Privacy Policy

1. Introduction

Welcome to SkateFlow ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online marketplace platform.

SkateFlow operates as a middle platform connecting buyers and sellers of used skates and skating gear. We facilitate transactions, handle pickup and delivery services, and process payments while earning a small commission per transaction.

By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, phone number, and password
• Profile Information: Profile picture, bio, location, and preferences
• Identity Verification: Government-issued ID, address proof for seller verification
• Contact Information: Billing and shipping addresses

2.2 Transaction Information

• Purchase Data: Items purchased, prices, payment methods, transaction history
• Listing Data: Products listed for sale, descriptions, images, pricing
• Communication Records: Messages between buyers and sellers
• Delivery Information: Pickup and delivery addresses, tracking data

2.3 Technical Information

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, clicks, search queries
• Location Data: General location based on IP address (with consent)
• Cookies and Tracking: Session cookies, analytics cookies, advertising cookies

2.4 Payment Information

• Payment Methods: Credit/debit card details, UPI information, wallet details
• Financial Data: Transaction amounts, payment status, refund information
• Bank Account Details: For seller payouts and verification

3. How We Use Your Information

3.1 Service Provision

• Process and fulfill your orders and transactions
• Facilitate communication between buyers and sellers
• Coordinate pickup and delivery services
• Process payments and handle refunds
• Provide customer support and resolve disputes

3.2 Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Optimize website performance and user experience
• Conduct research and analytics

3.3 Communication

• Send order confirmations and shipping updates
• Provide customer support and respond to inquiries
• Send marketing communications (with your consent)
• Notify you about important policy changes

3.4 Security and Compliance

• Verify user identities and prevent fraud
• Comply with legal obligations and regulations
• Protect against security threats and unauthorized access
• Enforce our Terms of Service

4. How We Share Your Information

4.1 With Other Users

• Buyers and Sellers: Contact information for transaction completion
• Public Profiles: Basic profile information visible to other users
• Product Listings: Seller information associated with listings

4.2 With Service Providers

• Payment Processor: Cashfree for payment processing
• Delivery Partners: Logistics companies for pickup and delivery
• Cloud Services: AWS, Google Cloud for data storage and processing
• Analytics Providers: Google Analytics for website analytics

4.3 With Third-Party Platforms

• Social Media: Meta (Facebook, Instagram) for advertising and analytics
• Communication: WhatsApp for customer support and notifications
• Marketing: Google Ads for targeted advertising

4.4 Legal Requirements

• When required by law or legal process
• To protect our rights and prevent fraud
• In case of business transfers or mergers
• With your explicit consent

5. Data Retention and Deletion

5.1 Retention Periods

• Account Information: Retained until account deletion
• Transaction Records: 7 years for tax and legal compliance
• Communication Data: 2 years for customer support purposes
• Analytics Data: 26 months (Google Analytics standard)

5.2 Data Deletion

• You can request account deletion at any time
• We will delete personal data within 30 days of request
• Some data may be retained for legal compliance
• Anonymized data may be retained for analytics

6. Your Rights and Choices

6.1 Access and Control

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Export your data in a machine-readable format

6.2 Communication Preferences

• Opt-out of marketing emails
• Manage notification preferences
• Control cookie settings
• Unsubscribe from promotional communications

6.3 How to Exercise Your Rights

• Contact us at privacy@skateflow.com
• Use account settings to manage preferences
• Submit a data subject request form
• Contact our Data Protection Officer

7. Security Measures

7.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security audits and penetration testing
• Secure payment processing with PCI DSS compliance

7.2 Administrative Safeguards

• Employee training on data protection
• Access controls and authentication
• Regular backup and disaster recovery procedures
• Incident response and breach notification procedures

7.3 Physical Safeguards

• Secure data centers with physical access controls
• Environmental controls and monitoring
• Secure disposal of hardware and media

8. Third-Party Integrations

8.1 Payment Processing

• Cashfree: Payment gateway for Indian transactions
• UPI: Unified Payments Interface integration

8.2 Social Media and Marketing

• Meta Platforms: Facebook and Instagram advertising
• Google Services: Analytics, Ads, and Maps integration
• WhatsApp Business: Customer communication

8.3 Analytics and Tracking

• Google Analytics: Website traffic and user behavior
• Hotjar: User experience and heatmap analysis
• Facebook Pixel: Conversion tracking and retargeting

9. Cookies and Tracking Technologies

9.1 Types of Cookies

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for targeted advertising
• Preference Cookies: Remember your settings and preferences

9.2 Cookie Management

• Use browser settings to control cookies
• Opt-out of non-essential cookies
• Clear cookies and browsing data
• Use our cookie preference center

9.3 Third-Party Cookies

• Google Analytics cookies
• Facebook and Instagram tracking pixels
• Payment processor cookies
• Advertising network cookies

10. Children's Privacy

SkateFlow is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For users between 13-18 years of age, we recommend parental guidance and supervision when using our platform.

11. International Data Transfers

Your information may be transferred to and processed in countries other than India, including the United States and European Union. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by competent data protection authorities
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

12. Policy Changes and Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website
• Update the "Last Updated" date at the top of this policy
• Notify you via email or through our platform
• Provide a summary of significant changes

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Legal Compliance

This Privacy Policy is designed to comply with applicable data protection laws, including:

• Indian IT Act, 2000: Information Technology Act and Rules
• Digital Personal Data Protection Act, 2023: India's new data protection law
• GDPR: General Data Protection Regulation (for EU users)
• CCPA: California Consumer Privacy Act (for California residents)

We are committed to maintaining the highest standards of data protection and privacy compliance.