Privacy Policy

Introduction

Welcome to Quishop a venture of Quichub Innovations LLP ( “Quicshop”, “Quichub”, “we”, “our”, “us”).

Quichub provides a cloud-based e-commerce infrastructure platform that enables businesses to build, manage, and operate their online stores, including payment routing, logistics integration, and checkout processing.

We are committed to protecting your personal data and ensuring transparency in how your information is handled.

This Privacy Notice explains how we collect, use, store, and protect your personal data when you:

• Use our platform
• Create or manage an online store
• Interact with merchants powered by Quichub

Who We Are

Quichub Innovations LLP operates a SaaS platform for e-commerce enablement.

Our Role in Data Processing

• Merchant Data → Quichub acts as a Data Fiduciary
• End-Customer Data → Quichub acts as a Data Processor on behalf of merchants

Personal Data We Collect

Merchant Data

We collect:

• Name, email address, phone number
• Business information (e.g., GSTIN, billing details)
• Account credentials
• Platform usage and interaction data

End-Customer Data (Processed on behalf of Merchants)

We process:

• Name and delivery address
• Contact details
• Order and transaction information This data is controlled by the respective merchant.

Technical Data

• IP address
• Device and browser information
• System logs and usage data

How We Collect Data

We collect personal data through:

• Direct interactions (account creation, platform use)
• Automated systems (logs and essential cookies, where applicable)
• Integrations with third-party service providers

Purpose of Processing

We process personal data for the following purposes:

Service Delivery

• Account creation and management
• Payment processing and order fulfilment
• Customer support and Platform Improvement
• Analysing usage patterns
• Improving system performance, reliability, and security Communication
• Service-related updates and notifications
• Security alerts
• Marketing communications (only where consent is provided)

Legal & Compliance

• Meeting legal and regulatory obligations
• Preventing fraud and misuse of the platform

Lawful Use of Personal Data

We process personal data only:

• With your consent
• For legitimate uses permitted under applicable law
• For providing services requested by you Where required, consent is obtained at the time of collection of personal data through clear and specific notice.

Data Sharing and Disclosure

We do not sell personal data. We may share data with:

Service Providers

Trusted third-party vendors, including:

• Payment gateways
• Logistics partners
• Communication providers (email/SMS)
• Cloud and infrastructure providers

All such parties are contractually bound to process data securely and only for specified purposes.

Merchants

End-customer data is shared with the relevant merchant for order fulfilment.

Legal Authorities

• Where required by law or lawful request. If required by law, subpoena, or to protect the safety and rights of our users.

Business Transfers

In the event of a merger, acquisition, or restructuring, personal data may be transferred subject to applicable safeguards.

Data Retention

We retain personal data only for as long as necessary:

• Account data → until account deletion
• Financial and tax records → up to 7 years (as required by law)
• Logs and technical data → as per regulatory requirements

Data is securely deleted or anonymised after the retention period.

For detailed retention schedules, deletion procedures, and your rights regarding data erasure, please refer to our Data Retention & Deletion Policy .

Your Rights

Under applicable law, you have the right to:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data/Update or fix inaccurate information.
• Deletion: Request erasure of personal data can be made (subject to legal retention requirements).
• Withdraw consent at any time
• Opt-out: Unsubscribe from marketing emails at any time via the “unsubscribe” link.
• Right to Nominate: You have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your rights in respect of your personal data.
• Seek grievance redressal Requests can be made using the contact details below (at the end of the Notice). Requests shall be acknowledged and addressed within reasonable timelines in accordance with applicable law.

Important Note for End-Customers: If you are an end-customer who purchased a product from a Merchant powered by Quichub, Quichub operates strictly as a Data Processor.

To exercise your rights (such as access or deletion) regarding your order data, you must contact the respective Merchant directly. Quichub will assist Merchants in fulfilling these requests but cannot act on direct requests from end-customers.

Data Accuracy Responsibility

Users are responsible for ensuring that the personal data provided is accurate and up to date. Users shall be solely responsible for any inaccurate or out-dated data provided by them.

Withdrawal of Consent

You may withdraw your consent at any time. Upon withdrawal:

• Processing based on such consent will cease
• This will not affect processing already carried out prior to withdrawal

Security Measures

We implement appropriate technical and organisational safeguards, including:

• Encryption of data (in transit and at rest)
• Role-based access controls (least privilege)
• Monitoring and logging systems
• Secure software development practices
• Regular automated backups to prevent data loss.

Data Breach Response

In the event of a data breach:

• We will take immediate steps to contain and investigate
• For Merchant Data (Fiduciary capacity): Notify the Data Protection Board and affected Merchants as required under applicable law.
• For End-Customer Data (Processor capacity): Immediately notify the respective Merchant, transferring the obligation of end-user and regulatory notification to them.

International Data Transfers

• Where applicable, If you are accessing our service from outside India, please note personal data may be processed on infrastructure located in India.
• Where cross-border transfers occur, appropriate safeguards are implemented to ensure data protection standards are maintained.

Child Data

Quichub does not knowingly collect personal data from children without verifiable parental consent. To signing-up/logging to Quicshop, the user needs to be 18years and above. Where the user is below the suggested age, then laws and rules for the, processing of children’s data shall be carried out in accordance with applicable law.

Updates to this Notice

We may update this Privacy Notice periodically. Material changes will be communicated through appropriate channels like, email or a prominent notice within the application.

Grievance Redressal

For any privacy-related concerns: Grievance Officer: Shalini Singh Email: [email protected] We will address your concerns in a timely manner.