BISMI HYPERMARKET
Groceries & everyday essentials, delivered

Privacy Policy

Last updated: June 2026
This Privacy Policy explains how Bismi Hypermarket (“Bismi”, “we”, “our” or “us”) collects, uses, discloses and protects your personal and device information when you use our Bismi mobile application, our website and related services (collectively, the “Platform”). Please read it carefully. By accessing or using the Platform you consent to the practices described here. If you do not agree, please do not use the Platform.
Summary: We collect only what we need to run the app — your account details, order and delivery information, device and usage data, and (with your permission) location and notification tokens. We use it to fulfil orders, run the app, prevent fraud and, with your consent, send offers. We do not sell your personal information.

1. Information We Collect

1.1 Information you provide

1.2 Information collected automatically (device and usage data)

1.3 Location information

With your consent, we collect precise or approximate location to show stores and products available near you, verify delivery areas, and calculate delivery availability. You can turn location off at any time in your device settings; some delivery features may then be unavailable.

1.4 Notifications

If you enable notifications, we collect your device’s push notification token so we can send you order updates, delivery alerts and (where permitted) promotional messages. You can disable notifications in app or device settings at any time.

1.5 Photos and files

If you choose to upload a profile picture or attach images (for example to a support request), we access only the image you select through the device picker — we do not read your full photo library or other files.

1.6 Information from third parties

We may receive information from payment partners (payment status), delivery partners (delivery status), analytics providers, and from account providers when you choose to sign in with them.

2. How We Use Your Information

3. Permissions the App Requests

PermissionWhy we ask for it
LocationShow nearby stores, products and delivery availability.
CameraTake a photo for your profile or a support request.
Photo / Media accessChoose an existing image to upload.
NotificationsSend order, delivery and offer updates.
Internet & networkLoad products, place orders and sync data.

Every optional permission can be denied or revoked at any time from your device settings without affecting core shopping features.

4. How We Share Your Information

We share information only as needed to run the Platform, with these types of parties:

RecipientPurpose
Delivery & logistics partnersTo deliver your orders (name, address, phone, order details).
Payment processors & gatewaysTo process payments securely; we receive payment status, not your full card details.
Cloud hosting & infrastructure providersTo store and process data securely (e.g., cloud servers, databases, push notification services such as Firebase Cloud Messaging).
Analytics & crash reporting servicesTo understand app usage and fix errors, using aggregated or pseudonymous data.
Customer support & service providersTo operate features such as support chat, SMS/OTP and email delivery.
Business partnersIn connection with joint offerings or promotions, with your consent.
Law enforcement, regulators or courtsWhen required by law, or to protect the rights, safety and property of Bismi, our users or the public.
SuccessorsIn a merger, acquisition, reorganisation or sale of assets, subject to this Policy.
We do not sell or rent your personal information to third parties for their own marketing purposes, and we do not share it for cross-context behavioural advertising.

5. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy — for example, for the life of your account and afterwards for the period required by tax, accounting and consumer-protection law (including GST record-keeping requirements in India). When data is no longer needed, we securely delete or anonymise it. Aggregated, anonymised data that cannot identify you may be kept indefinitely.

6. Data Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS/TLS), secure servers, access controls, permission-based internal access and periodic security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your account credentials confidential and contact us immediately if you suspect unauthorised use of your account.

7. Your Rights and Choices

Subject to applicable law, you may request to:

To exercise any of these rights, contact us using the details in Section 11. We respond within a reasonable time and no later than the period required by applicable law.

8. Cookies and Tracking Technologies

Our website and app may use cookies, local storage, SDKs and similar technologies to keep you signed in, remember preferences, measure performance and understand usage. You can control cookies through your browser settings. Third-party analytics providers may set their own cookies or identifiers on our behalf; they process data under their own privacy policies and our instructions.

9. Children’s Privacy

The Platform is intended for people aged 18 and over. We do not knowingly collect personal information from children. If we learn that a child has provided us with personal data, we will take steps to delete it promptly. If you believe a child has provided us with data, please contact us.

10. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top shows when it was most recently revised. Material changes will be highlighted in the app or by other notice. Continued use of the Platform after changes take effect means you accept the revised Policy.

11. Contact Us

For questions, requests or complaints about this Privacy Policy or your data:

If you are not satisfied with our response, you may escalate your complaint to the grievance officer or to the relevant data-protection authority in your jurisdiction.