Security

Umekart maintains reasonable administrative, technical and operational safeguards intended to protect information and Platform activity against unauthorised access, misuse, alteration, disclosure or loss.

However, no internet transmission, online platform, device or electronic storage system can be guaranteed to be completely secure.

Customers should therefore also follow safe online practices when accessing their accounts or completing transactions.

You are responsible for taking reasonable steps to protect your account and the devices used to access it.

• Do not share account passwords or authentication details.
• Do not share OTPs received for login or verification.
• Keep your registered mobile number and email secure.
• Use screen locks and device security features where available.
• Sign out from shared or public devices after use.
• Avoid accessing your account through suspicious links.

Online payments may be processed through supported banks, payment systems and third-party payment service providers.

Those providers may apply their own transaction-security, verification and authentication controls.

Customers should complete payment only through the official payment options presented during the Umekart checkout process.

Umekart is a marketplace-enabled platform and products may be offered by participating sellers.

Customers should keep transactions within the official Umekart order and payment flow.

If a seller or another person asks you to bypass Umekart and make direct payment to a personal account, unknown QR code or unofficial payment link, exercise caution and contact Umekart where appropriate.

Fraudsters may impersonate e-commerce platforms, sellers, banks, courier companies or customer-support teams.

Be cautious of communications claiming that you must:

• Share an OTP to receive a refund.
• Share your UPI PIN for account verification.
• Install a screen-sharing or unknown application.
• Pay a fee to release a refund or prize.
• Provide banking passwords or card PINs.
• Immediately transfer money to avoid account suspension.

A genuine refund process should not require you to disclose secret authentication credentials.

Depending on the payment method, Umekart may require limited payment or bank information necessary to process an eligible refund, particularly for certain COD transactions.

Provide such information only through authorised Umekart channels.

Some deliveries may use OTP-based confirmation.

Read the delivery SMS or message carefully and do not provide the OTP before the applicable delivery is actually being completed.

If the order is marked delivered without being received, contact Umekart promptly with your Order ID and available delivery information.

Information provided through Umekart is handled in accordance with the applicable Privacy Policy .

Customers should avoid sending unnecessary sensitive or confidential information through email, WhatsApp or customer-support channels.

Umekart may use or link to third-party services such as payment providers, logistics providers or other service platforms.

Those services may maintain their own security and privacy practices. Customers should exercise appropriate care when interacting with third-party services.

Contact Umekart promptly if you believe:

• Your account may have been accessed without authorisation.
• An order appears in your account that you did not place.
• You received a suspicious Umekart-related communication.
• A seller requested payment outside the Platform.
• Your payment/order status appears materially incorrect.

For suspected banking or payment fraud, you should also contact the relevant bank, card issuer or payment provider as appropriate.

While reasonable measures may reduce security risks, no website, application or electronic communication can guarantee absolute protection from every cyber threat, fraud attempt or unauthorised activity.

Users should remain alert, keep devices updated where practical, protect authentication information and use trusted networks and payment channels.