1. Overview
This Privacy Policy ("Policy") applies to Laabam.Shop, operated by Laabam One Business Solutions Pvt Ltd("we", "us", "our"). It describes how we collect, use, disclose, and safeguard your personal information when you access or use our multi-vendor e-commerce marketplace platform, including our website, mobile applications, and all related services (collectively, the "Platform").
ℹ️ Note
By using Laabam.Shop, you consent to the data practices described in this Policy. If you do not agree, please discontinue use of the Platform.
2. Information We Collect
We collect information to provide, improve, and secure our services:
Information You Provide
Account Details
Name, email address, phone number (+91), and password when you register.
Profile Information
Profile photo, date of birth, gender (optional), and display name.
Addresses
Shipping and billing addresses including PIN code, city, state, and landmarks.
Seller Information
Business name, GSTIN, PAN, bank details, and KYC documents for seller accounts.
Transaction Data
Order history, payment confirmations, invoices, and wallet transactions.
User Content
Product reviews, ratings, questions, seller feedback, and support tickets.
Information Collected Automatically
Device Data
Browser type, operating system, device model, screen resolution, and unique device identifiers.
Usage Data
Pages visited, time spent, clicks, search queries, and navigation paths.
Location Data
Approximate location derived from IP address, used for delivery estimation and regional offers.
Log Data
IP address, access timestamps, referring URLs, and error logs for security monitoring.
3. How We Use Your Data
We use your personal information for the following purposes:
Order Fulfilment
Processing orders, managing payments via Razorpay, generating GST invoices, and coordinating deliveries.
Account Management
Creating and maintaining your account, authenticating sessions, and managing preferences.
Platform Improvement
Analysing usage patterns to improve our UI, search relevance, product recommendations, and overall experience.
Customer Support
Responding to queries, processing returns/refunds, and resolving disputes between buyers and sellers.
Security & Fraud Prevention
Detecting suspicious activity, preventing fraud, enforcing our Terms, and protecting users.
Legal Compliance
Meeting obligations under Indian law including IT Act 2000, Consumer Protection Act 2019, and DPDP Act 2023.
Communications
Sending order updates, delivery notifications, and (with your consent) promotional offers and newsletters.
6. Data Security
We implement industry-standard security measures to protect your data:
Encryption
All data transmitted via TLS/SSL. Sensitive data encrypted at rest.
Access Controls
Role-based access with least-privilege principle for all team members.
Payment Security
Card data handled exclusively by PCI-DSS compliant Razorpay — never stored on our servers.
Monitoring
24/7 intrusion detection, automated vulnerability scanning, and security logging.
Password Hashing
Passwords are hashed using bcrypt and never stored in plain text.
Regular Audits
Periodic security assessments and code reviews to identify vulnerabilities.
⚠️ Important
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your data only as long as necessary:
- • Account data: Retained while your account is active and for 30 days after deletion request.
- • Transaction records: Retained for 8 years as required under Indian tax and GST regulations.
- • Server logs: Automatically purged after 90 days.
- • Analytics data: Aggregated and anonymised after 2 years.
- • Support tickets: Retained for 3 years after resolution.
8. Your Rights
Under the Digital Personal Data Protection (DPDP) Act, 2023 and applicable Indian law, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Update or correct inaccurate personal information from your account settings or by contacting us.
Right to Erasure
Request deletion of your account and personal data, subject to legal retention requirements.
Right to Withdraw Consent
Withdraw consent for data processing at any time. This may affect your ability to use certain features.
Right to Nominate
Nominate a person to exercise your data rights in the event of your death or incapacity (as per DPDP Act).
Right to Grievance Redressal
File a complaint with our Grievance Officer or the Data Protection Board of India.
To exercise any of these rights, email us at privacy@laabam.shop. We will respond within 30 days.
9. Children's Privacy
⚠️ Important
Laabam.Shop is not intended for children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete the information.
10. International Users
Laabam.Shop primarily serves users in India. Your data is stored and processed on servers located in India. If you access the Platform from outside India, you consent to the transfer of your data to India. We ensure that such transfers comply with applicable data protection regulations.
11. Third-Party Services
Our Platform integrates with third-party services. Each operates under its own privacy policy:
- • Razorpay — Payment processing (UPI, cards, net banking, wallets)
- • Google — Social login authentication (OAuth 2.0)
- • MSG91 — OTP and SMS notifications
- • DigitalOcean — Cloud infrastructure and file storage
- • Cloudflare — CDN and DDoS protection
We encourage you to review the privacy policies of these services.
12. Communications
We may send you the following types of communications:
Order confirmations, shipping updates, payment receipts, and password resets. These cannot be opted out of as they are essential to service delivery.
Offers, deals, newsletters, and product recommendations. You can unsubscribe at any time via the link in the email or from account settings.
Policy changes, security alerts, and important account notifications. These are sent as necessary and cannot be fully opted out of.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
- • We will update the "Last updated" date at the top of this page.
- • Material changes will be notified via email at least 15 days in advance.
- • A prominent notice will be displayed on the Platform for significant changes.
Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.
14. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for data-related concerns is:
Grievance Officer
Laabam One Business Solutions Pvt Ltd
Email: grievance@laabam.shop
Response time: Within 24 hours of receipt. Resolution within 30 days.
15. Contact Us
For any privacy-related questions or concerns:
Privacy Inquiries
privacy@laabam.shopGeneral Support
support@laabam.shopData Controller
Laabam One Business Solutions Pvt Ltd, India
Related Policies