Privacy Policy

1. Our Role: Platform Provider & Data Processor

MiniMart provides an E-Commerce and Social Commerce Operating System enabling independent merchants ("Merchants") to create and operate their online stores ("Stores").

• For Merchants: MiniMart acts as a Data Controller regarding merchant account credentials, contact information, subscription billing data, and administrative activity.
• For Store Customers: When customers purchase products through an independent Merchant Store, the individual Merchant is the Data Controller of customer order data. MiniMart acts as a secure Data Processor providing technical infrastructure, order management tools, and logistics integrations on the merchant's behalf.

2. Information We Collect

A. Merchant Information: When you register as a merchant, we collect your business name, store slug, owner name, email address, phone number, physical address, and payment settlement preferences.

B. Customer Order Information: When an end-customer places an order at a Merchant Store, we process the necessary information to fulfill the order, including recipient name, delivery address, phone number, items ordered, order notes, payment method (e.g., Cash on Delivery or online payment), and delivery status.

C. Technical & Usage Data: We automatically log IP addresses, browser types, device identifiers, and session timestamps to prevent fraudulent activities, detect bot abuse, and optimize platform performance.

3. How We Use Collected Information

We use the processed information strictly to:

• Provide, operate, and maintain our multi-tenant SaaS e-commerce platform.
• Facilitate the 5-stage order fulfillment pipeline (1. New, 2. Confirmed, 3. Processing, 4. Dispatched, 5. Delivered).
• Enable merchant courier integrations (such as Prompt Xpress, Domex, and Fardar Express) for automated package dispatch and tracking.
• Power our COD Risk Shield to protect merchants from repetitive fake orders, address fraud, and high return-to-origin (RTO) rates.
• Send transactional order confirmations, SMS/WhatsApp delivery updates, and password reset notifications.
• Comply with statutory legal, accounting, and tax requirements.

4. Data Sharing & Third Parties

We do not sell, rent, or trade personal data to third parties. Information is only shared with verified service providers necessary to provide store operations:

• Logistics & Courier Partners: Delivery details are shared with couriers configured by the merchant solely to complete parcel delivery.
• Payment Processors: Payment transactions are handled through encrypted, industry-standard gateways. MiniMart does not store sensitive credit or debit card numbers on its servers.
• Cloud Infrastructure: Data is hosted securely with reputable cloud providers utilizing strict data isolation and firewall protection.
• Legal Requirements: We may disclose information if required to comply with a valid court order, warrant, or governmental regulation.

5. Data Security & Protection

We implement robust administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, alteration, or misuse. These safeguards include 256-bit SSL/TLS encryption for all data in transit, strict multi-tenant database isolation, two-factor authentication (2FA) options for merchant accounts, and continuous vulnerability monitoring.

6. Data Retention & User Rights

We retain account and transaction records for as long as necessary to provide services and comply with statutory retention laws.

Depending on applicable law, merchants and store customers have the right to:

• Access the personal data held about them.
• Request correction of inaccurate or incomplete records.
• Request deletion of their personal data, subject to ongoing legal or transaction compliance obligations.
• Opt out of marketing communications at any time.

*Note: If you are an end-customer of an independent merchant store, please contact the respective store owner directly for data access or deletion requests, as they are the primary Data Controller.

7. Cookies & Tracking

MiniMart uses essential cookies to remember authenticated user sessions, maintain shopping carts during active checkout sessions, and save user theme preferences. We do not use intrusive cross-site tracking cookies.

8. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our privacy practices, please reach out to our team: