Privacy Policy
Version 2.3 · Effective 2026-09-09
Suffle Online
Operated by Naucera Travel Private Limited
1. INTRODUCTION
Suffle Online (“Suffle”, “we”, “us” or “our”) is an AI-powered multi-vendor marketplace and digital services platform operated by Naucera Travel Private Limited.
This Privacy Policy explains how Suffle collects, uses, stores, processes, shares, protects and retains personal data when you use our website, marketplace, applications, seller services, AI features, ordering systems, payment services, communications and other supported services.
This Policy should be read together with the other Suffle policies applicable to the services you use.
Please read this Policy carefully. By using Suffle, you acknowledge that you have read and understood this Policy, subject to applicable consent and legal requirements.
2. DATA FIDUCIARY / COMPANY INFORMATION
Legal Entity: Naucera Travel Private Limited
Brand: Suffle Online
Website: www.suffleonline.com
Address: 707, N. T. Road, Nalbari-781435, Assam, India
PAN: AAGCN4886J
GSTIN: 18AAGCN4886J1ZT
General Support Email: info@flyshoppy.com
Grievance Officer: Mr. Roopal Jain, Managing Director
Grievance Officer Mobile: 9707669981
Grievance Officer Email: info@flyshoppy.com
3. SCOPE
This Policy applies to personal data processed through Suffle's website, marketplace, web applications, seller systems, customer accounts, order systems, AI features, communication systems and other services covered by Suffle.
Different features may involve different categories of personal data and different processing purposes.
Where a feature has a separate privacy notice or policy, that notice should be read together with this Policy.
4. PERSONAL DATA WE MAY COLLECT
Depending on the services you use, Suffle may collect or receive:
Account and identity information
Name, mobile number, email address, account credentials, profile information, date of birth or other information where required for a particular service.
Address and location information
Billing address, delivery address, pickup location, approximate or precise location where a feature requires it and location/serviceability information.
Order and marketplace information
Products viewed, searched, wishlisted or purchased; cart information; orders; seller interactions; returns; replacements; refunds; reviews; ratings; shipping and delivery information.
Seller and business information
Where you register as a Seller, we may process business details, identity information, business address, PAN, GST information, category information, selling areas, storefront information, compliance documents and settlement-related information.
Payment-related information
Payment status, transaction identifiers, order amount, refund information and related records. Payment credentials may be processed directly by payment providers such as Razorpay according to their systems and terms.
Customer customization information
Photographs, designs, text, logos, instructions and other files submitted for customized or personalized products.
Communications
Messages, support requests, seller/customer communications and information you provide while interacting with Suffle.
AI and interaction information
Prompts, searches, product research requests, preferences, interactions and other information necessary to provide Suffle AI and related features.
Technical and usage information
IP address, browser/device information, operating system, approximate location, pages or screens visited, timestamps, referring information, logs, identifiers and security-related events.
Connected-service information
Where you authorize a supported connection, information obtained from that service may be processed according to the applicable connected-service permissions and policy.
Documents
Uploaded documents, invoices, certificates, identity/business documents and other files where required for a service or transaction.
5. PURPOSES OF PROCESSING
Suffle may process personal data for purposes including:
Creating and managing accounts; providing marketplace and digital services; processing orders and payments; enabling shipping, delivery and pickup; managing returns, replacements and refunds; providing seller services; verifying sellers and products; maintaining seller storefronts; providing customer support; enabling reviews and ratings; preventing fraud and abuse; maintaining security; improving platform performance; providing Suffle AI and recommendations; sending transactional communications; complying with legal obligations; resolving disputes and grievances; maintaining records; and other purposes disclosed at or before collection.
Suffle will seek to process personal data for lawful purposes and in accordance with applicable requirements.
6. NOTICE, CONSENT AND LAWFUL PROCESSING
Where consent is required, Suffle will seek consent through an appropriate notice or consent mechanism before processing the relevant personal data.
The Digital Personal Data Protection Act, 2023 provides for processing for a lawful purpose, including consent or specified legitimate uses, and requires notice concerning the personal data and purpose of processing. citeturn0search19
The notified Digital Personal Data Protection Rules, 2025 require applicable notices to be clear, standalone and understandable, including an itemized description of personal data and purposes, and information on withdrawal, rights and complaints. citeturn0search16turn0search17
Suffle will implement applicable requirements according to their respective commencement dates and the law applicable to the relevant processing activity.
7. HOW WE USE PERSONAL DATA
Personal data may be used to:
Provide and personalize Suffle services; authenticate users; maintain accounts; process purchases; coordinate seller fulfilment; communicate order status; process payments and refunds; provide AI-assisted discovery; manage seller verification; maintain records; detect suspicious activity; secure the platform; respond to support requests; administer promotions and rewards; analyze service performance; and meet legal or regulatory obligations.
Suffle will not use personal data for an unrelated purpose where such use is not permitted by applicable law or the applicable notice/consent.
8. MARKETPLACE AND SELLER DATA
When you purchase from a Seller, information necessary to fulfil the transaction may be made available to that Seller, such as relevant customer name, contact information, delivery/pickup information, order details and customization information.
Sellers must use customer information only for permitted purposes, including fulfilling orders, providing applicable support and meeting legal obligations.
Sellers must not misuse customer information for unauthorized marketing, resale, profiling or other prohibited purposes.
9. PAYMENT DATA
Marketplace payments are processed through Suffle's designated payment infrastructure, currently including Razorpay.
Suffle may receive payment-related records such as transaction IDs, payment status, amount, refund status and reconciliation information.
Sensitive payment credentials such as UPI PINs, CVVs, ATM PINs and banking passwords should not be provided to Suffle through ordinary platform interactions.
P
10. COOKIES AND SIMILAR TECHNOLOGIES
Suffle may use cookies, local storage, pixels, device identifiers and similar technologies for purposes such as authentication, security, preferences, analytics, performance, personalization and service functionality.
Detailed information is provided in the Cookie Policy.
11. AI, AUTOMATED PROCESSING AND PERSONAL DATA
Suffle AI may process information necessary to respond to user requests, provide product discovery, recommendations, product research, order assistance and other supported functions.
Automated systems may also be used for fraud detection, security, product checks, seller verification assistance, recommendations and operational workflows.
AI-generated information may contain errors and should not be treated as a guaranteed statement of fact.
W
12. GMAIL, EMAIL AND CONNECTED ACCOUNTS
If you voluntarily connect a supported email or external service, Suffle may process information retrieved through the authorization you provide.
Examples may include order confirmations, invoices, travel information, subscriptions, bills, delivery information and other relevant records where the connected service and permissions allow such processing.
Suffle will use connected-service data only for the purposes and permissions applicable to the feature.
D
13. COMMUNICATIONS
Suffle may send transactional and service communications relating to accounts, security, orders, payments, shipping, delivery, returns, refunds, seller activity, support and policy changes.
Marketing communications will be handled according to applicable consent, preference and opt-out requirements.
E
14. SHARING OF PERSONAL DATA
Suffle may share personal data where necessary and permitted for providing services, including with:
Sellers for order fulfilment and seller services; payment providers; courier/shipping and tracking providers; hosting and infrastructure providers; authentication providers; communication providers; analytics and security providers; AI/technology service providers; professional advisers; legal/regulatory authorities where required; and other service providers acting on Suffle's behalf.
Suffle does not sell personal data as a general commercial product.
T
15. SELLER VERIFICATION AND COMPLIANCE DATA
Seller applicants may be required to submit business, identity and compliance information.
Such information may include PAN, GST details, business registration documents, address proof, category-specific documents and other information necessary for seller verification.
Compliance documents may be processed for verification, risk assessment, product/category eligibility, legal compliance and record-keeping.
P
16. CUSTOMER-UPLOADED FILES
Files uploaded for product customization, support, documents or other services may contain personal or third-party information.
You should upload only information that is necessary and that you are legally permitted to provide.
Customization files may be shared with the applicable Seller where necessary to produce or fulfil the requested product.
S
17. DATA RETENTION
Suffle retains personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain business and transaction records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements or protect legitimate interests, subject to applicable law.
Different categories of information may have different retention periods.
D
18. DATA SECURITY
Suffle uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration or disclosure.
Security measures may include access controls, authentication, encryption where appropriate, logging, monitoring, backups, secure infrastructure and other safeguards appropriate to the nature of the information and processing.
No internet-based system can be guaranteed to be completely secure.
D
19. DATA BREACHES AND SECURITY INCIDENTS
Where Suffle becomes aware of a personal-data security incident requiring action under applicable law, Suffle will follow applicable incident response, notification and remedial requirements.
Users may be contacted where appropriate or required by law.
20. YOUR RIGHTS
Subject to applicable law and the applicable commencement of legal requirements, users may have rights relating to their personal data, including rights to access information about processing, correction/update, withdrawal of consent where processing is based on consent, grievance redressal and other rights provided by applicable law.
The manner and scope of rights may depend on the legal framework applicable to the processing activity.
Requests may be made through the contact methods provided by Suffle, subject to appropriate verification.
21. WITHDRAWAL OF CONSENT
Where processing is based on consent, you may withdraw consent through the method provided by Suffle, where applicable.
Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal.
Withdrawal may affect your ability to use a feature where the relevant data is necessary for that feature.
22. DATA CORRECTION AND ACCOUNT INFORMATION
You should keep account and contact information accurate and current.
Where supported, you may update information through your account settings or contact Suffle for assistance.
S
23. DATA DELETION AND ACCOUNT CLOSURE
You may request account deletion or exercise applicable deletion rights through the mechanisms made available by Suffle.
Deletion may be subject to legal, financial, transaction, dispute, fraud-prevention, security or other lawful retention requirements.
Deleting an account does not necessarily delete information that Suffle is legally required or permitted to retain.
D
24. CHILDREN'S DATA
Suffle's services are not intended to be used by persons who are not legally permitted to use the relevant service under applicable law.
Where a service involves children's personal data, Suffle will apply safeguards and requirements applicable to such processing.
I
25. INTERNATIONAL OR CROSS-BORDER PROCESSING
Suffle may use service providers or infrastructure located in jurisdictions outside India where permitted and necessary for providing its services.
Where personal data is transferred or processed outside India, Suffle will apply the safeguards and legal requirements applicable to such transfer or processing.
26. THIRD-PARTY LINKS AND SERVICES
Suffle may contain links to or integrations with third-party websites, applications, payment services, courier systems or other services.
Third-party services operate under their own terms and privacy policies.
S
27. DATA USED FOR SECURITY, FRAUD AND ABUSE PREVENTION
Suffle may process technical, account, transaction and behavioural information to identify suspicious activity, prevent fraud, protect users, secure payments, investigate misuse and protect the platform.
Such processing may include automated systems and risk signals where permitted by law.
28. DATA USED FOR ANALYTICS AND SERVICE IMPROVEMENT
Suffle may analyze aggregated, de-identified or otherwise lawfully processed information to understand service performance, improve marketplace functionality, improve search and discovery, improve AI systems, detect technical issues and develop new features.
W
29. MARKETING AND PERSONALIZATION
Where permitted, Suffle may use information about interactions, preferences and marketplace activity to personalize product discovery, recommendations and promotional communications.
You may have options to control certain marketing communications or preferences.
P
30. REVIEWS, PUBLIC CONTENT AND SELLER STOREFRONTS
Information that you intentionally submit for public display, such as a review, rating or other public profile information, may be visible to other users according to the relevant feature.
Do not publish personal information that you do not want to make publicly available.
P
31. GRIEVANCE REDRESSAL AND PRIVACY COMPLAINTS
Privacy-related concerns may be submitted to Suffle using the contact details below.
Grievance Officer: Mr. Roopal Jain
Designation: Managing Director
Mobile: 9707669981
Email: info@flyshoppy.com
Please provide sufficient information to enable Suffle to understand and investigate the concern.
32. CHANGES TO THIS PRIVACY POLICY
Suffle may update this Privacy Policy from time to time to reflect changes in services, technology, law or processing practices.
The latest version will be published on the Suffle website with its effective date and version information.
Where required, material changes will be communicated or presented for renewed acknowledgement/consent.
33. RELATIONSHIP WITH OTHER SUFFLE POLICIES
This Privacy Policy should be read together with applicable Suffle policies, including Data Security & Protection, Connected Apps & Accounts, Gmail/Email Data, Cookie Policy, AI Tracking / Automated Processing Notice, Document Policy, Email Communication Policy, WhatsApp / Business Messaging Policy and Account Deletion & Data Retention.
W
34. CONTACT INFORMATION
Suffle Online
Operated by: Naucera Travel Private Limited
Address: 707, N. T. Road, Nalbari-781435, Assam, India
Website: www.suffleonline.com
General Support Email: info@flyshoppy.com
Grievance Officer: Mr. Roopal Jain, Managing Director
Mobile: 9707669981
Email: info@flyshoppy.com
35. ACKNOWLEDGEMENT
By using Suffle, you acknowledge that you have read this Privacy Policy and understand how Suffle may process personal data in connection with the services you use.
Where consent is required, Suffle will seek it through the applicable consent mechanism rather than treating use of the website alone as consent to every form of processing.
LEGAL AND IMPLEMENTATION NOTE
This Privacy Policy is designed for Suffle's current marketplace and digital-service architecture and should be reviewed by qualified Indian privacy/e-commerce counsel before publication and before activating each data-processing feature.
India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 establish requirements concerning lawful processing, notices, consent, rights, security and related obligations. The Rules have a phased commencement structure, so Suffle should align implementation and policy wording with the provisions that are legally in force at the relevant time.
