Privacy Policy
Learn about your privacy rights and how your data is handled.
Effective Date: 18.04.2026
Last Updated: 18.04.2026
This Privacy Policy (“Policy”) describes how Suprmart (“Company”, “we”, “our”, or “us”) collects, processes, uses, stores, discloses, and protects personal data of users (“User”, “you”, or “your”) in connection with the use of the Suprmart mobile application (“Application” or “App”) and related services.
By accessing or using the Application, you acknowledge that you have read, understood, and agreed to the terms of this Policy.
1. 📌 DATA CONTROLLER INFORMATION
- Entity Name: Suprmart
- Business Type: Hyperlocal Rapid Commerce Platform
- Registered Location: Patna, Bihar, India
- Contact Email: support@suprmart.in
Suprmart acts as the data controller for all personal data collected through the Application.
2. 📊 CATEGORIES OF PERSONAL DATA COLLECTED
We collect personal data strictly necessary for delivering services, ensuring operational efficiency, maintaining platform security, and complying with legal obligations.
2.1 Identity and Contact Information
Collected during account creation and usage:
- Full name
- Mobile phone number (primary identifier)
- Email address (optional)
- Delivery addresses (including address labels such as “Home”, “Work”)
2.2 Location Data
We process location data as follows:
Precise Location (Foreground Use Only)
- GPS coordinates (latitude and longitude)
- Used for:
- Determining service availability
- Assigning nearest fulfillment center
- Optimizing delivery routing
Important Clarifications:
- ❌ We do NOT collect background location data
- ❌ We do NOT track user location when the app is closed
2.3 Order and Transaction Data
We collect detailed transaction-related information:
- Items viewed, added to cart, or purchased
- Order value, quantities, and timestamps
- Delivery instructions and preferences
- Payment mode (COD / online)
Payment Data:
- Payment processing is handled by third-party payment gateways
- We do NOT store:
- Card numbers
- CVV
- Net banking credentials
2.4 Device and Technical Information
Automatically collected to ensure functionality and performance:
- Device type, brand, and model
- Operating system and version
- Application version
- IP address
- Device identifiers (non-sensitive)
- Crash logs and diagnostic data
2.5 User Interaction and Behavioral Data
Collected to improve user experience:
- App navigation patterns
- Feature usage
- Session duration
- Error reports
2.6 Communication and Support Data
- Customer support interactions
- Complaint submissions (including images, if uploaded)
- Feedback, ratings, and reviews
3. 🎯 PURPOSES OF DATA PROCESSING
We process personal data for clearly defined and limited purposes:
3.1 Service Fulfillment
- Order processing and confirmation
- Inventory allocation
- Delivery partner assignment
- Real-time order tracking
3.2 User Authentication and Account Management
- OTP-based login verification
- Account creation and maintenance
- Fraud detection during login attempts
3.3 Customer Support and Issue Resolution
- Handling complaints and disputes
- Processing refunds and replacements
- Communicating service updates
3.4 Operational Optimization
- Demand forecasting
- Delivery route optimization
- Inventory planning
3.5 Security and Fraud Prevention
- Monitoring suspicious transactions
- Preventing misuse of return/refund systems
- Detecting unauthorized access
3.6 Communication
We may send:
- Transactional messages (order confirmations, delivery updates)
- Service-related notifications
👉 Promotional communication is sent only with user consent.
4. ⚖️ LEGAL BASIS FOR PROCESSING (WHERE APPLICABLE)
We process personal data based on:
- Contractual necessity (to fulfill orders)
- Legitimate interests (fraud prevention, service improvement)
- User consent (location access, notifications)
- Legal obligations (taxation, compliance)
5. 🤝 DATA SHARING AND DISCLOSURE
We do not sell personal data under any circumstances.
Data is shared only in the following controlled scenarios:
5.1 Delivery Partners
Shared Data:
- Name
- Phone number
- Delivery address
Purpose:
- Order fulfillment and coordination
5.2 Payment Service Providers
Shared Data:
- Transaction details
Purpose:
- Secure payment processing
5.3 Technology and Infrastructure Providers
Includes:
- Cloud hosting services
- Analytics providers
- Notification service providers
All such entities are bound by:
- Data protection obligations
- Confidentiality agreements
5.4 Legal and Regulatory Authorities
We may disclose data when required:
- By law or government authorities
- To enforce legal rights
- To prevent fraud or criminal activity
6. 🔐 DATA SECURITY MEASURES
We implement industry-standard safeguards:
- Encrypted data transmission (HTTPS/TLS)
- Role-based access control
- Secure server infrastructure
- Monitoring and logging systems
Despite these measures, no system is entirely risk-free. Users are responsible for maintaining account confidentiality.
7. ⏳ DATA RETENTION POLICY
We retain personal data only for as long as necessary:
| Data Category | Retention Purpose |
|---|---|
| Account data | Active usage + compliance |
| Order data | Accounting, audits |
| Support data | Service improvement |
| Logs & analytics | Limited duration |
Data is securely deleted or anonymized after retention requirements are met.
8. 👤 USER RIGHTS
Users may exercise the following rights:
- Access personal data
- Update or correct information
- Request deletion of account
- Withdraw consent (where applicable)
Requests can be made via:
📧 support@suprmart.in
9. 📱 APP PERMISSIONS
The Application may request:
Location Access
Used exclusively for:
- Serviceability checks
- Delivery accuracy
Camera Access (if enabled)
Used for:
- Uploading images for complaints
Phone Access (if implemented)
Used for:
- OTP auto-detection
Permissions are used strictly for stated purposes and can be revoked via device settings.
10. 🚫 RESTRICTIONS AND NON-USAGE
We explicitly confirm:
- We do NOT sell or rent personal data
- We do NOT collect sensitive identifiers (Aadhaar, PAN, etc.)
- We do NOT track users outside the application unnecessarily
- We do NOT store financial credentials
11. 👶 CHILDREN’S PRIVACY
The Application is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
12. 🌍 DATA TRANSFERS
Data is primarily processed within India. If transferred, appropriate safeguards are implemented.
13. 🔄 POLICY UPDATES
We reserve the right to update this Policy periodically. Significant changes will be communicated through the Application or other appropriate channels.
14. 📞 CONTACT INFORMATION
For privacy-related inquiries:
📧 support@suprmart.in
📍 Patna, Bihar, India