Privacy Policy

Last updated: March 10, 2026

1. Introduction

Headel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services"). Please read this privacy policy carefully. By using our Services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Services:

  • Account Information: Name, email address, phone number, password, and profile picture
  • Business Information: Shop name, business description, logo, social media handles (Instagram, Facebook)
  • Product Information: Product names, descriptions, images, prices, and inventory details
  • Payment Information: Bank account details, UPI ID, or other payment method information for receiving payouts
  • Identity Verification: Government-issued ID, PAN card, or GST number (if applicable)
  • Communications: Messages, feedback, and support requests you send to us

2.2 Information Collected Automatically

When you access our Services, we automatically collect:

  • Device Information: Device type, operating system, browser type, unique device identifiers
  • Log Data: IP address, access times, pages viewed, links clicked, and referring URLs
  • Usage Data: Features used, actions taken, time spent on pages, and interaction patterns
  • Location Data: General location based on IP address (city/region level)
  • Transaction Data: Order history, purchase amounts, and payment transaction details

2.3 Information from Third Parties

We may receive information from:

  • Social Media Platforms: When you connect your Instagram or Facebook account, we receive basic profile information and business page data as authorized by you
  • Payment Processors: Transaction confirmations and payment status updates
  • Analytics Providers: Aggregated usage statistics and performance metrics

3. How We Use Your Information

We use the collected information for the following purposes:

  • Provide Services: Create and manage your storefront, process transactions, and enable social media integration
  • Process Payments: Facilitate payment processing, manage payouts to sellers, and handle refunds
  • Communicate: Send order notifications, service updates, promotional messages (with consent), and respond to inquiries
  • Improve Services: Analyze usage patterns, develop new features, and enhance user experience
  • Security: Detect and prevent fraud, unauthorized access, and other malicious activities
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes
  • Analytics: Provide sellers with insights about their shop performance and customer behavior
  • Customer Support: Assist with technical issues, disputes, and general inquiries

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

  • Sellers: Buyers' names, contact details, and shipping addresses are shared with sellers to fulfill orders
  • Buyers: Seller shop names, business information, and product details are publicly visible

4.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our Services, including payment processors, cloud hosting providers, analytics services, email service providers, and customer support tools. These providers are contractually obligated to protect your information.

4.3 For Legal Reasons

We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit using SSL/TLS protocols
  • Encryption of sensitive data at rest
  • Regular security assessments and vulnerability testing
  • Access controls limiting employee access to personal data
  • Secure payment processing through PCI-DSS compliant payment gateways
  • Regular data backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account Information: Retained while your account is active and for 3 years after account deletion
  • Transaction Records: Retained for 7 years as required by Indian tax and accounting regulations
  • Communication Records: Retained for 2 years after the communication
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely

7. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request your data in a structured, commonly used format
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at privacy@headel.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

  • Essential Cookies: Required for basic functionality like authentication and security
  • Analytics Cookies: Help us understand how users interact with our Services
  • Preference Cookies: Remember your settings and preferences
  • Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

9. Third-Party Links

Our Services may contain links to third-party websites, including social media platforms like Instagram and Facebook. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@headel.com. If we discover that we have collected information from a child, we will promptly delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than India where our service providers are located. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of our Services after any changes indicates your acceptance of the updated policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:

Grievance Officer

Outbaksho Pvt. Ltd.

Email: hello@headel.com

Response Time: Within 24 hours of receipt

Resolution Time: Within 30 days

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Outbaksho Pvt. Ltd.

Email: hello@headel.com

Address: Kolkata, West Bengal, India