Privacy Policy

1. Introduction & Data Controller Statement

This Privacy Policy governs the processing of personal data by Shree Krishna Mart Pvt. Ltd (Estd. 2021, registered under the Companies Act of Nepal, with head office situated at Bagarkot, Dharan-15, Sunsari, Koshi Province, Nepal). In this policy, "we", "us", and "our" refer to Shree Krishna Mart Pvt. Ltd acting as the Data Controller.

We are committed to maintaining the confidentiality and integrity of your personal information. This Privacy Policy outlines the standards under which we collect, store, utilize, and protect customer data obtained through our retail supermarket operations, official website (shrikrishnamart.com), mobile interfaces, and customer care helpdesks, in full compliance with the Individual Privacy Act, 2075 (2018) of Nepal.

2. Definitions & Key Terminology

• Personal Data: Any information relating to an identified or identifiable natural person, including name, mobile number, email address, physical address, and transaction history.
• Processing: Any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, consultation, or erasure.
• User / Customer: Any individual who accesses our website, registers an account, places an online order, or engages with our retail services in Nepal.
• Data Controller: Shree Krishna Mart Pvt. Ltd, which determines the purposes and means of processing customer personal data.

3. Principles of Lawful Data Processing

Shree Krishna Mart Pvt. Ltd adheres to the core legal principles of privacy and data protection under Nepalese jurisprudence:

• Lawfulness & Fairness: Data is collected fairly and processed exclusively for legitimate retail, logistics, and billing purposes.
• Purpose Limitation: We collect personal data strictly for specified, explicit purposes and do not process it further in ways incompatible with those purposes.
• Data Minimization: We limit data collection strictly to what is necessary for order fulfillment, customer support, and tax compliance.
• Storage Limitation: Personal records are retained only for as long as necessary to satisfy operational, legal, and financial auditing mandates.

4. Categories of Data We Collect

We collect personal information directly provided by you during account creation, checkout, or support interactions, as well as technical data gathered automatically during site visits:

5. Detailed Operational Purposes of Data Use

We use customer personal data for the following specific business activities:

1. Order Packing & Dispatch: Processing your grocery basket, preparing packages at our Dharan supermarket hub, and delivering items to your address across Nepal.
2. Automated Notifications: Sending instant order confirmation messages, delivery rider contact details, and electronic tax receipts via SMS and WhatsApp.
3. Customer Care Resolution: Assisting you with order modifications, location adjustments, item replacements, or return/refund processing.
4. Loyalty & Rewards Program: Tracking customer shopping activity to calculate eligible loyalty reward points and promotional discount vouchers.
5. Taxation & Accounting Compliance: Maintaining official corporate sales invoices as mandated by the Inland Revenue Department (IRD) and Ministry of Finance of Nepal.

6. Third-Party Service Partners & Data Sharing

We do not disclose customer personal information to external entities except to operational service partners bound by strict non-disclosure contracts:

• Logistics & Courier Delivery Partners: Local delivery riders in Dharan and national express courier companies receive your name, address, and mobile number solely for parcel transport and recipient pre-calls.
• Payment Gateway Providers: Integrated licensed payment providers (Fonepay, eSewa, Khalti, licensed commercial banks in Nepal) process payment authorizations over encrypted connections.
• Legal & Regulatory Authorities: We may disclose personal records if required by law, court subpoena, or official directive issued by government law enforcement agencies in Nepal.

7. Data Security & Storage Controls

We implement industry-standard administrative, physical, and technical safeguards to protect your personal information against unauthorized access, loss, alteration, or disclosure:

• 256-Bit SSL Encryption: All web data transmissions, online forms, and checkout interactions are encrypted using high-grade SSL certificates.
• Firewall Infrastructure: Customer databases are stored on secure servers protected by continuous network security firewalls and intrusion prevention monitoring.
• Restricted Staff Access: Access to customer personal records is strictly limited on a need-to-know basis to authorized fulfillment and support personnel.

8. Cookies & Tracking Technologies

Our website utilizes essential session cookies to enhance user shopping experience. Cookies allow our portal to remember active cart items, user login states, and regional delivery preferences. You can choose to disable cookies in your browser settings, though certain website functions (such as cart persistence) may be impaired.

9. Your Privacy Rights & Access Requests

Subject to applicable Nepalese laws, customers possess the following data subject rights:

• Right to Access: You may request a copy of the personal information retained in your customer account.
• Right to Rectification: You may request correction of inaccurate or incomplete contact and delivery details.
• Right to Account Erasure: You may request permanent deletion of your online customer account and marketing preferences by contacting our support team.

10. Data Protection Officer Contact Details

If you have questions, concerns, or formal requests regarding this Privacy Policy or our data handling practices, please contact our Data Officer: