Privacy Policy
Draft under review. This page is a draft that the shop is still checking. The final text will replace it. Parts marked “To be confirmed” are not decided yet. For anything urgent, contact us on +91 89687 95698.
This policy explains what personal data To be confirmed: legal name, e.g. Sharma Trade Mart ("Sharma Trader", "we") collects on www.sharmatrademart.com, why, who we share it with, how long we keep it, and what you can do about it.
Who we are: Sharma Trader, near Zero Point, Bhadram, Chamba, Himachal Pradesh 176318. Phone +91 89687 95698. For any privacy question, write to our Grievance Officer (details at the end).
1. What we collect and why
| What | Why | Needed? |
|---|---|---|
| Account: email address, name, how you sign in (email or Google) | To create your account, let you sign in and send order emails | Needed to buy |
| Phone number | To contact you about your order and delivery | Needed to buy |
| Date of birth and anniversary | Only to send you greetings | Optional. You can leave them empty or remove them at any time |
| Business details: customer type, company name, GSTIN | To put your business details on the GST invoice | Only for business purchases |
| Addresses: name of the person receiving, phone, alternate phone, house and street, locality, landmark, city, state, pincode, a label (home or office), whether it is for you or someone else, GSTIN | To deliver your order and to work out GST (it depends on the delivery state) | Needed to buy |
| Orders and invoices: what you bought, prices, tax, coupon used, delivery address, your GSTIN, courier and tracking number, order status | To deliver, handle returns and warranty, and keep the tax records the law requires | Needed to buy |
| Payment records: Razorpay order and payment references, payment method type, amount, delivery address at the time of payment, and the reason if a payment failed | To confirm payment and make refunds | Needed to buy |
| Cart and coupons: items in your basket, coupon code, which coupon you used on which order | To keep your basket and apply coupon limits | Needed to buy |
| Contact and bulk enquiry form: name, mobile, email, topic, message | To reply to you | Only if you write to us |
| Back-in-stock alerts: your email and the product | To email you once when the product is back | Only if you ask |
| Email records: to whom we sent which order email, and whether it was delivered | To prove emails were sent and retry failed ones | Automatic |
| Spam protection: a scrambled, one-way code made from your IP address, mobile and email when you use the contact form | To stop spam; we cannot turn it back into your details | Automatic, kept 2 days |
| Technical logs: IP address, browser, pages requested, time | To run and secure the website | Automatic |
| Search: the words you type in the search box | To show suggestions | Used at once and not stored |
| Video reviews: if you post a review on social media and we show it on our site, your name as shown on the post, the caption, link and picture | To show customer reviews | Only with your permission To be confirmed; removed on request |
| In your browser only: your delivery pincode (a cookie, 1 year), your wishlist and guest basket (browser storage), sign-in cookies | To show delivery estimates, remember your wishlist and basket, keep you signed in | Stays on your device, except sign-in cookies used by Clerk |
We do not collect or store your card number, CVV, UPI PIN or bank password. You enter those only in Razorpay's secure payment window.
We do not use advertising or analytics trackers. To be confirmed: before launch; update this line if any are added
We do not sell your data.
2. Who we share it with
We share only what each one needs:
| Who | What for | Where |
|---|---|---|
| Razorpay | Payments and refunds | India |
| Clerk | Sign-in | To be confirmed: country, likely USA |
| MSG91 | Sending order and enquiry emails | India To be confirmed |
| Vercel | Hosting the website and its logs | To be confirmed: region |
| Neon | Our database | To be confirmed: region |
| Cloudflare | Storing and serving product pictures (no customer records) | Worldwide network |
| Courier companies | Delivering your parcel: name, phone and address | India |
| Government authorities | Only when the law requires (for example tax authorities or a court order) | India |
Our staff see only what their job needs. For example, staff who pack and ship orders see the name, phone, address and items, but not payment details.
Some of these services store data outside India. Indian law allows this except to countries the Government restricts. We choose services that protect data with reasonable security.
3. How long we keep it
| Data | How long |
|---|---|
| Account, phone, business details | Until you ask us to delete your account, or 3 years after your last sign-in or order To be confirmed |
| Date of birth, anniversary | Until you remove them |
| Saved addresses | Until you delete them, or with your account |
| Orders, invoices, payment records, coupon use | 8 years after the end of the financial year, because tax law requires us to keep accounts To be confirmed: with the CA |
| Basket | 90 days after its last change To be confirmed |
| Enquiry form messages | 1 year after our last reply To be confirmed |
| Back-in-stock alerts | 90 days after we send the alert, or 1 year if the product never returns To be confirmed |
| Email records | 1 year |
| Spam protection codes | 2 days |
| Technical logs | As kept by our hosting provider To be confirmed: period |
If you delete your account, we still keep order, invoice and payment records for the period above, because the law requires it.
4. Your rights
You can ask us to:
- tell you what personal data we hold about you and who we shared it with;
- correct or update it (you can also edit your addresses and profile yourself);
- delete it (except what the law requires us to keep);
- withdraw consent for optional items, such as greetings or back-in-stock alerts;
- let someone you nominate act for you if you die or cannot act yourself.
Write to the Grievance Officer. We reply within one month. We may ask you to confirm your identity first.
5. Security
We use secure connections (HTTPS), sign-in through Clerk, payment checks on our server, limited staff access by role, and spam limits on our forms. No system is perfectly secure. If a breach affects your data, we will tell you without delay what happened, what it means for you, and what you can do.
6. Children
Our website is meant for adults. Please do not create an account or buy if you are under 18. If we learn that we hold a child's data without a parent's consent, we will delete it.
7. Changes
If we change this policy, we update the date at the top. For important changes, we also email account holders.
8. Contact and complaints
Grievance Officer: To be confirmed: name, Sharma Trader, near Zero Point, Bhadram, Chamba, Himachal Pradesh 176318. Email To be confirmed: grievance mailbox. Phone +91 89687 95698.
See Complaints and Grievance Officer. If you are not satisfied with our answer, you will be able to complain to the Data Protection Board of India once those provisions of the Digital Personal Data Protection Act, 2023 come into force (expected 13 May 2027).