This Privacy Policy is published in compliance with, inter alia:

1. Section 43A of the Information Technology Act, 2000 (“IT Act”);
2. Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (“Rules”); and
3. Regulation 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”).

1. General Terms

   1. By accessing or using the Platform or the Services, or by otherwise giving us your information, you confirm that you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872, and have read, understood, and agree with the privacy practices described in this Privacy Policy and the Terms and the collection, storage and processing of your personal information (“Personal Information”) in accordance with them. Please go through this Privacy Policy in detail and contact us if you have any questions or require any clarifications.
   2. You hereby consent to our collection, storage, processing, use, sharing, disclosure, or transfer of your Personal Information as described in this Privacy Policy. We reserve the right to change, modify, add or delete portions of this Privacy Policy, at our sole discretion, at any time. While the Company will periodically inform you of this Privacy Policy or any material changes to this Privacy Policy that the Company makes, you are responsible to check this page regularly to make note of any changes. Your continued use of the Platforms and/or the Services means that you accept and agree to the changes in the Privacy Policy.
   3. If you are accessing or using our Services or the Platform from an overseas location, you do so at your own risk, and shall be solely liable for compliance with any applicable local laws.
   4. If you do not agree with any of the terms and conditions of this Privacy Policy, please do not proceed further to use the Platform or any Services.

2. What type of Personal Information do we collect?

   1. When you visit our Platform, Privacy Policy applies to information(s), as mentioned below and collected about You.

      We collect various information from You when You access or visit the Platform, register or set up an Account on the Platform or use the Platform. You may browse certain sections of the Platform and the Content, without registering an Account on the Platform. However, to avail certain Services on the Platform, You are required to set up an Account on the Platform. This Privacy Policy applies to information(s), as mentioned below and collected about You.

   2. Information collected from you while setting up an account and using our services

      We strive to only collect Personal Information that is adequate, relevant, and limited to achieve the purpose(s) for which it was collected:
      1. Registration information:

         If you are a User visiting our Platform and creating an account, or availing our Services, you understand that certain Personal Information in the nature of name, mobile number, email address, date of birth, gender, age, address details, bank account details, proof of identity such as Permanent Account Number (PAN), passport, driving licence, the voter's identity card issued by the Election Commission of India, GSTIN details, APMC licence, trade licences, Incorporation certificate or any other document recognized by the Government for identification, including that of the key contact person in your organization will have to be provided by you.] We verify your phone number with the help of a one-time password sent to your phone number. You hereby agree that any one time password generated during the course of our engagement with You shall be kept confidential and You shall be solely responsible for the risk and loss, if any, caused by mistake or unauthorised use of such one-time password by any third party.

         Additionally, as a user availing our Services, you may also be required to provide certain non-personally identifiable information such as the purpose for availing our Services, the legal nature of your organisation and KYC details of your organization (for instance, registration and license details of your organization and tax registration number). Additionally, we may from time to time, provide you with supplemental information at the time we collect your Personal Information to address unique or situational collection needs.

      2. Order information:

         We may collect information necessary for us to process your orders on the Platform including, your postal address, GSTIN details, place of delivery to another User and specific payment information such as payment transaction details. We collect your bank account information to process payments on your behalf.

      3. Usage Information:

         We may collect information about how you use our Platform, your device and software including usage statistics, traffic data, your IP address, browser, operating system type, domain names, access times, locations, previous orders and transactions including product pricing details, transaction information and payment and browsing history. Your usage of certain third-party services on our Platforms also requires us to collect such information as is considered necessary for that purpose.

      4. Interaction with other Users:

         While availing Services on the Platform, you may interact with other Users through the Platform either through a chat functionality or calls placed through the Platform. You may also receive notifications from us on commencement, processing or completion of a Transaction facilitated through the Platform. The chat interactions or voice calls may be recorded by the Company or the approved third party contracted for the purpose.

      5. Feedback surveys:

         We may also collect information that you provide to us on our Platform, register with us for availing the Services, inquire about our Services, post feedback, participate in any online survey, interact with us on social media, fill out any contact forms for us to assist you on the request raised by you, provide it to us directly such as through business interactions with you or when you visit one of our office locations.

   3. Information Collected through a Representative

      We may collect Personal Information when you or a representative from an organization or company with which you are associated with provides it to us directly, such as through the provision of access credentials to our customer portals.

      To the extent Personal Information provided by you does not belong to you, you warrant that you have the right to provide such Personal Information. You agree to inform your agents, employees, or any authorized personnel (e.g., contractors, partners, or authorized third parties) (i) that their Personal Information may be processed by us; and (ii) of their rights regarding the processing of their Personal Information in accordance with this Privacy Policy and applicable data privacy laws. You warrant that you and the business with which you are associated shall be fully responsible for any liability arising from any such use of Personal Information, including indemnifying the Company from any such use of Personal Information.

   4. Information collected automatically

      Cookies and other tracking technologies

      Our Platforms use cookies and other tracking technologies. A “cookie” is a small text file that may be used, for example, to collect information about activity on the Platform. Some cookies and other technologies may serve to recall information previously indicated or submitted by a user. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.

      Tracking technologies may record information such as internet domain and host names, internet protocol (IP) addresses, browser software and operating system types, stream patterns, and dates and times that the Platform is accessed. Our use of cookies and other tracking technologies allow us to improve our Platforms and your experience.

      At all times, you may refuse all cookies on your browser by changing your settings to the extent permissible on your device. However, by doing so, you may not be able to use certain features on the Platforms or take full advantage of all the offerings and interest-based advertising.

      Location Information

      If you permit us to access information about your location (including general location information derived from the network you use to access the Services), we collect the precise or general location information provided by your device to appropriately tailor certain regional settings, such as preferred language.

   5. Information from other sources

      We receive and store certain types of information whenever you interact with us. For example, we obtain certain types of information when your web browser accesses the Platform and other content served by or on behalf of us on other web sites: OS type and version, device brand, browser and its version details, etc. We may also receive information about you that is publicly available or from such third parties who the Company partners with.

      We may collect Personal Information from third-party sources, including our service providers, through your interactions with us on social media, through industry, marketing, or trade associations events, and through database providers, public agencies, or credit bureaus.

      In addition, if you choose to interact with us or our partners on social media by posting to our pages, tagging us (or using certain hashtags or other identifiers) in posts, or participating in activities, we may collect Personal Information from the social media account you use to interact with us, including the name associated with the account, the account handle, recent activity, the content of any posts in which we are tagged, and other information that may be contained on your social media profile to allow us to respond to the posts and understand and engage with our audience.

      The IT Act and the SPDI Rules regulate the collection, usage, retention and disclosure of personal information, which is defined under the SPDI Rules as any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available to a body corporate, is capable of identifying such person. The SPDI Rules further define sensitive personal data or information (SPDI) of a person as personal information about that person relating to:

      1. passwords;
      2. financial information such as bank accounts, credit and debit card details or other payment instrument details;
      3. physical, physiological and mental health condition;
      4. sexual orientation;
      5. medical records and history;
      6. biometric information;
      7. any detail relating to the above clauses as provided to the body corporate for providing services; and
      8. any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise.

      You provide all information to us voluntarily. Collection, use and disclosure of Personal Information and SPDI requires your express consent. You are providing us with your consent to our use, collection and disclosure of the Personal Information and SPDI. You may choose to not provide us with Personal Information and SPDI, but in the event that you do so, we will be unable to provide you access to our Platforms or allow Transactions or provide Services through our Platforms.

3. How do we use the Personal Information we collect?

   We use the Personal Information we collect to provide our Services to you and make them more effective. We may also use your Personal Information including SPDI for the following purposes:

   1. to provide, maintain, personalise and enhance our Services;
   2. to develop new Services;
   3. to provide you or the business with which you are associated with certain personalized services,;
   4. to screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Platform (for example, by generating analytics about how our users browse and interact with the Platform, and to assess the success of our marketing and advertising campaigns);
   5. to monitor our infrastructure and to protect our assets including our intellectual property rights;
   6. To investigate, prevent, or take action regarding illegal activities or situations involving potential threats to the safety of any person including that of our employees, safety of the Company’s assets, violations of our Terms, or as otherwise required by law;
   7. to communicate with you;
   8. when in line with the preferences you have shared with us, provide you with information or advertising relating to our services;
   9. to support our relationship with you and the business with which you are associated, including customer or technical support services, and accounting and billing services;
   10. to provide better usability, troubleshooting and Platform maintenance;
   11. to understand which parts of the Platforms are visited and how frequently;
   12. to request feedback;
   13. for research, growth and development of our and our group entities’ business;
   14. to comply with applicable law; or
   15. for any other purposes that are permissible under applicable law,

   (collectively “Purposes”).

   We may combine the information that we receive from third parties with the information you give to us and information we collect about you for the Purposes set out above. Further, we may anonymize and/or de-identify information collected from you through the Services or via other means, including via the use of third-party web analytic tools. As a result, our use and disclosure of aggregated and/or deidentified information is not restricted by this Privacy Policy, and it may be used and disclosed to others without limitation.

4. How do we share your Personal Information?

   1. Information shared with partners, service providers or group companies: Information about you and the other users of the Platform and/or our Services form an integral part of our business. We only share Personal Information with third parties who have agreed to comply with and implement data protection measures as required under applicable laws. By using the Platform or availing our Services, you accept the terms hereof and hereby consent to the storage and processing of the Personal Information and SPDI by third parties. We, have arrangements with third parties (including as mentioned below) such as affiliates or group companies, service providers including financial service providers, logistics service providers etc., who are the intended recipients and may have access to the Personal Information and SPDI but shall not disclose such information including SPDI further to any other individual / entity.
   2. Our Legal obligations: We may release your Personal Information including SPDI when we believe in good faith that such release is appropriate to comply with applicable law including to: (i) conform to legal requirements or comply with legal processes; (ii) protect rights or property of affiliated companies; (iii) prevent a crime or in interest of national security; or (iv) protect personal safety of our users or the public. We may also disclose your Personal Information or SPDI to enforce or apply our Terms and other agreements; or protect the rights, property or our safety, safety of our users or others. This includes exchanging information with other companies, organisations, government or regulatory authorities for fraud protection and credit risk reduction.
   3. Sharing upon merger or amalgamation or intra-group transfer: Any third party to which we transfer or sell our assets, merge or consolidate with, will have the right to continue to use the Personal Information (including SPDI) provided to us by you, in accordance with the Terms and this Privacy Policy. We may disclose information to our partners, affiliates, subsidiaries, group entities, investors, stakeholders or potential associates, including in an anonymized and aggregate manner, so that they too may understand how users use our Platform and enable us to create a better overall experience for you.
   4. Transfer to affiliates of the Company, third parties and outside India: Subject to applicable law, we may at our sole discretion, transfer Personal Information and SPDI to any other body corporate (as defined under the IT Act, 2000) that ensures at least the same level of data protection as is provided by us under the terms hereof, located in India or any other country. By using the Platforms or our Services, you accept the terms hereof and hereby consent to us sharing with and/or processing of your Personal Information and SPDI by our group companies, affiliates, or third parties, including in any location outside India, provided that they ensure that your SPDI is protected in compliance with standards that are comparable to the standards of protection afforded to it in India.

5. How do we protect your Personal Information?

   1. In order to protect your Personal Information in line with the applicable data privacy laws and regulations, we have implemented all appropriate technical and organizational measures as required under applicable law. Please be aware that the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Information, we cannot guarantee the security of your data transmitted through the Platform. Once we have received your information, we will use strict physical, electronic, and procedural safeguards to try to prevent unauthorised access. We request that you cooperate with us in protecting your Personal Information and comply with the following personal security measures:
      1. Do not give third parties access to your computer or other devices when you access the Platform;
      2. Keep your login credentials, including access code and passwords for your computer or other devices, as well as your login credentials, confidential;
      3. Permanently update your antivirus software when requested by your antivirus software provider; and
      4. Do not send any confidential information by using the Platform and/or the Services.
   2. You agree that the security measures adopted by us are reasonable to protect your Personal Information. We disclaim any liability as a result of any breach of security or unintended loss or disclosure of your Personal Information.

6. Retention of your Personal Information:

   We maintain records of Personal Information and SPDI only till such time it is required for the Purposes or when you request us to delete the Personal Information or for as long as required by law. For users and customers availing our Services, upon the expiry or earlier termination of the business relationships, we will archive Personal Information to preserve evidence and/or fulfill retention requirements under applicable laws or regulations. At the end of such archiving period (namely at the expiry of applicable minimum record retention requirements), we will delete the Personal Information from our systems and records.

7. Your rights concerning your Personal Information:

   1. Withdrawing your consent

      At any time, you may give or withdraw your consent to us for collecting and processing your Personal Information, including in the manner and for the Purposes. You may withdraw or limit your consent at any time by contacting us at contactus@mandione.com. We may, however, reserve the right to retain and store your Personal Information for our business purposes, whether such Personal Information has been deleted or not, to the extent permitted by law. Please note that your withdrawal of consent may result in us not being able to provide you with the Services or terminate any existing relationship that we may have with you.

   2. Information about and access to your Personal Information

      You may review, correct, update, and change the information that you have provided by to us, at any point by writing to us at contactus@mandione.com. Should you choose to update your Personal Information or SPDI or modify it in a way that is not verifiable by us, or leads to such information being incorrect, we will be unable to provide you with access to our Platform or the Services. We reserve the right to verify and authenticate your identity and your Personal Information in order to ensure accurate delivery of Services. We can only keep your Personal Information up-to-date and accurate to the extent you provide us with the necessary information. It is your responsibility to notify us of any changes in your Personal Information. Access to or correction, updating or deletion of your Personal Information or SPDI may be denied or limited by us if it would violate another person’s rights and/or is not otherwise permitted by applicable law.

      You should be aware that some of the Personal Information that may have been shared on thirdparty websites may still continue to be available as we do not have control over these websites. Your Personal Information may also appear in online searches. Other Personal Information that you have shared with others, or that other users have copied, may also remain visible. You should only share Personal Information with people that you trust because they will be able to save it or re-share it with others, including when they sync the Personal Information to a device

8. Data provided on Third-Party Links

   Our Platforms may include hyperlinks to various external websites, and may also include advertisements, and hyperlinks to applications, content, or resources (“Third-Party Links”). We have no control over such Third-Party Links, which are provided by persons or companies other than us. You acknowledge and agree that we are not responsible for any collection or disclosure of your information by any external sites, applications, companies, or persons thereof. The presence of any Third-Party Links cannot be construed as a recommendation, endorsement or solicitation of any material or content on such Third-Party Links, or any other material on or available via such Third-Party Links.

   You further acknowledge and agree that we are not liable for any loss or damage which may be incurred by you as a result of the collection and/or disclosure of your information via Third-Party Links, as a result of any reliance placed by you on the completeness, accuracy or existence of any advertising, products services, or other materials on, or available via such Third-Party Links. This will include all transactions, and information transmitted therein, between you and any such third-party sites or applications or resources, such transactions are strictly bi-partite. We shall not be liable for any disputes arising from or in connection with such transactions between you and the aforementioned third parties.

   Such third-party websites, and external applications or resources, accessible via the Third-Party Links may have their own privacy policies governing the collection, storage, retention and disclosure of your information that you may be subject to. We recommend that you exercise reasonable diligence, as you would in traditional offline channels and practice judgment and common sense before committing to any transaction or exchange of information, including but not limited to reviewing the third-party website or application’s privacy policy.

9. Children’s privacy

   Use of the Platforms or our Services is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. If you are under 18 years of age, then please do not use or access the Service(s) at any time or in any manner. If you are a parent or guardian and discover that your child under 18 years of age has visited the Platforms or otherwise accessed the Service, then you may alert us at contactus@mandione.com and request that we delete that child’s Personal Information from our systems.

   We do not knowingly collect Personal Information from users who are less than 18 years of age. Upon discovery of any Personal Information of any child, we shall purge such Personal Information in accordance with applicable law.

10. Grievance redressal and contact us

    If you have questions about this Privacy Policy or any grievances in relation to the collection and processing of your Personal Information, you can contact us by mail at:

    Address: No.927, Regus Olympia Platina, 9th Floor, Plot No. 33-B, Guindy Industrial Estate, Guindy, Chennai – 600 032, IN

    Email: contactus@mandione.com

    Attn: Mr. Santa Suman Dutta