Privacy Policy

Last updated: 26 October 2026

This policy explains how En Mart (“En Mart”, “we”, “us”) collects, uses, shares and protects personal data when you use our website ennmart.com, the En Mart shopping app (for buyers) and the En Mart Seller app (for sellers), together the “Services”. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.

1. Data we collect

Data you give us

• Account details (all users): name, email address, mobile number and password. If you sign in with Google, we receive your name, email address and Google account identifier from Google.
• Buyers: delivery addresses, receiver name and mobile number, cart, wishlist, orders and the product reviews and ratings you post.
• Sellers: business name and category, GSTIN, PAN, FSSAI licence number, referral code, bank account details (account holder name, account number, IFSC, bank, branch and address), documents you upload, pickup address and location, and product listings with their images.
• Support: the content of messages you send us.

Data collected with your permission

• Location: precise location, only when you tap “use my location” while adding an address (buyers) or a pickup location (sellers). We do not track location in the background.
• Contacts: when you choose a receiver from your contacts, the system picker gives us only the single phone number you select. We do not read or upload your address book.
• Photos and files: only the images or documents you choose to upload.

Data collected automatically

• Technical data needed to run the Services, such as IP address, device model, operating system, app version and server logs of requests made to our systems.

Payment data

Payments are processed by Razorpay. We do not receive or store your full card number, CVV, UPI PIN or net-banking password. We receive the payment status, amount and transaction reference.

2. How we use your data

• To create and manage your account and verify your email or mobile number with one-time passwords (OTP).
• To show products, process orders and payments, arrange delivery, and handle cancellations, returns and refunds.
• For sellers: to review and approve your registration and listings, calculate commissions and send payouts to your bank account.
• To provide customer support and send service messages about your account, orders and payouts.
• To prevent fraud and misuse and to keep the Services secure.
• To meet legal obligations, including tax (GST), invoicing and accounting requirements.

We do not sell your personal data. Our apps do not currently use third-party advertising or analytics SDKs. If that changes, we will update this policy first.

3. Who we share it with

• Sellers receive the buyer name, delivery address and contact number needed to fulfil an order.
• Buyers see the seller's business name on listings and orders.
• Delivery partners receive the details needed to deliver your order.
• Service providers who process data for us: Razorpay (payments), Google (Google Sign-In and address lookup from map coordinates), WhatsApp/Meta and our email and SMS providers (OTP and service messages), OpenStreetMap (map tiles, which receive your IP address when a map loads), and our cloud hosting provider in India.
• Authorities, where required by law, court order or to protect the rights and safety of users and En Mart.

4. Storage and security

Your data is stored on servers located in India. Data sent between our apps and servers is encrypted in transit (HTTPS). Access to personal data is limited to people who need it to run the Services. No system is completely secure, but we take reasonable security measures and will notify you and the authorities of a personal data breach as required by law.

5. How long we keep it

• Account and profile data: while your account is active.
• After you delete your account: personal data is deleted or anonymised within 90 days. See Delete Account.
• Order, invoice, payment, payout and tax records: kept for the period required by Indian tax and accounting laws, even after account deletion.
• Data needed for an open dispute, fraud investigation or legal claim: until it is resolved.

6. Your rights

Subject to applicable law, you can:

• ask for a summary of the personal data we hold about you and how it is used;
• correct or update your data (most details can be edited in the app);
• ask us to erase your data, or withdraw consent you gave us;
• nominate another person to exercise your rights in the event of your death or incapacity;
• raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.

To exercise these rights, email ennmartsupport@gmail.com from your registered email address. We may verify your identity before acting on a request.

7. Deleting your account

You can delete your account from inside the app or by request. What we delete, what we keep and how long it takes are explained on the Delete Account page.

8. Children

The Services are meant for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy. The date at the top shows when it last changed. For significant changes, we will notify you in the app or by email.

10. Grievance Officer and contact