Our Policies

Last Updated:

Welcome to Melaan. This document is an electronic record in terms of the Information Technology Act, 2000. Your privacy is critically important to us, and this policy outlines how we collect, use, and protect your personal information when you use the Melaan marketplace platform (the "Platform").

1. Information We Collect

We collect information to provide and improve our services. The type of information depends on your role (Customer or Seller).

• For Customers: We collect your name, email, shipping address, and phone number when you create an account, place an order, or contact us. We also collect data about your browsing behavior, such as products viewed and added to your wishlist, to personalize your experience.
• For Sellers: When you register, we collect essential business information, including your name, shop name, address, PAN, bank account details for payouts, and GSTIN (if applicable) to ensure legal and financial compliance.
• Device Data: IP address, browser type, device identifier, operating system, and location information for security and analytics
• Usage Data: Pages visited, products browsed, search queries, clicks, time spent, device interactions

2. How We Use Your Information

Your data is used to operate and improve the Melaan platform. Key uses include:

• Service Provision: To process transactions, fulfill orders, and facilitate communication between buyers and sellers.
• Communication: To send you updates about your orders, new products, and occasional promotional offers you can opt-out of.
• Personalization: To recommend products and content relevant to your interests.
• Seller Management: To manage seller accounts, process payouts, provide support, and ensure platform integrity.
• Analytics: To analyze platform usage, identify trends, and improve our services for all users.
• Fraud Prevention: To detect suspicious activities and protect your account
• Legal Compliance: To comply with tax laws and regulatory requirements (especially for sellers)

3. Data Security and Retention

We are committed to protecting your data. We implement industry-standard security measures to prevent unauthorized access, disclosure, or alteration of your information:

• Encryption: SSL/TLS encryption for all data in transit; AES-256 for data at rest
• Payment Security: PCI DSS Level 1 compliant; payment processing through Razorpay (we never store card details)
• Access Control: Restricted employee access; role-based permissions; audit trails for all data access
• Regular Audits: Quarterly security assessments and penetration testing
• Data Minimization: We collect only essential information needed for our services

Storage Duration: We store your personal information only for as long as necessary to provide our services, comply with legal obligations, or resolve disputes. Retention periods: Active user data (7 years post-deletion), Transaction records (7 years), Cookies (1-2 years).

4. Your Rights and Choices

You have comprehensive rights over your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information anytime in your profile settings
• Deletion: Request permanent deletion (subject to legal retention requirements)
• Portability: Download your data in standard formats
• Marketing Opt-out: Unsubscribe from promotional emails via email footer link
• Cookie Control: Enable/disable cookies through browser settings
• Location Tracking: Disable location access in privacy settings

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, understand usage patterns, and personalize content. Here is a detailed breakdown:

• Essential Cookies: Required for login, security, and website functionality (session IDs, authentication tokens). Duration: Session or 1 year
• Analytics Cookies: Track page visits and user behavior to improve our services. Provided by Google Analytics. Duration: 2 years
• Marketing Cookies: Enable targeted advertising and retargeting across platforms. Duration: 1-2 years
• Preference Cookies: Remember your language, currency, and theme preferences. Duration: 1 year

Managing Cookies: You can control cookies through your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Preferences → Privacy & Security → Cookies and site data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Privacy → Cookies and other site permissions

Disabling cookies may affect some platform features.

6. Data Sharing and Disclosure

We only share personal information when necessary and with your understanding:

• Service Providers: Payment processors (Razorpay), shipping partners (Shiprocket), cloud hosts (Firebase), analytics platforms. All bound by data protection agreements.
• Legal Requirements: We may disclose information when required by law (law enforcement, tax authorities, GSTIN compliance).
• Business Transfers: In case of merger or acquisition, your data may be transferred as part of the business asset.
• Public Information: Shop profiles, product reviews, and seller ratings are publicly visible.

7. Data Breach Notification

If an unauthorized disclosure of personal data occurs, we will notify affected users within 72 hours as required by applicable data protection laws. We maintain detailed breach notification procedures and insurance for data incidents.

8. International Data Transfers

Your data may be transferred, stored, or processed in countries other than where you reside. By using our platform, you consent to such transfers. For EU and UK residents, we comply with GDPR requirements. For users in California, we comply with CCPA provisions. For Indian residents, we comply with the Digital Personal Data Protection Act 2023 (DPDP).

9. Children's Privacy

Melaan is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete this information immediately. Parents or guardians who believe their child has provided us information can contact our support team.

10. Third-Party Links

Our platform may contain links to third-party websites (product sources, external shops, social media). We are not responsible for their privacy practices. Please review their policies before providing personal information.

11. Policy Changes and Updates

We may update this Privacy Policy periodically. Significant changes will be communicated via email or prominent notification on our platform. Your continued use of Melaan after changes constitutes acceptance of the updated policy.

12. Applicable Laws and Compliance

GDPR Compliance (EU/UK): Users have the right to data portability, deletion, and restriction of processing. Contact our DPO for GDPR-related requests.

CCPA Compliance (California): Users have rights to know, delete, and opt-out of sale of personal information. No discrimination for exercising CCPA rights.

DPDP Act 2023 (India): We comply with India's Digital Personal Data Protection Act, including consent-based processing and data fiduciary responsibilities.

Contact Our Grievance Officer

For privacy-related questions, data access requests, or to file a complaint, please contact:

Email: privacy@melaan.com

Response Time: We aim to respond to all inquiries within 7-14 business days.

Escalation: For unresolved grievances, contact our Data Protection Officer. Details available in Terms of Use.