Privacy Policy

1. Introduction

Welcome to Hindustaan Mart. At Hindustaan Innovations Pvt. Ltd., we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our web platform (Hindustaan Mart) and our mobile application, Mart Hindustaan (collectively, the "Service").

This Privacy Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made thereunder, and applies to all users, including customers, visitors, sellers, and delivery partners using the Service.

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, as well as information generated automatically when you interact with our application.

• Personal Identification Info: When you register an account, fill out your profile, place an order, or submit support requests, we collect your name, email address, phone number, and physical addresses (shipping and billing details).
• Authentication Data: We secure and manage account credentials through industry-standard authentication systems (including Google and Firebase Authentication).
• Order & Payment Information: Order history, cart details, wishlist, delivery status, invoice information, and payment method details (such as UPI ID or card transaction reference). We do not store complete debit or credit card numbers; payments are processed through RBI-compliant payment gateway partners.
• Usage Data: We automatically record technical information, including your device's Internet Protocol (IP) address, operating system version, device model, browser information, and activity logs within the application.
• Seller Information: Where you register as a seller on our marketplace, we may additionally collect business name, GST details, PAN, bank account/UPI details, and verification documents.

3. Location & Microphone Permissions

Our mobile application requests specific device permissions to enable advanced e-commerce features. Below is an overview of how we handle this sensitive data:

These permissions are requested only after obtaining your consent and can be withdrawn at any time through your device settings, though doing so may limit certain app features.

4. Legal Basis for Processing

We process personal data only where there is a lawful basis to do so under the DPDP Act. Depending on the activity, this may include:

• Your explicit or deemed consent.
• Performance of a contract or to provide services you have requested.
• Compliance with applicable legal or regulatory obligations.
• Protection against fraud, unauthorized transactions, and security incidents.
• Legitimate business purposes consistent with applicable law.

Where processing is based on consent, you may withdraw it at any time, subject to legal or contractual obligations. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

5. How We Use Your Data

Hindustaan Innovations Pvt. Ltd. processes user information for the following business purposes:

• To process, fulfill, and ship orders placed through the store.
• To authenticate user sessions and secure account profiles.
• To provide location-based features (e.g. mapping nearby stores or calculating delivery routes).
• To facilitate voice-activated searches inside the application.
• To handle customer service tickets and inquiries.
• To send transactional emails, SMS notifications, and system updates.
• To detect and prevent fraud and to verify seller and buyer identity.
• To send marketing communications, where you have provided consent.

6. Cookies & Similar Technologies

Our website and app may use cookies, pixels, and similar technologies to remember your preferences, improve functionality, personalize your experience, and prevent fraud. You may disable cookies through your browser settings, though some features may not function correctly as a result.

• Essential Cookies: Required for core functions such as login, account security, and checkout.
• Functional Cookies: Remember preferences such as saved addresses and language settings.
• Analytics Cookies: Help us understand aggregated site traffic and feature usage.
• Performance Cookies: Help identify technical issues and improve app stability.
• Marketing Cookies: Used, with your consent, to show relevant offers and recommendations.

7. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We only share information with trusted third parties who are contractually bound to keep your data secure and use it solely for the services they provide to us:

• Firebase: For secure authentication and account management.
• Map Services: To process coordinates for storefront lookups.
• Delivery and Courier Partners: To ship and deliver physical orders to your address.
• Payment Processors: To safely process payment transactions (which are fully encrypted and never stored on our servers).
• Registered Sellers: Since Hindustaan Mart operates as a multi-vendor marketplace, relevant order details (such as name, delivery address, and contact number) are shared with the seller fulfilling your order, solely to process the order, arrange shipment, and handle returns. Sellers are contractually required to protect this information.
• Government & Law Enforcement Authorities: Where required under applicable law.

8. Cross-Border Data Transfer

Your personal information may, where necessary, be processed or stored by our service providers or technology partners located outside India. Where such transfers occur, we take reasonable measures to ensure your data receives a level of protection comparable to that required under applicable Indian law, including appropriate contractual safeguards. Where applicable laws restrict cross-border transfer of certain categories of data, we will comply with such requirements before transferring information outside India.

9. Data Security & Retention

We implement robust administrative, technical, and physical security measures to safeguard your personal data. This includes secure socket layer (SSL) transmission encryption, hashed credential storage, access controls, and periodic security reviews. While we strive to protect your information, no system can guarantee absolute security.

We retain your information as long as your account is active or as needed to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Certain information may be retained even after account deletion where required by law.

10. Data Breach Notification

We maintain procedures to identify, investigate, contain, and respond to actual or suspected data security incidents. In the event of a personal data breach likely to result in significant harm, or where required by applicable law, we will investigate the incident promptly, take steps to mitigate its impact, notify affected users where required, inform relevant regulatory authorities as applicable, and implement corrective measures to prevent recurrence.

Users are encouraged to immediately notify us if they suspect unauthorized access to their account or personal information.

11. Your Rights Under the DPDP Act

Subject to applicable law, you may exercise the following rights regarding your personal data:

• Access: Request access to the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Erasure: Request erasure of your personal data where permitted by law.
• Withdraw Consent: Withdraw previously provided consent, subject to legal or contractual obligations.
• Grievance Redressal: Raise concerns regarding the processing of your personal data with our Grievance Officer.
• Nomination: Nominate another individual to exercise your rights under the DPDP Act, where permitted.

We may verify your identity before processing any such request. You may exercise these rights by writing to us at the contact details below.

12. Children's Privacy

Hindustaan Mart is not intended for individuals below the age of 18 years without parental or legal guardian supervision. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.

13. Account & Data Deletion

We respect your right to control your information. You may request the deletion of your account and all associated personal data at any time.

To request account deletion, you can:

• Send an email request to our support team at support@hindustaan.in.
• Use the "Delete Account" button within the Profile or Settings screen of the Mart Hindustaan app.

Upon receiving a deletion request, we will delete or anonymize all personal data from our active databases within 30 days, retaining only such information as required by law for accounting, taxation, fraud prevention, or regulatory compliance.

14. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated through the website, application, email, or other appropriate channels. Continued use of the Service after such updates constitutes acceptance of the revised Privacy Policy.

15. Grievance Officer

In accordance with applicable Indian law, we have appointed a Grievance Officer to address privacy-related concerns.

16. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy, please get in touch with us: