At a glance
This summary helps you find the main points. Read the full sections below for details and exceptions.
| Topic | What it means for you |
|---|---|
| Information collected | Contact, delivery, order, payment-reference, support and relevant technical information. |
| Why it is needed | To fulfil orders, deliver products, verify payments, provide support, process refunds and prevent fraud. |
| Razorpay | Receives relevant checkout information to process payments, refunds and disputes under its own privacy policy. |
| Payment secrets | BOLO Shopping does not collect or store full card numbers, CVV, UPI PINs, OTPs or banking passwords. |
| Your choices | Request access, correction or deletion where applicable, withdraw consent and unsubscribe from optional marketing. |
1. Who we are and scope
This policy explains how BOLO Shopping handles personal information when you browse https://boloshopping.com, place an order, pay, request help or submit a return/refund claim. Legal operator: [INSERT VERIFIED LEGAL BUSINESS NAME]. Registered/principal business address: [INSERT COMPLETE ADDRESS].
This policy describes our processing. Payment providers, including Razorpay, also process information under their own policies for their services. We provide notices and obtain consent where required by applicable law; viewing this policy does not by itself constitute consent to optional marketing or unrelated processing.
2. Information we collect
Contact and account information: name, email address, telephone number, billing/delivery addresses and account details you provide. Order information: products, quantities, order history, fulfilment status and relevant preferences.
Payment records: order/payment identifiers, transaction amount and currency, status, timestamps, verification records and refund/dispute references. Where made available by the payment provider, records may include the payment-method type and limited masked identifiers. We do not collect or store full card numbers, CVV, UPI PINs, OTPs or banking passwords. These are entered directly into the payment provider's secure interface, as applicable.
Support and damage claims: your messages, order references, photographs or optional video evidence, shipping labels, inspection results, and return/refund correspondence. Avoid including unrelated people or unnecessary sensitive information in evidence. For a Cash on Delivery refund, if available, we may request the minimum beneficiary/bank or UPI details needed to make the agreed refund through a secure channel.
Technical information: IP address, browser/device information, security and access logs, pages used, and cookies or similar identifiers used by our site and integrated services. The actual optional analytics or advertising tools, if any, must be identified in the website's cookie notice before they are enabled.
3. Why we use information
We use necessary information to operate accounts and carts, accept and verify orders/payments, deliver goods, send transactional updates, answer support requests, inspect damaged-delivery claims, arrange returns and replacements, process refunds, reconcile accounts, prevent fraud and investigate disputes. We also use relevant records for tax/accounting, legal compliance and protection or enforcement of legal rights.
We use optional marketing information with consent where required and honour withdrawal or unsubscribe requests. Marketing choices do not prevent necessary order, security or refund messages. We use analytics or personalisation only as disclosed and subject to applicable consent requirements. If we propose a new purpose requiring additional notice or consent, we will provide it before that processing.
4. Razorpay payment processing
When you choose Razorpay at checkout, we share the information reasonably needed for that payment, such as your name, email, phone number, order reference, transaction amount/currency and relevant billing/order details. Razorpay and the participating bank, card network, UPI service or other payment partner process payment credentials, authentication and transaction/device information as needed to authorise and complete the transaction, prevent fraud, meet regulatory obligations and handle refunds or disputes.
We receive payment confirmation/failure, transaction references and relevant refund or dispute information to administer your order. We may share supporting order, delivery and complaint evidence with Razorpay or relevant payment partners to reconcile a payment, process an approved refund or respond to a payment dispute. We limit that disclosure to what is relevant.
Razorpay's payment aggregation services in India are operated by Razorpay Payments Private Limited. Its processing, retention and applicable data-sharing practices are explained at https://razorpay.com/privacy-policy/. Its payment service terms are available at https://razorpay.com/terms/. Razorpay may have its own legal and regulatory duties; we do not represent it as acting only on our instructions for every activity. Where consent is required for sharing, it will be obtained through the relevant checkout flow. We do not use payment credentials for marketing.
5. Other recipients
We do not sell or rent your personal information. Relevant information may be shared with couriers and fulfilment partners for delivery/collection; hosting, technology, communication and support providers for operating the service; professional advisers and authorities where legally required or reasonably necessary for legal claims; and a successor in a business transfer subject to applicable law and appropriate safeguards.
We restrict service-provider access to the purposes required and apply appropriate confidentiality and security arrangements. Banks, payment providers and authorities may also act under their own legal obligations and policies. If a seller or additional fulfilment partner needs your information for an order, the relevant recipient and purpose should be disclosed in the order flow.
6. Cookies and choices
Essential cookies support sessions, carts, checkout and security. Optional analytics, advertising or personalisation technologies, where used, must be described in the cookie notice and enabled in accordance with applicable consent requirements. Payment-provider components may use cookies or similar technologies for payment functionality and fraud prevention under their own notices. Browser settings allow you to block or delete cookies, although essential functions may then fail. Withdrawing optional consent must be as accessible as giving it where required by law.
7. Retention, security and processing locations
We retain personal information only for as long as reasonably needed for the stated purposes and applicable accounting/tax, legal, fraud-prevention and dispute obligations. Damage photographs and other evidence are kept only as needed for claim handling and relevant legal/dispute retention requirements. We delete or anonymise information when it is no longer required, subject to lawful retention and routine backup cycles. Payment providers determine their own applicable retention periods.
We use reasonable technical and organisational safeguards appropriate to the information, including access controls and secure transmission. No system is completely secure. Suspected unauthorised access should be reported to our contact below; we will respond and make notifications where required by law. This does not waive our legal responsibility for security.
Our providers may process information in India or other locations, subject to applicable data-transfer restrictions and required safeguards. Payment-system data is handled subject to applicable Indian regulatory requirements. We do not promise that every category of information is stored only in India unless this has been verified for the service concerned.
8. Your requests and choices
Subject to applicable law, you may request access to or information about your personal data, correction, deletion, withdrawal of consent, and grievance redressal, and exercise any other rights legally available to you. Contact support with enough information to identify the relevant order/account. We may proportionately verify identity; do not send payment credentials or unnecessary identity documents.
Withdrawal may prevent us from completing a service that needs the information, but does not affect lawful earlier processing or legally required retention. You can unsubscribe from promotional messages. For data held independently by Razorpay, you may also use its privacy/grievance channels; we will assist with requests concerning information we control. We respond within applicable legal timelines and explain any lawful refusal or retention requirement.
9. Children and external links
Orders must be placed by adults aged 18 or over. We do not knowingly seek personal data from children for independent accounts or purchases. If you believe a child has provided information, contact us so we can investigate, remove it where appropriate and follow applicable legal requirements. External websites and services have their own privacy practices; review their notices before providing information.
10. Returns and policy changes
Our Terms & Conditions contain the no-change-of-mind return policy and damaged-delivery process, including the 48-hour visible-damage reporting window and preservation of statutory rights. This Privacy Policy explains the handling of information used for those claims; it does not create additional return restrictions.
We publish changes with their effective date. We provide appropriate notice of material changes and obtain fresh consent where legally required. Changes do not retrospectively authorise unrelated uses of information.
11. Contact and grievances
Customer support/privacy requests: support@bolo.com (retained from the previous policy; verify before publication). Website: https://boloshopping.com. Use the website's Contact Us link for current support options.
Grievance officer: [INSERT NAME AND DESIGNATION]. Grievance email/telephone: [INSERT VERIFIED DETAILS]. Postal address: [INSERT COMPLETE ADDRESS]. Consumer complaints are acknowledged within 48 hours and redressed within one month; privacy requests are handled within applicable legal timelines.