Privacy Policy

Effective Date: March 10, 2026  |  Last Updated: March 10, 2026

I. Introduction

At Instamall, we connect consumers with the best of fashion and retail in their city by enabling Retailers to fulfill orders and by coordinating delivery through independent third-party delivery service providers. This Privacy Policy (“Policy”) describes how Instamall, LLC and its affiliates (“Instamall,” “we,” “our,” or “us”) collect, process, retain, and disclose your Personal Information when you use our consumer websites, mobile applications, any site or application that links to this Policy, and our communications channels (collectively, the “Services”).

This Policy does not apply to job applicants, employees, or the personnel of Retailers and other business partners; those individuals are addressed in separate notices or agreements.

We do not sell Personal Information for money. We may share identifiers and internet/technical data with advertising partners for cross-context behavioral advertising (targeted advertising) as defined by certain U.S. state laws. You may opt out of this sharing at any time (see Section VI). Information collected as part of SMS or RCS opt-in, including your phone number and messaging consent, will not be sold, rented, or shared with third parties or affiliates for their marketing purposes.

II. What Personal Information Does Instamall Collect or Process?

“Personal Information” means information that can reasonably be used to identify you, whether alone or in combination with other information. We may process the following categories:

A. Information You Provide Directly

Contact Information: Name, delivery and billing addresses, email address(es), phone number(s), and other contact details you provide.

Account & Profile Information: Username, credentials, preferences, notification settings, profile photo, saved sizes, brand/style preferences, and identifiers linked to an account; information received from third-party sign-in/authentication services you connect (e.g., Google, Apple, or Facebook).

Communications: In-app messages/chats, SMS/texts, RCS messages, calls, and emails related to the Services; timestamps; channels used; and resolutions. When you opt in to our SMS/RCS messaging program, we collect your mobile phone number, opt-in consent (including timestamp and method of consent), and message interaction data (e.g., opt-out requests). This information is used solely to deliver the messages you have consented to receive and is not sold, rented, or shared for third-party marketing purposes.

Content You Create or Share: Ratings, reviews, photos, videos, and any information you choose to include in such content.

Payment Information: When you make a purchase, your payment card details are collected and processed directly by our third-party payment processor, Stripe, Inc. (“Stripe”). Instamall does not receive, store, or have access to your full payment card numbers. We may receive limited payment details from Stripe (e.g., card brand, last four digits, expiration date, billing address) for order confirmation, fraud prevention, and customer support purposes.

B. Information Collected Automatically

Device & Technical Information: IP address, device type, operating system, browser type, device identifiers, mobile network information, and app version.

Usage Information: Pages viewed, features used, search queries, click/tap data, session duration, referral URLs, and in-app activity.

Location Information: Approximate location inferred from IP address; precise geolocation only if you have enabled location services on your device. We may use your location to show relevant Retailers and to estimate delivery availability. We may also share your delivery address with our third-party delivery service provider to facilitate delivery of your order (see Section V).

Cookies & Similar Technologies: Information collected through cookies, pixels, web beacons, local storage, and similar tracking technologies. This includes fraud detection technologies provided by Stripe (such as Stripe Radar) and analytics tools (see Section VIII).

C. Information from Third Parties

Stripe (Payment Processor): Transaction confirmation, payment status, fraud risk scores, chargeback notifications, and limited card details as described in Section II.A above.

Third-Party Delivery Service Provider: Delivery status updates, delivery confirmation (including photo proof, GPS coordinates, and timestamps), delivery exception reports, and estimated delivery times. Our delivery partner may also provide us with aggregated performance data.

Retailers: Order preparation status, fulfillment confirmations, item availability updates, and service issue details.

Partners & Promotions: Information received from co-branded or third-party offers you participate in, or loyalty integrations you choose to link.

Publicly Available Sources: Information from public records, social media profiles (where settings allow), and other lawfully obtained sources.

Advertising & Analytics Partners: Identifiers and inferences about your interests from advertising networks, data brokers, and analytics providers.

D. Sensitive Personal Information (“SPI”)

We may process precise geolocation (if enabled) and account log-in credentials. We generally do not collect government-issued IDs for consumer orders and do not use SPI to infer characteristics about you. Where legally required, we collect or process SPI only with consent and only as reasonably necessary to provide the Services, for security/fraud prevention, or to comply with law.

When we process de-identified information, we maintain and use it in de-identified form and do not attempt to re-identify it, except as permitted by law.

III. How Does Instamall Collect or Receive Personal Information?

From you: During account/profile creation and updates, placing or managing orders, saving preferences, submitting content (photos/reviews), contacting Support, and enrolling in promotions, referrals, or gift programs.

From your devices: Automatically through cookies, pixels, SDKs, and similar technologies when you use or interact with our Services.

From Stripe: Transaction data, fraud signals, and limited payment details when you make a purchase through the Services.

From our third-party delivery service provider: Delivery status, confirmation data, and delivery performance information related to your orders.

From Retailers: Order preparation and fulfillment information.

From partners: For co-branded or third-party offers you participate in, or loyalty integrations you choose to link.

From legal processes: Including from law enforcement, courts, regulators, users/non-users, or others involved in a legal matter.

IV. How Does Instamall Use Personal Information?

Providing and improving the Services: Processing orders, facilitating delivery coordination with our third-party delivery service provider, personalizing your experience, recommending products, and developing new features.

Communications: Sending order confirmations, delivery updates (including real-time tracking information received from our delivery partner), receipts, customer support responses, and (with your consent or as permitted by law) promotional messages.

Payment processing and fraud prevention: Transmitting order and payment information to Stripe for transaction processing; using Stripe Radar and our own systems to detect, investigate, and prevent fraud, unauthorized transactions, and other illegal activity.

Authentication, integrity, and security: Verifying accounts; providing secure shopping; detecting and preventing account takeover, refund abuse, promotional fraud, and other misuse of the Services.

Analytics and research: Understanding how the Services are used, measuring effectiveness, and conducting internal research to improve functionality and user experience.

Advertising and marketing: Delivering targeted advertisements (including cross-context behavioral advertising), measuring ad performance, and personalizing marketing content.

Legal compliance: Complying with applicable laws, regulations, legal processes, and enforceable governmental requests; enforcing our Terms and Conditions; responding to chargebacks and payment disputes; and protecting the rights, property, and safety of Instamall, our users, and the public.

V. How Does Instamall Share Personal Information?

Stripe (Payment Processor): We transmit order details and billing information to Stripe to process your payment. Stripe processes your payment card data directly and is subject to its own privacy policy (available at stripe.com/privacy). Instamall does not receive or store your full payment card numbers.

Third-Party Delivery Service Provider: To facilitate delivery of your order, we share your name, delivery address, phone number (which may be masked/relayed), and order details with our third-party delivery service provider. The delivery provider uses this information solely to complete the delivery and is subject to contractual obligations regarding data handling and security. The delivery provider is responsible for its own couriers; couriers are not employees or contractors of Instamall.

Retailers: We share your order details (items, quantities, special instructions) and, where necessary for fulfillment, limited contact information with Retailers to prepare your order.

Service providers: Third parties that perform services on our behalf (e.g., cloud hosting, customer support platforms, analytics providers, email service providers, marketing services). These providers are contractually obligated to use your information only for the purposes of providing services to Instamall.

Instamall’s group of companies: Our parents, subsidiaries, and affiliates for the purposes described in this Policy.

Advertising partners: We may share identifiers and internet/technical data for cross-context behavioral advertising (targeted advertising) as defined by certain U.S. state laws. However, information collected as part of SMS or RCS opt-in (including your phone number and messaging consent) will not be sold, rented, or shared with third parties or affiliates for their own marketing purposes. SMS/RCS opt-in data is used solely by Instamall to send you the messages you have consented to receive.

Business transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Information may be transferred as a business asset.

Legal and safety purposes: To comply with law, respond to legal process, enforce our agreements, protect the safety of any person, address fraud/security issues, or respond to chargebacks or payment disputes.

With your consent or at your direction: For example, when you send a gift, link accounts, or participate in a joint promotion.

VI. Your Privacy Rights and Choices

We provide tools and processes to help you manage your Personal Information. Depending on your U.S. state of residence and subject to applicable exceptions, you (or your authorized agent) may exercise the following rights:

Access / Know: Request access to categories and specific pieces of Personal Information we have collected, and information about sources, purposes, and disclosures.

Delete: Request deletion of your Personal Information, subject to certain exceptions (e.g., data necessary to complete a transaction, detect fraud, or comply with legal obligations).

Correct: Request correction of inaccurate Personal Information we maintain about you.

Opt Out of Sale/Sharing: Direct us to stop sharing your Personal Information for cross-context behavioral advertising.

Limit Use of SPI: Request that we limit our use and disclosure of Sensitive Personal Information.

Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment.

How to Submit a Request: Contact us at privacy@instamall.co or use the privacy tools available in your account settings. We will verify your identity before processing your request and respond within the timeframe required by applicable law (typically 45 days, with extensions where permitted).

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require verification of both the agent’s authority and your identity.

Appeals: If we deny your request, you may appeal by contacting us at privacy@instamall.co with the subject line “Privacy Appeal.”

Note regarding Stripe and Delivery Partner data: If you wish to exercise rights regarding payment data held by Stripe, you may also contact Stripe directly through their privacy center. If you wish to exercise rights regarding data held by our delivery service provider, contact us and we will coordinate with the provider on your behalf.

VII. Data Retention

We retain Personal Information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Policy; comply with legal obligations (e.g., tax, accounting, regulatory requirements); resolve disputes, respond to chargebacks (typically up to 120 days after transaction), and enforce our agreements; and maintain security and prevent fraud.

When Personal Information is no longer needed, we will securely delete or de-identify it in accordance with our data retention policies and applicable law. Specific retention periods vary by data type and legal requirements.

SMS/RCS data retention: We retain your SMS/RCS opt-in consent records (including timestamp and method of consent) for as long as you are subscribed to our messaging program and for a reasonable period thereafter to demonstrate compliance. If you opt out, we will remove your number from our active messaging list within 24 hours. You may request deletion of your SMS/RCS data at any time by contacting privacy@instamall.co.

Note: Stripe and our delivery service provider maintain their own data retention policies. We contractually require our service providers to delete or anonymize Personal Information when it is no longer needed for the purposes for which it was shared.

VIII. Cookies and Tracking Technologies

We and our partners use cookies, pixels, web beacons, local storage, and similar technologies to collect information about your interactions with our Services. These technologies help us remember your preferences and login status; understand how the Services are used; deliver and measure the effectiveness of advertising; and detect and prevent fraud (including fraud detection technologies provided by Stripe Radar, which may use device fingerprinting and browser characteristics to assess transaction risk).

Your Cookie Choices

Browser settings: Most web browsers allow you to manage cookie preferences. You may refuse or delete cookies, though this may affect functionality.

Do Not Track: We currently do not respond to “Do Not Track” browser signals, as there is no industry-wide standard for this technology.

Opt-out tools: You may opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

Global Privacy Control (GPC): We honor GPC signals where required by law as opt-out requests for cross-context behavioral advertising.

IX. Data Security

We implement administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS) and at rest (AES-256), access controls, regular security assessments, and employee training.

Payment security: All payment card data is collected and processed directly by Stripe using PCI DSS Level 1 compliant infrastructure. Instamall does not receive, transmit, or store full payment card numbers on our servers. Your payment information is protected by Stripe’s security measures, which you can learn more about at stripe.com/docs/security.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly investigating and remediating any confirmed data breach in accordance with applicable laws.

X. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect Personal Information from children under 18. If you believe a child has provided Personal Information to us, contact privacy@instamall.co and we will take appropriate action, including deleting the information.

XI. Third-Party Sites and Services

Our Services may link to third-party websites, applications, or services (e.g., Retailer sites, loyalty programs, social media platforms). These third parties are not under our control and are responsible for their own privacy practices. This includes:

Stripe: Payment processing is handled by Stripe, Inc., which is subject to its own privacy policy ( stripe.com/privacy).

Delivery Service Provider: Delivery of your orders is facilitated by a third-party delivery service provider that operates under its own privacy practices and contractual obligations to Instamall.

Retailers: Retailers listed on our platform are independent businesses with their own privacy practices.

We encourage you to review the privacy policies of any third party before providing Personal Information.

XII. International Data Transfers

Currently, the Services are intended for use in the United States. If we expand to other regions, we will update this Policy to address any international data transfer mechanisms required by applicable law.

XIII. How to Contact Us

For questions or concerns about this Policy or our privacy practices, contact us at:

Email: privacy@instamall.co

Mailing Address:
Instamall, LLC
Attn: Privacy Team
38 NW 24th Street, Miami, FL 33127

XIV. Changes to This Privacy Policy

We may update this Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated Policy on our website with a new “Last Updated” date and, where required by law, by email or other reasonable method.

We encourage you to review this Policy periodically. Your continued use of the Services after any changes indicates your acceptance of the updated Policy.