Last Updated: 27 August 2026
Shibko respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains what information we may collect when you use the Shibko website, mobile application and related services, why we use it, and the choices available to you.
Information We May Collect
Depending on how you use Shibko, we may collect:
Account Information
- name;
- mobile number;
- email address;
- account identifiers.
Delivery Information
- recipient name;
- delivery address;
- contact number;
- landmark;
- delivery instructions.
Order Information
- products purchased;
- personalisation options;
- order history;
- payment status;
- delivery information.
Personalisation Information
For personalised products, you may voluntarily provide:
- photographs;
- names;
- dates;
- messages;
- text;
- design instructions; and
- other information necessary to create the requested product.
Device & Technical Information
- device type;
- app version;
- IP address;
- device identifiers;
- diagnostic information;
- website/app usage information.
Location Information
Where permission is provided, Shibko may use location information to determine serviceability, delivery availability and delivery estimates.
How We Use Information
Information may be used to:
- create and manage your account;
- authenticate users;
- process orders;
- create personalised products;
- deliver orders;
- process payments and refunds;
- provide customer support;
- communicate order updates;
- prevent fraud and misuse;
- improve the website/app;
- maintain security;
- comply with legal obligations.
Personalised Photos & Files
Customer-uploaded photographs and other personalisation files are used primarily for producing and fulfilling the customer's personalised order.
Shibko should not use customer-uploaded personal photographs for public advertising or marketing without appropriate permission.
Uploaded personalisation files may be deleted or securely removed after the order has been completed and after any reasonable support/complaint period, unless retention is necessary for legal, fraud-prevention or accounting purposes.
Payments
Payments may be processed through third-party payment providers such as payment gateways, banks, card networks or UPI providers.
Shibko does not need to store full card numbers, CVV or UPI PIN information.
Shibko will never request your OTP, UPI PIN or card CVV through support calls, WhatsApp or email.
Service Providers
Information may be shared only where reasonably necessary with service providers such as:
- payment processors;
- SMS/OTP providers;
- cloud/hosting providers;
- delivery personnel or delivery service providers;
- analytics and security providers;
- customer communication providers.
These parties should receive only information reasonably required to perform their function.
Marketing Communications
Where permitted, Shibko may send offers, product updates or promotional communications.
Users may opt out of promotional communications through the available unsubscribe or notification controls.
Transactional communications relating to orders, payments, security or delivery may continue where necessary to provide the service.
Data Security
Shibko uses reasonable technical, administrative and organisational safeguards designed to protect user information.
However, no online system can guarantee absolute security.
Data Retention
Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, including fulfilment, customer service, fraud prevention, accounting and applicable legal requirements.
Your Choices and Rights
Subject to applicable law, users may request:
- information regarding their personal data;
- correction of inaccurate information;
- deletion of eligible personal information;
- withdrawal of consent where processing is based on consent; and
- grievance redressal.
Requests may be sent to:
The DPDP Act requires consent to be specific, informed and unambiguous, and the 2025 Rules now provide the implementation framework with staged commencement.
Children
If the service is used by a child where parental or guardian consent is required under applicable law, the required consent must be obtained before processing the child's personal data.
Policy Changes
We may update this Privacy Policy periodically. The latest version will be displayed on the Shibko platform with its updated effective date.