📅 Effective Date: January 1, 2025 · Version 1.0
Plain English summary: We collect your name, email, and phone number when you contact us. We use it only to respond to your enquiry and provide our services. We don't sell your data. Ever.
1. Who We Are
S2O – Start Selling Online ("S2O", "we", "us", or "our") is a digital agency providing ecommerce website development, Shopify store setup, and AI automation services. We are based in India and operate at s2o.in.
Contact: For any privacy-related queries, reach us at info@s2o.in or call +91 98289 14230.
2. Information We Collect
2.1 Information You Provide Directly
- Contact form submissions: Name, email address, phone number, service interest, budget range, and message content
- Email correspondence: Any information you share when emailing us
- WhatsApp communication: Messages sent via our WhatsApp business number
- Newsletter sign-ups: Email address only
- Free tool usage: Inputs you provide to our AI tools (store names, product details) — these are processed to generate results and are not stored permanently
2.2 Information Collected Automatically
- Usage data: Pages visited, time spent, browser type, device type, referring URL
- IP address: Collected by our hosting provider and analytics tools
- Cookies: See Section 6 for details
2.3 Information We Do NOT Collect
- Payment card numbers or banking details (payments processed by Razorpay — see their privacy policy)
- Government ID or Aadhaar numbers
- Sensitive personal data as defined under Indian law
3. How We Use Your Information
We use your personal information for the following purposes:
- Responding to enquiries — to reply to your contact form, email, or WhatsApp messages
- Providing services — to deliver the website, Shopify store, or automation services you've engaged us for
- Sending invoices and project communication — project updates, milestone notifications, delivery of completed work
- Marketing communication — if you've opted in, we may send newsletters, blog updates, or promotional offers. You can unsubscribe at any time.
- Improving our website and tools — aggregated, anonymised analytics to understand how visitors use our site
- Legal compliance — to comply with applicable Indian laws and regulations
We will never sell, rent, or trade your personal information to third parties for their marketing purposes.
4. Legal Basis for Processing
Under India's Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA), we process your data on the following bases:
- Consent — when you submit a contact form or sign up for our newsletter
- Contract — when we need to process your data to deliver services you've hired us for
- Legitimate interests — for site analytics and improving our services
- Legal obligation — where required by Indian law
5. Who We Share Your Data With
We share your data only with the following trusted service providers, and only to the extent necessary:
- Formspree — processes contact form submissions (formspree.io)
- Tawk.to — live chat provider (tawk.to)
- Google Analytics — website analytics (anonymised)
- Razorpay — payment processing (razorpay.com)
- Anthropic — AI tool responses powered by Claude API (inputs are not stored by us)
- ResellerClub / hosting provider — website hosting
All third-party providers are required to handle your data in accordance with applicable privacy laws. We do not allow them to use your data for their own marketing purposes.
6. Cookies
We use the following types of cookies on our website:
- Essential cookies: Required for the website to function (theme preference, session state)
- Analytics cookies: Help us understand how visitors use the site (Google Analytics — anonymised IP)
- Chat cookies: Set by Tawk.to to enable live chat functionality
You can control cookies through your browser settings or via our cookie consent banner. Disabling non-essential cookies will not affect your ability to use the site.
7. Data Retention
- Contact form enquiries: Retained for 2 years or until the enquiry is resolved, whichever is longer
- Client project data: Retained for 5 years after project completion for legal and accounting purposes
- Newsletter subscribers: Until you unsubscribe
- Analytics data: 26 months (Google Analytics default)
- AI tool inputs: Not retained by S2O beyond the immediate session
8. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data (subject to legal retention obligations)
- Withdraw consent — at any time, for processing based on consent
- Grievance redressal — raise a complaint about how we handle your data
To exercise any of these rights, contact us at info@s2o.in. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- SSL/TLS encryption on all data in transit (HTTPS enforced)
- Access controls limiting who can view client data
- Regular review of third-party service provider security practices
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@s2o.in.
11. Links to Third-Party Websites
Our website may contain links to external websites (blog references, tool recommendations, etc.). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or emailing you if you are a client or newsletter subscriber. The "Last Updated" date at the top of this page reflects the most recent revision.
13. Contact Us
For any privacy-related questions, requests, or complaints:
We aim to respond to all privacy-related requests within 30 days.