1. Who this policy is from, and what it covers
This Privacy Policy is issued by Foren Ecommerce (“we”, “us”, “our”), which operates the Foren Shop storefront at www.shop.foren.in. It covers personal information we collect through this website, through our customer support channels, and in the course of fulfilling orders placed with us.
It is published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is written to align with the Digital Personal Data Protection Act, 2023 as and when its provisions come into force. By using this website you agree to the handling of your information as described here.
This policy does not cover websites or services operated by anyone else. If you follow a link from here to a third-party site — a courier's tracking page, a brand's website, a payment processor's page — that site's own privacy policy governs what it does with your information.
2. What information we collect
We collect information in three ways: what you give us, what is generated when you use the site, and what we receive from the partners who help us complete an order.
- Information you give us
- Your name, mobile number, email address, delivery and billing addresses (including PIN code), the contents of your basket and wishlist, the details of your orders, anything you write to our support team, and any reviews, ratings or photographs you choose to post. Where you upload a profile picture, we store that too.
- Information created when you use the site
- Your IP address, browser and device type, operating system, the pages you view and the products you look at, search terms you enter, referring pages, and dates and times of access. This is the ordinary server and analytics logging that lets us run and improve the site.
- Information from our partners
- Confirmation from our payment processor that a payment succeeded or failed, along with a transaction reference and the last four digits and type of the instrument used; and delivery status updates from our courier partners.
This website is meant for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, write to us and we will delete it.
3. Why we collect it
We use your personal information only for purposes connected with running this shop:
- To create and maintain your account, and to sign you in securely using a one-time password.
- To process your orders — confirming them, arranging payment, raising an invoice, packing and dispatching goods, and delivering them to your address.
- To keep you informed about an order, by SMS, email, WhatsApp or a call: confirmation, dispatch, delivery attempts, cancellations and refunds.
- To handle cancellations, returns, replacements, refunds and warranty claims.
- To answer your questions and resolve complaints, including through our Grievance Officer.
- To detect, investigate and prevent fraud, payment misuse, abuse of promotions and other unlawful activity.
- To understand which parts of the site are used and how, so we can improve the catalogue, the search and the checkout.
- To send you offers and product updates, where you have chosen to receive them.
- To meet our obligations under Indian tax, accounting, consumer-protection and other applicable law.
We do not use your personal information for any purpose that is unrelated to these, and we do not sell it.
4. Consent and your choices
We collect and use your personal information with your consent, which you give by creating an account and placing orders, and — where the law allows it — for purposes necessary to perform the contract between us or to comply with a legal obligation.
You can change your mind:
- Marketing messages can be stopped at any time by using the unsubscribe link in an email, replying STOP to an SMS where offered, or writing to us. Messages about an order you have placed are transactional and will continue for as long as the order is live.
- Consent to non-essential processing can be withdrawn by writing to us. Where withdrawal makes it impossible for us to provide a service — for example, delivering an order without an address — we will tell you so.
- Cookies can be managed in your browser settings, as described below.
6. Where it is stored, and for how long
Your personal information is stored on servers operated by us or by our hosting providers. Some of our service providers may process information outside India; where they do, we require contractual protections at least as strong as those this policy describes.
We keep information only as long as there is a reason to:
- Account details are kept while your account is open, and for a reasonable period afterwards so that disputes and refunds can still be settled.
- Order and invoice records are kept for as long as tax, GST and accounting law requires them to be kept — generally at least eight years from the end of the relevant financial year.
- Support correspondence is kept for as long as is useful to resolve repeat issues, and no longer than necessary.
- Access logs are kept for a limited period for security and diagnostics.
When information is no longer needed for any of these purposes, it is deleted or irreversibly anonymised.
7. How we protect it
We follow reasonable security practices and procedures appropriate to the information we hold:
- Traffic between your browser and this website is encrypted in transit using HTTPS.
- Sign-in uses a one-time password sent to your registered mobile number, so a password cannot be reused or guessed.
- Access to customer data inside our organisation is limited to staff who need it for their work, and is logged.
- Payment credentials are handled by our payment processor on its own infrastructure and never touch ours.
- Systems are patched and reviewed, and backups are taken so that data can be restored after a failure.
9. Your rights over your information
Subject to applicable law, you may ask us to:
- Confirm what personal information about you we hold, and give you a copy of it.
- Correct information that is inaccurate, incomplete or out of date — much of which you can edit yourself in your profile.
- Delete information we no longer need to keep, where no legal obligation requires us to retain it.
- Stop sending you marketing messages.
- Withdraw a consent you previously gave.
- Nominate someone to exercise these rights on your behalf if you are unable to.
Write to support@forenshop.in from the email address or mobile number registered to your account. We may ask you to confirm your identity before acting, so that no one else can make a request in your name. We aim to respond within 30 days.
Deleting your account does not delete records we are legally required to keep, such as invoices and tax records for completed orders.
10. Changes to this policy
We may update this policy as our services, our partners or the law change. The current version is always the one published on this page, and the “last updated” date above tells you when it last changed. Where a change materially affects how we handle your information, we will bring it to your attention on the website or by writing to you. Continuing to use the site after a change takes effect means you accept the updated policy.
11. How to reach us about privacy
- Entity
- Foren Ecommerce
- support@forenshop.in
- Phone
- +91 98765 43210
- Address
- Unit 402, Orchid Business Park, Plot 14, Sector 7, Kharghar, Navi Mumbai, Maharashtra 410210, India
- Grievance Officer
- Ananya Sharma — grievance@forenshop.in, +91 98765 43211
Complaints about how we handle personal information are acknowledged within 48 hours and addressed within 30 days. See our Contact Us page for all other support routes.