Privacy policy

Scenic B2B, the online storefront operated by Shivaay Mobile Accessories Hub, uses the information needed to quote, verify, fulfil and support wholesale orders.

Information we handle

We receive business and contact details, delivery address, optional email and GSTIN, cart and order records, support messages and device identifiers. Scenic stock and offer notifications require your separate opt-in. On Android, Firebase Messaging can register an installation identifier automatically before that choice.

Some older Android releases still available through Google Play use OneSignal for notification delivery and usage analytics. When the app starts, OneSignal can register notification identifiers and process device and app information, IP addresses and IP-derived country, app sessions and notification interactions. Declining notification permission does not stop this registration and usage processing. OneSignal's privacy policy explains its processing.

Razorpay handles payment credentials within its payment SDK, including payment-screen interactions and detection of installed UPI apps. When you open payment, its SDK also processes device identifiers, crash and diagnostic reports, and performance information. We supply your name, phone and any provided email for payment prefill and receive provider references and verification results. Scenic does not store card or UPI credentials in its database. Razorpay's privacy policy explains its processing.

Accounts and sign-in

Mobile-number sign-in is required to view the wholesale catalogue and place orders. We store your verified number, account identifier, sign-in sessions and order links in the Scenic database hosted on Hostinger. MSG91 receives your mobile number and a one-time sign-in code to deliver the requested SMS. Codes expire after five minutes; Scenic stores a keyed hash rather than the code itself. Sign-in permission is not permission to send marketing messages. Sessions expire after 30 days unless signed out or revoked earlier. Native session tokens use the device’s protected storage; website sessions use HttpOnly cookies.

Account and cart activity

We record verified login times, recent authenticated activity, saved carts and cart changes to restore your basket across devices and help authorized store administrators support your account and orders. Administrators can see these records and identify abandoned baskets; viewing an alert does not send you a message. We do not invent activity for anonymous visitors.

Why we use it

We use this information to price and reserve stock, prevent abuse, verify payments, fulfil orders, calculate rewards, send opted-in stock campaigns and support cancellations or refunds. Payment, hosting, SMS, notification and delivery providers receive the fields needed for their services. Payment and notification providers also process SDK information under their own policies. Order and shipment emails are transactional notifications, separate from promotional cart reminders.

Email cart-reminder choice

Automatic cart-reminder emails are off by default and require your separate email consent in account settings. You can withdraw that choice there. Changing your email clears the old consent; signing in or ordering does not opt you in. Reminders also depend on the store enabling its scheduled service, so consent alone does not promise a message.

Storage and choices

Account and saved-cart information is kept while your account exists. When you delete it, we immediately remove your profile, saved addresses, sessions, sign-in challenges, account links, cart alerts and reminder records, and carts that have not been converted or used by an order, including their quotes, lines and activity. Converted checkout records and order, payment, fulfilment and reward records, including transaction contact details and related cart activity, are retained separately for operations, fraud prevention and applicable accounting or legal obligations. The account-deletion flow does not automatically erase those transaction records; contact us about a broader deletion or retention request.

Guest order links are device-held capabilities and expire after 90 days; protect them as you would a receipt. Device notification settings are separate from your account. Turning Scenic alerts off disables campaign delivery to that subscription; notification providers may still process their installation registration. Expired sign-in challenges, sessions and rate-limit records are cleaned during subsequent sign-in requests.

Delete your account

Use “Delete account” in your website or app account after recently verifying your number. Deletion removes the account and non-transaction data described above and revokes guest access to linked orders and retained account carts. Required transaction records are retained separately; account deletion does not cancel an ongoing order. Full deletion instructions and support alternative.

Contact

To request access, correction or deletion where applicable, email shivaaymobilehub@gmail.com or write to Shivaay Mobile Accessories Hub at B-605, Hubtown Mobile Market, Gitamandir, Ahmedabad, Gujarat 380022.