Privacy Policy

This Privacy Policy ("Policy") describes how Vivan Buildmart Private Limited ("Company", "we", "us", "our") collects, processes, uses, stores, discloses, and protects Personal Data (as defined below) of Users (as defined below) on the Platform (as defined below).

We are committed to ensuring that the User's Personal Data is handled lawfully, fairly, transparently, and securely in accordance with the applicable data protection laws in India, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 ("IT Act"), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

By accessing or using our Platform or providing information to us, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the Platform or providing any personal information.

The Platform is not intended for individuals under the age of 18 (Eighteen). We do not knowingly collect Personal Data from children. If you are a parent or guardian and believe that your child has provided us with Personal Data, please contact us at the address provided below to request the deletion of such information.

Definitions

For the purposes of this Policy, certain terms used herein shall have the meanings assigned to them in a manner consistent with the provisions of the DPDP Act:

i. "Applicable Law" means all laws and regulations in India governing the collection, use, storage, or disclosure of Personal Data, including the DPDP Act, IT Act, SPDI Rules, and any other relevant data protection laws.

ii. "Consent Manager" a person or entity registered with the Data Protection Board of India that acts as a single point of contact to enable a Data Principal to give, manage, review, and withdraw their consent through an accessible, transparent, and interoperable platform. A Consent Manager facilitates the exercise of the Data Principal's rights but does not itself determine the purpose or means of processing Personal Data;

iii. "Data Fiduciary" means any person, company, or entity who alone or in conjunction with others determines the purpose and means of processing Personal Data. For the purposes of this Privacy Policy, Company shall be considered the Data Fiduciary in respect of the Personal Data collected through its Platform;

iv. "Data Processor" means any person, company, or entity that processes Personal Data on behalf of a Data Fiduciary and under its instructions. For instance, third-party service providers engaged by the Company for functions such as data hosting, analytics, payment processing, logistics, or communication may act as Data Processors;

v. "Data Principal" means the individual to whom the Personal Data relates and who is the subject of such data. This includes any natural person who accesses or uses the Platform, whether as a Customer, or Vendor, and whose Personal Data is collected or processed by the Company;

vi. "Personal Data" means any data about the User who is identifiable by or in relation to such data, either directly or indirectly (including name, contact number, email, address, etc.);

vii. "Products" shall mean all construction materials including but not limited to cement, bricks, concrete, steel, and any other construction materials that are listed, displayed, offered for sale, supplied, or otherwise transacted through the Platform by registered Vendors;

viii. "Service(s)" means any Product, feature, or functionality provided by the Company through its Platform, including buying, selling, delivery of Products, customer support, notifications, and other related services.

ix. "Sensitive Personal Data or Information"/ "SPDI" includes information such as passwords, financial information (e.g., bank account, credit/debit card details), and other information classified as sensitive under the SPDI Rules.

x. "User"/"you"/"your" means any individual or business entity who registers, accesses, or uses the Platform or any of its services by providing Personal Data voluntarily or through automated means. A User shall include: (i) Individuals or business entities who register to list, display, or sell the Products on the Platform ("Vendors") and (ii) Individuals or businesses purchasing the Products through the Platform ("Customers").

Collecting Personal Data

When you visit the Platform, we collect certain information about your device, your interaction with the Platform, and such other information as may be necessary to facilitate the sale, purchase, or delivery of the Products. We may also collect additional information if you contact us for customer support. We collect and process such Personal Data only after obtaining the User's consent through an electronic notice or checkbox displayed at the time of registration or transaction.

1. Device Information

When you access our Platform, we may automatically collect certain information about your device, including, but not limited to, your web browser version, IP address, time zone, cookie information, as well as details about the websites or products you view, search terms, and your interactions with our Platform. This information is collected using technologies such as cookies, log files, web beacons, tags, and pixels. Cookies are used solely for analytics and performance purposes to help us understand User interactions and improve the functionality and efficiency of the Platform. Users may manage their cookie preferences at any time through their browser settings to ensure purpose limitation. We do not track unnecessary identifiers such as IMEI numbers or precise GPS data unless such information is specifically required for logistics or delivery purposes, and in such cases, express consent is obtained prior to collection. The purpose of collecting device information is to ensure the accurate loading of our Platform and to perform analytics on Platform usage to enhance and optimize our Platform's performance. We may share this information with our third-party service providers or processors strictly for business purposes.

2. Sign Up Information

When you sign up for the buying and selling of the Products through the Platform, we may collect certain personal information, including but not limited to your name, address, email address, ID proofs and phone number for the purpose of verification and KYC (Know Your Customer). This information is collected directly from you to facilitate your registration, order related updates, verify transaction for security purposes, generate invoices, and enable participation in buying and selling of the Products on the Platform. Where Vendors are verified, KYC procedures are conducted in accordance with applicable Reserve Bank of India (RBI) and Ministry of Corporate Affairs (MCA) KYC regulations to ensure compliance and authenticity. Based on your communication preferences, we may also share relevant information about Products, services, or promotional offers. We may share this information with our third-party service providers strictly as necessary to fulfill these business functions securely and efficiently.

3. Payment Information

When you make payments for buying Products through the Platform, we may collect payment related information necessary to process your transactions. This may include billing address, payment method details, and transaction identifiers. For transactions involving debit or credit cards, we comply with the RBI's Restriction on Storage of Actual Card Data (Card-on-File) directions dated July 28, 2022, and subsequent circulars issued under the Payment and Settlement Systems Act, 2007. We do not store card numbers, expiry dates, or CVV details. All card payments are securely processed through RBI-authorised and PCI-DSS-compliant payment gateways. For transactions made through Unified Payments Interface (UPI), we adhere to the NPCI (National Payments Corporation of India) guidelines and do not store UPI IDs, PINs, or any transaction authentication data. In the case of Vendors, bank account details are stored in encrypted form, with access strictly limited to authorised personnel and retained only until the completion of payment settlement. We do not store or directly handle your complete payment information; instead, such data is securely processed and stored by the third-party payment processors. These processors handle your information in accordance with applicable data protection laws and their own privacy policies to ensure secure and efficient payment processing.

4. Customer Support Information

When you contact our customer support team, we may collect certain personal information such as your name, contact details, and any other information you choose to provide to help us understand and resolve your inquiry. This information is collected directly from you and is used solely for the purpose of providing customer support, responding to your questions, troubleshooting issues, and improving the overall quality of our support services.

Using Personal Data

We use your Personal Data in accordance with the purposes for which it was collected and in compliance with the provisions of the DPDP Act. Your information is processed lawfully, fairly, and only to the extent necessary to deliver our Services and operate the Platform efficiently:

  1. When you buy or sell Products through the Platform, we use your Personal Information to process transactions, confirm orders, and facilitate the delivery or exchange of Products. This may include verifying payment details, issuing invoices, providing purchase confirmations, delivery details and responding to related inquiries. Where necessary, we may share your information with trusted third-party service providers, including payment processors and logistics partners, to ensure secure and efficient transaction and delivery handling.
  2. We use your contact details to communicate with you regarding your transactions, delivery of the Products, account activity, and important updates related to our Services. If you have opted to receive marketing communications, we may send you promotional messages about new Products, special offers, or related services. You may manage your communication preferences or unsubscribe from promotional emails at any time by following the instructions provided in our communications.
  3. Your Personal Data may be used to provide customer support, address inquiries, resolve issues, and ensure a positive user experience. We may retain records of communications for quality assurance, training, and improvement of our customer service operations.
  4. We analyze User interactions and activity on the Platform to monitor performance, enhance User experience, and improve our content and functionality. This may involve the use of cookies or similar technologies to understand browsing behavior, preferences, and purchasing trends, allowing us to tailor and personalize your experience on the Platform.
  5. We process and retain Personal Data as required under Applicable Laws, including for fraud prevention, taxation, accounting, and responding to lawful requests from government or regulatory authorities. Data retention is carried out only for as long as necessary to meet these obligations or for any other lawful purpose consistent with the DPDP Act, 2023.

Sharing of Personal Data

We may share your Personal Data collected through the Platform in accordance with the purposes stated in this Privacy Policy and in compliance with the DPDP Act. Your Personal Data will not be sold, leased, or distributed to third parties, except in the circumstances described below:

  1. We may share your Personal Data with third parties when you have given clear and explicit consent for such disclosure. You may withdraw your consent at any time by contacting us, subject to legal and contractual limitations.
  2. We may disclose your Personal Information to comply with Applicable Laws, legal obligations, court orders, or lawful requests from government or regulatory authorities, where such disclosure is necessary and permitted under the DPDP Act.
  3. Your Personal Data may be shared with trusted third-party service providers who assist us in operating the Platform and delivering our Services. This may include:
    • Payment gateways for secure transaction processing.
    • Logistics and delivery partners to fulfill orders.
    • Hosting and IT service providers for data storage and management.
    • Customer support vendors to address user inquiries and issues.
    All such third parties are bound by confidentiality and data protection obligations to ensure your information is used only for the intended purpose and is handled securely. We also conduct due diligence on all third-party processors and ensure that data processing agreements entered into with them are fully consistent with the provisions of the DPDP Act and IT Act and SPDI Rules.
  4. We may share your Personal Data with our affiliates, subsidiaries, or group companies for legitimate business purposes, including internal administration, analytics, fraud prevention, and improving Platform functionality. Such sharing is conducted in compliance with the DPDP Act and with adequate safeguards to protect your data.
  5. In the event of a merger, acquisition, reorganization, or sale of our business or assets, your Personal Data may be transferred as part of the transaction. We will ensure that the receiving entity upholds data protection standards consistent with this Privacy Policy and Applicable Laws.
  6. The Platform may include links to third-party websites, applications, or social media platforms. Please note that such external platforms are governed by their own privacy policies, which are beyond our control. Once you leave our Platform, the handling of any information you provide will be subject to the privacy practices of the respective third party. We encourage you to review the privacy policies of those websites before sharing any Personal Data. We are not responsible for the privacy practices, content, or data protection measures of such third-party platforms.
  7. Personal Data may be transferred or stored outside India for processing, provided that:
    • The receiving jurisdiction ensures adequate data protection standards; and
    • Appropriate contractual and technical safeguards are in place.
    Cross border data transfers will be made only to jurisdictions notified by the Government of India as permissible under Applicable Laws, and such transfers shall be governed by appropriate contractual safeguards to ensure continued protection of your Personal Data in accordance with the DPDP Act and other applicable regulations.
  8. By using the Platform, you expressly acknowledge and consent to the collection, use, storage, and limited sharing of your Personal Data as described in this Privacy Policy. You also consent to the disclosure and transfer of your Personal Data to our affiliates, service providers, and other third parties for the purposes outlined above, in accordance with the DPDP Act and other Applicable Laws.

Protection of Personal Data

  1. We take the security of your Personal Data seriously and implement appropriate technical and organizational safeguards to protect it against unauthorized access, disclosure, alteration, or destruction. Your Personal Data is stored on secure servers and protected through advanced security protocols. Access to this data is restricted to authorized personnel who are required to maintain its confidentiality.
  2. Sensitive information such as payment details and authentication data is encrypted during both transmission and storage using industry-standard encryption technologies. While we take all reasonable steps to protect your information, please note that no system or method of data transmission over the internet is completely secure. Therefore, we cannot guarantee absolute security but remain committed to maintaining the highest standards of data protection in compliance with the Digital Personal Data Protection Act, 2023.
  3. Periodic audits and access-control reviews are conducted to ensure ongoing compliance with the Digital Personal Data Protection Act, 2023 and to maintain the integrity and security of Personal Data. If the organization obtains ISO 27001:2022 certification, such certification will be referenced in this Privacy Policy to further reinforce our commitment to robust data protection and information security standards.
  4. In the event of any actual or suspected personal data breach, we will take immediate steps to investigate and mitigate the incident, including implementing corrective measures to prevent recurrence. Where required under applicable law, we will notify the relevant authorities and affected individuals without undue delay. In accordance with Section 8(6) of the Digital Personal Data Protection Act, 2023, we will inform the Data Protection Board of India and the affected Users of such breach in the manner prescribed, ensuring transparency and accountability in the handling of Personal Data incidents.

Condition of Use

  1. While we take all reasonable precautions to ensure that our Platform, servers, and communications are secure, Company does not warrant that the Platform, its servers, or emails sent by us or on our behalf are free from viruses, malware, or other harmful components.
  2. The Company shall not be liable for any damages of any kind arising from the use of the Platform, including but not limited to direct, indirect, incidental, punitive, or consequential damages, loss of data, goodwill, business opportunities, or profits. Your continued use of the Platform signifies your acceptance of these conditions and acknowledgment that such use is at your own risk.

Retention of Data

  1. We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by Applicable Law, regulation, contractual obligations, or legitimate business purposes.
  2. Your Personal Data may continue to be retained where necessary for the establishment, exercise, or defense of legal claims or to comply with lawful requests from authorities. Once the retention period expires or the data is no longer needed, your Personal Data will be securely deleted, irreversibly anonymized, or archived in accordance with the DPDP Act.

Modification and Deletion of Personal Data

  1. You have the right to request access to, modification of, or deletion of your Personal Data held by the Company. To exercise this right, please submit a written request to support@gobuildmart.com, clearly specifying whether you wish to update, correct, or delete your information.
  2. Upon receiving your request, the Company will take reasonable steps to verify your identity and respond within 30 (Thirty) days from the later of:
    • The date of receipt of your written request, or
    • The date of receipt of any additional information required to process your request in compliance with Applicable Laws.
  3. In case of a deletion request, the Company will ensure that your Personal Data is securely and permanently removed from its systems, except where retention is required by law, for legitimate business purposes, or in an anonymized form.
  4. When a deletion request is processed:
    • The Company will securely and permanently remove your Personal Data and Products in case of Users selling the Products from our systems, except for any data that must be retained to comply with legal, regulatory, or contractual obligations.
    • Your account will be deactivated, and access to the Platform and any previously stored data will be removed.
    • Users who wish to continue using the Platform after deletion will need to create a new account and provide fresh consent for the collection and processing of their Personal Data for buying or selling of the Products.

Governing Law and Dispute Resolution

By visiting this Platform, you agree that the laws of India without regard to its conflict of laws principles, govern this Privacy Policy and any dispute arising in respect hereof shall be subject to and governed by the dispute resolution process set out in the Platform's Terms of Use available at https://www.gobuildmart.com/.

Grievance Redressal

Company is committed to protecting the privacy of its Users, whether they are Customers purchasing construction materials or Vendors listing their products on the Platform. We ensure that any concerns or complaints relating to the collection, use, storage, disclosure, or any other processing of Personal Data are handled promptly, fairly, and in compliance with applicable data protection laws.

To facilitate this, Company has appointed a Grievance Officer who will serve as the point of contact for all data protection related queries and grievances.

You may contact the Grievance Officer using the following details:

Name: Vishal Chovatiya

Designation: Grievance Officer

Email: support@gobuildmart.com

Address:

The Grievance Officer shall acknowledge receipt of your grievance within 7 (seven) working days and shall make best efforts to resolve it within 30 (thirty) days from the date of receipt, or within such other period as may be required under Applicable Law.

If you are not satisfied with the resolution provided by the Grievance Officer, or if no response is received within the prescribed period, you may escalate the matter to the Data Protection Board of India in accordance with the process laid down under the prevailing data protection framework.

Company encourages all Users to first reach out to the Grievance Officer before seeking external redressal, to allow an opportunity for effective and timely resolution.

Contact Us

For any questions or clarifications with respect to this Privacy Policy, comments, concerns or feedback, please contact us through the following details: In case of any query or further assistance, please contact us at:

Contact Number: +91 92279 80810

Email ID: support@gobuildmart.com

This Privacy Policy may be updated periodically to reflect changes in legal requirements or operational processes. Updated versions will include a revised "Last Updated" date and may be communicated to Users through email or notices on the Platform. Continued use after such updates constitutes acceptance of the revised Policy.

This Privacy Policy was last updated on 12/11/2025.