HYPERKART CUSTOMER PRIVACY POLICY

Effective Date: 27 sept 2026 Last Updated: 27 sept 2026 Hyperkart ("Hyperkart", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how Hyperkart collects, uses, stores, shares and protects information when you use:

the Hyperkart mobile application;
the Hyperkart website;
Hyperkart customer support;
Hyperkart ordering and delivery services; and
other services provided through the Hyperkart platform. Please read this Privacy Policy carefully before using Hyperkart. By using Hyperkart, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain consent in the manner required by law.

1. ABOUT HYPERKART

Hyperkart is a hyperlocal technology platform that connects customers with participating local:

Mini Marts;
Supermarkets;
Mega Marts;
Grocery Stores; and
other eligible Partner Stores. Through Hyperkart, customers can discover nearby stores, browse products, place orders, make payments and receive products at eligible delivery locations. The Partner Store generally remains responsible for the products it sells, while Hyperkart provides the technology and platform infrastructure that enables the digital ordering experience.

2. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to individuals who:

create a Hyperkart account;
browse Hyperkart;
place an order;
save a delivery address;
contact customer support;
use Hyperkart offers or promotions;
submit ratings or reviews; or
otherwise interact with Hyperkart as a customer. This Policy does not govern the privacy practices of independent third-party services that have their own privacy policies.

3. INFORMATION WE COLLECT

We collect information that is reasonably necessary to provide, secure and improve Hyperkart. Depending on how you use the Platform, this may include the following. 3.1 Account Information When you create an account, we may collect:

name;
mobile number;
email address, where provided;
profile information;
account ID;
login/authentication information;
communication preferences. Your mobile number may be used for authentication, OTP verification, order communication and account security.

4. DELIVERY ADDRESS INFORMATION

To deliver your order, we may collect information such as:

house/building number;
street/road;
locality;
city;
state;
PIN code;
landmark;
delivery instructions;
saved addresses. You may be able to save multiple addresses, such as:
Home;
Work;
Other. You are responsible for keeping your saved addresses accurate.

5. LOCATION INFORMATION

Hyperkart may use location information to provide location-dependent services. Depending on the permissions you provide and the functionality you use, this may include:

approximate location;
precise device location;
location used to determine your service area;
location used to identify nearby Partner Stores;
location used for delivery-related functionality. Location may be used to:
identify stores serving your area;
determine whether delivery is available;
calculate applicable delivery areas;
improve store discovery;
support order delivery;
improve service accuracy. You can control location permissions through your device settings. Some Hyperkart features may not function correctly if required location permissions are disabled.

6. ORDER INFORMATION

When you place an order, we may collect and process information such as:

order ID;
Partner Store;
products ordered;
quantities;
prices;
discounts;
coupon information;
delivery address;
delivery instructions;
delivery fee;
taxes and applicable charges;
order status;
cancellation information;
refund information;
order history. We use this information to process and manage your orders.

7. PAYMENT INFORMATION

Hyperkart may support payment methods including:

UPI;
debit cards;
credit cards;
net banking;
wallets;
Cash on Delivery;
other supported payment methods. Payments may be processed by third-party payment service providers. Where payment processing is handled by a payment gateway, Hyperkart generally does not store your complete card credentials. We may receive information necessary to identify and reconcile a transaction, such as:
payment status;
transaction ID;
payment method;
payment reference;
refund status;
limited payment-related information. Payment providers may process information according to their own privacy policies and applicable legal requirements.

8. INFORMATION SHARED WITH PARTNER STORES

Because Hyperkart connects you with Partner Stores, certain information may need to be shared with the relevant Partner Store to fulfil your order. Depending on the order, this may include:

customer name;
ordered products;
order details;
delivery address;
delivery instructions;
contact information necessary for fulfilment;
relevant order status information. We limit information shared with Partner Stores to what is reasonably necessary for the applicable transaction and service.

9. INFORMATION SHARED WITH DELIVERY PERSONNEL

To complete a delivery, relevant information may be made available to the applicable delivery personnel. This may include:

customer name;
delivery location;
delivery address;
order information;
delivery instructions;
contact mechanism necessary for delivery;
order verification information. Delivery personnel may receive access only to information necessary to perform their delivery responsibilities.

10. CUSTOMER SUPPORT INFORMATION

When you contact Hyperkart support, we may collect:

your name;
mobile number;
email address;
order ID;
complaint details;
messages;
photographs or videos you submit;
information about the issue;
support history. This information helps us investigate and resolve your complaint.

11. PHOTOS, VIDEOS AND CAMERA ACCESS

Hyperkart may allow you to upload photographs or videos for purposes such as:

reporting damaged products;
reporting incorrect products;
reporting missing items;
submitting proof for a refund request;
submitting feedback;
resolving customer-support issues. Camera or photo-library access will be requested through your device's permission system where required. You can control these permissions through your device settings.

12. REVIEWS, RATINGS AND FEEDBACK

If you submit:

ratings;
reviews;
comments;
photographs;
feedback; we may process this information to:
improve our services;
evaluate Partner Store performance;
evaluate delivery experience;
improve product information;
investigate complaints;
display customer feedback where appropriate. Please do not include sensitive personal information in a public review.

13. DEVICE AND TECHNICAL INFORMATION

When you use the Hyperkart application or website, we may collect technical information such as:

device type;
operating system;
application version;
device identifiers;
IP address;
network information;
language;
time zone;
crash information;
application performance information;
approximate location where permitted. This information may be used for security, troubleshooting, analytics and service improvement.

14. APP PERMISSIONS

Depending on the features you use, Hyperkart may request permissions such as: Location Used for store discovery, serviceability and delivery-related functionality. Notifications Used for:

order confirmation;
order status;
delivery updates;
refund updates;
important account notifications;
promotional notifications where permitted. Camera / Photos Used when you choose to upload photographs or other visual information. Phone / Communication Where supported, certain communication features may require access to communication-related functionality. Hyperkart will request permissions through the applicable operating system mechanisms. You can manage permissions through your device settings.

15. HOW WE USE YOUR INFORMATION

We may use personal information for the following purposes: Providing the Service To:

create and manage your account;
identify nearby stores;
process orders;
coordinate delivery;
process payments;
provide customer support. Security To:
authenticate accounts;
prevent unauthorised access;
detect suspicious activity;
prevent fraud;
protect customers and the Platform. Customer Support To:
investigate complaints;
process refunds;
resolve disputes;
respond to queries. Service Improvement To:
understand how customers use Hyperkart;
improve application performance;
improve user experience;
improve search and discovery;
improve delivery workflows. Communications To send:
transactional notifications;
OTPs;
order updates;
delivery notifications;
payment notifications;
service announcements. Legal and Regulatory Compliance To comply with:
applicable laws;
lawful governmental requests;
court orders;
regulatory requirements;
fraud-prevention obligations.

16. PERSONALISATION

Hyperkart may use information such as:

previous orders;
products viewed;
search activity;
preferred stores;
location/service area;
interactions with offers; to improve your experience. For example, we may show:
frequently purchased products;
relevant categories;
nearby stores;
relevant offers;
reorder suggestions. Personalisation does not necessarily mean that every user receives the same content. Where applicable law requires consent for a particular form of personalised marketing or profiling, we will provide the applicable choice.

17. MARKETING COMMUNICATIONS

Where permitted, Hyperkart may send promotional communications about:

offers;
discounts;
new features;
Partner Store promotions;
campaigns;
seasonal sales. You may be able to manage promotional preferences through: Profile → Notifications / Marketing Preferences Transactional communications necessary to provide the service may continue even if you opt out of promotional communications.

18. HOW WE SHARE PERSONAL INFORMATION

We may share personal information with parties that reasonably need it to provide Hyperkart services. These may include: Partner Stores For order fulfilment and customer service. Delivery Personnel For delivery execution. Payment Service Providers For payment processing, refunds and reconciliation. Technology Service Providers For services such as:

cloud hosting;
databases;
application infrastructure;
analytics;
crash reporting;
communications;
notifications;
mapping;
security. Customer Support Providers Where third parties assist Hyperkart in providing support. Professional Advisors Where reasonably necessary, including legal, accounting, audit or compliance advisors. Government and Law Enforcement Authorities Where required by applicable law or valid legal process. We do not sell your personal information as a commercial data product.

19. THIRD-PARTY SERVICE PROVIDERS

Hyperkart may use third-party service providers to operate parts of the Platform. Examples may include:

payment gateways;
cloud infrastructure providers;
mapping providers;
SMS/OTP providers;
email providers;
push-notification services;
analytics providers;
customer-support tools;
fraud and security providers. These providers may process information on Hyperkart's behalf or independently where applicable. We expect relevant service providers to maintain appropriate security and confidentiality arrangements.

20. PAYMENT PROVIDERS

When you use a third-party payment provider through Hyperkart, the payment provider may independently process certain information. Payment providers may have their own:

privacy policies;
security practices;
terms of service. You should review the applicable provider's policies where relevant.

21. COOKIES AND SIMILAR TECHNOLOGIES

The Hyperkart website and certain services may use:

cookies;
local storage;
SDKs;
pixels;
similar technologies. These technologies may help us:
keep you signed in;
remember preferences;
understand usage;
improve performance;
detect security issues;
measure campaigns where permitted. You may be able to manage certain cookie preferences through your browser or device.

22. ANALYTICS

Hyperkart may use analytics tools to understand:

application usage;
feature performance;
crashes;
user journeys;
general engagement;
technical performance. Analytics information may be aggregated or otherwise processed to improve the Platform.

23. FRAUD AND SECURITY MONITORING

We may process information to detect and prevent:

fraudulent orders;
payment abuse;
fake accounts;
coupon abuse;
refund abuse;
account takeover;
suspicious activity;
security attacks. Where necessary, automated systems may identify unusual activity for further review.

24. DATA SECURITY

Hyperkart takes reasonable security measures designed to protect personal information against:

unauthorised access;
unauthorised disclosure;
alteration;
destruction;
misuse. Depending on the nature of the information and service, security measures may include:
encryption in transit;
access controls;
authentication mechanisms;
logging and monitoring;
infrastructure security;
restricted employee access;
backups;
security reviews. No online service can guarantee absolute security. You are also responsible for protecting your device, OTPs, passwords and account credentials.

25. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

providing services;
maintaining transaction records;
resolving disputes;
preventing fraud;
complying with legal obligations;
enforcing agreements;
maintaining security and business records. Different categories of information may have different retention periods. When information is no longer required, we may delete it, anonymise it or otherwise securely dispose of it, subject to applicable legal or legitimate retention requirements.

26. ACCOUNT DELETION

You may request deletion of your Hyperkart account through the available account-management functionality or by contacting us. Depending on applicable law, certain information may need to be retained after account deletion, including information required for:

legal compliance;
accounting;
tax;
fraud prevention;
dispute resolution;
transaction records;
enforcement of legal rights. Deleting your account may also result in the loss of access to:
order history;
saved addresses;
preferences;
account-specific benefits.

27. YOUR PRIVACY RIGHTS

Subject to applicable law, you may have rights relating to your personal information, including rights concerning:

access to information about processing;
correction of inaccurate information;
updating personal information;
deletion/erasure where applicable;
withdrawal of consent where processing is based on consent;
grievance redressal;
other rights provided under applicable law. The DPDP Act expressly provides a framework for Data Principal rights and consent withdrawal, while the final Rules provide for clearer notices and mechanisms for exercising rights. MeitY

28. WITHDRAWING CONSENT

Where Hyperkart processes personal information based on your consent, you may withdraw that consent through the mechanism provided for the relevant processing activity. Withdrawal of consent should be possible through a process that is not unnecessarily more difficult than giving consent, subject to applicable law. Withdrawal may affect our ability to provide certain services. For example, disabling location access may affect:

nearby-store discovery;
serviceability checks;
certain delivery features. Withdrawal does not affect processing that is otherwise permitted or required by law.

29. CORRECTING YOUR INFORMATION

You should keep your information accurate. You may be able to update information such as:

name;
email;
delivery addresses;
communication preferences; through your account settings. If information cannot be updated through the application, you may contact support.

30. DATA REQUESTS

For privacy-related requests, you may contact: Privacy Email: hyperkart@gmail.com Your request should include sufficient information for us to identify your account and understand the request. We may take reasonable steps to verify your identity before processing certain requests. 31. CHILDREN'S PRIVACY Hyperkart is intended for users who are legally capable of using the service under applicable law. We do not knowingly seek to collect personal information from children in circumstances where parental consent or other safeguards are required by applicable law without following the applicable requirements. If you believe that a child has provided personal information to Hyperkart in violation of applicable requirements, please contact us. Where applicable, we will take appropriate steps in accordance with law.

32. INTERNATIONAL DATA TRANSFERS

Some technology or service providers used by Hyperkart may process information in locations outside your state or country. Where personal information is transferred across jurisdictions, Hyperkart will implement the safeguards required under applicable law.

33. BUSINESS TRANSFERS

If Hyperkart undergoes a:

merger;
acquisition;
restructuring;
financing transaction;
sale of assets;
transfer of business; personal information may be transferred as part of the relevant business transaction, subject to applicable law and appropriate safeguards.

34. THIRD-PARTY LINKS

Hyperkart may contain links to websites or services operated by third parties. This Privacy Policy does not govern those third-party services. We recommend reviewing the privacy policy of any third-party service you access.

35. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make changes, we will update the: "Last Updated" date. For material changes, we may provide additional notice where appropriate or required by law. Your continued use of Hyperkart after an updated Privacy Policy becomes effective will be subject to the updated Policy to the extent legally permissible.

36. GRIEVANCE REDRESSAL

If you have a privacy-related complaint, you may contact our designated privacy/grievance contact. Privacy & Grievance Contact Name: [Name] Designation: [Privacy Officer / Grievance Officer] Email: hyperkart@gmail.com Phone: 8638707962 Address: Lachit market, Duliajan 786602 We will review and respond to privacy complaints in accordance with applicable law.

37. DATA PROTECTION CONTACT

For matters specifically concerning personal-data processing, rights or consent, you may contact: Data Protection / Privacy Contact Email: hyperkart@gmail.com Address: Lachit market, Duliajan 786602 Where a statutory data-protection authority or mechanism applies, you may also have the right to raise a complaint through that mechanism.

38. GOVERNING LAW

This Privacy Policy is governed by the laws of India, subject to mandatory rights and protections available under applicable law.

39. CONTACT US

For general customer support: Hyperkart Email: hyperkart@gmail.com Phone: 8638707962 Website: [https://hyperkart.in] Registered Office: Lachit market, Duliajan 786602 For privacy matters: hyperkart@gmail.com