Privacy Policy

Effective Date: 11/02/2026
Last Updated: 11/02/2026

This Privacy Policy describes how Anmol Ghar (“we”, “us”, “our”, “Platform”, “Company”) collects, uses, stores, shares, transfers, and protects personal data when you access or use our website, mobile application (if any), and related services (collectively, the “Services”).

This Privacy Policy is intended to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable Rules.

This policy should be read along with our:

By accessing or using our Services, you agree to this Privacy Policy and consent to the processing of your personal data as described below.

1. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

Visitors (people who browse the Platform without placing orders)
Customers/Buyers (people who place orders)
Vendors/Sellers (third-party sellers on the Platform)
Service Providers (delivery, payment, support partners)
Any person who contacts us, interacts with us, or uses our Services and interacts with the Platform

2. IMPORTANT DEFINITIONS

Personal Data: Any data about an individual who is identifiable by or in relation to such data.
Data Principal: The individual to whom personal data relates (you).
Data Fiduciary: The entity determining the purpose and means of processing personal data (we).
Data Processor: Any person processing personal data on behalf of a Data Fiduciary (payment gateway, courier partner, hosting provider, etc.).
Consent: Free, specific, informed, unconditional, unambiguous indication of agreement to process personal data.

3. OUR ROLE AS A MULTIVENDOR MARKETPLACE

Our Platform is a multivendor marketplace where products/services may be sold by:

Anmol Ghar, and/or
Independent third-party Vendors

For personal data:

We act as the primary Data Fiduciary for platform operations.
Vendors receive limited customer personal data only to fulfil orders and provide order-related support.

4. PERSONAL DATA WE COLLECT

We collect personal data directly from you and automatically through your use of the Platform.

4.1 Personal Data You Provide (Customers/Visitors)

We may collect:

Full name
Mobile number
Email address
Password (stored in encrypted/hashed form)
Shipping address and billing address
Delivery instructions
Order details (items, quantities, order history)
Reviews, ratings, and comments
Customer support messages, calls, and complaint details
Return/refund-related data including product issue photos/videos (if you provide them)

4.2 Personal Data You Provide (Vendors/Sellers)

We may collect:

Owner/authorized signatory name
Mobile number and email
Business name and business address
Store name, store logo, store description
Product listings and catalogue information
Tax details (GSTIN, PAN, etc. if applicable)
Bank account details for payouts
KYC/verification documents
Vendor support tickets, messages, and dispute communications

4.3 Personal Data Collected Automatically

When you use our Platform, we may collect:

IP address
Browser type, device type, and operating system
Session logs, clickstream and browsing behaviour
Pages visited, time spent, and referrer URL
Location information (approximate) inferred from IP
Cookies and similar technologies

4.4 Payment Data

Payments are processed through third-party payment gateways.

We do not store your full card details.

We may receive:

Payment status (success/failure)
Transaction ID/reference number
Payment method type (e.g., UPI, card, netbanking)
Partial masked details as provided by the gateway

4.5 Communication Data

If you contact us, we may collect:

Your name, email, phone
Message contents
Any attachments you send
Call recordings (will be notified to you before recording)

4.6 Optional Data (If You Choose to Provide)

You may optionally provide:

Profile picture
Date of birth (if your platform asks it)
Gender (if your platform asks it)
Wishlist preferences
Product preferences for personalisation

4.7 Children’s Personal Data

Our Services are not intended for children.
We do not knowingly collect children’s personal data.

If you believe a child has provided personal data, please contact us for deletion.

5. PURPOSES OF PROCESSING (WHY WE USE YOUR DATA)

We process personal data only for lawful purposes, including:

5.1 Account & Platform Access

Create and manage accounts (customer/vendor)
Login and authentication
Password reset and OTP verification

5.2 Orders, Payments & Delivery

Processing orders
Packaging, shipping, and delivery
Order confirmations and updates
Handling cancellations, refunds, and return pickups

5.3 Vendor Marketplace Operations

Vendor onboarding and verification
Store creation and product listing
Vendor settlements/payouts
Quality monitoring and marketplace integrity

5.4 Customer Support & Dispute Resolution

Handling queries and complaints
Vendor-customer dispute handling
Chargeback/refund dispute handling
Preventing return/refund abuse

5.5 Personalisation & User Experience

Personalised product suggestions
Wishlist and saved cart
Improving search results
Remembering preferences

5.6 Marketing & Promotional Communication

We may send:

Promotional SMS/WhatsApp/email
Offers, discounts, new arrivals
Abandoned cart reminders

You may withdraw consent anytime by contacting at contact@anmolghar.com.

5.7 Analytics & Platform Improvement

Performance monitoring
Fixing bugs and improving UI/UX
Measuring marketing performance
Understanding browsing patterns

5.8 Security & Fraud Prevention

Preventing account hacking
Preventing payment fraud
Preventing fake orders and suspicious returns
Platform abuse detection

5.9 Legal Compliance

Compliance with tax/accounting requirements
Responding to lawful government requests
Audit, reporting, record keeping
Enforcement of our Terms & Conditions

6. CONSENT UNDER DPDP ACT

Where required under the DPDP Act, we may collect consent through:

Registration forms
Checkout forms
Opt-in checkboxes
Cookie consent banner
Marketing opt-in options

Withdrawal of consent will be as easy as giving consent.

If you withdraw consent, some Services may become unavailable (for example, order delivery requires address and contact details).

7. DISCLOSURE / SHARING OF PERSONAL DATA

We do not sell personal data.

We share personal data only for legitimate and necessary purposes.

7.1 Sharing With Vendors (Sellers)

When you place an order from a vendor, we share only the information required to fulfil it, such as:

Customer name
Delivery address
Phone number (if required for delivery coordination)
Ordered items and quantities
Shipping instructions
Order ID and status
Customer messages related to the order

Vendors must:

use the data only for fulfilment/support
not use it for marketing without customer consent
protect it and delete it when no longer required

7.2 Sharing With Service Providers (Data Processors)

We may share data with service providers including:

Payment gateways
Courier/logistics partners
SMS/email/WhatsApp notification providers
Hosting providers (cloud servers)
Customer support software
Analytics and performance monitoring providers
Fraud prevention and security service providers

These parties process data on our behalf and are expected to follow confidentiality and security obligations.

7.3 Sharing With Government Authorities / Legal Entities

We may share personal data where required:

by law, regulation, court order, or legal process
to respond to government requests
to prevent fraud or security incidents
to enforce our legal rights

7.4 Sharing With Affiliates

If we have group companies/affiliates, we may share personal data with them for internal operations, compliance, or service improvement, subject to appropriate safeguards.

8. DATA RETENTION (HOW LONG WE KEEP DATA)

We retain personal data only as long as necessary for:

providing Services
fulfilling orders
resolving disputes
preventing fraud
maintaining transaction history
complying with legal/tax requirements

Retention examples:

Order invoices may be retained for accounting/tax purposes.
Vendor settlement records may be retained for audit.

Once the purpose is fulfilled, data will be deleted or anonymised unless retention is required by law.

9. SECURITY MEASURES

We use reasonable safeguards such as:

HTTPS encryption
Secure hosting environment
Access control and limited internal access
Password hashing
Monitoring suspicious activity
Regular updates and patching

However, no platform can guarantee complete security. You must protect your login credentials.

10. CROSS-BORDER TRANSFER

Your personal data may be stored or processed on servers located in India or outside India depending on our service providers.

We will ensure such transfers comply with applicable Indian law.

11. USER GENERATED CONTENT (REVIEWS, RATINGS, QUESTIONS)

If you post reviews, ratings, product questions, or comments, such content may be publicly visible along with limited profile information such as your name or display name.

You should avoid posting sensitive personal data in public sections.

12. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites (vendor pages, courier tracking, etc.). We are not responsible for third-party privacy practices.

13. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

Keep you logged in
Maintain cart and checkout
Save preferences
Improve platform performance
Run analytics
Provide personalised content

You can control cookies through your browser settings. Disabling cookies may affect the Platform’s functionality.

14. YOUR RIGHTS UNDER DPDP ACT (DATA PRINCIPAL RIGHTS)

You have the following rights under DPDP Act:

14.1 Right to Access Information

You may request:

a summary of personal data being processed
processing purposes
details of whom the data is shared with

14.2 Right to Correction

You may request correction of inaccurate personal data.

14.3 Right to Erasure

You may request deletion of personal data that is no longer necessary, subject to legal retention.

14.4 Right to Withdraw Consent

You may withdraw consent at any time.
Withdrawal will not affect processing already completed.

14.5 Right to Grievance Redressal

You may file complaints to our Grievance Officer.

15. HOW TO EXERCISE YOUR RIGHTS

To exercise rights, you can:

Email: contact@anmolghar.com

We may verify your identity via OTP/email verification for security.

16. GRIEVANCE OFFICER DETAILS

Grievance Officer: Manisha Agrawal
Email: anmolgharclb@gmail.com
Phone: +91
Working Hours: 9 AM to 6 PM IST

17. VENDOR PRIVACY OBLIGATIONS

Vendors must follow strict rules:

Customer personal data can only be used for order fulfilment and support
Vendors cannot market to customers without explicit consent
Vendors must protect customer data
Vendors must delete customer data when no longer required
Vendors must report any suspected breach immediately

Violation may lead to:

suspension/termination
legal action
reporting to authorities where required

Visit Vendor Privacy Addendum (For Marketplace Sellers) page for additional obligations regarding privacy.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

Updates will be posted on the Platform with a revised “Last Updated” date.

If required, we will obtain fresh consent.

19. CONTACT INFORMATION

Entity Name: Anmol Ghar
Email: contact@anmolghar.com