PRIVACY

Shoppers Stop Limited ("SSL:' or "we" or "us", which term shall include its wholly owned subsidiary, Global SS Beauty Brands Ltd.) carries out its business from its retail stores ((i) under the brand "Shoppers Stop", "Homestop”, “SSBeauty” “; (ii) SSL operated stores of MAC, CLINIQUE, ESTEE LAUDER, BOBBY BROWN and SMASHBOX; (iii) NARS” operated by Global SS Beauty Brands Limited (“GSSB”) and (Iv) website and mobile app www.shoppersstop.com and www.ssbeauty.in  (collectively "Platform"). SSL also operates a loyalty programme "First Citizen".

SSL respects your privacy and this Privacy Policy outlines the manner in which your data is collected by us through our various interactions with you on the Platform, including data shared by you on your agreeing to become a First Citizen member on the Platform and continuing to remain/ avail the First Citizen membership benefits after becoming a member (whether on the Platform or at our retail stores); and the manner in which the data so collected is used by SSL and GSSB. You are advised to please read the Privacy Policy carefully. Please note that the provisions of the Policy with respect to the First Citizen membership are applicable only if you are a First Citizen member.

By accessing the services provided by the Platform and/or continuing to remain/ avail First Citizen member benefits, you agree to the collection and use of your data by SSL and GSSB in the manner provided in this Privacy Policy.

If you have questions or concerns regarding this statement, write to us at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com) or at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com). The Platform may have links to third party websites/apps. This Policy does not apply to the procedures and practices followed by third party websites/apps that are not managed, owned or controlled by SSL and GSSB. Data provided by you to such third party websites/apps shall be governed by their privacy policy.


Through this Privacy Policy, We wish to make you:

Feel at ease while using the Platforms and/or availing the benefits of the First Citizen membership. Feel confident while sharing information with us.
Aware that you may contact us with your questions or concerns about privacy on this Platform and/or First Citizen membership.

Aware that by using the Platforms and/or availing/ continuing the First Citizen membership you are agreeing to the collection of certain data.

Information that may be Collected from You?

SSL and GSSB collects the details provided by you on registration together with information we learn about you from your use of our service and your visits to the Platform and other websites accessible from them.

We take customer data privacy very seriously. Kindly, note that SSL and GSSB does not access or store your Payment Card details (i.e. credit/debit card number, expiration date, CVV etc.). When you make a purchase using your card, all required transaction details are captured on the secured payment page, and encrypted using Industrial Strength Cipher, and are securely transmitted to your card issuer for obtaining an authorization decision. At no time during the purchase process or thereafter does SSL or GSSB have access to, or store, your complete card account information.

We read your SMS messages only for the purpose of OTP verification at the time of making payments and during user registration on the Platform. We do not read any other messages on your mobile except OTP verification SMS sent by SSL and/or GSSB. We also don't access your call logs on phone.

We may collect additional information in connection with your participation in any promotions or contests offered by us and information you provide when giving us feedback or completing profile forms. We also monitor customer traffic patterns and Platform use, which enables us to improve the service we provide. We will collect only such information as is necessary and relevant to us to provide you with the services available on the Platform and/or services/ promotions agreed to be availed by you as a First Citizen member.

While you use the Platform, we may have automatic access to (receive and collect) certain anonymous information in standard usage logs through our web server, obtained from "cookies" sent to your browser from web server cookies stored on your hard drive, including but not limited to:

Computer-identification information.

IP address, assigned to the computer which you use.

The domain server through which you access our service. The type of computer you're using.
The type of web browser you're using.
 

While you are transacting on the Platform or as First Citizen members, personally identifiable information collected about you may include:

First and last name.

Email addresses.

Contact details including phone numbers. PIN/ZIP code.
Demographic profile (like your age, gender, occupation, education, address and durables owned).

Personal preferences and interests (such as books, movies, music and so on); and

Your opinion on services, products, features on our Platform.
We may also collect the following information about: The pages you visit/access.
The links you click on our Platform.

The number of times you access the page. Things you view, add to bag, add to wish list.
Other websites you open simultaneously while browsing on ours

Personal preferences and interests (such as books, movies, music and so on); and Your opinion on services, products, features on our Platform.
You may terminate your account at any time by writing to us at customercare@shoppersstop.com, from the email ID you have used for creating your account login, and mentioning "Please close my shopppersstop.com account" in the subject line. We will disable access to your account within 2 working days of receiving your mail. However, your information may remain stored in archive on our servers even after the deletion or termination of your account.

When/ How do we collect the Information?

We will collect anonymous traffic information from you when you visit our Platform.

We collect the personally identifiable information from you when you register with us or you transact as a guest. During registration you are required to give us your contact information (such as name, email address, date of birth, gender, billing address, delivery address, pin code, mobile number, occupation, interests etc.) Upon registration users may receive communications from us (e.g. newsletters, updates). Even when transact as a guest we collect identifiable information (such as name, email address, date of birth, gender, billing address, delivery address, pin code, mobile number etc.)

We use this information to contact you about the services you are using on our Platform and services in which you have expressed interest.

When you purchase a product or service from us, we request certain personally identifiable information from you on our order form, in order to be able to fulfill your requested service. You must provide contact information (such as name, email, and shipping address).

We use this information for billing purposes and to fill your orders. If we have trouble processing an order, we will use this information to contact you.

You have the option to provide demographic information (such as occupation, education and gender) to us; we encourage you to submit this information so we can provide you a more personalized experience on our Platform.

If you choose to use our referral service to tell a friend about our Platform, we will ask you for your friend's name and email address. We will automatically send your friend a one-time email inviting him or her to visit the Platform does store this information and the information is used for the sole purpose of sending this one-time email and tracking the success of our referral program.

Your friend may contact us at customercare@shoppersstop.com to request that we remove this information from our database. We are the sole owners of your information collected by us at different points on our Platform.
We will collect personally identifiable information about you only as part of a voluntary registration process, guest check out, on-line survey, or contest or any combination thereof.

Our advertisers may collect anonymous traffic information from their own assigned cookies to your browser.

The Platform contains links to other websites. We are not responsible for the privacy practices of such websites which we do not own, manage or control.

We may at certain times make chat rooms, forums, instant messenger and message boards and other services available to you. Please understand that any information that is disclosed in these areas becomes public information. We have no control over its use and you should exercise caution when disclosing your personal information to anyone.

If you use a bulletin board or chat room on this Platform, you should be aware that any personally identifiable information you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages. We are not responsible for the personally identifiable information you choose to submit in these forums

How is the information used?

We use your contact information to send you: Password reminder and registration confirmation. Special offers.
Changes in the service policies or terms of use.

Event based communications such as order information, renewal notices, invites, reminders etc.
Note: "We send users updates upon registration updates regarding your order status, give service updates and respond to your queries. We also send promotional emails/SMS to inform you about new arrivals, special offers, etc. We may also use WhatsApp for these purposes. Use of any information shared over WhatsApp will also be governed by WhatsApp's privacy policy {https;//www.whatsapp.com/legaVupdates/privacy-policy/?lang=en (https://www.whatsapp.com/legaVupdates/privacy-policy/?lang=en))"

We use your personal information to:

Improve personalized features on our Platform to enhance your shopping experience.

To contact you for your account/ profile related matters or any other reason as may be necessary. To provide the services requested by you example deliver merchandise ordered by you.
To preserve social history as governed by existing law or policy.

We use anonymous traffic information to:

Remember you in order to deliver better and more personalized service e.g. track your entries in our promotion schemes; Recognize your usage privileges to our Platform.
Administer and manage smooth functioning of our Platform by diagnosing problems.

Track your session and activities so that we can understand better how people use our Platform.

Who do we share your information with?

We do not share or rent your information with third parties; except (i) GSSB; (ii) ELCA Cosmetics Private Limited and its associate companies (as defined under the Companies Act, 2013) (collectively referred to as "ELCA"), (iii) Shiseido India Private Limited and its associate companies (as defined under the Companies Act, 2013) (collectively referred to as “NARS”) (iv) our agents and alliance partners, as provided hereunder.
 

NARS

The data collected from you on becoming a First Citizen member at a NARS brand beauty store operated by us, may be shared with NARS. NARS may use the information including personally identifiable information for its product development, marketing, profiling and target advertising.

GSSB/SSL

The data collected from you on becoming a First Citizen member at a GSSB store or SSL store, the information provided by you including personal identifiable information may be used by both GSSB and SSL interchangeably for the purpose as detailed herein as the Data Fiduciary.
 

ELCA

The data collected from you on becoming a First Citizen member at a ELCA brand beauty store operated by us, may be shared with ELCA. ELCA may use the information including personally identifiable information for its product development, marketing, profiling and target advertising.

Agents

We use the services of our enabling partners such as outside shipping companies, resellers, business associates to fulfill orders, and credit/ debit card processing companies to process the payment for goods and services ordered from the Platform. These entities do not retain, store, share or use personally identifiable information for any other purposes.
 

Alliance Partners

We will share your information with our alliance partners who work with us or on our behalf to help provide you the services. An alliance partner is a company or an individual who owns and manages (wholly or part of) online content on their websites powered by the Platform
We share email addresses with agents and Alliance partners. The agents and Alliance partners use the email address to confirm the deliveries, send notices and offer services related to the service.

We do not rent, sell or share your personal information and we will not disclose any of your personally identifiable information to any other third parties unless:

Required by special circumstances such as compliance with subpoenas, court orders, requests/order from legal authorities or law enforcement agencies requiring such disclosure;

To help investigate, prevent or take action regarding unlawful and illegal activities, suspected fraud, potential threat to the safety or security of any person, violations of Platform terms of use or to defend against legal claims;
We have your permission;

To provide products or services you've requested

We reserve the right to disclose your personal identifiable and email address information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on the Platform.

We share your information with advertisers on an aggregate basis only.

The security of your personal information and email address is important to us. When you enter sensitive information (such as credit/ debit card number) on our acquiring bank's system or order forms, they encrypt that information using secure socket layer technology (SSL). To learn more about SSL, follow this link http://www.verisign.com (http://www.verisign.com/)

We follow generally accepted industry standards to protect the personal information and email address submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information and email address, we cannot guarantee its absolute security.

If you have any questions about security on the Platform, you can mail at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com) What choices are available to you regarding collection, use and distribution of your information?
You can accept or decline the cookies. All websites that are customizable require that you accept cookies. You must also accept cookies to register as someone for access to some of our services. For information on how to set your browser to alert you to cookies, or to reject cookies, go to http://www.cookiecentral.com/

Cookies

A cookie is a small text file that is stored on a user's computer for record-keeping purposes. We use cookies on this Platform. We do link the information we store in cookies to any personally identifiable information you submit while on the Platform.

We use both session ID cookies and persistent cookies. We use session cookies to make it easier and secure for you to navigate the Platform.A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your Internet browsers "help" file. Reference for cookies can be found at http://www.cookiecentral.com (http://www.cookiecentral.com/)

We use session cookies to store the secure session and browsing preferences of the user. We set a persistent cookie to store your username and interests so you don't have to enter it more than once. Persistent cookies also enable us to track and target the interests of our users to enhance the experience on the Platform.

If you reject cookies, you may still use the Platform, but your ability to use some areas of the Platform, will be limited. Cookies are used in the shopping bag to enable enhanced security and to ensure there is no URL based spamming.

Unless you voluntarily identify yourself (through registration, for example), we will have no way of knowing who you are, even if we assign a cookie to your computer. The only personal information a cookie can contain is information you supply (an example of this is when transact as a guest or add items to shopping bag). A cookie cannot read data off your hard drive.

Some of our business partners (e.g., advertisers) set cookies while delivering banners on the Platform. We have no access to or control over these cookies. This privacy statement covers the use of cookies by the Platform only and does not cover the use of cookies by any advertisers.
We do use cookies on point of collection pages of email address but we do not use them in emails.

Our web servers automatically collect limited information about your computer's connection to the Internet, including your IP address, when you visit the Platform. (Your IP address is a number that lets computers attached to the Internet know where to send you data -- such as the web pages you view.) Your IP address does not identify you personally. We use this information to deliver our web pages to you upon request, to tailor the Platform to the interests of our customers, to measure traffic within the Platform and let advertisers know the geographic locations from where our visitors come.

The Platform includes links to other websites. Such websites are governed by their respective privacy policies, which are beyond our control. Once you leave our servers (you can know where you are by checking the URL in the location bar on your browser), use of any information you provide is governed by the privacy policy of the operator of the website you are visiting. That policy may differ from ours. If you can't find the privacy policy of any of these websites via a link from the website's homepage, you should contact the website directly for more information.
 

Voluntary disclosure of information.

Supplying personally identifiable information is entirely voluntary. You are not required to register with us in order to use the Platforms. However, we offer some services only to visitors who do register

You may change your interests at any time and may opt-in or opt-out of any marketing/ promotional/ newsletters mailings. SSL reserves the right to send you certain service related communication, considered to be a part of your Platform account without offering you the facility to opt-out. You may update your information and change your account settings at any time.

We provide you with the opportunity to opt-out of having your email address used for certain purposes, when we ask for this information. For example, if you purchase a product/ service but do not wish to receive any additional marketing material from us, you can indicate your preferences. If you no longer wish to receive our newsletter and promotional communications,you may opt-out of receiving them by selecting your preferences in "My Account". If you still face an issue then you may mail us at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com).

If your personally identifiable information or email address change, or if you no longer desire our service, you may correct, update, delete or deactivate it by emailing our Customer Support Mail at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com)

Upon request, we will remove/ block your personally identifiable information from our database, thereby canceling your registration. However, your information may remain stored in archive on our servers even after the deletion or the termination of your account.

If we plan to use your personally identifiable information for any commercial purposes, we will notify you at the time we collect that information and allow you to opt-out of having your information used for those purposes.

What security procedures are in place to protect information from loss, misuse or alteration?

To protect your privacy and security, we will verify your identity before granting access or making changes to your personally identifying information. If you have registered your profile on the Platform, your Platform ID and Password are required in order to access your profile information.

To protect against the loss, misuse and alteration of the information under our control, we have in place appropriate physical, electronic and managerial procedures. For example, our servers are accessible only to authorized personnel and your information is shared with respective personnel on need to know basis to complete the transaction and to provide the services requested by you.

Although we will endeavor to safeguard the confidentiality of your personally identifiable information, transmissions made by means of the Internet cannot be made absolutely secure. By using this Platform, you agree that SSL and/or GSSB will have no liability for disclosure of your information due to errors in transmission or unauthorized acts of third parties

We follow generally accepted industry standards to protect the personal information and email addresses submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information and email address, we cannot guarantee its absolute security

If you have any questions about security on the Platform, you can send Mail at customercare@shoppersstop.com (mailto:customercare@shoppersstop.com)

All information gathered on the Platform is securely stored within the SSL controlled database. The database is stored on servers secured behind a firewall; access to the servers is password-protected and is strictly limited. However, as effective as our security measures are, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet and, of course, any information you include in a posting to the discussion areas is available to anyone with internet access.

However the internet is an ever evolving medium. We may revise this Privacy Policy from time to time to incorporate necessary changes. Of course, our use of any information we gather will always be consistent with the policy under which the information was collected, regardless of what the new policy may be.

We use third-party advertising companies to serve ads when you visit the Platform. These companies may use information (not including your name, address, email address or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.

In accordance with Information Technology Act 2000 and the rules made there under, the name and contact details of the Grievance Officer are provided below:

Mr. Ramnath Karnath

UMANG TOWER, 5th floor, Off Link Road Malad West-400064
Maharashtra, India

Email: privacy.concern@shoppersstop.com
 

HOW CAN YOU CORRECT INACCURACIES IN THE INFORMATION?

To correct or update any information you have provided, the Platforms allow you to do it online. Policy updates
We reserve the right to change or update this policy at any time by placing a prominent notice on the Platform. Such changes shall be effective immediately upon posting to this Platform.

If we decide to change this Privacy Policy, we will post those changes to this privacy statement, the homepage, and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, or by means of a notice on our homepage.

If we decide to make changes in our email practices, we will post those changes to this privacy policy, the homepage, and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

You can offer your views, suggestions, if any, by submitting the filled in feedback form online.

Secure Shopping

Shopping on the Platform is 100% safe. We use industry standard secure systems to protect your personal and payment information. For your safety, we do not store your complete credit card details or payment information in our systems, and this is directly transmitted securely to the bank for payment processing.

SSL is concerned about the safety and security of our customers. Accordingly, we have put a number of technological protections in place to ensure that our transaction process is extremely safe and that our customers' information is secure. For enhanced security SSL and/or GSSB does not store any financial information on its servers. All such information entered by you is directly received by our Banks servers and are then transmitted to your banks servers. All this is done through industry standard encryption protocol known as Secure Socket Layer (SSL). Majority of online transactions are completed without incident. However, please keep in mind that customer protection is a two-way street. When buying on any online venue, caution must always be practiced. Following are some guidelines that you should follow to ensure safe and secure online shopping experience.

Safety and Security Tips
 

Protect your passwords.

If using a public computer or terminal, always log out when you complete an online session.

Keep your passwords private. Remember, anybody who knows your password may access your account.

When creating a valid password, use letters and numbers only and it should be 6-15 characters long. -A combination of letters and numbers is best. Do not use dictionary words, your name, e-mail address, or other personal information that can be easily obtained. It is also recommended that you frequently change your password.

Avoid using the same password for multiple online accounts.
Be wary of unsolicited e-mail and telephone contacts.

SSL and/or GSSB will never e-mail or call a customer and ask that they disclose or verify their Platform password, credit card, or banking account number. Such information should only be submitted on the web page forms, when completing an order on the Platform or when making updates to Your Account areas and never on phone or e-mail to us. If you receive a suspicious e-mail with a link to update your account information, do not click on the link--instead go directly to https://www.shoppersstop.com and then to your account.

If you are contacted by, or receive an unsolicited e-mail from an unknown entity impersonating as SSL and/or GSSB or any of its sister concerns or associates, and are asked to confirm or provide your password or personal or banking information, simply disregard the request and report the incident to SSL and/or GSSB  for investigation.

Customers should always carefully review order and shipment confirmation e- mails to ensure that they are legitimate and have been sent by SSL and/or GSSB. To do this, simply cross-reference confirmation e-mails with the transaction history found in your account area. If you receive shipment confirmation e-mail for a transaction you have not done, report the incident to SSL and/or GSSB.

A word of caution is that never disclose any confidential information such as password in any communication with us or with any of our employee. SSL and/or GSSB will never ask for such information over e-mails or phone.

If you receive an e-mail asking for personal details such as password never respond to it.

A phishing email will normally have a tone of urgency- like "Your account will be temporarily suspended" and therefore please "Login to keep your account active:· Please remember SSL and/or GSSB will NEVER send such emails to its customers.

If you are doubtful about the credibility of the email, please DO NOT click on any link provided in the email. This may trigger malicious codes being installed on your PC. You must report the incident to SSL

If you receive a suspected spoofed SSL and/or GSSB e-mail, or discover a fake Shoppersstop.com website/ app, please report the incident to us.

Ensure your Personal Computer is protected

Fraudsters send genuine-looking emails that contain viruses and Trojans (A Trojan refers to a program that appears to be safe, but hidden inside, is usually something harmful, probably a virus). These viruses/ Trojans, install a malicious code on your PC without your knowledge. They extract your confidential information that fraudsters use to access your online profile/ account etc.

Here are a few important action points that you should bear in mind

Keep your PC updated with the latest anti-virus/ anti-spyware software. Install a personal firewall on your PC to protect your account.
Keep your PC updated with the latest security patches and, most importantly,

Do not click on links or open attachments in unknown or unsolicited (spam) email
 

Ensure your Personal Computer is protected

Fraudsters send genuine-looking emails that contain viruses and Trojans (A Trojan refers to a program that appears to be safe, but hidden inside, is usually something harmful, probably a virus). These viruses/ Trojans, install a malicious code on your PC without your knowledge. They extract your confidential information that fraudsters use to access your online profile/ account etc.
 

Here are a few important action points that you should bear in mind

Keep your PC updated with the latest anti-virus/ anti- spyware software. Install a personal firewall on your PC to protect your account.
Keep your PC updated with the latest security patches and, most importantly,

Do not click on links or open attachments in unknown or unsolicited (spam) emails Privacy Policy for Chatbot
Please read the below section applicable for SSL chatbot. Use the application only if you understand and agree with all guidelines mentioned hereby.

Privacy Protection

We are committed to protect your personal and personally identifiable information. We do not share any information received from you with any third party excluding our partners and affiliates.
 

Information Collection and Use on Chatbot

Once you sign up to use our application, we get access to your email address, public profile and your friend list on Facebook. We collect your name and email address for identification and authentication. We also have access to queries posted by you on our chat bot messenger application. Your queries help us analyse your demographic preferences, interests and provide you with a better user experience. We do not collect any financial information like credit card or bank account details from any of our users.
 

Information Security

We ensure utmost security of your personal information. We don't store your Facebook password. To prevent security breach and unauthorised access, we have implemented commercially viable measures, administratively, physically and electronically, to safeguard all your data that we collect online.

If you use the Shoppers stop chatbot, You shall be responsible for maintaining the confidentiality of your Display Name and Password and you shall be responsible for all activities that occur under your Display Name and Password.

You agree that if you provide any information that is untrue, inaccurate, not current or incomplete, we shall have the right to indefinitely suspend or terminate or block access of your membership on the Platform.

You agree to immediately notify SSL of any unauthorized use/ breach of your password or account.

Cookies Policy

A cookie is a small text file that we place on your device to enable various features of the Platform. "Cookies" are used to store user preferences and to track user trends, so as to enhance your interactive experience and generally improve our Services to you. You can change your cookie settings to accept or not accept cookies in your browser settings. If you do accept a "cookie': you thereby agree to our use of any Personal Information collected by us using that Cookie that Cookie.
 

Third Party Links

We occasionally tie-up with third parties to make available certain offers, events or special schemes or provide you with exciting features. In such instances, your personal information may be shared with such third parties and/or may become available to them or be disclosed to them, such third parties may have their own applicable privacy rules and we shall not be liable for the use or misuse of your information by such third parties.

You acknowledge that, we will only disclose your information in an aggregated form which is not capable of being used or interpreted in such a manner as to identify you.

Chatbot Policy towards Children

Shoppers stop chatbot shouldn't be used by users below 18 years of age. Use of the chatbot is available only to persons who can form legally binding contracts under Indian Contract Act, 1872. Persons who are "incompetent to contract" within the meaning of the Indian Contract Act, 1872 including minors, un-discharged insolvents etc. are not eligible to use the Shoppers stop chatbot.

If you are a minor i.e. under the age of 18 years, you shall not register as a User of the Shoppers stop chatbot and shall not transact on or use the chatbot. As a minor if you wish to use or transact on Shoppers stop chatbot, such use or transaction may be made by your legal guardian or parents on the Shoppers stop.

Information Sharing and Disclosures

On certain circumstances, we may share your personal information to legal entities, law enforcement agencies or government authority if needed as per law. Amendments
The privacy policy statement is liable to be periodically reviewed. Whenever we revise and modify the policy, the same will be updated online. We request you to visit our privacy policy statement frequently for any updates. Continued use of service will constitute your acknowledgement and acceptance of the terms of the updated policy guidelines. If you do not agree with any changes in the policy, whatsoever, please stop using the application with immediate effect.