Who we are
BATMOON TRADING PRIVATE LIMITED is a private limited company incorporated in India, operating the website BatMoonKart. In this policy "we", "us" and "our" mean that entity, and "you" means anyone using the site.
| Registered office | Ground Floor, C/O Manoj Kumar, Vill - Hardi, Anjaan, Supaul, Bihar - 852108 |
|---|---|
| GSTIN | 10AAOCB5811F1Z3 |
| Contact | care@batmoonkart.com |
| Governing law | India |
We are the data fiduciary for the personal data described below, within the meaning of the Digital Personal Data Protection Act, 2023.
What we collect and why
We collect only what an order actually needs.
| Name | To address the parcel and the emails we send you. |
|---|---|
| Email address | To send the order confirmation, dispatch note and any reply to a support request. |
| Mobile number | Given to the courier so they can call you before delivery. |
| Delivery address, city, state, PIN code | To ship the order and to check the PIN code is serviceable. |
| Order and payment status | To fulfil the order, issue the invoice and process any refund. |
| Technical data | IP address, browser and device type, and pages viewed, in server logs and analytics. |
We never see or store your card, UPI PIN or bank credentials. Payments are handled entirely on the payment gateway's own infrastructure. We receive only a success or failure result and a transaction reference. No card data is stored on our servers, consistent with RBI tokenisation requirements.
We do not ask for and do not want sensitive personal data such as health information, biometrics, caste, religion or political affiliation. Please do not send it to us in a support message.
Our lawful basis
We process your data on these grounds:
- Performing the contract — you placed an order and we have to deliver it.
- Legal obligation — GST invoices and transaction records must be retained under Indian tax law.
- Your consent — for marketing emails, which you opt into and can leave at any time.
- Legitimate business interest — fraud prevention, and keeping the site working and secure.
Storage, security and retention
Data is stored on servers located in India. The site runs over HTTPS with TLS, admin access is password-protected and limited to named staff, and we keep the software patched.
| Order and invoice records | Retained for 8 financial years as required by Indian tax law. |
|---|---|
| Support messages | Retained for 24 months, then deleted. |
| Marketing list | Until you unsubscribe, then removed within 30 days. |
| Server and analytics logs | Retained for up to 12 months. |
No system is perfectly secure. If a breach affects your personal data we will notify you and the Data Protection Board of India as required.
Who else sees your data
We share the minimum necessary, and we do not sell your data to anyone, ever.
| Courier partners | Name, address, PIN code and mobile number — solely to deliver the parcel. |
|---|---|
| Payment gateway | Name, email, mobile and amount — to process the payment and any refund. |
| Email service | Name and email address — to send transactional email. |
| Analytics | Anonymised usage data only, where analytics is enabled. |
| Authorities | Where disclosure is required by law, a court order or a valid regulatory request. |
Cookies and local storage
The site uses a small number of cookies and browser storage entries:
- Session cookie — keeps the site working while you browse. Strictly necessary.
- Local storage (cart) — your bag contents stay in your own browser until you check out. They never reach our servers before you place the order.
- Local storage (recent orders and saved address) — kept only on your device so the account page can list your orders and pre-fill the checkout. Clear your browser data and it is gone.
- Analytics cookies — where enabled, to count visits and see which pages are used.
You can block or clear cookies in your browser settings. Blocking the strictly necessary ones will stop checkout from working.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct anything inaccurate or incomplete.
- Ask us to erase data we no longer need — subject to the tax retention periods above.
- Withdraw consent for marketing at any time, without affecting any order.
- Nominate someone to exercise these rights if you are unable to.
- Complain to us first, and then to the Data Protection Board of India if we do not resolve it.
Write to us at care@batmoonkart.com and we will respond within 30 days.
Children
This site is not intended for anyone under 18. Some products, particularly essential oils, are not suitable for children. We do not knowingly collect data from a child; if we learn that we have, we delete it. If you are a parent or guardian and believe your child has given us data, contact us and we will remove it.
Grievance officer
In line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020, our grievance officer is:
| Name | Shambhu Yadav |
|---|---|
| grievance@batmoonkart.com | |
| Address | Ground Floor, C/O Manoj Kumar, Vill - Hardi, Anjaan, Supaul, Bihar - 852108 |
| Acknowledgement | Within 48 hours. Resolution within 30 days. |
Full detail on the grievance redressal page.
Changes to this policy
If we change this policy we update the date shown at the top of the page. Material changes are notified by email to anyone who has ordered from us in the previous 12 months. Continuing to use the site after a change means you accept the updated policy.
Ground Floor, C/O Manoj Kumar, Vill - Hardi, Anjaan, Supaul, Bihar - 852108
Questions about this policy: care@batmoonkart.com