PRIVACY POLICY

1. Information We Collect

When you purchase something from our store, we collect personal information such as your name, billing address, shipping address, email address, and phone number as part of the buying and selling process.

When you browse our website, we may automatically collect certain information about your device, including your IP address, browser type, and operating system, to improve our website and customer experience.

With your consent, we may send you promotional emails regarding new products, special offers, and updates about our store.

2. Consent

How Do We Obtain Your Consent?

When you provide personal information to complete a transaction, place an order, arrange a delivery, or request a return, you consent to our collecting and using your information for that specific purpose.

If we request your personal information for any secondary purpose, such as marketing, we will either ask for your explicit consent or provide an opportunity to opt out.

How Can You Withdraw Your Consent?

You may withdraw your consent at any time by contacting us using the contact details provided at the end of this Privacy Policy.

3. Disclosure of Information

We may disclose your personal information if required by law, legal process, or governmental request, or if you violate our Terms of Service.

4. Payment Information

Payments made through our website are processed using secure third-party payment gateways.

Your payment information is encrypted and transmitted using industry-standard security measures. We do not store complete credit card, debit card, UPI, or banking information on our servers.

Transaction data is retained only for as long as necessary to complete the transaction and comply with applicable legal obligations.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy or as required by law:

- Order and transaction records: retained for 7 years to comply with Indian tax and legal obligations.
- Account and profile data: retained for the duration of your relationship with us, plus 2 years.
- Marketing data (email, preferences): retained until you withdraw consent or unsubscribe.
- Browsing/analytics data: retained for up to 13 months in line with standard analytics practice.

Upon expiry of the relevant retention period, your data will be securely deleted or anonymised.

6. Third-Party Services

We use the following third-party service providers to support our business operations:

- Shopify Inc. — e-commerce platform and website hosting (servers may be located outside India).
- Razorpay / Shopify Payments — payment processing.
- Google Analytics — website analytics and traffic analysis.
- Shiprocket / third-party logistics partners — order fulfilment and shipping.

These service providers will only collect, use, and disclose your information to the extent necessary to perform their services. We encourage you to review their respective privacy policies.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites.

7. Cross-Border Data Transfers

Some of our service providers (including Shopify) operate servers outside India. As a result, your personal data may be transferred to and processed in countries other than India. We take appropriate steps to ensure such transfers are carried out under adequate safeguards and in compliance with applicable law, including the Digital Personal Data Protection Act 2023.

8. Security

We take reasonable precautions and follow industry best practices to protect your personal information from unauthorised access, misuse, disclosure, alteration, or destruction.

While no method of transmission over the Internet or electronic storage is completely secure, we implement appropriate technical and organisational measures to safeguard your information.

Data Breach Notification: In the event of a personal data breach that is likely to affect your rights, we will notify you and, where required, the Data Protection Board of India, within the timelines prescribed under applicable law.

9. Cookies

Our website uses the following categories of cookies:

- Essential cookies: necessary for core website functionality (e.g. shopping cart, secure login).
- Analytics cookies: help us understand how visitors interact with our website (e.g. Google Analytics).
- Preference cookies: remember your settings and choices to improve your experience.

You may choose to disable non-essential cookies through your browser settings. However, some features of the website may not function properly if essential cookies are disabled.

10. Children's Privacy

Our website and services are intended for users who are at least 18 years of age. We do not knowingly collect personal data from children under 18 years of age without verifiable parental or guardian consent. If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete such data. If you believe we have collected data from a child, please contact us immediately.

11. Your Rights

Subject to applicable law, you have the right to:

- Access, correct, update, or request deletion of your personal information.
- Withdraw consent for data processing at any time.
- Nominate a person to exercise your rights on your behalf.
- File a complaint with the Data Protection Board of India if you believe your rights under the Digital Personal Data Protection Act 2023 have been violated.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will become effective immediately upon posting on this page. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact Information

Mount Gray

General Enquiries: sales@mountgray.in
Phone: +91-7000101099
Grievance / Data Protection Officer: grievance@mountgray.in
Website: https://mountgray.in

Address:
D-3, Hampton Business Park,
Chandigarh Road, Near Best Price Market,
Ludhiana, Punjab – 141123, India

To exercise any of your rights or raise a concern about how we handle your personal data, please write to grievance@mountgray.in. We will endeavour to respond within a reasonable time.