Last updated 13 Aug 2026
1. Introduction
This policy explains what personal information NSCC collects when you use this website, why we collect it, how long we keep it and the choices you have. It is written to align with the Information Technology Act 2000 and the Reasonable Security Practices Rules made under it, the Digital Personal Data Protection Act 2023, and the disclosure duties placed on e-commerce entities by the Consumer Protection (E-Commerce) Rules 2020. By using this website you accept the practices described here.
2. Who Is Responsible For Your Data
NSCC operates this website and decides why and how your personal data is processed, which makes us the data fiduciary for the purposes of the Digital Personal Data Protection Act 2023. Our address is SN05, Ground Floor, Digamber Jain Shopping Complex, Railway Road, Karnal - 132001. Privacy questions and data principal requests can be sent to info@shopinnkart.com.
3. What We Collect And Why
We collect only what an order, an account or a legal obligation actually requires. Nothing in the table below is sold to anyone.
| Category | Examples | Why we need it | How long we keep it |
|---|---|---|---|
| Account data | Name, email address, mobile number, hashed password | To create your account, sign you in and recover access | Until you ask us to delete the account |
| Order and delivery data | Shipping and billing address, pin code, order contents, order status | To fulfil the order, hand it to a courier and handle returns | For the retention period that tax and company law require for sales records |
| Tax and invoice data | GST invoice, invoice number, GSTIN you supply for an input claim | To issue a valid tax invoice and file returns | As long as GST and income tax record keeping rules require |
| Payment data | Payment method, transaction reference, last four digits and status returned by the gateway | To confirm payment, reconcile and refund | For the life of the accounting record |
| Support data | Tickets, call notes, photographs you send for a damage claim | To investigate and resolve your complaint | Up to three years after the ticket is closed |
| Device and usage data | IP address, browser and device type, pages viewed, cookie identifiers | Security, fraud prevention, and keeping the cart and session working | Short lived, as set out in the Cookie Policy |
| Marketing preferences | Newsletter opt in, notification settings | To send only what you asked for | Until you withdraw consent |
4. What We Never Collect
- We never see or store your full card number, CVV, card PIN, UPI PIN, net banking password or the one time password sent by your bank. Those are entered on the payment gateway, not on this site.
- We do not ask for Aadhaar, PAN or any government identifier to place a normal retail order.
- No member of our team will ever call you and ask for an OTP, a PIN or a remote access application. Treat any such call as fraud and report it.
5. Legal Basis And Consent
We process order, delivery, invoice and support data because it is necessary to perform the contract you entered into when you placed the order, and because tax law requires the record. We process marketing data only with your consent, which you may withdraw at any time from your account preferences or by using the unsubscribe link in any marketing message. Withdrawing marketing consent does not affect transactional messages such as a dispatch alert, which are part of the order.
6. Who We Share Data With
- Logistics partners receive your name, delivery address and phone number so the parcel can be delivered.
- Payment gateways receive the amount, the order reference and the contact details needed to process and refund the transaction.
- Brand authorised service centres receive your invoice and device details only when you ask us to open a warranty case on your behalf.
- Technology and communication providers that send transactional email and SMS on our behalf, under contract and only for that purpose.
- Government authorities where a law, a court order or a lawful investigation requires disclosure.
We do not sell personal data, and we do not share it with data brokers or advertisers for their own purposes.
7. Cookies
Cookies and similar storage are described in full in our Cookie Policy, including which categories are strictly necessary and how to refuse the rest in your browser.
8. Security
The site is served over HTTPS. Passwords are stored only as a salted one way hash and are never recoverable in plain text. Access to order and customer records is restricted by role, administrative sessions time out, and every state changing form is protected against cross site request forgery. No system can be described as unbreakable, so we also keep the amount of data we hold to the minimum the order actually needs.
9. Your Rights
- Access. Ask for a summary of the personal data we hold about you and who it has been shared with.
- Correction. Update your name, email, phone or addresses at any time from your account, or ask us to correct anything you cannot edit yourself.
- Erasure. Ask us to delete your account. We must still retain invoices and order records for the period tax law prescribes, so those are retained and the rest is removed.
- Withdraw consent. Turn off marketing at any time without losing your account.
- Grievance redressal. Raise a complaint about how your data was handled and receive a reasoned reply.
- Nominate. Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
To exercise any of these rights, write to info@shopinnkart.com from the email address registered on the account, so that we can verify the request without asking you for further identity documents.
10. Children
This website is not directed at children. We do not knowingly create accounts for anyone under eighteen, and a minor should transact only through a parent or guardian. If you believe a child has created an account, tell us and we will remove it.
11. Changes To This Policy
When this policy changes, the revised version is published on this page and the last updated date above changes with it. Material changes that affect how we use your data will also be notified in your account or by email where you have given us one.
Frequently Asked Questions
Do you store my card details?
No. Card data is captured by the payment gateway on a PCI DSS compliant page. We receive only a transaction reference and a status. Any card tokenisation for future payments is performed by the network and the gateway, not by us.
Can I use the site without an account?
Yes, guest checkout is available. We still need a name, address, phone number and email to deliver the order and send the invoice.
How do I stop marketing email without closing my account?
Use the unsubscribe link in any marketing email, or turn off marketing in your account preferences. Order and delivery notifications continue because they are part of the contract.
Will you share my number with the courier?
Yes. The delivery partner needs your phone number to call you at the door. That is the only purpose it is shared for.
What happens to my data if I ask for my account to be deleted?
Your profile, addresses, wishlist and preferences are removed. Invoices and the order ledger are retained because GST and income tax law require a seller to keep them, and they are then used for nothing else.