In short: We collect only what we need to deliver your order — your name, address, phone number and email. We ship in
plain, unbranded packaging. We never sell your data to anyone. You can ask us to delete your information at any time by writing to
info@patelmart.in.
1. Who we are
Patel Mart ("Patel Mart", "we", "us", "our") operates the website https://patelmart.in, where we sell traditional Ayurvedic bhang and hemp preparations including Bhang Goli, Bhang Powder, Bhang Leaves and Bhang Seeds. We have been serving customers across India since 2013.
This Privacy Policy explains what personal data we collect from you, why we collect it, and what control you have over it. It applies to everyone who visits our website, places an order, or contacts us.
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), Patel Mart is the Data Fiduciary responsible for your personal data, and you are the Data Principal.
2. Information we collect
We collect only the information needed to run our store and fulfil your order. Here is exactly what we collect and why:
| What we collect | When | Why we need it |
|---|
| Full name |
At checkout / account signup |
To address and deliver your parcel |
| Shipping & billing address, PIN code |
At checkout |
To ship your order and calculate delivery |
| Phone number |
At checkout / enquiry |
Delivery coordination and COD confirmation calls |
| Email address |
At checkout / contact form |
Order confirmation, invoice and support replies |
| Order history |
After each purchase |
Returns, refunds, warranty and support |
| Account password (encrypted) |
If you create an account |
To secure your account — we cannot read it |
| Product reviews & ratings |
If you choose to submit one |
To display on the product page |
| IP address, browser & device type |
Automatically on visit |
Security, fraud prevention and site analytics |
| Pages viewed, items in cart |
Automatically on visit |
To keep your cart working and improve the site |
What we do NOT collect: We do not collect your card number, CVV, UPI PIN or net-banking password. We do not ask for Aadhaar, PAN, or any government ID to place a normal order. We do not collect health records or medical history.
3. How we use your information
We use your personal data strictly for the following purposes:
- To process and deliver your order — including sharing your address with our courier partner.
- To communicate about your order — confirmations, dispatch updates, tracking and delivery calls.
- To confirm Cash on Delivery orders — we may call or message you before dispatch to verify a COD order is genuine.
- To provide customer support — answering your questions on WhatsApp, phone or email.
- To handle returns and refunds — as described in our Return & Refund Policy.
- To prevent fraud and abuse — detecting fake orders, payment fraud and misuse of the site.
- To meet legal obligations — tax records, invoicing, and responding to lawful requests from authorities.
- To improve our website — understanding which pages and products are useful, in aggregate.
We do not use your data for automated decision-making or profiling that produces legal effects on you.
4. Payment information
We accept UPI (PhonePe, Google Pay, Paytm, BHIM), credit and debit cards (Visa, Mastercard, RuPay), net banking, and Cash on Delivery.
Your card and UPI details never touch our servers. All online payments are handled directly by RBI-authorised payment gateways on their own secure, PCI-DSS compliant systems. We only receive a confirmation of whether the payment succeeded or failed, along with a transaction reference number.
For Cash on Delivery orders, no payment data is collected at all — you pay the delivery agent directly.
5. Discreet packaging & delivery privacy
We understand that privacy matters especially when ordering wellness products. Therefore:
- All orders ship in plain, unbranded outer packaging. There is no mention of "bhang", "hemp" or any product name on the outside of the parcel.
- The shipping label carries only the sender name, your delivery address, and the tracking barcode.
- Our courier partners receive only your name, address, phone number and parcel weight — never your order contents, email or payment details beyond the COD amount.
- We do not disclose your purchase history to anyone, including family members, unless you personally authorise it or we are legally required to.
6. Cookies and tracking
Cookies are small text files stored by your browser. We use them for:
- Essential cookies — to keep items in your shopping cart, keep you logged in, and secure the checkout. The site cannot function without these.
- Preference cookies — to remember choices such as your PIN code or recently viewed products.
- Analytics cookies — to understand, in aggregate, how visitors use the site so we can improve it.
You can block or delete cookies through your browser settings at any time. Please note that blocking essential cookies will prevent the cart and checkout from working.
7. Who we share data with
We never sell, rent or trade your personal data. Not to advertisers, not to data brokers, not to anyone.
We share the minimum necessary information with a small number of service providers who help us run the business:
- Courier and logistics partners — to deliver your parcel. They receive your name, address and phone number.
- Payment gateways — to process online payments securely.
- Web hosting and IT providers — who store our website data on secure servers.
- Communication tools — such as email and WhatsApp, used to send you order updates.
All such partners are required to use your data only for the service they provide to us, and to keep it confidential.
We may also disclose information where we are legally obliged to — for example in response to a valid court order, a request from a law enforcement or tax authority, or to establish or defend a legal claim.
8. How long we keep your data
- Order and invoice records — retained for up to 8 years, as required by Indian tax and accounting law.
- Account details — kept for as long as your account is active. If you ask us to close it, we delete your account data except what we must keep for legal reasons.
- Support conversations — kept for up to 2 years to help resolve any recurring issue.
- Website analytics — kept in aggregated, non-identifiable form.
Once data is no longer needed for the purpose it was collected and no legal duty requires us to keep it, we delete or anonymise it.
9. How we protect your data
- The entire site runs over HTTPS/SSL encryption — look for the padlock in your browser.
- Account passwords are stored hashed, meaning even we cannot read them.
- Access to customer data is restricted to authorised staff who need it to do their job.
- Our servers are protected by firewalls, and we apply security updates regularly.
- Payment data is handled entirely by PCI-DSS compliant gateways, never stored by us.
No method of transmission over the internet is completely secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. If a data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023.
10. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights over your personal data:
- Right to access — request a copy of the personal data we hold about you.
- Right to correction — ask us to fix data that is inaccurate, incomplete or out of date.
- Right to erasure — ask us to delete your data where we no longer have a legal reason to keep it.
- Right to withdraw consent — withdraw permission you previously gave, at any time. This does not affect processing already carried out.
- Right to grievance redressal — complain to us about how your data is handled, and receive a response.
- Right to nominate — nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, email info@patelmart.in from the address associated with your order, or call +91 91421 13543. We will respond within 30 days. We may ask you to verify your identity before acting, so that we do not release your data to the wrong person.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.
11. Marketing & communication
We may send you occasional emails or WhatsApp messages about offers, new products and useful guides — but only if you have opted in, or have previously purchased from us.
You can opt out at any time by clicking "unsubscribe" in any email, replying STOP to a WhatsApp message, or emailing us. Opting out of marketing does not stop essential order-related messages such as dispatch and delivery updates.
12. Age restriction
Our products are intended for adults aged 18 years and above only. We do not knowingly collect personal data from children. By placing an order you confirm that you are at least 18 years old.
If we become aware that we have collected data from a person under 18, we will delete it promptly. Parents or guardians who believe a minor has provided us data should contact info@patelmart.in immediately.
13. Third-party links
Our website and blog may contain links to other websites — for example social media pages, payment gateways or reference sources. This Privacy Policy does not apply to those sites. We are not responsible for their content or privacy practices, and we encourage you to read their policies before sharing any information with them.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our products, or the law. The revised version will be posted on this page with a new "Last updated" date at the top.
If we make a significant change to how we use your personal data, we will notify you by email or through a notice on the website. Your continued use of the site after an update means you accept the revised policy.
15. How to contact us
If you have any question, concern or complaint about this Privacy Policy or about how we handle your personal data, please get in touch. We take every privacy concern seriously and aim to respond within 24–48 business hours.
Patel Mart
Danapur Nizamat, Patna, Bihar, India
Business hours: Monday to Saturday, 10:00 AM – 6:00 PM IST
16. Lodging a complaint with the authority
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority.
In India, the supervisory authority for personal data protection is the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023. You may approach the Board if you believe we have not handled your personal data or your grievance appropriately.
Before approaching the Board, the Act requires you to first raise the matter with us. Please write to info@patelmart.in so that we have the opportunity to resolve it — we aim to respond within 30 days.