Privacy Notice

Welcome to OneMart. We are committed to protecting your personal data and respecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws in India.

1. What Data We Collect

We collect the following categories of personal data when you use our e-commerce platform:

• Identity and Contact Data: Name, email address, phone number, and physical addresses (billing and shipping).
• Account Data: Account credentials and profile information.
• Transaction Data: Details about payments (processed securely via third-party providers), order history, and items purchased.
• Technical and Device Data: IP address, browser type, device information, and interaction data via cookies and similar technologies.
• User-Generated Content: Product reviews, seller product listings, and customer support messages.

2. Why We Use It

We process your personal data for the following purposes:

• Providing the Service: Creating and managing accounts, processing orders, and delivering products.
• Payment Processing: Facilitating secure transactions.
• Customer Support: Responding to inquiries, resolving issues, and grievance redressal.
• Security and Fraud Prevention: Securing our platform and preventing unauthorized access or fraudulent transactions.
• Improving the Service: Analyzing platform usage to improve user experience (Analytics).
• Marketing: Sending promotional communications and newsletters, subject to your explicit consent.

3. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

«[LEGAL/PRIVACY REVIEW REQUIRED — RETENTION PERIOD TO BE CONFIRMED]»

4. Third Parties

We may share your data with the following categories of third-party service providers who assist us in operating our platform:

• Authentication Providers: Clerk (for secure user login and identity management).
• Database and Storage Providers: Supabase and Cloudinary (for secure data and image hosting).
• Payment Gateways: [PAYMENT PROVIDER TO BE CONFIRMED] (for processing online payments).
• Logistics Partners: Third-party delivery personnel and shipping companies.

5. Your Rights

Under the DPDP Act, you have the following rights regarding your personal data:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data, subject to certain legal exceptions.
• Right to Withdraw Consent: Where we rely on consent to process your data (e.g., marketing, non-essential cookies), you can withdraw it at any time.

To exercise your rights, please visit our Data Rights Request Form.

6. Grievance Redressal

If you have any grievances regarding the processing of your personal data, you can contact our designated Grievance Officer:

7. Changes to this Notice

We may update this Privacy Notice from time to time. We will notify you of any material changes by posting the new notice on this page and updating the "Last Updated" date.