🛡️Privacy Policy

1. Introduction & Overview

Mharo Bazar ("Mharo Bazar", "we", "us", or "our", MSME Udyam Registration No. UDYAM-RJ-17-0685563) operates the marketplace website located at www.mharo-bazar.in. We are committed to safeguarding the privacy and personal data of our users, buyers, and merchant partners in strict compliance with the Indian Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Digital Personal Data Protection Act, 2023.

2. Information We Collect

We collect and process the following categories of information to provide you with seamless marketplace services:

• Personal Identity & Contact Information: Name, email address, mobile telephone number, and Google OAuth account profile identifier.
• Delivery & Shipping Information: Physical delivery address, landmark, city, state, postal PIN code, and contact person phone number.
• Transactional & Order Information: Details of purchased items, order dates, payment statuses, GST tax invoices, refund requests, and delivery confirmation OTP timestamps.
• Payment Information: Transaction references and payment method types tokenized securely via our payment gateway aggregator (Razorpay). We never store debit/credit card numbers, CVVs, or online banking passwords on our servers.
• Technical & Usage Data: IP address, device type, operating system, browser configuration, and shopping category interaction logs.

3. Purpose of Processing

Your data is processed strictly for legitimate business and transactional purposes:

• To process, pack, dispatch, and fulfill your marketplace orders.
• To facilitate doorstep Open Box Delivery and verify the secret delivery OTP.
• To send order confirmations, tracking alerts, and invoice PDFs via email and SMS.
• To process customer support inquiries and warranty replacements within 7 days.
• To comply with statutory tax laws, including GST e-invoicing and Section 52 Tax Collection at Source (TCS).
• To prevent fraud, abuse, and unauthorized marketplace activity.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third-party advertisers. Information is disclosed solely to authorized service partners:

• Delivery & Dispatch Personnel: Recipient name, address, and phone number shared strictly for completing parcel handovers.
• Payment Aggregators: Razorpay Software Private Limited for encrypted payment capture.
• Transactional Email & SMS Services: Resend API for transactional receipt delivery.
• Statutory & Law Enforcement Authorities: When required by applicable Indian laws or court orders.

5. Security Practices

We implement comprehensive technical and organizational security measures including TLS 1.3 encryption in transit, AES-256 encrypted database storage, secure JWT authentication tokens, and strict role-based access control.

6. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are: