Privacy policy

1. Introduction

Shilpn LLC ("we," "us," or "our") is committed to protecting the privacy of visitors and customers of the shilpn website ("Site"), an online marketplace connecting buyers with independent Instagram boutique shops ("Shops"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or make a purchase.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide, including:

• Account information: name, email address, password, and phone number when you create an account.
• Order information: billing address, shipping address, and order details when you make a purchase.
• Payment information: credit/debit card details are collected and processed directly by our payment processor, Stripe, Inc. Shilpn LLC does not store your full card number on our servers.
• Communications: any information you provide when contacting our support team or submitting a contact form.
• Seller information: if you operate a Shop on the platform, we collect your business name, Instagram handle, public profile information, and contact details.

2.2 Information Collected Automatically

When you visit the Site, we may automatically collect:

• Device information: browser type, operating system, and device identifiers.
• Usage data: pages viewed, time spent on pages, referring URL, and click patterns.
• Location data: approximate geographic location inferred from your IP address.
• Cookies and similar technologies: we use cookies, pixel tags, and local storage to enhance your browsing experience and gather analytics. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including shipping and payment processing via Stripe.
• Communicate with you about your orders, account, and customer service inquiries.
• Personalize your shopping experience and recommend products.
• Send transactional messages about your orders and account (order confirmations, shipping, delivery, cancellations, and password or email changes). We currently do not send marketing newsletters; if we introduce them in the future, they will be opt-in and every message will include an unsubscribe link.
• Improve the Site, analyze trends, and monitor site performance.
• Detect, prevent, and address fraud, security issues, and technical problems.
• Comply with applicable legal obligations.

4. Payment Processing

All payment transactions are processed through Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you enter your payment details at checkout, your card information is transmitted directly to Stripe via their secure, encrypted APIs. Shilpn LLC receives only a tokenized reference and does not have access to your full card number.

For more information about Stripe's security practices, please visit Stripe's Privacy Policy.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information with:

• Sellers/Shops: we share your name, shipping address, and order details with the specific Shop(s) fulfilling your order, so they can process and ship your purchase.
• Service providers (sub-processors): companies that help us operate the Site. We currently rely on: Stripe, Inc. (payment processing), Supabase (database, authentication, and file storage hosting), Resend (transactional email delivery), and Google Analytics (usage analytics, only after you opt in via our cookie banner). These providers may process your information only as needed to provide their services to us.
• Shipping carriers: to deliver your orders.
• Legal authorities: when required by law, regulation, or legal process, or to protect the rights, property, or safety of Shilpn LLC or others.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Order records are typically retained for a minimum of 7 years for tax and accounting purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, protect, and improve the Site. These include:

• Essential cookies: required for the Site to function (e.g., shopping cart, authentication).
• Analytics cookies: we use Google Analytics to understand how visitors interact with the Site. These cookies load only after you accept analytics in our cookie banner; if you decline, Google Analytics is not loaded.

We do not currently use advertising or marketing cookies. You can change your analytics choice at any time by clearing the shilpn-cookie-consent cookie or through your browser settings. Essential cookies cannot be disabled, as the Site cannot function without them.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, including requesting deletion of your account and associated data, please contact us at support@shilpn.com. We will respond within the timeframe required by applicable law (generally within 30–45 days) and may need to verify your identity before acting on a request.

8.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request deletion or correction of your personal information, and to not be discriminated against for exercising these rights. Shilpn LLC does not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. To submit a request, email support@shilpn.com with the subject line "California Privacy Request."

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure server infrastructure, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

10. Children's Privacy

The Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: