Privacy policy

1. Who is responsible for your data

see2cart Wholesale LLP, trading as See2Cart, at Shop No. 1, Bapatla, Andhra Pradesh, 522101, India, decides how and why your personal data is processed and is the data fiduciary for the purposes of the Digital Personal Data Protection Act, 2023.

2. What we collect

Data you give us

• Identity and contact — name, email address, mobile number, and delivery or billing address.
• Account — your username and a password we store only as a one-way hash. We never hold your password itself.
• Business details — where you buy as a business, your registered name and GSTIN for invoicing.
• Support and reviews — messages you send us, return reasons, and review content you submit.

Data created by using the service

• Orders — items, quantities, prices, fulfilment method, pickup location and order status.
• Payments — the outcome and reference of a payment. See section 4.
• Technical — IP address and request data, used for security, fraud prevention and rate limiting.

Guest checkout collects only the name, email, mobile number and delivery or pickup details needed to fulfil that order. No account is created.

3. Why we use it

• To perform the contract — take, fulfil, deliver, invoice and support your order.
• To meet legal obligations — tax and GST records, and statutory retention.
• For legitimate operational needs — fraud prevention, securing accounts, rate limiting abuse, and keeping an audit record of staff actions on orders and catalogue data.
• With your consent — marketing email, where you have asked for it. You can withdraw that at any time without affecting anything else.

4. Payment data

We do not collect, see or store card numbers, CVVs, UPI PINs or bank credentials. Those are entered directly with our PCI-DSS compliant payment partner. We retain only what we need to reconcile an order: the payment status, the provider's reference, and the amount. Refunds are issued back through the same provider to the original method.

5. Who we share it with

We do not sell your personal data, and we do not share it for anyone else's advertising.

• Payment provider — to take payment and process refunds.
• Delivery partners — the name, address and phone number needed to deliver your order.
• Communications providers — to send order notifications and verification codes you have asked for.
• Cloud infrastructure — our hosting and database providers, who process data on our instructions. Our production infrastructure is located in India.
• Authorities — where we are legally required to disclose.

6. Cookies and local storage

We keep this deliberately small. We do not run third-party advertising or cross-site tracking cookies.

• Theme preference — a cookie remembering whether you chose the light or dark appearance.
• Your bag — held in your browser's local storage so it survives a page reload before you sign in.
• Session — your sign-in token and its activity timestamp, held in your browser and cleared when you sign out.
• Guest order access — where you check out as a guest, a single-use capability for that order is stored in your browser so you can track it. We hold only its digest, never the value.

7. How long we keep it

• Order, invoice and tax records — retained for the period required by Indian tax law, currently eight years from the end of the relevant financial year.
• Account data — for as long as your account is active. When an account is closed we deactivate rather than erase it where order history must be retained for the period above, and we restrict it from ordinary use.
• Verification codes — minutes. They are single-use, expire quickly, and are stored only as a keyed digest.
• Support messages and reviews — for as long as needed to handle the matter and to keep published reviews meaningful.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• Ask what personal data we hold about you and how it has been processed.
• Have inaccurate or incomplete data corrected or updated.
• Ask for erasure, where we are not required to retain it for a legal purpose such as tax records.
• Withdraw consent you previously gave, such as for marketing email.
• Nominate someone to exercise your rights in the event of death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.

Write to support@see2cart.com and we will respond within the statutory period. We may need to verify who you are before acting on a request.

9. Children

The service is not directed at children under 18. We do not knowingly create accounts for them, and we do not knowingly process their personal data. If you believe we have, contact us and we will remove it.

10. Security

Data is encrypted in transit, passwords are stored only as hashes, verification codes are stored only as keyed digests, and staff access to customer and order data is restricted by role and recorded in an audit log. No system is perfectly secure, but if a breach affects your data we will notify you and the Data Protection Board as the law requires.

11. Grievance redressal

12. Changes to this policy

We update this policy as the service changes. The date at the top tells you which version is current. Where a change materially affects how we use your data we will tell you before it takes effect.