This Privacy Policy explains how Parveen Kumar, doing business as AnythingKart ("we", "us"), collects and uses personal data of people who use the AnythingKart website and app (the "Platform"), under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Sellers should also read the Seller Privacy Notice, which covers seller KYC, tax and bank data.
1. Data we collect
- Account details: your name, mobile number and email address.
- Addresses: the delivery addresses you save, including the map pin you place. Your device's current location is used only when you choose "use current location" to find an address.
- GST details: the GSTINs you add for GST invoices, with the legal name and address returned by the GST portal.
- Orders and payments: the items you order, order and delivery status, invoices, refunds and the payment status and reference returned by our payment partner. We do not receive or store your full card details.
- Support: messages you send us and our replies.
- Device and usage data: IP address and the approximate city it indicates, device type and model, operating system, app or browser version, language and time zone, an identifier the app creates for your device, and sign-in and security events — plus, only with your consent, analytics as described in section 6.
- Notification token: if you allow notifications, the push token issued for your device by Google Firebase Cloud Messaging (and the Apple Push Notification service on iPhone), so we can send you notifications. It is unlinked from your account when you sign out and deleted after 60 days without use.
2. Why we use it
- To create and secure your account and sign you in with a one-time password.
- To alert you when your account is signed in on a new device.
- To take, deliver, invoice and support your orders, including refunds and replacements.
- To check that an address is serviceable and to show delivery estimates and charges.
- To prevent fraud and misuse of the Platform, coupons and offers.
- To send you order updates and service messages — by app or browser notification, SMS, WhatsApp or email — and, where you have agreed, offers.
- To meet our legal, tax and accounting obligations.
- With your consent, to understand how the Platform is used and improve it.
3. Who we share it with
We share only what each party needs to do its job:
- the seller of your order, to fulfil it (name, delivery address and phone number);
- courier partners, to pick up and deliver your order;
- our payment partner (Cashfree Payments), to process payments and refunds;
- email, SMS and WhatsApp messaging providers, to send OTPs and order updates;
- Google Firebase Cloud Messaging and the Apple Push Notification service, to deliver app and browser notifications;
- cloud hosting and storage providers that run our systems;
- analytics and advertising providers listed in section 6, only with your consent; and
- government and statutory authorities, when required by law or a lawful order.
We do not sell your personal data.
4. How long we keep it
We keep your account data while your account is active. After you delete your account, we keep order, invoice and payment records for as long as tax law requires — under Section 36 of the CGST Act, 2017, for 72 months from the due date of the annual return for the year they relate to — and longer only where needed to resolve a dispute or defend a legal claim. Other data is deleted or anonymised when no longer needed.
5. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- access and correct your details (most can be edited in your account);
- delete your account, from your account settings — data we must keep by law is retained as described in section 4;
- withdraw consent at any time, for example to analytics through "Cookie preferences" in the footer;
- turn off offer notifications in Account → Notifications, or all notifications in your device or browser settings — order, payment and security messages are part of the service; and
- raise a grievance with our Grievance Officer (section 8), and after that, approach the Data Protection Board of India.
6. Cookies, analytics and tracking
The Platform uses strictly necessary cookies for security, session continuity, and to remember your cookie preferences. With your consent, we also use:
- Google Analytics 4: aggregated traffic, page and conversion analytics. Loaded using Google Consent Mode — analytics cookies are set only after you accept.
- Microsoft Clarity: anonymised heatmaps and session replays showing how visitors use pages. Loaded only after you accept.
- Meta Pixel: advertising analytics from Meta Platforms, Inc. (Facebook / Instagram), used to measure our ads and show you more relevant ones. It shares limited interaction data (pages viewed, general purchase activity) with Meta and is loaded only after you accept.
On your first visit you can choose "Accept all" or "Only essential" in the cookie banner. If you decline, no analytics or advertising cookies are stored. You can change your choice at any time with the "Cookie preferences" link in the footer; it applies across AnythingKart's website and its subdomains.
7. Security
Data is sent over encrypted connections, documents and invoices are kept in private storage, and access within our team is limited by role. No system is completely secure; if a personal data breach occurs, we will notify the Data Protection Board of India and each affected person as the law requires.
8. Grievance Officer
In compliance with the IT Act, 2000 and the DPDP Act, 2023:
- Name: Parveen Kumar
- Email: support@anythingkart.com
- Address: Hasan, Tosham, Bhiwani, Haryana 127043, India
Complaints will be acknowledged within 48 hours and resolved within one month of receipt.
9. Changes to this policy
We may update this policy. We will tell you about a material change before it takes effect. The current version, its effective date and previous versions are always on this page.