Data Erasure & DPDP Rights

Last updated May 2026 · DPDP 2023 (India)

What data we hold about you

• If you placed an order: your WhatsApp number, optional name, optional notes to the kitchen, optional delivery address, and the list of items + totals from each of your orders at a Merchant.
• If you are a Merchant admin: your email, Firebase user id, name, and role.

How to have your data erased

There are two paths depending on who you are:

Customers

1. Ask the Merchant.Every Merchant has an "Erase customer record" button in their ShopQR admin panel. They can scrub your WhatsApp number, name, delivery address, and notes from their customer list and from all your past orders with one click. Aggregate stats (order count, total spent) are kept because they no longer identify you.
2. Or email us. Write to privacy@shopqr.org from any contact method and tell us which WhatsApp number to erase and, if you want, which Merchant's shop you ordered from. We will erase your data from all Merchants on the platform within seven working days and email you confirmation.

Merchant admins

Email privacy@shopqr.org from the email address on your ShopQR account. We will disable your admin access, remove your personal identifying fields, and retain only the audit log of actions you took under your role, as required for fraud prevention under DPDP 2023.

What happens after erasure

We write a small audit entry containing a SHA-256 hash of the original WhatsApp number (not the number itself) so that if you ever ask us again "did you delete my data?" we can verify without retaining the plaintext. The audit entry contains the timestamp and the operator who performed the erasure. This is required to demonstrate compliance under DPDP 2023.

Grievance officer

If you are not satisfied with our response, DPDP 2023 gives you the right to escalate to the Data Protection Board of India. Our grievance contact is:

Youhana Sheriff
Sheriax Solutions (OPC) Private Limited
Chennai, Tamil Nadu, India
privacy@shopqr.org