Privacy Policy

01About This Policy

MDepot Retail Technologies Private Limited and its affiliates ("we", "us", "our" or "MDepot") is engaged in operating an online platform offering a wide range of products and services for the design and architecture community, including tiles, plywood, laminates, sanitaryware, and hardware. MDepot values your privacy and is committed to safeguarding personal data relating to you ("You", "Your" or "User"). This Privacy Policy is applicable to MDepot and its group companies including Haut Luxe Technologies Private Limited.

The description of our services can be accessed at materialdepot.com. Personal data refers to information about you that can identify you, such as your name, email address, or phone number ("Personal Data"). This Privacy Policy explains what Personal Data we process, why we process it, how we use it, with whom we share your Personal Data, and your rights regarding your Personal Data.

It describes how we handle your Personal Data when you interact with us through our website, mobile applications, third-party platforms, surveys, or other means, in your capacity as a consumer, business customer, business partner, supplier, website visitor, or other person in a business relationship with us (hereinafter referred to as the "Platform"). It also applies when you avail of the products or services offered by MDepot through the Platform, or when you partner with us to deliver such services to customers (collectively, the "Services").

With other Users: when you share Personal Data or otherwise interact in the public areas with other Users, such information may be viewed by all Users and may be publicly distributed outside. If you interact with other Users or register through a Third-Party Social Media Service, your contacts on the Third-Party Social Media Service may see your name, profile, pictures and description of your activity.

With your consent: We may disclose your Personal Data for any other purpose with your consent.

02Personal Data We Collect

We collect various categories of Personal Data depending on how you interact with our Services - whether as a customer or User or as a business partner or vendor ("Service Provider"). This data helps us deliver personalized experiences, improve our offerings, and ensure secure transactions.

If you are a customer or user

• Personal Data: Name, email, phone number, home/mailing address, location, age, family details, interests, language, user name, password, user identifiers, purchase history, order history, payment details (e.g., card details, UPI IDs), and order information.
• General usage data: Booking history, user journey on our Platform, activity logs, interaction patterns, IP address, device type, browser details, operating system, access times, page views, clicks, and general usage pattern.
• Marketing & communication data: Preferences, feedback, participation in surveys or discussions, and communication with our team or partners.
• Property preferences: Property type, size, ownership status, interior style preferences, room details, and number of properties.

If you are a service provider

• Contact information and business profile: Email, phone number, name, date of birth, zip code, services offered, business media (photos/videos), PAN, financial records, and background verification reports.
• Technical data: Device and browser info, IP address, operating system details, location data, and app usage metadata.
• Marketing & communication data: Testimonials, feedback, communication preferences, call records, responses to polls and surveys, newsletters, telemarketing calls, SMS or push notifications and interactions with Users.

Account and billing information

When you create an account on our Platform, we collect your name, address, contact details, payment information (credit/debit card number, cardholder name, expiration date, UPI ID, or wallet details), GST number (as applicable) and any voluntary information you provide in relation to billing or invoicing. We use this information only for billing, invoicing, delivery, and order fulfillment.

Aggregated data

We may collect and use aggregated, anonymized data (e.g., statistical or demographic data) for analytics, research, or business purposes. While such data does not identify you directly, if it is combined with Personal Data to identify you, we treat it as Personal Data and protect it accordingly.

03Where We Collect Your Data From

Direct interactions

We may collect your Personal Data when you interact with us directly, whether through our online Platform or in person at our retail outlets. This includes creating a user account, placing orders, purchasing or inquiring about our products, participating in promotions or surveys, contacting customer support, or attending trade events. Information may also be collected through physical or digital forms, call recordings (where permitted), or while providing personalized assistance.

CCTV surveillance

For purposes of safety, security, loss prevention, and operational monitoring, our stores/outlets are equipped with CCTV and other video surveillance systems that may capture footage while you are on our premises. All footage is stored in secure environments with access strictly limited to authorized personnel and is retained only as long as necessary.

Automated data collection

When you interact with our Platform, we may automatically collect certain technical data about your device, browsing actions, and usage patterns. This data is collected using cookies, web beacons, pixel tags, server logs, and other similar technologies.

Third parties and business partners

We may receive Personal Data about you from third-party sources, including analytics providers, authorised resellers, dealers, marketing partners, advertising networks, social media platforms, and publicly available databases, as permitted by applicable law.

OTP and SMS

We may access SMS/text messages on your device - only with your permission - to read One-Time Passwords ("OTPs") for verifying payments or other transactions. We do not share this data with any third party, except as stated in this Privacy Policy and as required by law.

Social media

When you interact with us on social media (e.g., sharing comments, ratings, reviews, photos), we may process your Personal Data publicly available on these platforms.

Job applications

When you engage with us regarding job opportunities through the 'Careers' section of our website, we collect and process Personal Data such as your contact information, qualifications, education, professional experience, and submitted documents.

04Data Transfer & Retention

Transfer of your personal data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This information may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Data retention

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

If you wish to request deletion of your Personal Data, you may do so by sending an email to [email protected] and we will comply with your request within 30 working days.

User content retention

Following termination or deactivation of your user account, MDepot may retain your profile information and user content for a commercially reasonable time, and for as long as we have a valid purpose to do so, including for complying with legal and audit obligations and for backup and archival purposes.

05Why We Process Your Data

We use your personal and business-related data only when permitted by law, primarily to deliver our Services, fulfill our contractual obligations, and comply with legal requirements. Your data may be used for purposes such as:

• Verifying your identity and creating your account
• Processing orders and providing design consultations or interior execution services
• Monitoring usage trends, improving our services, and personalizing your experience
• Managing payments, transactions, and customer support
• Sending updates, service-related communications, and marketing material
• Enhancing our platform functionality, business operations, and product development
• Enforcing our terms, meeting legal obligations, and responding to lawful requests

06Disclosure of Your Data

Internal disclosure

We may share your Personal Data with one or more of our group companies or affiliates to help detect and prevent fraud, identity theft, and other unlawful activities; to identify and manage related or duplicate accounts; and to enable joint offerings or co-branded services provided through our Platform.

Business partners and third-party contractors

We engage trusted third-party service providers to support our operations, including delivery, order fulfilment, communication (e.g., email, SMS, WhatsApp), and marketing. These providers process your Personal Data solely on our behalf and are contractually obligated to use it only as instructed or required by law.

We may also share your Personal Data with authorised business partners or resellers to help deliver our products or services. We ensure that all such disclosures are made securely and only to parties who are bound by appropriate confidentiality and data protection obligations.

Business transactions

If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement & legal requirements

The Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities. The Company may also disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation, applicable laws, directions of governmental authorities or court orders
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Third-party disclosure

We may disclose to third-party services certain personally identifiable information such as name, email, and mobile phone number, as well as device information, location, and network carrier. This information is shared so that we can personalize the app for you and perform behavioural analytics.

07Your Rights & Data Control

Right to access

You can ask us for a summary of your Personal Data, the processing activity, and the recipients with whom we have shared your Personal Data, along with a description of the Personal Data we shared.

Right to correction and erasure

If you believe that the Personal Data we hold is inaccurate, incomplete or outdated, you can write to us. You may also request deletion of your data; however, in certain cases, we may need to retain it for legal or regulatory reasons.

Right to grievance redressal

If you wish to file a grievance, you may contact our Data Protection Officer / Grievance Redressal Officer. Upon submission of your complaint, a unique ticket number will be provided for tracking purposes. If your grievance remains unresolved, you have the right to escalate it to the competent supervisory authority (Data Protection Board). Complaints will be acknowledged within 48 hours and, wherever feasible, resolved within one month of receipt.

Controlling your data

If you wish to request deletion of your Personal Data, send an email to [email protected] and we will comply with your request within 30 working days.

08Security & Cookies

Security of your personal data

We take appropriate security measures to protect against unauthorized access to or alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices, appropriate encryption, and physical security measures. All information gathered is securely stored within controlled databases with password-protected, strictly limited access.

We will contact you regarding any breach of the security, confidentiality, or integrity of your unencrypted electronically stored Personal Data via email or any other feasible manner in the most expedient time possible and without unreasonable delay.

Sensitive personal data

We do not collect biometric data, medical records, health condition, or sexual orientation of Users via our platform. All sensitive information is collected and processed only with the explicit consent of the individual. We have adopted reasonable security practices and procedures, including alignment with the IS/ISO/IEC 27001 standards, to safeguard all personal and sensitive data.

Cookies

We use cookies and similar tracking technologies to enhance your experience on our Platforms, improve our Services, and better understand how you interact with our content. You can control how cookies are used through your browser or device settings. However, disabling or rejecting cookies may limit your access to certain features of our platforms.

09Children's Privacy & External Links

Children's privacy

MDepot does not knowingly collect or solicit Personal Data from children under the age of 18. In the event that we learn that we have collected Personal Data from a child under 18 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 18, please contact us at [email protected].

Links to other websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.