1. Information we collect

• Account information: name, email address, mobile number, password (stored as a secure hash) and, for business buyers, company name and GSTIN.
• Order information: shipping and billing addresses, order details, PO numbers and delivery pincode.
• Payment information: processed by our payment provider (Razorpay). We store only confirmation and reference data — never full card details.
• Seller information: business details, GSTIN, bank and identity documents used for KYC verification and settlements.
• Usage information: pages visited, searches, cart and wishlist activity, device and browser details, and IP address.

2. How we use your information

• To create and manage accounts, process orders, payments, returns, refunds and settlements.
• To issue tax invoices, credit notes and other documents required under applicable law.
• To provide sellers only the fulfilment information needed to prepare an order. Customer email and phone are withheld from seller-facing interfaces; GradeMart and its authorised courier handle delivery contact.
• To provide customer and seller support and respond to enquiries.
• To operate and improve the platform, including security, fraud prevention and analytics.
• To send transactional communications and, only with your consent, promotional communications.

3. Sharing with third parties

We do not sell your personal information. We share data only as needed to operate the marketplace and comply with the law:

• Sellers: product, order, tax and delivery-address details needed to fulfil and invoice purchases, excluding customer email and phone in seller-facing interfaces.
• Payment provider (Razorpay): payment processing data.
• Courier/shipping partners: delivery name, address and contact details.
• Cloud and infrastructure providers: hosting and data storage.
• Regulators and law enforcement: where required by law or for the protection of legal rights.

4. Cookies & similar technologies

We use cookies and local storage to keep you signed in, remember your cart, and understand how the platform is used. You can manage cookies in your browser settings, though some features may not work without them.

5. How we protect your data

• Passwords are hashed and never stored in plain text; MFA secrets are encrypted at rest.
• All traffic is served over HTTPS and protected by security headers.
• Access to personal data is restricted to staff with a legitimate need, with audit trails on sensitive operations.
• We follow reasonable technical and organisational measures aligned with the Digital Personal Data Protection Act, 2023.

6. Data retention

We retain personal information only as long as needed for the purposes above, including legal, tax, accounting and dispute-resolution requirements (for example, invoice records required under tax law). After that, data is deleted or anonymised.

Marketplace messages are reviewed for safety and may be rejected when they contain direct contact details, external links, social handles or payment identifiers. This helps keep support, payment and purchase protection inside GradeMart.

7. Your rights

• Access and review the personal information we hold about you.
• Correct inaccurate or outdated information from your account page or by contacting us.
• Request deletion of your account and data, subject to legal retention requirements.
• Withdraw consent for promotional communications at any time.

8. Children

The platform is intended for business and adult consumers. We do not knowingly collect personal information from children under 18.

9. Contact & grievances

For privacy questions, corrections or complaints, contact us at support@grademart.com or write to GradeMart E-commerce Pvt Ltd, 46-42,43, Ramamurthy Avenue, Udhaya Nagar Main Rd, Porur, Chennai – 600116. We respond to privacy requests within the timeframes required by law.