Privacy Policy

Effective date: June 2026 · Last updated: June 2026

1. Who we are

This Privacy Policy describes how iBazar Trading LLP (“iBazar”, “we”, “us”) collects, uses, stores, and shares personal information when you use our mobile applications, including iBazar B2B (wholesale buyer app) and iBazar Delivery (delivery partner app), and related services (collectively, the “Services”).

2. Information we collect

Depending on how you use the Services, we may collect the following categories of information:

• Account & identity: mobile phone number (for OTP sign-in), name, business/shop name, email address (if provided), and account identifiers.
• Business & KYC information: GST details, business address, shop address, identity or business documents you upload for verification, and related approval status.
• Order & transaction data: products ordered, quantities, prices, invoices, delivery slots, order history, and payment method selections.
• Payment information: payment status and references from payment processors (for example, UPI or card payments via third-party gateways such as Razorpay). We do not store full card numbers on our servers.
• Location information: delivery address and, where you grant permission, device location to help set or confirm delivery addresses and serviceability.
• Communications: messages or requests you send to support, and notifications we send about orders, delivery, or account activity.
• Device & usage data: app version, device type, operating system, IP address, crash logs, and basic analytics about how the app is used (for example, via Google Firebase).

3. How we use your information

We use personal information to:

• Create and manage your account and authenticate you (including OTP verification).
• Process wholesale orders, billing, invoicing, and delivery fulfilment.
• Verify business eligibility and comply with KYC or regulatory requirements where applicable.
• Communicate with you about orders, delivery updates, support, and important service notices.
• Send push notifications where you have enabled them.
• Improve app performance, security, and reliability, and troubleshoot errors.
• Prevent fraud, abuse, and unauthorised access.
• Comply with legal, tax, and accounting obligations.

4. Legal bases (where applicable)

We process personal information as necessary to perform our contract with you (providing the Services), to comply with legal obligations, for legitimate business interests (such as security and service improvement), and, where required, based on your consent (for example, optional permissions or marketing communications).

5. How we share information

We may share personal information with:

• Service providers that help us operate the Services, such as cloud hosting (Google Firebase / Google Cloud), SMS/OTP providers, payment processors, and analytics providers.
• Delivery partners and logistics personnel who need order and contact details to complete deliveries.
• Professional advisers (legal, accounting, audit) where reasonably necessary.
• Authorities when required by law, court order, or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not sell your personal information.

6. Data retention

We retain personal information for as long as needed to provide the Services, resolve disputes, enforce agreements, and meet legal and tax requirements. Order, invoice, and payment records may be retained for several years as required under applicable Indian commercial and tax laws. When data is no longer needed, we delete or anonymise it where feasible.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted transport (HTTPS), access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure; please use a strong device lock and keep your OTP confidential.

8. Your choices and rights

• You may update certain profile and business details in the app where available.
• You may disable location or notification permissions in your device settings (some features may not work without them).
• You may request access, correction, or deletion of your account data by contacting us. Account deletion requests are described on our account deletion page.
• You may lodge a complaint with a relevant data protection authority if applicable in your jurisdiction.

9. Children

Our Services are intended for business users and are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps.

10. International transfers

Your information may be processed on servers located in India and, through our service providers, in other countries. Where data is transferred internationally, we take steps designed to ensure appropriate protection consistent with applicable law.

11. Third-party links and services

The Services may link to or integrate with third-party websites or payment apps. Their privacy practices are governed by their own policies. We encourage you to review those policies before using third-party services.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated through the app or other reasonable means.

13. Contact us

For privacy questions or requests regarding your personal data:

Related

Account & data deletion · iBazar website