UniicornMart B2B Private Limited ("UniicornMart", "we", "us", or "our") is committed to protecting the privacy and personal data of all users of our B2B wholesale marketplace platform. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and all applicable Indian data protection regulations.

By using UniicornMart's website, mobile application, or services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please do not use our platform.

• Data Principal: You, the individual whose personal data is being collected and processed.

• Data Fiduciary: UniicornMart B2B Private Limited, who determines the purpose and means of processing personal data.

• Personal Data: Any data about an individual who is identifiable by or in relation to such data, including name, email, phone number, address, GST number, PAN, and payment details.

• Processing: Any operation performed on personal data, including collection, storage, use, sharing, and deletion.

• Data Processor: Any third-party entity that processes personal data on behalf of UniicornMart.

• Consent Manager: A registered entity through which consent may be given, managed, reviewed, or withdrawn.

3.1 Information You Provide Directly:

• Account Information: Full name, email address, phone number (+91), password (hashed)

• Business Information: Company/firm name, GST Number (GSTIN), PAN number, year of establishment

• Address Information: Building, street, area, city, state, pincode (for shipping and billing)

• Payment Information: Bank account details (for seller payouts), UPI ID, payment transaction references

• Product Data (Sellers): Product names, descriptions, images, pricing, stock quantities

• Communication Data: Enquiry messages, support tickets, reviews and ratings

3.2 Information Collected Automatically:

• Device Information: Browser type, device model, operating system, screen resolution

• Usage Data: Pages viewed, time spent, click patterns, search queries, feature usage

• Network Information: IP address, approximate geolocation (city-level), ISP information

• Cookies & Tracking: Session cookies, analytics cookies (Google Analytics via GTM), preference cookies

3.3 Information from Third Parties:

• Payment Processors: Transaction status, payment confirmation from Cashfree Payments

• Verification Services: GST/PAN verification results from government APIs

We process your personal data only for the following specific, lawful purposes:

We do NOT process personal data for purposes beyond what is stated above without obtaining fresh consent.

5.1 Consent Collection:

We obtain clear, informed, specific, and unambiguous consent before collecting and processing your personal data. Consent is collected through:

• Registration forms with explicit checkboxes

• Cookie consent banners

• Separate marketing consent opt-in

5.2 Your Rights as a Data Principal:

Under the DPDPA 2023, you have the following rights:

• Right to Access: Request a summary of your personal data being processed and the processing activities undertaken.

• Right to Correction and Erasure: Request correction of inaccurate data or erasure of data that is no longer necessary.

• Right to Withdraw Consent: Withdraw consent at any time. Withdrawal does not affect the lawfulness of processing done prior to withdrawal.

• Right to Grievance Redressal: File a complaint with our Grievance Officer or the Data Protection Board of India.

• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

5.3 Exercising Your Rights:

To exercise any of these rights, please contact our Data Protection Officer at:

📧 Email: privacy@unicornmart.com

📍 Address: UniicornMart B2B Private Limited, India

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Upon expiry of the retention period, personal data is securely deleted or anonymised.

We share personal data only in the following circumstances:

7.1 With Your Consent:

• Sharing buyer details with sellers to fulfil orders

• Sharing enquiry messages with relevant suppliers

7.2 Service Providers (Data Processors):

• Cashfree Payments — Payment processing and escrow

• Supabase — Database hosting and authentication

• Google Analytics / GTM — Website analytics (anonymised)

• Email/SMS providers — Transactional notifications

• Cloud hosting — Infrastructure (Render / Vercel)

All data processors are bound by Data Processing Agreements (DPAs) ensuring DPDPA compliance.

7.3 Legal Requirements:

We may disclose personal data when required by:

• Court orders or legal process

• Government authorities (tax, regulatory, law enforcement)

• To protect the rights, property, or safety of UniicornMart or its users

7.4 We Do NOT:

• Sell personal data to third parties

• Share data with advertisers for profiling (beyond anonymised analytics)

• Transfer personal data outside India without adequate safeguards

We implement robust security measures to protect your personal data:

• Encryption: 256-bit SSL/TLS for all data in transit; AES-256 encryption for sensitive data at rest

• Authentication: Secure password hashing (bcrypt), JWT-based session management

• Access Controls: Role-based access control (RBAC) for internal systems

• Infrastructure: Hosted on SOC 2 compliant cloud infrastructure

• Monitoring: Real-time security monitoring and intrusion detection

• Incident Response: Documented data breach notification procedures (within 72 hours to DPB and affected users as required by DPDPA)

• Regular Audits: Periodic security assessments and vulnerability testing

9.1 Types of Cookies We Use:

9.2 Managing Cookies:

You can manage cookie preferences through:

• Our cookie consent banner (shown on first visit)

• Your browser settings (blocking or deleting cookies)

• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Note: Disabling essential cookies may affect platform functionality.

UniicornMart is a B2B platform intended for business users aged 18 years and above. We do not knowingly collect personal data from individuals under 18 years of age.

In compliance with DPDPA 2023 Section 9:

• We do not process data of children (under 18) without verifiable parental/guardian consent

• We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children

• If we discover that we have inadvertently collected data from a minor, we will delete it promptly

UniicornMart primarily stores and processes all personal data within India. In cases where data transfer outside India is necessary (e.g., cloud infrastructure, email services), we ensure:

• Transfers comply with Section 16 of DPDPA 2023

• Data is only transferred to countries/territories not restricted by the Central Government

• Adequate contractual safeguards (Standard Contractual Clauses) are in place

• The receiving entity maintains equivalent data protection standards

In the event of a personal data breach:

1. We will notify the Data Protection Board of India as required under DPDPA 2023

2. We will notify affected Data Principals (users) without undue delay

3. The notification will include:

• Nature of the breach and data affected

• Likely consequences

• Measures taken or proposed to address the breach

• Contact details of our Data Protection Officer

4. We maintain a breach register documenting all incidents and remediation steps

Grievance Officer (as required by IT Act 2000 and DPDPA 2023):

Name: Data Protection Officer, UniicornMart

Email: privacy@unicornmart.com

Response Time: Within 30 days of receiving a complaint

If you are not satisfied with our response, you may file a complaint with:

• Data Protection Board of India (established under DPDPA 2023)

• CERT-In (for data security incidents)

We are committed to resolving all grievances in a fair, transparent, and timely manner.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this page

• We will notify you via email or prominent notice on our platform

• Continued use of UniicornMart after changes constitutes acceptance of the updated policy

• For material changes affecting your consent, we will seek fresh consent as required by DPDPA 2023

For any privacy-related questions, requests, or concerns:

UniicornMart B2B Private Limited

📧 Email: privacy@unicornmart.com

🌐 Website: https://uniicornmart.com

📍 Registered Office: India

Data Protection Officer:

📧 Email: dpo@unicornmart.com