1 Who handles your information
ReelMart operates the Platform from Door No 3-96, Murthimma Nilayam, Ramalayam Street, Bapatla, Andhra Pradesh 522102, India. For privacy questions, contact our Grievance Officer (see the Grievance Policy). This policy covers visitors, Buyers, sellers, authorised staff and people who contact us through ReelMart websites, apps and participating storefronts.
ReelMart determines how information is used for its own accounts, security, billing and Platform operations. Sellers separately determine how they use information for their goods sales, tax records and lawful customer relationships. For some store-management tasks, ReelMart processes information on the seller's instructions. A seller's separate privacy notice applies to its independent processing and must not contradict mandatory protections. Payment providers and carriers may also have independent legal obligations.
2 Information and purposes
| Information | Why we use it |
|---|---|
| Name, phone/email, verification status, account identifiers and authentication records | Create and secure accounts, verify login or a requested change, prevent unauthorised access |
| Delivery and billing addresses, recipient contacts, cart/order details, returns, reviews and support messages | Process and fulfil orders, coordinate delivery, handle complaints and supply the requested account features |
| Payment references/status, refunds, invoices and transaction records | Reconcile payments, prevent fraud, administer refunds and meet accounting requirements |
| Seller business/representative information, PAN/GST details, verification documents, bank/payout details and connected-payment authorisations | Verify and administer seller accounts, enable authorised integrations and bill or settle under the applicable arrangement |
| Agreement versions, consent wording, acceptance times and signatory details | Record the terms you accept, provide copies and resolve contractual or legal questions |
| Store content, product text/images and staff permissions | Host the store, manage catalogue and authorised access; provide editing features the seller chooses |
| IP address, device/browser details, diagnostic and security logs and necessary session/storage information | Operate, troubleshoot and protect the service and investigate misuse |
Information comes from you, the seller handling your order, your authorised users, and providers returning payment, delivery or verification results. We minimise collection to what the feature and legal purpose require. Do not send full card credentials, banking passwords, OTPs or unrelated sensitive documents to support. Payment authentication normally occurs through the payment provider; ReelMart receives transaction information needed for the service.
Where an enabled AI catalogue feature is used, the submitted product information or image may be processed by the configured model or image provider to return the requested output. Sellers must not include Buyer details or unrelated personal/sensitive information. This feature is not permission to train models on customer records. Any materially different data use requires a separate assessment and notice or consent where necessary.
3 Permission and choices
We request consent where required and otherwise process only where applicable Indian law permits the particular purpose. Using the Platform does not constitute unrestricted consent to marketing, unrelated sharing or future purposes. Required fields and the purpose of collection should be explained at the relevant interaction. If you do not provide essential delivery or verification information, we may be unable to fulfil the requested service.
We send necessary account, security, payment and order messages through the enabled channels. Optional marketing requires the relevant permission and an accessible opt-out. Withdrawing promotional consent does not stop essential messages about an existing order. You may contact us to withdraw consent; we will explain any effect on the service and any lawful reason records must be retained. Withdrawal does not undo processing lawfully completed before it.
When phone or email linking is enabled, verification may connect a confirmed identifier with your existing account. An identifier is not a login method until required checks succeed. We will explain any proposed account move/linking; we do not assume permission to merge unrelated purchase histories just because contact details match.
4 Sharing
We share the minimum reasonably necessary information with the seller you transact with; payment providers such as Razorpay; the logistics provider selected for a shipment and its delivery partners; hosting/database, communications, security and support providers; and professional advisers where needed. The existing service architecture includes AWS and Supabase, and enabled notification arrangements may use SMS, email, WhatsApp or push providers. Providers used depend on the feature enabled for your account or order. Contact us for information about the providers relevant to your data.
Providers acting on our instructions must have appropriate confidentiality, use and security restrictions. We may disclose information to authorities where legally required or to establish and defend lawful claims. A business transfer may involve necessary information with appropriate safeguards and notice. We do not sell personal information. Sellers may not access other sellers' private customer/order records merely by participating in ReelMart.
Public store details, product listings and reviews are visible to their intended public audience. Do not put private delivery details in a public review. We may use aggregated information for service reporting where it does not identify a person; merely replacing a name with an identifier does not necessarily anonymise data.
5 Cookies and device storage
Necessary cookies or similar storage support authentication, session security, preferences and shopping functions. Store domains can have separate sessions. Blocking necessary storage may prevent these functions from working.
Order and payment reporting can be calculated from transaction records without visitor-tracking cookies. If optional visitor analytics or advertising technologies are enabled, we will identify the purpose, provider and controls and obtain consent where required before use. Optional choices must be as easy to decline or withdraw as to accept. Browser controls can also remove or restrict stored data.
6 Retention locations and security
We retain account and operational records while needed to deliver the service, then delete or anonymise them when no longer necessary, subject to tax/accounting requirements, disputes, fraud prevention and lawful holds. Transaction and invoice records may remain after account deletion. We restrict retained records to their continuing purpose; we do not retain every field indefinitely merely because some invoice information must be kept.
Retention periods are set by category and legal purpose. You may request information about the period applicable to your records. Backups are removed through their controlled expiry cycle and are not routinely restored for ordinary use after deletion. Where a backup must be restored, applicable deletion instructions must be reapplied.
Processing may involve systems or authorised providers in India and other locations. Transfers must meet applicable Indian requirements and appropriate contractual/security protections, including any restrictions applying to the data. Contact us for information about the locations and safeguards relevant to your information.
We use reasonable technical and organisational safeguards, including access restrictions and security measures appropriate to the information and systems. No system is risk-free. Suspected incidents are investigated, contained and notified to affected people and authorities when applicable law requires. These measures do not guarantee absolute protection.
7 Your requests and complaints
You can contact our Grievance Officer (see the Grievance Policy) to request access/information about your personal data, correction, account closure/deletion, withdrawal of consent or help with a privacy concern. We verify identity proportionately and explain any lawful limit or retained records. You may act through an authorised representative where permitted. Statutory rights, including nomination and escalation to the competent data-protection authority, are available when the relevant provisions apply; the phased commencement of law is not a reason to ignore operational requests we can fulfil now.
Grievance Officer: Pendam Suryamani, at the email and postal address in section 1. We aim to acknowledge privacy requests within forty-eight hours and address them within one month, or sooner where law requires. If a matter requires more information, we will explain what is needed and provide progress updates without overriding a mandatory deadline. You retain the right to approach the legally competent authority or forum.
8 Children and policy changes
Accounts and purchases are intended for adults aged eighteen or over. Do not create an account for a child using false age information. If we learn that a child's personal information has been collected without an appropriate lawful arrangement, we will investigate and take appropriate restriction/deletion steps. Contact us if you believe this has happened. Any future child-directed service requires a separate compliant design and notice.
We will publish the current effective date and notify material changes. A revised policy does not retrospectively authorise a new purpose. We will seek fresh consent where required before making a materially different use of your information.