11 Introduction
This Privacy Policy explains how ChemShopee Technologies Pvt Ltd (“ChemShopee”, “we”, “us”) collects, uses, shares and protects personal information when you use our website, catalogue and services (the “Platform”).
We handle personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and rules made under it, and the Digital Personal Data Protection Act, 2023.
22 Information we collect
Information you give us
- Account and business details: name, designation, company name, work email, phone number, billing and delivery addresses.
- Verification documents: GSTIN, PAN, trade licence, and — for restricted materials — end-use declarations and licences.
- Order information: products ordered, quantities, Purchase Orders, delivery instructions and correspondence about your orders.
- Communications: enquiries, support tickets, reviews and messages you send us.
Information we collect automatically
- Usage data: pages viewed, searches run, products viewed, time on site and referring URLs.
- Device and technical data: IP address, browser type and version, operating system and device identifiers.
- Cookies: as described in section 5.
Information from third parties
- Verification results from government registries and KYC providers (for example GSTIN validation).
- Payment confirmation and status from our payment gateway partners.
- Delivery status from our logistics partners.
33 How we use your information
| Purpose | What this means in practice |
|---|---|
| Providing the service | Creating your account, showing the catalogue, raising Purchase Orders, collecting payment and coordinating delivery. |
| Verification | Confirming your business is genuine and holds the licences required for what it is ordering. |
| Vendor fulfilment | Passing the details a vendor needs to accept your PO and ship your order. |
| Support | Answering enquiries, resolving disputes and assigning your account manager. |
| Compliance | Meeting tax, GST invoicing, hazardous goods and record-keeping obligations. |
| Safety and fraud prevention | Detecting misuse, unauthorised access and attempts to obtain restricted material unlawfully. |
| Improvement | Understanding which products and features are used, so we can make the Platform better. |
| Marketing | Sending price alerts, product updates and offers — only where you have opted in. |
44 Legal basis for processing
We process personal data on the following bases:
- Performance of a contract — to deliver the services you have signed up for.
- Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.
- Legal obligation — tax, GST, hazardous goods and record-retention requirements.
- Legitimate interests — securing the Platform, preventing fraud and improving our service, balanced against your rights.
55 Cookies and tracking
- Essential cookies — keep you signed in and maintain your cart and PO session. These cannot be switched off.
- Preference cookies — remember settings such as your default delivery address and filters.
- Analytics cookies — help us understand aggregate usage so we can improve the catalogue.
- Marketing cookies — used only with your consent, to measure campaigns.
You can control cookies through your browser settings. Blocking essential cookies will prevent parts of the Platform from working.
66 Who we share information with
We do not sell your personal information. We share it only as follows:
- Vendors — the vendor fulfilling your order receives the details needed to accept the PO, raise a GST invoice and ship to you. They receive only what is necessary for that order.
- Payment partners — to process payment against confirmed Purchase Orders.
- Logistics partners — to pack, transport and deliver your consignment, including hazardous goods carriers.
- Verification providers — to validate GSTIN, PAN and licence documentation.
- Professional advisers — auditors, accountants and lawyers, under confidentiality obligations.
- Authorities — where required by law, regulation, court order, or to investigate suspected unlawful procurement of regulated material.
- Business transfers — if we are involved in a merger, acquisition or asset sale, subject to this policy continuing to apply.
77 Payment data
Payments are processed by PCI-DSS compliant third-party payment gateways. Full card numbers, CVV and net banking credentials are entered directly with the payment provider and are not stored on ChemShopee servers.
We retain only transaction references, amounts, status and the masked instrument identifier needed for reconciliation, invoicing and refunds.
88 Data retention
| Data type | Retention period |
|---|---|
| Account and profile data | While your account is active, then 12 months after closure |
| Order records, POs and invoices | 8 years, as required by tax and company law |
| Verification documents (GST, PAN, licences) | Duration of the relationship plus 8 years |
| Hazardous goods declarations | As required by applicable transport and safety regulation |
| Support correspondence | 3 years from resolution |
| Analytics data | 26 months, in aggregated form thereafter |
99 How we protect your data
- Encryption in transit using TLS across the Platform.
- Encryption at rest for verification documents and sensitive records.
- Role-based access control, so staff see only what their role requires.
- Audit logging of access to verification and order records.
- Periodic security review and vulnerability testing.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the relevant authority as required by law.
1010 Your rights
Subject to applicable law, you may:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Erase data, where we are not required to retain it for legal or tax purposes.
- Withdraw consent for marketing or non-essential cookies at any time.
- Object to or restrict certain processing.
- Port your data to another provider in a structured, machine-readable format.
- Nominate another individual to exercise these rights if you are unable to.
- Complain to the relevant data protection authority.
To exercise any of these, contact our Grievance Officer (section 15). We will respond within 30 days. We may need to verify your identity first.
1111 Marketing communications
We send price alerts, product updates and offers only to those who have opted in. Every marketing email carries an unsubscribe link, and you can change your preferences in your account settings at any time.
Transactional messages — PO confirmations, payment receipts, dispatch and delivery notifications, and safety notices — are part of the service and are not marketing. You cannot opt out of these while you hold an active account.
1212 Children’s data
ChemShopee is a B2B platform intended solely for registered businesses and their authorised representatives. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.
1313 International transfers
Your data is primarily stored and processed in India. Some service providers — for example cloud hosting or email infrastructure — may process data outside India. Where that happens, we take steps to ensure comparable protection through contractual safeguards and permitted transfer mechanisms.
1414 Third-party links
The Platform may link to vendor websites, regulatory resources or other third-party sites. We are not responsible for their privacy practices, and we encourage you to read their policies before providing them with information.
1515 Grievance Officer
In accordance with Indian law, we have appointed a Grievance Officer to address privacy concerns and data rights requests:
- Name: Sameer Desai, Head of Compliance
- Email: privacy@chemshopee.com
- Phone: +91 98765 43210
- Address: ChemShopee Technologies Pvt Ltd, 2nd Floor, Anna Salai Business Park, Guindy, Chennai — 600032, Tamil Nadu, India
- Response time: acknowledgement within 48 hours, resolution within 30 days
1616 Changes to this policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify registered users by email or through the Platform before they take effect. The “last updated” date at the top of this page always reflects the current version.
Questions about this document?
Our team is happy to walk you through anything here.