Privacy Policy

This Privacy Policy (“Policy”) describes how Vivan Buildmart Private Limited (“Company”, “we”, “us”, “our”) collects, processes, uses, stores, discloses, and protects Personal Data of Users on the Platform.

We are committed to ensuring that the User's Personal Data is handled lawfully, fairly, transparently, and securely in accordance with the applicable data protection laws in India, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 (“IT Act”), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

By accessing or using our Platform or providing information to us, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the Platform or providing any personal information.

The Platform is not intended for individuals under the age of 18 (Eighteen). We do not knowingly collect Personal Data from children. If you are a parent or guardian and believe that your child has provided us with Personal Data, please contact us at the address provided below to request the deletion of such information.

For the purposes of this Policy, certain terms used herein shall have the meanings assigned to them in a manner consistent with the provisions of the DPDP Act:

• Applicable Law means all laws and regulations in India governing the collection, use, storage, or disclosure of Personal Data, including the DPDP Act, IT Act, SPDI Rules, and any other relevant data protection laws.
• Consent Manager means a person or entity registered with the Data Protection Board of India that acts as a single point of contact to enable a Data Principal to give, manage, review, and withdraw their consent through an accessible, transparent, and interoperable platform.
• Data Fiduciary means any person, company, or entity who alone or in conjunction with others determines the purpose and means of processing Personal Data. The Company shall be considered the Data Fiduciary in respect of the Personal Data collected through its Platform.
• Data Processor means any person, company, or entity that processes Personal Data on behalf of a Data Fiduciary and under its instructions (e.g., third-party service providers for data hosting, analytics, payment processing, logistics, or communication).
• Data Principal means the individual to whom the Personal Data relates, including any natural person who accesses or uses the Platform, whether as a Customer or Vendor.
• Personal Data means any data about the User who is identifiable by or in relation to such data, either directly or indirectly (including name, contact number, email, address, etc.).
• Products shall mean all construction materials including but not limited to cement, bricks, concrete, steel, and any other construction materials listed, displayed, offered for sale, supplied, or otherwise transacted through the Platform by registered Vendors.
• Service(s) means any Product, feature, or functionality provided by the Company through its Platform, including buying, selling, delivery of Products, customer support, notifications, and other related services.
• Sensitive Personal Data or Information / SPDI includes information such as passwords, financial information (e.g., bank account, credit/debit card details), and other information classified as sensitive under the SPDI Rules.
• User / you / your means any individual or business entity who registers, accesses, or uses the Platform. A User includes (i) Vendors — individuals or business entities who register to list, display, or sell Products on the Platform, and (ii) Customers — individuals or businesses purchasing the Products through the Platform.

When you visit the Platform, we collect certain information about your device, your interaction with the Platform, and such other information as may be necessary to facilitate the sale, purchase, or delivery of the Products. We collect and process such Personal Data only after obtaining the User's consent through an electronic notice or checkbox displayed at the time of registration or transaction.

1. Device Information

When you access our Platform, we may automatically collect certain information about your device, including web browser version, IP address, time zone, cookie information, as well as details about the websites or products you view, search terms, and your interactions with our Platform. This information is collected using cookies, log files, web beacons, tags, and pixels — solely for analytics and performance purposes. We do not track unnecessary identifiers such as IMEI numbers or precise GPS data unless required for logistics or delivery purposes, and only with express consent.

2. Sign Up Information

When you sign up for buying or selling Products through the Platform, we may collect your name, address, email address, ID proofs and phone number for verification and KYC (Know Your Customer). Where Vendors are verified, KYC procedures are conducted in accordance with applicable Reserve Bank of India (RBI) and Ministry of Corporate Affairs (MCA) regulations.

3. Payment Information

When you make payments through the Platform, we may collect billing address, payment method details, and transaction identifiers. We comply with the RBI's Restriction on Storage of Actual Card Data (Card-on-File) directions dated July 28, 2022. We do not store card numbers, expiry dates, or CVV details. All card payments are processed through RBI-authorised and PCI-DSS-compliant payment gateways. For UPI transactions, we adhere to NPCI guidelines and do not store UPI IDs, PINs, or authentication data. Vendor bank account details are stored in encrypted form and retained only until completion of payment settlement.

4. Customer Support Information

When you contact our customer support team, we may collect your name, contact details, and any other information you choose to provide, used solely for the purpose of providing customer support and improving service quality.

We use your Personal Data in accordance with the purposes for which it was collected and in compliance with the DPDP Act:

• To process transactions, confirm orders, and facilitate the delivery or exchange of Products — including verifying payment details, issuing invoices, and providing purchase confirmations.
• To communicate with you regarding your transactions, delivery of Products, account activity, and important updates related to our Services. Promotional messages are sent only if you have opted in, and you may unsubscribe at any time.
• To provide customer support, address inquiries, resolve issues, and improve our customer service operations.
• To analyze User interactions and activity on the Platform — using cookies or similar technologies — to monitor performance, enhance User experience, and personalize content.
• To comply with Applicable Laws, including for fraud prevention, taxation, accounting, and responding to lawful requests from government or regulatory authorities.

Your Personal Data will not be sold, leased, or distributed to third parties, except in the circumstances described below:

• With third parties when you have given clear and explicit consent. You may withdraw your consent at any time, subject to legal and contractual limitations.
• To comply with Applicable Laws, legal obligations, court orders, or lawful requests from government or regulatory authorities.
• With trusted third-party service providers who assist us in operating the Platform, including:
  • Payment gateways for secure transaction processing.
  • Logistics and delivery partners to fulfill orders.
  • Hosting and IT service providers for data storage and management.
  • Customer support vendors.
• With our affiliates, subsidiaries, or group companies for legitimate business purposes, including internal administration, analytics, and fraud prevention.
• In the event of a merger, acquisition, reorganization, or sale of our business or assets — with the receiving entity bound to uphold data protection standards consistent with this Policy.
• The Platform may include links to third-party websites, applications, or social media platforms. These external platforms are governed by their own privacy policies, and we are not responsible for their data protection measures.
• Personal Data may be transferred or stored outside India only to jurisdictions notified by the Government of India as permissible under Applicable Laws, with appropriate contractual and technical safeguards in place.

By using the Platform, you expressly acknowledge and consent to the collection, use, storage, and limited sharing of your Personal Data as described in this Privacy Policy.

• We implement appropriate technical and organizational safeguards to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Data is stored on secure servers, with access restricted to authorized personnel.
• Sensitive information such as payment details and authentication data is encrypted during both transmission and storage using industry-standard encryption technologies. No system is completely secure, but we remain committed to the highest standards of data protection.
• Periodic audits and access-control reviews are conducted to ensure ongoing compliance with the DPDP Act and maintain the integrity and security of Personal Data.
• In the event of any actual or suspected personal data breach, we will take immediate steps to investigate and mitigate the incident. In accordance with Section 8(6) of the DPDP Act, we will inform the Data Protection Board of India and affected Users in the manner prescribed.

• While we take all reasonable precautions to ensure that our Platform, servers, and communications are secure, the Company does not warrant that the Platform, its servers, or emails sent by us or on our behalf are free from viruses, malware, or other harmful components.
• The Company shall not be liable for any damages of any kind arising from the use of the Platform, including direct, indirect, incidental, punitive, or consequential damages, loss of data, goodwill, business opportunities, or profits. Your continued use of the Platform signifies your acceptance of these conditions, and such use is at your own risk.

• We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Applicable Law, regulation, contractual obligations, or legitimate business purposes.
• Your Personal Data may continue to be retained where necessary for the establishment, exercise, or defense of legal claims, or to comply with lawful requests from authorities. Once the retention period expires or the data is no longer needed, your Personal Data will be securely deleted, irreversibly anonymized, or archived in accordance with the DPDP Act.

• You have the right to request access to, modification of, or deletion of your Personal Data held by the Company. To exercise this right, please submit a written request to support@gobuildmart.com, clearly specifying whether you wish to update, correct, or delete your information.
• Upon receiving your request, the Company will take reasonable steps to verify your identity and respond within 30 (Thirty) days from the date of receipt of your written request, or any additional information required to process your request.
• In case of a deletion request, the Company will ensure that your Personal Data is securely and permanently removed from its systems, except where retention is required by law, for legitimate business purposes, or in an anonymized form.
• When a deletion request is processed:
  • Your Personal Data and Products (in case of Vendors) will be permanently removed, except where retention is mandated by law.
  • Your account will be deactivated, and access to the Platform and previously stored data will be removed.
  • Users who wish to continue using the Platform after deletion will need to create a new account and provide fresh consent.

By visiting this Platform, you agree that the laws of India, without regard to its conflict of laws principles, govern this Privacy Policy. Any dispute arising in respect hereof shall be subject to and governed by the dispute resolution process set out in the Platform's Terms of Use available at https://www.gobuildmart.com/.

The Company is committed to protecting the privacy of its Users. To handle data protection-related queries and grievances, the Company has appointed a Grievance Officer.

The Grievance Officer shall acknowledge receipt of your grievance within 7 (seven) working days and shall make best efforts to resolve it within 30 (thirty) days from the date of receipt.

If you are not satisfied with the resolution provided by the Grievance Officer, or if no response is received within the prescribed period, you may escalate the matter to the Data Protection Board of India in accordance with the prevailing data protection framework.

For any questions or clarifications with respect to this Privacy Policy, comments, concerns, or feedback, please contact us:

This Privacy Policy may be updated periodically to reflect changes in legal requirements or operational processes. Updated versions will include a revised “Last Updated” date. Continued use after such updates constitutes acceptance of the revised Policy.