Back to Home

Privacy Policy

Last updated on September 14th, 2026

Purpose

This Privacy Policy is a legally binding agreement between FarMart Service Private Limited (“FarMart”, “We”, “Us”, or “Our”) and you, the individual whose digital personal data is being processed (“Data Principal”, “You”, or “Your”). This Policy covers our integrated digital ecosystem, including the FarMart website (www.farmart.co), mobile-optimized sites, and the FarMart mobile application (collectively, the “Platform”).

The Policy becomes effective immediately upon your acceptance, whether by clicking “submit,” using the Website, or through any other means of engagement. By continuing to use the Platform, you acknowledge that you have read, understood, and provided your explicit consent to FarMart to collect, store, process, and transfer your data in accordance with the terms outlined herein. This Policy is aligned with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its associated rules.

Definitions

To ensure a nuanced understanding of this document, the following terms are used as defined under the Digital Personal Data Protection Act, 2023 and related rules:

Digital Personal Data — Refers to any personal data in digital form, or data collected in non-digital form and subsequently digitized, which relates to an identifiable individual.

Processing — An automated or semi-automated operation performed on digital personal data, including its collection, recording, organization, storage, adaptation, retrieval, sharing, and erasure.

Specified Purpose — The exact, lawful reason for which your data is collected, as explicitly detailed in the notice provided to you at the time of collection.

Consent Manager — A registered intermediary who helps you manage, review, and withdraw your consent through an interoperable digital platform.

Data Processor — Any entity that processes personal data on our behalf under a valid contract.

Data Principal — Refers to individuals (such as farmer, trader or partner) to whom the personal data belongs.

Data Fiduciary — Refers to FarMart, which determines the purpose and means of processing personal data and is responsible for its protection.

Nature of Data Collected

We collect data strictly under the principles of lawful purpose, data minimization, and purpose limitation which includes:

A. Personal Data

Includes, but is not limited to:

  • Contact details (Address, telephone number, email).
  • Demographics (Date of birth, gender).
  • Transaction history (Sales/purchase history on the Website).
  • Technical identifiers (IP Address, device identification codes).
  • Sensitive Personal Data: As defined under the IT Rules, 2011.
  • Any other information provided during registration.

B. Non-Personal Data

Data that cannot identify you personally, such as:

  • Geographic location and ISP/Browser details.
  • Device details used to access the Platform.
  • Last website visited before ours and session duration (date/time of access).

How We Collect Your Data

We collect data through lawful means when a User:

  1. Registers as a user, seller, or service provider on the Website or Platform.
  2. Engages with the Platform by making offers for sale, making online purchases, hiring or renting goods, participating in surveys or contests, or communicating with customer service.
  3. Interacts with third parties, such as social media services or business partners, who may share permitted information like your username, profile picture, or contact details.
  4. Accesses the Platform where temporary or permanent cookies are used to collect data for security, analytics, and service improvement.
  5. Interacts with advertisements served by third-party service providers who may collect Non-Personal Information regarding your visits and interactions with our products.

FarMart adheres to a mechanism for valid and continuous consent, ensuring that:

  1. Consent is always free, specific, informed, unconditional, and signified by a clear affirmative action, such as clicking “Submit,” “I Agree,” or continuing to use the registration interface.
  2. Every request for digital personal data is preceded by a standalone notice in plain language, available in English or any of the 22 languages specified in the 8th Schedule of the Indian Constitution.
  3. To ensure a smooth user experience, the consent provided during onboarding will apply to routine and essential activities on the Platform, without requiring repeated approvals for the same purposes.
  4. Fresh consent will be sought only if there is a material change in the processing purpose, the introduction of new data categories, or a transition to fundamentally different services.
  5. You retain the right to withdraw consent at any time through a dedicated link in the platform settings, which is designed to be as accessible as the process of giving consent.
  6. Upon withdrawal, FarMart and its data processors will cease processing your data within a reasonable timeframe, unless retention is required by statutory obligations.

For all consent related matters, including withdrawal requests, consent records or queries, please write to grievances@farmart.co

This channel is maintained separately from the Grievance Office to ensure focused and timely handling of all consent matters.

Authenticity of Collected Data

To ensure the authenticity of collected data, FarMart processes information based on the following principles:

  1. FarMart processes personal data based on the information provided by the User, who represents that all data furnished is accurate, complete, and current at the time of submission.
  2. If a User provides personal data relating to another individual, they represent that they are lawfully authorized to disclose such data for the specified purpose.
  3. FarMart relies on the information provided by the user and is not responsible if it is incorrect or incomplete. However, we remain responsible for handling and protecting your data in accordance with applicable laws.
  4. The user confirms that the information provided is accurate and that the user is authorized to share it and the use of this information will not violate the rights of any third party.

Why is Data Collected

FarMart collects, uses, and processes your Personal Data, including Sensitive Personal Data, only for lawful purposes necessary to discharge our business functions. By using our Platform, you consent to data collection for the following purposes:

  1. Facilitating your use of the Website and enjoyment of our other services.
  2. Responding to your inquiries or fulfilling requests for information about various products, services, and offers.
  3. Sending important information regarding changes to terms and conditions, user agreements, policies, or other administrative details.
  4. Delivering surveys and marketing communications that FarMart believes may be of interest to you or are necessary for internal development.
  5. Personalizing your experience on the Website by presenting advertisements, products, and offers tailored to your preferences.
  6. Addressing problems encountered on the Website, including the resolution of technical failures.
  7. Completing and fulfilling your purchases, including processing payments, communicating regarding your purchase, and providing post-sale services.
  8. Administering and improving the quality of our Websites through the analysis of consumer preferences and behavior.
  9. Facilitating services such as Single Sign-On (SSO) to allow access to multiple applications through a single set of credentials.
  10. Facilitating programs and initiatives launched by FarMart or third-party service providers and business associates.
  11. Analyzing service usage, measuring advertisement effectiveness, and facilitating payments made through the Website.
  12. Responding to legal notices and participating in judicial or quasi-judicial proceedings.
  13. Facilitating third-party communication for equipment installation, service, or additional product-related support.
  14. Tracing and determining the source of security breaches, computer contaminants, viruses, or factors adversely impacting our services.
  15. Facilitating internal investigations into suspected illegal activities on the Website.
  16. Undertaking forensics of computer resources as part of investigations or internal audits.
  17. Facilitating evaluations by potential investors or buyers of FarMart and the Website.

Sharing and Disclosing Your Data to Third Parties

To simplify the procedure regarding third-party sharing and links, FarMart shall adhere to the following principles:

  1. Your data is shared with third parties only when necessary for the performance of our services or when required by law.
  2. You acknowledge and consent that FarMart may transfer, share, or disclose your data to partners, banks, or financial institutions, both within and outside India; however, your Personal Data will never be published and is shared only on the condition that the recipient does not disclose or share it further.
  3. Digital Personal Data may be transferred outside India for processing, provided the destination country is not on the Central Government’s “negative list” and the entity follows a data protection regime as stringent as India’s.
  4. We share non-personal information with parties supporting our business operations, such as technical infrastructure, analytics, advertisement effectiveness, and academic research, all of whom must adhere to strict confidentiality obligations.
  5. When using third-party payment gateways or credit/debit card processors, we may share relevant Personal Information (like your name, residence, and email) to facilitate transactions; however, these payments are governed solely by the third party’s own terms and policies.
  6. Under Section 7 of the DPDP Act, we may process your data without explicit consent in specific narrow circumstances, such as medical emergencies, fulfilling legal obligations, or delivering state-authorized subsidies and benefits.
  7. We reserve the right to disclose your information when required by law, regulation, or a request from a law enforcement, governmental, or judicial authority to establish or exercise our legal rights.
  8. Our Platform may contain links to third-party advertisements or websites that are not controlled by or affiliated with FarMart.
  9. FarMart is not responsible for your interactions with these third parties and makes no representations regarding their privacy policies or the accuracy of their information.
  10. Any data you provide to third-party websites is governed by their own privacy policies, and we encourage you to review those policies before using their services.

Personal Data Breach

In the event of a Personal Data Breach, FarMart shall:

  1. Immediately initiate an internal investigation to determine the nature, scope and cause of the breach.
  2. Notify the Data Protection Board of India in the prescribed form without undue delay.
  3. Notify each affected Data Principal in clear, plain language including the nature of data affected, likely consequences and remedial steps being taken.
  4. Maintain a detailed record of the breach, investigation conducted, remedial steps taken and all notifications issued.
  5. Cooperate fully with any competent authority during any inquiry or investigation arising from the breach.
  6. Take immediate corrective and preventive measures to contain the breach and prevent recurrence.

Security, Retention and Erasure Protocols

To ensure the protection and proper handling of your data, FarMart adheres to the following Security, Retention, and Erasure Protocols:

  1. FarMart prioritizes the security of your Personal Information and strives to implement rigorous safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction. This involves regular internal reviews of our data collection, storage, and processing practices to ensure they remain robust and effective.
  2. We adopt reasonable security measures and physical security controls, to guard the systems where your Personal Data is stored. These procedures are designed to meet or exceed the reasonable security standards mandated under applicable Indian laws.
  3. While we endeavor to take all reasonable and appropriate steps to secure your data, you acknowledge that no internet-based system or computer network is entirely secure. Consequently, FarMart cannot provide an absolute guarantee regarding the total security of your Personal Information during transmission or storage.
  4. Your right to claim damages for any potential breach is strictly limited to statutory damages as defined under the Information Technology Act, 2000, and the Digital Personal Data Protection Act and Rules of 2023 and 2025. By using the Platform, you explicitly waive and release FarMart from any additional claims of damages under the laws of contract or tort.
  5. We may share your information with third parties under strict confidentiality agreements that prohibit further disclosure. However, FarMart is not responsible for any security breaches or independent actions taken by these third parties, nor are we liable for any loss or injury resulting from you providing information to third-party websites, even if they are linked on our Platform.
  6. We do not retain your personal data indefinitely. All data is scheduled for erasure once the specific purpose for which it was collected has been fulfilled or upon the valid withdrawal of your consent, unless further retention is required by law.
  7. For major platform users, data will be permanently erased within three years of the user’s last recorded interaction such as a login or a service request provided there are no overriding statutory obligations requiring us to retain that data.
  8. To ensure you have control over your account, we will provide a notice at least 48 hours before the scheduled erasure of your data due to inactivity. This provides you with a final opportunity to re-engage with the Platform and prevent the deletion of your information.
  9. System and processing logs are mandatorily retained for a minimum period of one year. This data is kept specifically to assist in breach detection, security audits, and formal investigation purposes should any security incident occur.

Your Rights as a Data Principal

Under prescribed statutory laws, you have the following rights:

  1. Right to Access: obtain a summary of your personal data being processed and the entities with whom it has been shared.
  2. Right to Correction and Erasure: request correction, completion, updating or deletion of your personal data.
  3. Right to Withdraw Consent: withdraw consent at any time.
  4. Right to Grievance Redressal: have your grievances acknowledged and resolved within the prescribed timelines.
  5. Right to Nominate: nominate another individual to exercise your rights in the event of your death or incapacity.

User Discretion and Opt-Out

  1. You are obligated to use the Website and App strictly for lawful purposes and must not engage in any activity that is not expressly intended or envisaged through the Platform.
  2. You acknowledge and agree that you are providing your data to FarMart out of your own free will, without any coercion or undue influence.
  3. You maintain the absolute right and option not to provide your data to us or to withdraw your consent regarding the data already shared at any point in time.
  4. To exercise your right to withdraw consent, you may send a formal request via email to the appointed Consent Manager or to any other electronic mail address we may notify to you for this purpose.
  5. You are further entitled to review, amend, or update the information you have provided to us at any time to ensure it remains accurate and current by reaching out to us through the designated contact channels.
  6. While providing data is voluntary, should you choose not to share your information with us or subsequently withdraw your consent, we reserve the right to deny you access to the full extent of our services, as certain data is essential for the Platform’s functionality.

Business/Assets Sale or Transfers

  1. FarMart reserves the right to sell, transfer, or share some or all of its assets, including your personal data, as part of a merger, acquisition, reorganization, or sale of business assets, as well as in the event of bankruptcy.
  2. In the event of such a sale or transfer, we will take reasonable steps to ensure that the information you provided and the data we collected are stored and used by the new entity in a manner consistent with this Privacy Policy.
  3. Any third party or transferee to whom FarMart sells or transfers its assets will retain the right to continue using the data you provided or that was collected by us immediately prior to the transfer or sale.
  4. You are under a strict obligation to use this Website and Platform for reasonable and lawful purposes only and must not engage in any activity that is not intended or envisaged through the Website.
  5. By continuing to use the Platform, you acknowledge that your data is a corporate asset and may be moved or managed by a successor entity, provided they adhere to the same privacy standards outlined herein.

Designated Grievance Officer

If you find any discrepancies or have any grievances in relation to the collection, storage, use, disclosure and transfer of Your Data under this Policy or any terms of FarMart’s Terms of Use, Term of Sale and other terms and conditions or policies of FarMart, please contact grievances@farmart.co

All grievances submitted under this Policy will be acknowledged within 72 Hours of receipt. The Grievance Officer shall ensure that each complaint is duly reviewed and a resolution, together with a written response, is communicated to the Complainant within 30 (Thirty) Days from the date of receipt.

Amendments and Review

This policy may be subject to periodic review and amendments by the HR department to ensure its effectiveness and compliance with applicable laws and regulations. Employees will be notified of any significant changes to the policy in a timely manner.