Privacy Policy

1. Scope

This Privacy Policy explains how HillsMart collects, uses, stores, and shares personal information when you visit hillsmart.in, create a customer or supplier account, place or track an order, request a bulk quotation, submit a review or enquiry, use password recovery, or interact with HillsMart support.

2. Information we collect

Information you provide

• Identity and account data, including name, username, email address, mobile number, password in protected hashed form, role, and account status.
• Customer and order data, including delivery address, city, cart, favourites, order items, notes, payment status, courier details, reviews, and support communications.
• Supplier data, including business or group name, location, product speciality, profile story, supply capacity, pickup details, bank or payment information, documents, GST or FSSAI details where applicable, and product photographs, videos, or social links.
• Bulk-buyer data, including contact person, business name, GST number where supplied, product needs, quantity, delivery city, monthly requirement, quotations, and payment records.
• Information included in contact forms, complaints, emails, or WhatsApp conversations.

Information collected through use

The service may process basic technical information such as IP address, browser, device, request time, security events, and error logs through our hosting and security providers. The website uses browser storage for login sessions, customer-specific carts, and interface state. We do not currently state that we sell personal information or use third-party advertising cookies.

3. How we use information

• Create and secure accounts, authenticate users, send password-reset OTPs, and provide separate customer and supplier workspaces.
• Display approved products, process orders and enquiries, verify stock and price, coordinate suppliers, payments, pickup, shipping, delivery, returns, and support.
• Review supplier and product submissions, verify quality or compliance information, prevent fraud and abuse, and protect the platform.
• Send transactional messages about accounts, enquiries, orders, payments, product approval, stock, and delivery.
• Maintain records, prepare reports and authorised admin exports, improve services, and comply with legal, tax, accounting, safety, and regulatory duties.

We process information to perform requested services, manage our legitimate business and security interests, comply with law, and obtain consent where required.

4. When information is shared

Information is shared only as reasonably needed with relevant customers or suppliers for fulfilment; delivery, courier, logistics, payment, banking, professional, verification, and support partners; government or regulatory authorities where legally required; and service providers that host or operate the platform.

Current infrastructure may include Cloudflare for website, API, database, and security services, and Brevo for transactional email such as password-reset OTPs. A provider processes information under its own terms and safeguards. We do not sell or rent personal information for third-party advertising.

Information may also be transferred as part of a lawful merger, financing, restructuring, or sale, subject to appropriate protection and notice where required.

5. Storage, retention, and security

HillsMart uses reasonable administrative and technical safeguards, including access controls, protected account credentials, role-based interfaces, login controls, and secure network services. No online system is completely risk-free, so users should use strong unique passwords and keep OTPs private.

Information is retained for as long as needed to operate accounts and transactions, resolve disputes, prevent fraud, meet tax or legal duties, and maintain necessary business records. Some records may remain in backups or legally required archives after account closure. Service providers may process data from infrastructure located outside your state or India, subject to applicable safeguards.

6. Your choices and rights

Subject to applicable law, you may request access to or correction of your information, account closure, deletion of information no longer required, or withdrawal of optional consent. Some order, payment, supplier, complaint, fraud-prevention, and legal records must be retained even after a request.

You can update certain account details through your workspace, clear browser-stored cart or session data by signing out or clearing site data, and stop non-essential communication by contacting us. Transactional and security messages may continue while your account or order remains active.

7. Children’s privacy

HillsMart is not directed to children under 18 acting independently. A minor should use the service only through a parent or lawful guardian. Contact us if you believe a child has submitted personal information without appropriate authority.

8. Policy updates

We may update this policy when services, providers, security practices, or legal requirements change. The latest version and effective date will be posted on this page. Material changes may also be communicated through the website or registered contact details.

9. Privacy contact

For a privacy question or request, identify the relevant account using your registered email or mobile number. Do not send passwords, OTPs, or unnecessary identity documents by open message.