Privacy Policy

1. Who This Privacy Policy Applies To

This Privacy Policy applies to:

• Visitors to the Gimbll website.
• People who join the Gimbll waitlist.
• Sellers, merchants, business owners, and their authorized users who use Gimbll.
• Customers who interact with or purchase from an online store powered by Gimbll.
• Individuals who communicate with Gimbll through email, phone, social media, or other channels.
• Users of Gimbll applications, dashboards, websites, and related services.

For customers purchasing from a particular merchant using Gimbll, the merchant may also be responsible for determining how your personal information is used for its own business purposes. In those circumstances, you should also review that merchant's privacy policy.

2. Information We Collect

Depending on how you interact with Gimbll, we may collect different categories of information.

2.1 Information You Provide

We may collect information you voluntarily provide, including:

• Name.
• Email address.
• Phone or WhatsApp number.
• Business name.
• Business information.
• Billing and business address.
• Account login information.
• Store information.
• Product and catalogue information.
• Order-related information.
• Customer information submitted by sellers through the platform.
• Communications and support requests.
• Information submitted through our waitlist or contact forms.
• Any other information you choose to provide.

For example, when joining the Gimbll waitlist, we may collect your name, WhatsApp number, business email, business category, and information about what you sell.

2.2 Information Collected Automatically

When you access our website or services, we may automatically collect certain technical information, including:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Approximate location derived from technical information.
• Pages viewed.
• Links or buttons interacted with.
• Date and time of access.
• Referring website.
• Usage and diagnostic information.
• Information about how you interact with our services.

We may use cookies and similar technologies to provide functionality, remember preferences, understand usage, and improve our services.

2.3 Information From Sellers and Customers

If you use a Gimbll-powered store, the merchant operating that store may provide information relating to its customers, including information necessary to process orders, payments, deliveries, customer accounts, support requests, and other ecommerce activities.

3. How We Use Personal Information

We may use personal information for purposes including:

Providing and Operating Gimbll

• Creating and managing accounts.
• Providing the Gimbll platform.
• Hosting and operating online stores.
• Processing orders and related activities.
• Managing products and inventory.
• Providing store management functionality.
• Providing customer shopping experiences.
• Providing previews, dashboards, analytics, and related functionality.
• Providing customer and technical support.

Communications

We may use your information to:

• Respond to enquiries.
• Send service-related communications.
• Contact waitlist members regarding Gimbll availability.
• Send important account or security notifications.
• Provide information about changes to our services.

Where required by law, we will obtain appropriate consent before sending promotional communications.

Improving Gimbll

We may use information to:

• Understand how users interact with Gimbll.
• Improve our products and services.
• Develop new features.
• Detect technical problems.
• Monitor performance.
• Conduct analytics and research.
• Improve security and reliability.

Security and Fraud Prevention

We may use information to:

• Detect and prevent fraud.
• Protect accounts.
• Prevent abuse and unauthorized access.
• Investigate suspicious activity.
• Protect our systems and users.

Legal and Regulatory Compliance

We may process information when necessary to:

• Comply with applicable laws.
• Respond to lawful requests from authorities.
• Establish, exercise, or defend legal claims.
• Enforce our agreements and policies.

4. Legal Basis for Processing

Depending on the circumstances and applicable law, we may process personal information based on:

• Your consent.
• The need to provide services you have requested.
• Performance of a contract or steps taken before entering into a contract.
• Compliance with legal obligations.
• Legitimate business purposes where permitted by applicable law.
• Protection of our services, users, and business.

Where consent is required under applicable law, we will seek consent in an appropriate manner.

5. Sharing of Personal Information

We do not sell your personal information.

We may share information with third parties where reasonably necessary to provide, operate, secure, or improve Gimbll.

These parties may include:

Service Providers

We may use third-party providers for services such as:

• Cloud hosting.
• Database infrastructure.
• Analytics.
• Communications.
• Email and messaging.
• Payment processing.
• Logistics and shipping integrations.
• Customer support.
• Security and fraud prevention.
• Monitoring and error reporting.

Such providers may process information on our behalf and are expected to handle information in accordance with applicable contractual and legal requirements.

Sellers and Merchants

Where you interact with a Gimbll-powered store, information necessary to fulfil your transaction may be shared with the merchant operating that store.

Legal and Regulatory Authorities

We may disclose information where required by law, legal process, court order, governmental request, or where necessary to protect our rights, users, or the public.

Business Transfers

If Gimbll is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

6. Payments

Gimbll may integrate with third-party payment providers.

Payment information may be collected and processed directly by the relevant payment provider. Gimbll may receive transaction-related information necessary to confirm and manage payments, refunds, subscriptions, or orders.

We do not intend to store complete payment card numbers or payment authentication credentials unless specifically required for a service and handled in accordance with applicable security requirements.

Third-party payment providers may have their own privacy policies and terms.

7. Cookies and Similar Technologies

Gimbll may use cookies, local storage, pixels, tags, and similar technologies.

These technologies may be used to:

• Keep you signed in.
• Remember preferences.
• Maintain security.
• Understand website usage.
• Measure performance.
• Improve user experience.
• Analyse traffic and engagement.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website or services.

8. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, storage system, or electronic service can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us if you believe your account has been accessed without authorization.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our services.
• Maintain business and transaction records.
• Comply with legal and regulatory requirements.
• Resolve disputes.
• Enforce agreements.
• Prevent fraud and abuse.
• Protect our legitimate business interests.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal requirements.

10. Your Privacy Rights

Depending on applicable law and your relationship with Gimbll, you may have rights relating to your personal information, including the right to:

• Request information about personal data we process about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where legally permitted.
• Withdraw consent where processing is based on consent.
• Request information about how your personal information is used.
• Raise a complaint regarding our processing of personal information.
• Exercise other rights available under applicable privacy and data protection laws.

To exercise an applicable right, contact us using the details provided below.

We may need to verify your identity before fulfilling certain requests.

If you are a customer of a merchant using Gimbll, some requests may need to be directed to that merchant because the merchant may determine the purposes for which your information is processed.

11. Children's Privacy

Gimbll's services are intended for businesses and general audiences and are not directed specifically toward children.

We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe a child has provided personal information to us in violation of applicable law, please contact us so that we can review and take appropriate action.

12. Third-Party Websites and Services

Our website or services may contain links to third-party websites, applications, payment providers, logistics providers, social media platforms, or other services.

We are not responsible for the privacy practices of third parties.

You should review the privacy policies of those third parties before providing them with personal information.

13. International Data Transfers

Depending on the infrastructure and service providers used by Gimbll, personal information may be processed or stored in countries other than the country in which you reside.

Where applicable, we take reasonable steps to ensure that such processing and transfers are carried out in accordance with applicable laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services.
• Our data practices.
• Applicable laws.
• Technology.
• Business operations.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

15. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact us using the details below.

For privacy-related requests, please include sufficient information for us to understand and process your request.

16. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India, subject to any mandatory rights or protections available to you under applicable law.