Privacy Policy

We ask for as little as possible. Only your mobile number is required to create an account; everything else is optional and requested at the point it is actually needed.

We do not ask for, and you should never send us, your Aadhaar number, PAN, bank details or card details through this website.

Some information is recorded by the server whenever you use the site. We keep it because without it we cannot tell a genuine customer from an automated attack.

An IP address is personal data under the DPDP Act, so we treat it as such: it is never used to profile you, never sold, and never shared for advertising. It exists to protect the service and is retained only as long as it is useful for that.

Your mobile number does two jobs: it identifies your account, and it receives one-time passwords.

• We never store your OTP. Only a one-way cryptographic hash of it is stored, so the code cannot be read back out of our database by anyone, including us.
• An OTP expires 10 minutes after it is issued, can be used once, and is accepted for a maximum of 5 attempts.
• Our SMS is sent through a telemarketer registered with TRAI under the Telecom Commercial Communications Customer Preference Regulations, using message templates pre-approved on the DLT platform. We cannot send you a message whose content has not been registered and approved.
• OTP and order messages are service messages, not marketing. They are sent because you asked to log in or placed an order.

We use the minimum needed to keep you logged in and to remember your quote basket. We do not use advertising cookies and we do not track you across other websites.

You can clear cookies and site data from your browser at any time. Doing so signs you out and empties your quote basket.

We share the minimum necessary, only with parties who need it to deliver what you asked for:

• Our SMS provider — receives your mobile number and the OTP so the message can be delivered. Nothing else.
• Our transport and delivery partners — receive the delivery address and the contact name and phone for that delivery, so the driver can reach you.
• Our hosting provider — stores the website and database on servers located in India.
• Government authorities — only where we are legally required to disclose, such as GST records for invoices we have raised.

We do not share your data with advertisers, data brokers, or any other third party for their own purposes.

We keep personal data only while it serves the purpose it was collected for, or while the law requires it:

• OTP records — short-lived. They exist to verify a login and to enforce rate limits, then they are of no further use.
• Login sessions — until you sign out or the session expires.
• Account and address details — for as long as your account is open. Close your account and we delete them, except where retention is legally required.
• Invoices and tax records — retained for the period required by the GST and Income Tax legislation. This is a legal obligation we cannot waive, even at your request.

As a Data Principal you have the right to:

• Access a summary of the personal data we hold about you and what we have done with it.
• Correct data that is inaccurate, and complete data that is incomplete. Most of this you can do yourself from your account page.
• Erase your personal data where we no longer need it for the purpose it was collected, and where no law requires us to keep it.
• Withdraw consent at any time, as easily as you gave it. Note that withdrawing consent to receive OTP messages means you will no longer be able to log in, because the OTP is how we verify it is you.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Complain to the Data Protection Board of India if you are not satisfied with how we have handled your grievance.

To exercise any of these, contact us using the details in the next section. We will respond within the period prescribed under the Act.

If you have a concern about how your personal data has been handled, raise it with us first — we would rather fix it than have you escalate.

Call +91 84660 06633 or +91 99488 87019, or write to us at our registered office address given at the top of this policy. Please include your registered mobile number so we can locate your records.

If we do not resolve your grievance to your satisfaction, you may complain to the Data Protection Board of India.

• The website is served only over an encrypted HTTPS connection.
• One-time passwords are stored as one-way hashes, never as readable text.
• Login sessions use random tokens that can be revoked, rather than self-contained tokens that cannot.
• Your delivery addresses are readable only by your own logged-in account. Every request for an address is checked against the owner of that address, not just the address identifier.
• The database is not reachable from the public internet.
• Access to the server requires a cryptographic key. Password logins are disabled.

No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the Data Protection Board as required under the Act.

This website is intended for businesses and adults purchasing construction material. We do not knowingly collect personal data of anyone under 18. If you believe a child has created an account, tell us and we will delete it.

If we change how we handle personal data, we will update this page and change the “last updated” date at the top. Where a change materially affects your rights, we will tell you directly.