Privacy Policy

Last updated 18 Sept 2026

Privacy Policy

Last updated 18 September 2026. This policy describes exactly what the Bijnor Bazar customer app and its servers do with your information. It was written by reading the app and the API, not from a template, and it deliberately does not claim practices this product does not have.

Who is responsible for your data

Bijnor Bazar is a multi-vendor grocery marketplace serving Bijnor, Uttar Pradesh. The operator of the platform and the data fiduciary for the purposes of Indian data protection law is [CLIENT TO SUPPLY: registered business name], registered at [CLIENT TO SUPPLY: registered business address].

What the app collects

We collect only what an order needs:

Account details — your email address, first and last name, a password (stored only as a hash, never in readable form) and, optionally, a phone number.
Delivery addresses — recipient first and last name, phone number, address lines, city, state, PIN code and country, for each address you save. The PIN code is used to price delivery; the app does not check serviceability.
Order history — the items you ordered, quantities, prices, the seller each item came from, delivery status, returns and any substitutions you accepted or declined.
Reviews and ratings you write, including any photographs you choose to attach.
Wishlist items you save.
Support tickets and contact messages you send us, including the name, email address, optional phone number and message text you enter. For messages sent through the contact form we also retain the IP address and browser or app user-agent string, solely to deal with abuse and spam; this is not shown to support staff in the normal course of handling your message.
Sign-in records — each successful and failed sign-in is recorded with the IP address, the user-agent string and a coarse device type (for example "mobile"), so that you and we can detect unauthorised access to your account.
Optional profile details that you are never required to give — date of birth and company name.
Tax registration details — only if you choose to register a GSTIN or other tax exemption, in which case we store the registration number you supply, its type and country, and the response we receive when it is verified.

What the app does not collect

This matters as much as the list above, so it is stated plainly:

There is no analytics and no tracking of any kind. The app contains no analytics SDK, no crash-reporting SDK and no advertising SDK. Nothing measures which screens you visit or how long you spend on them. We do not build a profile of you and we do not do behavioural advertising.
The app does not collect your location. It contains no location library and requests no location permission. Delivery is addressed from the address you type in, not from your device's position.
The app does not send push notifications and does not register a push token. No notification permission is requested and no device identifier is transmitted for messaging.
We never receive your card, UPI or netbanking credentials. See Payments below.
We do not sell your personal data, and we do not share it with data brokers or advertising networks.
We do not knowingly collect any data from children under 18. The service is intended for adults placing grocery orders.

Camera and photo library

The app asks for camera or photo-library access in exactly one place: attaching a photograph to a product review that you are writing. The permission is requested at the moment you tap to add a photo, never at start-up. Photos you attach are uploaded with the review and are visible to other shoppers. The app does not browse, scan or upload any other image on your device.

Payments

The payment methods currently enabled on this marketplace are Cash on Delivery and bank transfer. With Cash on Delivery you pay the delivery person directly and no payment instrument ever reaches us. With bank transfer you move the money yourself through your own bank, and we see only that the transfer arrived.

Where online card or UPI payment is enabled, it is processed by Razorpay, acting on the merchant account of [CLIENT TO SUPPLY: registered business name]. In that flow the payment sheet is operated by Razorpay and your card number, CVV, UPI PIN and netbanking credentials are entered into Razorpay's own interface. They are never transmitted to, seen by or stored on Bijnor Bazar's servers. We receive only a payment reference, the amount and whether the payment succeeded. Razorpay processes that data as an independent payment processor under its own privacy policy and RBI authorisation.

Who we share your information with

The sellers you buy from. Bijnor Bazar is a marketplace. When you place an order, the seller of each item receives the details needed to pack and hand over your order, including your delivery name, address and phone number.
Delivery personnel, who receive your name, delivery address and phone number so that they can deliver and contact you if they cannot find you.
Razorpay, where an online payment is made, as described above.
Our hosting and infrastructure providers, who store the data on our behalf under contract and may not use it for their own purposes.
Government authorities, where we are legally required to disclose, for example under tax law or a lawful order.

That is the complete list. We do not share your data with anyone else.

How long we keep it

Account, address and order records are retained for as long as your account is open and afterwards for the period that Indian tax and commercial law requires records of a sale to be kept. Sign-in records and contact-form IP addresses are kept only as long as they are useful for security and abuse handling. [CLIENT TO SUPPLY: specific retention periods, once confirmed with your accountant or legal adviser]

Your rights, and deleting your account

You can view and correct your profile details and your saved addresses at any time from the Account section of the app.

You can ask us to delete your account and personal data from Account > Delete account inside the app. Please be aware of how this currently works, because we would rather tell you than imply something faster: submitting that form files a verified deletion request as a support ticket, which a person then acts on. It is not yet an instant automated deletion. You receive a ticket reference, you can keep using the app until the deletion is carried out, you can cancel by replying to the ticket, and we confirm on that ticket once your account and personal data have been removed. When your account is deleted, your profile, addresses, wishlist, wallet balance and reward points are removed. Records of completed orders are retained where tax and accounting law requires it.

You may also withdraw consent, object to processing, or ask for a copy of the data we hold about you, by contacting us at the address below.

Security

Traffic between the app and our servers is encrypted in transit over HTTPS. Passwords are stored only as hashes. Access to customer data in our admin systems is restricted to staff who need it. No system is perfectly secure, and we do not claim otherwise.

Grievance officer

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Rules, our grievance officer is: [CLIENT TO SUPPLY: grievance officer name, email and phone]. We acknowledge complaints within forty-eight hours of receipt and endeavour to resolve them within one month, as those rules require.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the "last updated" date above. Material changes will be brought to your attention in the app.

Contact

Questions about this policy, or about your data, can be sent through Account > Contact us in the app, which reaches our support queue directly. You can also write to [CLIENT TO SUPPLY: support email address] or call [CLIENT TO SUPPLY: support phone number]. Our postal address is [CLIENT TO SUPPLY: registered business address].

Privacy Policy

Last updated 18 Sept 2026

Privacy Policy

Who is responsible for your data

What the app collects

We collect only what an order needs:

Account details — your email address, first and last name, a password (stored only as a hash, never in readable form) and, optionally, a phone number.
Delivery addresses — recipient first and last name, phone number, address lines, city, state, PIN code and country, for each address you save. The PIN code is used to price delivery; the app does not check serviceability.
Order history — the items you ordered, quantities, prices, the seller each item came from, delivery status, returns and any substitutions you accepted or declined.
Reviews and ratings you write, including any photographs you choose to attach.
Wishlist items you save.
Support tickets and contact messages you send us, including the name, email address, optional phone number and message text you enter. For messages sent through the contact form we also retain the IP address and browser or app user-agent string, solely to deal with abuse and spam; this is not shown to support staff in the normal course of handling your message.
Sign-in records — each successful and failed sign-in is recorded with the IP address, the user-agent string and a coarse device type (for example "mobile"), so that you and we can detect unauthorised access to your account.
Optional profile details that you are never required to give — date of birth and company name.
Tax registration details — only if you choose to register a GSTIN or other tax exemption, in which case we store the registration number you supply, its type and country, and the response we receive when it is verified.

What the app does not collect

This matters as much as the list above, so it is stated plainly:

There is no analytics and no tracking of any kind. The app contains no analytics SDK, no crash-reporting SDK and no advertising SDK. Nothing measures which screens you visit or how long you spend on them. We do not build a profile of you and we do not do behavioural advertising.
The app does not collect your location. It contains no location library and requests no location permission. Delivery is addressed from the address you type in, not from your device's position.
The app does not send push notifications and does not register a push token. No notification permission is requested and no device identifier is transmitted for messaging.
We never receive your card, UPI or netbanking credentials. See Payments below.
We do not sell your personal data, and we do not share it with data brokers or advertising networks.
We do not knowingly collect any data from children under 18. The service is intended for adults placing grocery orders.

Camera and photo library

Payments

Who we share your information with

The sellers you buy from. Bijnor Bazar is a marketplace. When you place an order, the seller of each item receives the details needed to pack and hand over your order, including your delivery name, address and phone number.
Delivery personnel, who receive your name, delivery address and phone number so that they can deliver and contact you if they cannot find you.
Razorpay, where an online payment is made, as described above.
Our hosting and infrastructure providers, who store the data on our behalf under contract and may not use it for their own purposes.
Government authorities, where we are legally required to disclose, for example under tax law or a lawful order.

That is the complete list. We do not share your data with anyone else.

How long we keep it

Your rights, and deleting your account

You can view and correct your profile details and your saved addresses at any time from the Account section of the app.

You may also withdraw consent, object to processing, or ask for a copy of the data we hold about you, by contacting us at the address below.

Security

Grievance officer

Changes to this policy

If we change what we collect or how we use it, we will update this page and the "last updated" date above. Material changes will be brought to your attention in the app.