Privacy Policy

1. Introduction

Merry Parts operates the website and mobile application. This Privacy Policy explains our online information practices and the choices you can make about the way your information is collected and used.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement.

2. Information We Collect

3. How We Use Your Information

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share information with:

• Service Providers: Payment processors, shipping companies, and hosting providers
• Legal Requirements: When required by law or to protect our rights
• Business Partners: With your consent for specific purposes

All service providers are contractually obligated to maintain the confidentiality and security of your information.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our website uses SSL (Secure Socket Layer) encryption to protect sensitive information during transmission. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal information
• Right to Correction: Update or correct inaccurate information
• Right to Deletion: Request deletion of your information
• Right to Opt-out: Unsubscribe from marketing communications
• Right to Portability: Receive your data in a portable format

6A. India: Digital Personal Data Protection Act 2023 (DPDPA)

For users located in India, we process your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 made under the Information Technology Act, 2000.

Your rights as a Data Principal under the DPDPA include:

• Right to information about the personal data being processed and the purposes of processing.
• Right to correction and erasure of inaccurate or incomplete personal data.
• Right to grievance redressal by contacting our Grievance Officer (see Section 11).
• Right to nominate another individual to exercise your rights on your behalf in the event of death or incapacity.

Data Retention: We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Order data is retained for a minimum of 7 years as required under Indian tax and accounting regulations. You may request deletion of your account data at any time (subject to legal retention obligations) by contacting our Grievance Officer.

Consent: Where we rely on your consent to process personal data, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Cookies

Our website uses cookies to enhance your user experience. Cookies are small files stored on your device that help us remember your preferences and analyze usage patterns. You can configure your browser to refuse cookies or alert you when cookies are being sent.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party sites before providing your information.

9. Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes by updating the "Last Updated" date and posting the revised policy on our website.

11. Grievance Officer & Contact Us

In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are provided below. If you have any complaints or concerns regarding the processing of your personal data, or any questions about this Privacy Policy, please contact our Grievance Officer.

You may also contact us via our general enquiry form.

12. Company Information