LEGAL
Privacy Policy
Last updated: August 2026
Your personal data belongs to you. This policy explains what we collect when you shop at Umang Bazaar, why we need it, who we share it with, how long we keep it, and the rights you have over it.
01 Overview
This Privacy Policy explains how Umang Bazaar collects, uses, shares and protects your personal data when you visit umangbazaar.com, create an account, place an order or contact us. It applies alongside our Terms of Service.
We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 along with the rules made under them. By using our website, you confirm that you have read and understood this policy.
02 Who We Are
Umang Bazaar is the data fiduciary responsible for your personal data — meaning we decide why and how it is processed.
Registered name: [Your registered business / legal entity name]
Registered address: [Your registered business address]
Email: support@umangbazaar.com
03 What We Collect
Information you give us: your name, email address, phone number, billing and delivery address, pin code, order details, size and preference information, bank or UPI details shared for a Cash on Delivery refund, reviews and photographs you post, and the content of messages you send us.
Information collected automatically: your IP address, device and browser type, operating system, pages viewed, products browsed, time spent, referring website and approximate location derived from your IP or pin code.
Information from others: delivery status updates from courier partners, payment confirmation and failure reasons from payment gateways, and basic profile data if you sign in through a third-party login.
We do not collect Aadhaar, PAN, biometric data or health data, and we ask you not to send such documents to us unless we specifically request them for a verified business reason.
04 How We Collect It
We collect data when you browse the site, create an account, add items to your cart, place or track an order, request a return or refund, apply a coupon, subscribe to updates, write a review, or contact us by email, phone or WhatsApp.
Some data is collected automatically through cookies and similar technologies, as explained in section 9.
05 Why We Use It
We use your personal data to process and deliver your orders, take payments and issue refunds, keep you updated on order status, manage your account and cashback balance, handle returns and exchanges, and answer your questions.
We also use it to improve our products, website and service, understand which pages and products work, prevent fraud and misuse of offers, keep the site secure, and meet our legal, tax and accounting obligations. Where you have agreed to it, we use it to send you offers and product updates.
We do not sell your personal data to anyone.
06 Consent & Legal Basis
We process your data with your consent, which you give when you place an order, create an account or opt in to marketing, and for legitimate uses permitted by law such as fulfilling the order you asked for and complying with legal obligations.
You may withdraw your consent at any time by writing to us. Withdrawal applies going forward and does not affect processing already carried out, and it may mean we can no longer provide certain services — for example, we cannot deliver an order without your address and phone number. Some data must be retained even after withdrawal where the law requires it.
07 Payment Information
Payments are processed by PCI-DSS compliant third-party payment gateways. Your full card number, CVV, UPI PIN and net banking credentials are entered on their secure systems and are never stored on our servers or visible to us.
We receive only the transaction reference, amount, status and the last few digits or masked identifier of the instrument used. Bank or UPI details that you share with us for a Cash on Delivery refund are used solely to process that refund.
10 Marketing Messages
With your consent, we may send you offers, new arrivals and festive updates by email, SMS or WhatsApp. Every message includes a way to opt out, and you can also unsubscribe from your account or by writing to us.
Opting out of marketing does not stop transactional messages — order confirmations, dispatch and delivery updates, refund notifications and account alerts — as these are necessary to service your order.
11 How Long We Keep It
We keep your personal data only as long as it is needed for the purpose it was collected, or as long as the law requires. Order and invoice records are retained for the period prescribed under tax and accounting law, generally eight years.
Account data is kept while your account is active. If you delete your account or withdraw consent, we erase or anonymise your data except where retention is legally required or necessary to resolve a dispute or enforce our terms.
12 How We Protect It
We use reasonable security safeguards including HTTPS encryption across the site, access controls limiting staff access to what their role requires, secure hosting, and payment handling through certified gateways.
No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security. Please keep your account password confidential and never share OTPs — our staff will never ask you for a password, OTP, CVV or UPI PIN.
13 Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the right to access a summary of the personal data we hold about you and how it is processed; to have inaccurate or incomplete data corrected or updated; to have your data erased where it is no longer needed and the law does not require us to keep it; to withdraw consent; to nominate another person to exercise these rights on your behalf in the event of your death or incapacity; and to have your grievances addressed.
To exercise any of these, write to us at the address in section 19 or to our Grievance Officer in section 17. We may need to verify your identity first, and we will respond within a reasonable period. You also have the right to complain to the Data Protection Board of India if you are not satisfied with our response.
14 Children's Data
Our website is intended for users aged 18 and above. We do not knowingly collect personal data of children without verifiable consent from a parent or legal guardian, and we do not use children's data for tracking, behavioural monitoring or targeted advertising.
If you believe a child has provided us personal data, please contact us and we will delete it.
15 Where Data Is Stored
Your data is stored on servers operated by our e-commerce platform and service providers, which may be located outside India. Where data is transferred abroad, we take reasonable steps to ensure it is protected to a comparable standard and transfers are made only to countries not restricted by the Government of India.
16 Data Breaches
If a personal data breach occurs, we will inform you and the Data Protection Board of India as required by law, and tell you what happened, what data was affected and what steps you can take to protect yourself.
17 Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made under it, and the Consumer Protection (E-Commerce) Rules, 2020, the details of our Grievance Officer are:
[Name of Grievance Officer]
📍 [Your registered business address]
🕐 Mon–Sat, 10 AM – 6 PM IST
Complaints are acknowledged within 48 hours and resolved within one month of receipt.
18 Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or the law. The revised version takes effect once published on this page with its "Last updated" date changed, and material changes will be notified to you by email or a notice on the website.
19 Contact
For any question about this policy or your personal data, reach out to us:
📞 +91 816 914 0183 — Mon–Sat, 10 AM – 6 PM IST
📍 [Your registered business address]