-Party Links

Our Site may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

11 Changes to this Policy

We may update this policy periodically. Material changes will be notified via the Site or by email. Continued use of the Site after changes constitutes acceptance.

12 Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: