Privacy Policy

mcubes India (“mcubes,” “we,” “us,” or “our”) is a company dedicated to protecting the privacy of our customers and website visitors. This Privacy Policy is designed to be a transparent and comprehensive guide to how we collect, use, disclose, and safeguard your personal data. We are committed to complying with all applicable laws and regulations, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

This policy applies to all personal data collected through our website, themcubes.in, as well as any associated digital services, mobile applications, or other interactions you have with our platform.

1. Identity of the Data Fiduciary

For the purpose of this Privacy Policy and the DPDP Act, mcubes India is the Data Fiduciary. The Data Fiduciary is the entity that determines the purpose and means of processing personal data.

Registered Address: MGP 22/954, Midhunam, Mannancherry P.O, Alappuzha – 688538, Kerala, India.

2. What Information We Collect

We collect various types of information to provide and improve our services, ensuring that we only collect what is necessary for our specified purposes. The information we collect falls into the following categories:

• Personal Identifiable Information (PII): This includes information you voluntarily provide to us when you create an account, place an order, or contact us. This may include your full name, shipping and billing addresses, email address, phone number, and a secure password. During customer support interactions, we may also collect additional information to verify your identity and address your query.
• Financial Information: When you make a purchase, we collect necessary financial information to process your payment. This includes credit/debit card details, bank account information, or other payment service credentials. This data is securely handled and processed by our third-party payment gateway partners and is not stored on our servers.
• Transaction Data: We collect and store information related to your purchases, such as products ordered, date of purchase, purchase price, order history, and other details necessary for order fulfillment and record-keeping.
• Technical and Usage Data: When you visit our website, we automatically collect certain technical information. This includes your Internet Protocol (IP) address, browser type, operating system, device type, browsing history on our site (e.g., pages visited, products viewed), the time and date of your visit, and the referring website address. This data helps us understand how our site is used and how to improve its performance and security.
• Cookies and Tracking: We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze website traffic. This information is used for website functionality, performance monitoring, and to provide personalized content and advertisements. You can control your cookie preferences through your browser settings.

3. Purpose of Data Processing

We collect and process your personal data for specific, lawful, and clearly defined purposes. We will not use your data for any other purpose without your explicit consent. The primary purposes for which we process your data are:

• Order Fulfillment: To process your orders, generate invoices, communicate with logistics partners to ship products to you, and provide updates on your order status.
• Account Management: To create and maintain your user account, verify your identity, and provide essential customer support.
• Marketing and Communication: With your explicit consent, we may send you email newsletters, promotional offers, and personalized product recommendations. We may also use your data to send you important service-related announcements.
• Website Improvement and Personalization: To analyze website usage patterns, conduct research and development, and improve our website’s design, product offerings, and overall user experience. This includes personalizing the content you see on our website to better match your interests.
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, unauthorized access to your account, and other illegal activities. This is crucial for protecting both our business and our customers.
• Legal Compliance: To comply with legal and regulatory obligations, including tax laws, data protection laws like the DPDP Act, and other statutory requirements.

4. Consent

By providing your personal data, you give us your free, specific, informed, and unambiguous consent to process your data for the purposes stated in this policy. Consent can be provided through a clear affirmative action, such as ticking a box or clicking a button. You have the right to withdraw your consent at any time, with the same ease with which you gave it. Upon withdrawal of consent, we will cease processing your personal data unless such processing is required or permitted under applicable law for other specified purposes.

5. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights concerning your personal data. We are committed to providing an accessible mechanism for you to exercise these rights.

• Right to Access Information: You have the right to request access to a summary of your personal data that we hold, along with information about how and why it is being processed. This also includes information about the identities of all third parties with whom your personal data has been shared.
• Right to Correction and Erasure: You can request us to correct any inaccurate, incomplete, or outdated data. You also have the right to request the erasure of your personal data when it is no longer necessary for the purpose for which it was collected or if you withdraw your consent.
• Right of Grievance Redressal: You have the right to file a grievance if you believe your rights under the DPDP Act have been violated. Our grievance redressal mechanism is outlined in this policy.
• Right to Nominate: In the event of your death or incapacity, you have the right to nominate an individual to exercise your rights under the DPDP Act on your behalf.

To exercise any of these rights, please contact our Grievance Officer using the details provided below, specifying which right you wish to exercise.

6. Data Sharing and Disclosure

We are committed to maintaining the confidentiality of your personal data. We do not sell, rent, or trade your personal data to any third party. We may, however, share your data with trusted third parties under specific circumstances, and only to the extent necessary to perform our services:

• Third-Party Service Providers: We may share your data with third-party service providers who perform services on our behalf. These include:
  • Payment Gateways: To process your payments securely.
  • Logistics Partners: To deliver your orders to your specified address.
  • Email Marketing Services: To send you marketing and service-related communications with your consent.
  • Analytics Providers: To help us analyze website traffic and user behavior.
• Legal and Regulatory Disclosure: We may disclose your data if required by law, in response to a valid court order, a request from a government or regulatory authority, or to protect our legal rights.

7. Data Retention

We will not retain your personal data for longer than is necessary to fulfill the purposes for which it was collected, or as required by law.

• Account Data: We retain your account data for as long as your account is active. If you request account deletion, we will erase your data within a reasonable timeframe, except for data we are legally obligated to retain.
• Transaction Data: We are legally required to retain transaction data for a specific period for tax, accounting, and audit purposes.
• Marketing Data: We retain data for marketing purposes until you withdraw your consent or opt out of our communications.

8. Children’s Privacy

Our Platform is not intended for use by children under the age of 18. We do not knowingly collect personal data from children without verifiable parental consent. If we become aware that we have collected personal data from a child without such consent, we will take immediate steps to delete that information. Furthermore, we do not engage in behavioral monitoring or targeted advertising directed at children.

9. Data Security

We are committed to protecting your data from unauthorized access, disclosure, alteration, and destruction. We have implemented reasonable security safeguards, including robust physical, technical, and organizational measures, to protect your personal data. While we strive to protect your data, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. You are also responsible for keeping your password confidential and secure.

10. Grievance Redressal Mechanism

For any questions, concerns, or grievances related to this Privacy Policy or the processing of your personal data, please contact our Grievance Officer. Your request will be handled promptly and with the utmost confidentiality.

• Email: howdy@themcubes.in

We will acknowledge your complaint within 48 hours and will endeavor to resolve it within one month from the date of receipt.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.