This Privacy Policy (the “Policy”) describes how MDS Mart (“MDS Mart”, “we”, “us” or “our”), the owner and operator of the website www.mdsmart.in (the “Website”), collects, uses, stores, discloses and protects the personal information of persons who visit, register on, or place orders through the Website (“User”, “you” or “your”).
MDS Mart is engaged in the online sale of decorative lighting products, including but not limited to wall lights, hanging lights, gate lights, lamps and allied decorative lighting articles, to customers located within the territory of India. This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, the Consumer Protection (E-Commerce) Rules, 2020, and other applicable laws of India, as amended from time to time.
By accessing or using the Website, creating an account, or placing an order, you expressly consent to the collection, use and disclosure of your information in accordance with this Policy. If you do not agree with any part of this Policy, you must not use the Website.
1. DEFINITIONS
1.1 “Personal Information” means any information that relates to an identifiable natural person, including name, e-mail address, mobile number and delivery address, and includes any data that, alone or in combination with other information, can identify you.
1.2 “Processing” means any operation performed on Personal Information, including collection, recording, storage, use, sharing, disclosure, alteration, restriction and erasure.
1.3 “Third-Party Service Providers” means independent persons who provide services in connection with the Website, including payment gateway operators, courier and logistics partners, authentication providers and hosting or analytics providers.
2. INFORMATION WE COLLECT
2.1 We collect only such information as is reasonably necessary to operate the Website, to process and deliver your orders and to provide customer support. The categories of information we collect are set out below.
2.2 Registration information. When you register an account on the Website, we collect your name, e-mail address, mobile number and a password of your choice. Passwords are stored in a protected form and are not visible to us in readable form.
2.3 Google Sign-In information. If you choose to register or log in using your Google account, we receive from Google the basic profile information that you authorise Google to share with us, namely your name and e-mail address. We do not receive or store your Google account password.
2.4 Order and delivery information. When you place an order, we collect the delivery address, contact details, order details and order history required to dispatch the products to you and to enable you to track your order.
2.5 Payment information. All payments on the Website are processed through Razorpay, a third-party payment gateway. Your card, UPI, net-banking, wallet or other payment credentials are entered on, and processed by, the payment gateway and its banking partners. MDS Mart does not collect, see or store your complete card number, CVV, UPI PIN, net-banking credentials or similar sensitive payment data. We receive only confirmation of the payment status and transaction reference details.
2.6 Product reviews. If you submit a review for a product purchased by you, we collect the content of the review together with your name or display name as associated with your account.
2.7 Communications. If you contact us by e-mail, telephone, WhatsApp or any other means, we may retain a record of that communication and the information contained in it for the purpose of responding to you and maintaining service quality.
2.8 Technical information. When you visit the Website, certain information may be collected automatically, including your IP address, browser type and version, device type, operating system, pages viewed, date and time of access and referring pages. Such information is collected through server logs and through cookies or similar technologies.
3. WHY AN ACCOUNT IS REQUIRED
3.1 Registration with a valid e-mail address, password, name and mobile number (or login through a Google account) is required in order to place an order on the Website. This requirement exists so that each order can be linked to a verified customer account, thereby enabling accurate order tracking, delivery coordination, communication regarding the status of the order, and efficient handling of returns, refunds and customer support requests.
4. PURPOSES FOR WHICH INFORMATION IS USED
4.1 We use your Personal Information only for lawful purposes connected with our business, including the following:
(a) to create, authenticate and manage your account;
(b) to receive, confirm, process, dispatch and deliver your orders and to provide you with tracking details;
(c) to process payments, cancellations, returns and refunds through the payment gateway;
(d) to communicate with you regarding your orders, queries, complaints and account;
(e) to send you service-related notifications, including order confirmations, dispatch updates and policy changes;
(f) to send promotional or marketing communications about our products, offers and new arrivals, subject to Clause 9 below;
(g) to display genuine customer reviews on product pages;
(h) to detect, prevent and investigate fraud, misuse, unauthorised access and violations of our Terms and Conditions;
(i) to improve the performance, content, security and usability of the Website; and
(j) to comply with applicable laws, regulations, legal process and lawful requests of governmental or judicial authorities.
4.2 We do not process your Personal Information for any purpose that is incompatible with the purposes stated above without obtaining your consent, where such consent is required by law.
5. COOKIES AND SIMILAR TECHNOLOGIES
5.1 The Website may use cookies, which are small text files stored on your device, together with similar technologies, to keep you logged in, remember your cart and preferences, secure your session, and understand how the Website is used.
5.2 We may also use analytics or advertising tools provided by third parties to measure Website traffic and to improve our services. Such third parties may place their own cookies on your device and are governed by their own privacy policies, over which we have no control.
5.3 You may disable or delete cookies through your browser settings. However, if you disable cookies, certain features of the Website, including login, cart and checkout, may not function properly.
6. DISCLOSURE AND SHARING OF INFORMATION
6.1 We do not sell, rent or trade your Personal Information to any person. We disclose your information only in the limited circumstances described below.
6.2 Courier and logistics partners. We share your name, delivery address and contact number with courier and logistics partners solely to the extent necessary to deliver your order and to enable delivery updates.
6.3 Payment gateway. Information necessary to process your payment, refund or cancellation is shared with Razorpay and its banking and financial partners. Their handling of your information is governed by their own terms and privacy policies.
6.4 Authentication provider. If you use Google Sign-In, Google processes the information in accordance with its own privacy policy.
6.5 Legal and regulatory disclosure. We may disclose your information where required by law, court order or request of a governmental or law-enforcement authority, or where we believe in good faith that disclosure is necessary to protect our rights, property or safety, to prevent fraud or to enforce our Terms and Conditions.
6.6 Business transfers. If MDS Mart is merged, sold or reorganised, your information may be transferred to the successor entity, which shall continue to be bound by this Policy.
6.7 Third-Party Service Providers are permitted to use your information only for the purpose of providing their services to us or to you, and not for any other purpose.
7. PAYMENT SECURITY
7.1 All online transactions are processed through Razorpay, which employs industry-standard security measures, including encryption and compliance with applicable payment-card security standards. MDS Mart is not responsible for the security practices of Razorpay or of your bank or card issuer, but we select payment partners that are recognised and regulated in India.
8. PROMOTIONAL COMMUNICATIONS
8.1 From time to time, we may send you promotional messages regarding our products and offers by e-mail, SMS, WhatsApp or other channels, using the contact details provided by you.
8.2 You may opt out of promotional communications at any time by using the “unsubscribe” option, if provided, or by writing to us at the e-mail address given in this Policy. Opting out of promotional communications will not affect transactional or service-related messages concerning your orders, which we will continue to send as necessary.
9. DATA RETENTION
9.1 We retain your Personal Information only for as long as it is necessary for the purposes described in this Policy, for the duration of your account, or for such longer period as may be required to comply with legal, accounting, tax, audit or dispute-resolution obligations.
9.2 When your information is no longer required, it will be deleted or anonymised in accordance with applicable law and our internal procedures.
10. DATA SECURITY
10.1 We adopt reasonable security practices and procedures, including technical and organisational measures, to protect your Personal Information against unauthorised access, alteration, disclosure or destruction.
10.2 However, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, while we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account password and for all activities carried out through your account. You must notify us immediately if you suspect unauthorised use of your account.
11. YOUR RIGHTS AND CHOICES
11.1 Subject to applicable law, you have the right to:
(a) access the Personal Information we hold about you and obtain a summary of it;
(b) request correction or updating of inaccurate or incomplete information;
(c) request erasure of your Personal Information, except where retention is required by law or for the establishment, exercise or defence of legal claims;
(d) withdraw your consent to the processing of your Personal Information, provided that such withdrawal may affect our ability to provide you with certain services, including order processing; and
(e) seek redressal of any grievance relating to the processing of your Personal Information.
11.2 To exercise any of these rights, please write to us at mdsmartindia@gmail.com. We may require reasonable verification of your identity before acting on your request. We will respond within a reasonable period and in accordance with applicable law.
12. CHILDREN AND MINORS
12.1 The Website is intended for use by persons who are eighteen (18) years of age or older and who are competent to enter into a binding contract under Indian law. Persons below eighteen (18) years of age may use the Website only under the supervision and with the consent of a parent or lawful guardian, and may not place orders independently.
12.2 We do not knowingly collect Personal Information from minors without verifiable parental or guardian consent. If we become aware that such information has been collected, we will take reasonable steps to delete it.
13. THIRD-PARTY WEBSITES
13.1 The Website may contain links to third-party websites or services. MDS Mart does not control and is not responsible for the content, privacy practices or security of such websites. We encourage you to review the privacy policy of every website you visit.
14. CHANGES TO THIS POLICY
14.1 We reserve the right to modify or update this Policy at any time to reflect changes in law or in our practices. The revised Policy will be published on the Website with the updated “Last Updated” date. Your continued use of the Website after such publication constitutes your acceptance of the revised Policy.
15. GRIEVANCE OFFICER AND CONTACT
15.1 In accordance with the Information Technology Act, 2000 and the rules made thereunder, any complaint, query or grievance relating to this Policy or the processing of your Personal Information may be addressed to the Grievance Officer, MDS Mart, at:
(a) Email: mdsmartindia@gmail.com
(b) Telephone / WhatsApp: +91 7253011525
(c) Website: www.mdsmart.in
15.2 Consumer grievances will be acknowledged within 48 hours and addressed within one month. Other privacy requests and complaints will be handled within the period required by the applicable law, including any shorter mandatory period.
16. GOVERNING LAW AND JURISDICTION
16.1 This Policy shall be governed by and construed in accordance with the laws of India. Subject to the Terms and Conditions of the Website, the courts at Delhi, India shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.
For return verification, we also process the photographs, videos, descriptions and administrator responses supplied with your claim. Access to uploaded evidence is limited to the customer concerned and authorised administrators. Relevant information may be shared with service providers where necessary to resolve the claim and as permitted by this Policy. Avoid including unrelated personal data. Evidence is retained only for the claim, applicable record-keeping obligations and legal disputes; you may contact us with an applicable access or erasure request.