WELCOME TO SHOPNET! Privacy Statement

Last updated on 15 march 2019

We care about your privacy and are committed to protecting your personal data. This privacy statement will inform you how we handle your personal data, your privacy rights and how the law protects you. Please read this privacy statement carefully before using our Services.

1. What data do we collect about you?

1.1 Data provided through direct interactions
Registration and other account information

When you register to use our Services we collect the following information about you:

  1. your name
  2. your shop name if you are seller
  3. e-mail address
  4. mobile number
  5. your Address, city and country
  6. What products you sell in your shop
Communication through the chat feature on our Platform

When you use our chat feature to communicate with other users, we do not collect any information that you choose to provide to other users through this feature.

2.2 Data we collect automatically when you use of our Services

When you interact with our Platform or use our Services, we automatically collect the following information about you:

Device Information
  1. Location information
    Depending on your device permissions, when you register as seller or search shops and post any requirement as buyer on the app, we automatically collect and process information about your actual location. We use various technologies to determine location, including IP address, GPS, Wi-Fi access points and mobile towers. Your location data allows you to see shops near you and helps you in posting items within your location.

2. Do we collect data from children?

Our Services are not intended for children under 16 and we do not knowingly collect data from anyone under 16. If we become aware that a person under 16 has provided us with personal data, we will delete it immediately. If you are under 21, we are not permitted to contract with you directly. If you are under 21 then, by agreeing to this Privacy Policy, you acknowledge and agree that your guardian has read and consented to its terms on your behalf. If we seek your consent to process your personal data for a specific purpose in accordance with this Privacy Policy, consent must be granted on your behalf by your guardian.

3. Why do we process your personal information?

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  1. Where it is necessary for our legitimate interests to improve our Services and to provide you a safe and secure Platform.
  2. Where we need to comply with a legal or regulatory obligation.

We have set out below a description of the ways we use your personal data.

1. For providing access and delivering Services through our Platform

If you log in using your mobile number or email id, we use your first name and last name, mobile number and/or e-mail address to identify you as a user and provide access to our Platform.

The above log-information data is also used by us to deliver our Services to you in accordance with our Terms of Use.

We use your e-mail address and mobile number (by SMS) to make suggestions and recommendations to you about our Services that may be of interest to you.

We process the above information for adequate performance of our contract with you and on the basis of our legitimate interest in undertaking marketing activities to offer you Services that may be of your interest.

2. For improving your experience on the Platform

We use your location data for following purposes:

  1. to compile anonymous and aggregated information about the characteristics and behavior of ShopNet users, including for the purposes of business analysis, segmentation and development of anonymous profiles;
  2. to enhance the performance of our Services and to personalise the content we direct towards you. For example - with the help of location data we display ad listings which are in your vicinity to improve your buying experience;
  3. to measure and monitor your interaction with the third-party advertisements banners we place on our Platform.

With the help of your log-in information which includes your email id, we map the different devices (such as mobile, tablets) used by you to access our Platform. This allows us to associate your activity on our Platform across devices and helps us in providing you a seamless experience no matter which device you use.

We process the above information on the basis of our legitimate interest to improve your experience on our Platform and for adequate performance of our contract with you.

3. To provide you a safe and secure Platform
  1. We use your email id, log data and unique device identifiers to administer and protect our Platform (including troubleshooting, data analysis, testing, fraud prevention, system maintenance, support, reporting and hosting of data).
  2. We analyse your communications done through our chat feature for fraud prevention and to promote safety by blocking spam or abusive messages that may have been sent to you by any other user.

We process the above information for adequate performance of our contract with you, to improve our services and on the basis of our legitimate interest to prevent fraud.

4. How will we inform you about changes in our privacy statement?

We may amend this privacy statement from time to time. We will post changes on this page and will let you know by e-mail or through our Platform. If you or your guardian (as the case may be) do not agree with the changes, you may close your account.

5. Your rights

You may have certain legal rights regarding your personal data depending on the country you are in or how we interact with you. You can learn more about this in this section.

United Arab Emirates ("UAE") data subjects

If you are a data subject in the UAE, you will have the following rights:

  1. Right to request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  2. Right to request correction of any of the data we have about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  3. Right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of any processing we have already carried out based on the consent given previously.
EU General Data Protection Regulation ("GDPR") data subjects

If you are a data subject under the GDPR, you will have certain additional rights in relation to our handing of your personal information.

  1. Right to request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  2. Right to request correction of any of the data we have about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  3. Right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of any processing we have already carried out based on the consent given previously.
  4. Right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  5. Right to request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note that for certain purposes we may be legally obligated to retain your data. Please see section 10.
  6. Right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  7. Right to request for the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  8. To lodge a complaint at any time with your local supervisory responsible for you as outlined in section 13. However, before you make a complaint to the data protection authority, we would appreciate the chance to deal with your concerns in the first instance, please reach out to us at shopnet.org@gmail.com.

No fee usually required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Time limit to respond: We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.

6. Communication and marketing

We will communicate with you by email, SMS or in app notification in connection with our Services/Platform to confirm your registration, to inform you in case your requirement posting has become live/expired and for other transactional messages in relation to our Services. As it is imperative for us to provide you such transactional messages you may not be able to opt-out of such messages.

However, you can ask us to stop sending you marketing communication at any time by clicking on the opt-out link in the email or SMS sent to you or by reaching out us on shopnet.org@gmail.com.

You may receive marketing communications from us if you:

  1. have requested such information from us
  2. use our Platform or Services

7. Who do we share your data with?

We may have to share your personal data with the parties set out below for the purposes set out in section 4 above.

Advertising and analytics providers: In order to improve our Services, we will sometimes share your non-identifiable information with analytics providers that help us analyse how people are using our Platform/Service. We share your information with them in non-identifiable form for monitoring and reporting the effectiveness of the campaign delivery to our business partners and for internal business analysis.

Law enforcement authorities, regulators and others: We may disclose your personal data to law enforcement authorities, regulators, governmental or public bodies and other relevant third parties to comply with any legal or regulatory requirements. We may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy statement.

Publicly available information: When you post any requirement or direct order using our Services, you may choose to make certain personal information visible to other ShopNet users. This may include your first name, last name, your email address, your location and your contact number. Please note, any information you provide to other users can always be shared by them with others so please exercise discretion in this respect.

8. International transfers

You agree that we may transfer your personal data to third parties inside and outside of the UAE.

To the extent that the GDPR applies to our relationship with you, then whenever we transfer your personal data out of the EEA or UAE, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We may transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.

Where we transfer your personal data to countries that have not been deemed to provide an adequate level of protection for personal data by the European Commission we will ensure that adequate safeguards are put in place, such as specific contract clauses that have been approved by the European Commission for use with third parties, which give personal data the same protection it has in the European Union. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.

Where appropriate we may need to rely upon other derogations under the GDPR that allow for transfers out of the EEA to countries that are not deemed to provide adequate levels of protection or were we do not have adequate safeguards. For further details please see European Commission : Working Party 29 Guidelines on Article 49 GDPR Derogations.

Where we use service providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.

You can receive the copy of relevant and implemented safeguards by contacting us at shopnet.org@gmail.com.

9. Where do we store your data and for how long?

The data we collect about you may be stored and processed inside as well as outside the EEA and UAE in secure servers in order to provide the best possible user experience. For example - for fast website or mobile application build up.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In case you have any queries in relation to retention period of your data please contact us at shopnet.org@gmail.com.

10. Technical and organisational measures and processing security

All the information we receive about you are stored on secure servers and we have implemented technical and organisational measures that are suitable and necessary to protect your personal data. ShopNet continually evaluates the security of its network and adequacy of its internal information security program which is designed to (a) help secure your data against accidental or unlawful loss, access or disclosure, (b) identify reasonably foreseeable risks to the security of the ShopNet network, and (c) minimize security risks, including through risk assessment and regular testing. In addition, we ensure that all data are encrypted using SSL technology.

Please note, despite the measures we have implemented to protect your data, the transfer of data through the Internet or other open networks is never completely secure and there is a risk that your personal data may be accessed by unauthorised third parties.

11. Links to third-party websites

Our Platform may contain links to third party websites or apps. If you click on one of these links, please note that each one will have its own privacy policy. We do not control these websites/apps and are not responsible for those policies. When you leave our Platform, we encourage you to read the privacy notice of every website you visit.

12. Contact

For any additional information or to exercise your rights, please contact us at shopnet.org@gmail.com, or go to the Help Section in our Platform.

13. Changes to this Policy

We may amend this Privacy Policy from time to time to keep it up to date with legal requirements and the way we operate our business. Please regularly check this page for the latest version of this Privacy Policy. If we make material changes to this Privacy Policy, we will seek to inform you by notice on our website or application, or email ("Notice of Change"). Your continued use of our Services following an amendment or Notice of Change indicates your or your guardian's acceptance (as the case may be) of any changes.