Privacy Policy

1. Introduction & Legal Identity

HomeMart4U (“we”, “our”, or “us”) operates the e-commerce storefront for fresh chicken cuts and farm eggs serving Mulbagal, Karnataka. We are committed to safeguarding your privacy in strict adherence to the Digital Personal Data Protection Act, 2023 (DPDP Act), the DPDP Rules, 2025, and the Information Technology Act, 2000.

This Privacy Policy explains what personal data (as a “Data Principal”) you provide to us, how we process it, the legal basis of processing, retention timelines, and your statutory rights to access, rectify, and erase your personal data.

2. Categories of Personal Data Collected

We collect only the minimum personal data strictly necessary to fulfill your fresh chicken and egg orders:

3. Legal Basis and Purposes of Processing

Under the DPDP Act 2023, we process personal data under two legitimate bases:

• Consent: Given affirmatively when registering or submitting an order to receive order tracking updates via SMS or WhatsApp.
• Certain Legitimate Uses (Section 7): Fulfilling consumer contracts (preparing food cuts, dispatching riders), complying with tax/GST accounting standards, and responding to food safety queries.

4. Disclosure to Third-Party Service Providers

We do not sell, rent, or trade your personal data. Data is shared exclusively with trusted technical partners under confidentiality contracts:

• Delivery Partners: Assigned riders receive only your name, phone number, and delivery address to complete your order drop-off.
• Transactional Notification Providers: SMS/WhatsApp gateways solely for sending automated OTPs and delivery status notifications.
• Cloud & Database Infrastructure: Secure managed database servers in India/compliant cloud zones operating under TLS encryption.

5. Your Rights as a Data Principal

Under Chapter III of the DPDP Act, 2023, you hold the following enforceable rights:

6. Data Retention & Security Controls

We implement comprehensive technical and organizational safeguards:

• HTTPS with HSTS (HTTP Strict Transport Security) encryption in transit across all pages and API endpoints.
• Bcrypt password hashing with high salt work factors; passwords are never stored in plaintext.
• Strict server-side role-based access control (RBAC) preventing unauthorized cross-customer data exposure.
• Data is retained only as long as an active account exists or as required by applicable tax retention laws.

7. Grievance Officer & Redressal Mechanism

In compliance with Rule 4(4) of the Consumer Protection (E-Commerce) Rules, 2020 and DPDP Act provisions, our appointed Grievance Officer details are: