Effective Date: 18.04.2026
Last Updated: 18.04.2026

This Privacy Policy (“Policy”) describes how Suprmart (“Company”, “we”, “our”, or “us”) collects, processes, uses, stores, discloses, and protects personal data of users (“User”, “you”, or “your”) in connection with the use of the Suprmart mobile application (“Application” or “App”) and related services.

By accessing or using the Application, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

1. 📌 DATA CONTROLLER INFORMATION

Entity Name: Suprmart
Business Type: Hyperlocal Rapid Commerce Platform
Registered Location: Patna, Bihar, India
Contact Email: support@suprmart.in

Suprmart acts as the data controller for all personal data collected through the Application.

2. 📊 CATEGORIES OF PERSONAL DATA COLLECTED

We collect personal data strictly necessary for delivering services, ensuring operational efficiency, maintaining platform security, and complying with legal obligations.

2.1 Identity and Contact Information

Collected during account creation and usage:

Full name
Mobile phone number (primary identifier)
Email address (optional)
Delivery addresses (including address labels such as “Home”, “Work”)

2.2 Location Data

We process location data as follows:

Precise Location (Foreground Use Only)

GPS coordinates (latitude and longitude)
Used for:
- Determining service availability
- Assigning nearest fulfillment center
- Optimizing delivery routing

Important Clarifications:

❌ We do NOT collect background location data
❌ We do NOT track user location when the app is closed

2.3 Order and Transaction Data

We collect detailed transaction-related information:

Items viewed, added to cart, or purchased
Order value, quantities, and timestamps
Delivery instructions and preferences
Payment mode (COD / online)

Payment Data:

Payment processing is handled by third-party payment gateways
We do NOT store:
- Card numbers
- CVV
- Net banking credentials

2.4 Device and Technical Information

Automatically collected to ensure functionality and performance:

Device type, brand, and model
Operating system and version
Application version
IP address
Device identifiers (non-sensitive)
Crash logs and diagnostic data

2.5 User Interaction and Behavioral Data

Collected to improve user experience:

App navigation patterns
Feature usage
Session duration
Error reports

2.6 Communication and Support Data

Customer support interactions
Complaint submissions (including images, if uploaded)
Feedback, ratings, and reviews

3. 🎯 PURPOSES OF DATA PROCESSING

We process personal data for clearly defined and limited purposes:

3.1 Service Fulfillment

Order processing and confirmation
Inventory allocation
Delivery partner assignment
Real-time order tracking

3.2 User Authentication and Account Management

OTP-based login verification
Account creation and maintenance
Fraud detection during login attempts

3.3 Customer Support and Issue Resolution

Handling complaints and disputes
Processing refunds and replacements
Communicating service updates

3.4 Operational Optimization

Demand forecasting
Delivery route optimization
Inventory planning

3.5 Security and Fraud Prevention

Monitoring suspicious transactions
Preventing misuse of return/refund systems
Detecting unauthorized access

3.6 Communication

We may send:

Transactional messages (order confirmations, delivery updates)
Service-related notifications

👉 Promotional communication is sent only with user consent.

4. ⚖️ LEGAL BASIS FOR PROCESSING (WHERE APPLICABLE)

We process personal data based on:

Contractual necessity (to fulfill orders)
Legitimate interests (fraud prevention, service improvement)
User consent (location access, notifications)
Legal obligations (taxation, compliance)

5. 🤝 DATA SHARING AND DISCLOSURE

We do not sell personal data under any circumstances.

Data is shared only in the following controlled scenarios:

5.1 Delivery Partners

Shared Data:

Name
Phone number
Delivery address

Purpose:

Order fulfillment and coordination

5.2 Payment Service Providers

Shared Data:

Transaction details

Purpose:

Secure payment processing

5.3 Technology and Infrastructure Providers

Includes:

Cloud hosting services
Analytics providers
Notification service providers

All such entities are bound by:

Data protection obligations
Confidentiality agreements

5.4 Legal and Regulatory Authorities

We may disclose data when required:

By law or government authorities
To enforce legal rights
To prevent fraud or criminal activity

6. 🔐 DATA SECURITY MEASURES

We implement industry-standard safeguards:

Encrypted data transmission (HTTPS/TLS)
Role-based access control
Secure server infrastructure
Monitoring and logging systems

Despite these measures, no system is entirely risk-free. Users are responsible for maintaining account confidentiality.

7. ⏳ DATA RETENTION POLICY

We retain personal data only for as long as necessary:

Data Category	Retention Purpose
Account data	Active usage + compliance
Order data	Accounting, audits
Support data	Service improvement
Logs & analytics	Limited duration

Data is securely deleted or anonymized after retention requirements are met.

8. 👤 USER RIGHTS

Users may exercise the following rights:

Access personal data
Update or correct information
Request deletion of account
Withdraw consent (where applicable)

Requests can be made via:
📧 support@suprmart.in

9. 📱 APP PERMISSIONS

The Application may request:

Location Access

Used exclusively for:

Serviceability checks
Delivery accuracy

Camera Access (if enabled)

Used for:

Uploading images for complaints

Phone Access (if implemented)

Used for:

OTP auto-detection

Permissions are used strictly for stated purposes and can be revoked via device settings.

10. 🚫 RESTRICTIONS AND NON-USAGE

We explicitly confirm:

We do NOT sell or rent personal data
We do NOT collect sensitive identifiers (Aadhaar, PAN, etc.)
We do NOT track users outside the application unnecessarily
We do NOT store financial credentials

11. 👶 CHILDREN’S PRIVACY

The Application is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

12. 🌍 DATA TRANSFERS

Data is primarily processed within India. If transferred, appropriate safeguards are implemented.

13. 🔄 POLICY UPDATES

We reserve the right to update this Policy periodically. Significant changes will be communicated through the Application or other appropriate channels.

14. 📞 CONTACT INFORMATION

For privacy-related inquiries:

📧 support@suprmart.in
📍 Patna, Bihar, India

All Stores

Boring Road