Scope and Data Controller

This policy applies to all customer-facing digital channels operated by Shinifashion. Shinifashion acts as the data controller for account, order, and support information processed through this platform.

Categories of Data Collected

• Identity and contact data: name, phone number, email, shipping and billing address.
• Authentication data: login session data, token identifiers, and security audit logs.
• Transaction data: order references, payment status, refund records, and invoice metadata.
• Technical data: IP address, browser details, device profile, and diagnostic telemetry.
• Support data: communication records, complaint details, and resolution notes.

Purpose and Lawful Basis

• Contract execution: order confirmation, fulfillment, payment reconciliation, and support.
• Legitimate interests: fraud prevention, platform hardening, quality improvement, and analytics.
• Legal obligations: statutory accounting, taxation, audit, and dispute management.
• Consent-based processing for optional marketing communication preferences.

Data Sharing and Security Controls

• Data may be shared with logistics, payment, hosting, and communication vendors on a need-to-know basis.
• Role-based access, authorization checks, and security logging are enforced across systems.
• Payment credentials are handled by payment gateway partners; full card data is not stored in application storage.

Data Retention and User Rights

Data is retained only for operational, legal, and audit purposes for the minimum period required by applicable law. Users may request access, correction, or deletion subject to legal and compliance constraints.