Acromart
LEGAL & COMPLIANCE

Privacy Policy

Data protection on the Acromart marketplace

Version: v1.0Effective: 12 June 2026Jurisdiction: IndiaOperated by: Elfinic Commerce Pvt Ltd

1. Introduction & Scope

This Privacy Policy explains how Elfinic Commerce Private Limited (the “Company”, “we”, “us”), which owns and operates the Acromart marketplace at www.acromarts.com (the “Platform”), collects, uses, stores, shares and protects your personal data when you use the Platform as a buyer, vendor or visitor.

This Policy is published in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), as applicable. By using the Platform, you acknowledge that you have read and understood this Policy.

2. Definitions

  • Personal Data: Any data about an individual identifiable by or in relation to such data.
  • Sensitive Data: Categories such as financial information, passwords and other data treated as sensitive under applicable law.
  • Data Principal: The individual to whom the personal data relates (i.e., you).
  • Processing: Any operation performed on personal data, such as collection, storage, use, sharing or deletion.

3. Information We Collect

Identity & account data: Name, email, phone, password, billing/shipping addresses, business details such as company name and GSTIN.

Vendor KYC data: PAN, GSTIN, bank account details, business registration documents and authorised signatory information collected for verification and payouts.

Transaction data: Order history, products viewed and purchased, quantities, invoices, payment status and related communications. We do not store complete card numbers; online payments are handled by PCI-DSS-compliant gateways.

Device & usage data: IP address, device/browser type, operating system, pages visited, referring URLs and interaction data collected automatically via cookies and similar technologies.

Location & communications: Delivery location and site details you provide, and records of your communications with our support and grievance teams.

4. How We Collect Information

  • Directly from you — when you register, place an order, list products, contact support or otherwise interact with the Platform.
  • Automatically — through cookies, log files and analytics tools as you use the Platform.
  • From third parties — from payment gateways, logistics partners, verification services and analytics providers, where applicable.

5. How We Use Your Information

  • Create and manage your account and verify vendors;
  • Process, fulfil and deliver orders, and issue invoices;
  • Process payments, refunds and vendor payouts;
  • Provide customer support and handle grievances, returns and disputes;
  • Communicate order updates, service messages and (with consent) marketing;
  • Improve, secure and personalise the Platform and prevent fraud and misuse;
  • Comply with legal, tax, accounting and regulatory obligations.

6. Consent & Legal Basis

We process personal data on the basis of your consent and/or for legitimate uses permitted under the DPDP Act, including performance of the services you request and compliance with law. Where we rely on consent, you may withdraw it at any time by contacting us, though this may limit our ability to provide certain services. Where we send marketing communications, you may opt out at any time.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, analyse usage and improve performance. You can manage or disable cookies through your browser settings; however, some features may not function correctly without them.

8. How We Share Information

We do not sell your personal data. We share it only as necessary with:

  • Vendors — to fulfil orders you place (e.g., delivery details);
  • Logistics & delivery partners — to ship and deliver products;
  • Payment gateways & financial institutions — to process payments and refunds;
  • Service providers — for hosting, analytics, communications and verification, bound by confidentiality obligations;
  • Legal & regulatory authorities — where required by law, court order, or to protect rights, safety and property.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, tax and accounting requirements, and to resolve disputes and enforce agreements. When data is no longer required, we delete or anonymise it in accordance with applicable law.

10. Data Security

We implement reasonable technical and organisational security measures — including encryption in transit, access controls and secure infrastructure — to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. Your Rights

  • Access and obtain a summary of the personal data we process about you;
  • Request correction, completion or updating of inaccurate data;
  • Request erasure of your data where it is no longer required;
  • Withdraw consent and opt out of marketing communications;
  • Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act;
  • Raise a grievance with our Grievance Officer.

To exercise any of these rights, contact us at info@acromarts.com. We may need to verify your identity before acting on a request.

12. Children’s Data

The Platform is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from children. If we become aware that we have collected such data without appropriate consent, we will take steps to delete it.

13. Third-Party Links

The Platform may contain links to third-party websites and services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their policies before sharing your data.

14. Data Transfers

Your personal data is primarily processed in India. Where data is transferred to or accessed from outside India (for example, by service providers), we take reasonable steps to ensure it is protected consistently with this Policy and applicable law.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in law, technology or our practices. The updated version will be posted on the Platform with a revised effective date. Your continued use of the Platform after changes constitutes acceptance of the updated Policy.

Grievance Officer & Contact

For questions, requests or complaints, contact our Grievance Officer. We will acknowledge complaints within forty-eight (48) hours and endeavour to resolve them within one (1) month, in line with applicable law.

  • Entity: Elfinic Commerce Private Limited (CIN U47190MH2025PTC459437)
  • Email: info@acromarts.com
  • Address: Unit No. 112/B, Gold City, Sector 19D, Vashi, Navi Mumbai, Maharashtra 400703, India
  • Hours: Monday to Friday, 10:00 – 18:00 IST (excluding public holidays)
  • GSTIN: 27AAJCE2298Q1ZS