Mercentry
Privacy Policy
This Privacy Policy describes how Mercentry ("Mercentry", "we", "us" or "our") collects, uses, discloses, retains and safeguards personal data that you provide when you register your interest through the waitlist on this website (the "Site"), and the rights available to you. By submitting the waitlist form, you confirm that you have read and understood this Policy.
This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules framed thereunder, and applies to the extent relevant to other data-protection laws (including the EU General Data Protection Regulation, where applicable). Mercentry acts as the data fiduciary / controller in respect of the personal data described below.
Definitions
- "Personal data" means any data about an individual who is identifiable by or in relation to such data.
- "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure or erasure.
- "You" means the individual who submits information through the Site.
Information We Collect
We collect only the data necessary to operate the waitlist and to notify you at launch.
Category Data Source Identity & contact Name, mobile/WhatsApp number, email address Provided by you via the form Business profile Shop type, city Provided by you via the form Technical & security IP address, browser user-agent, and the date/time of submission Collected automatically by our server at the point of submission We do not knowingly collect sensitive personal data, financial-account details, or government identifiers through this Site, and you should not submit such information. The Site does not deploy advertising, analytics, or third-party marketing cookies.
Purposes and Lawful Basis of Processing
We process your personal data for the following purposes, on the lawful basis of the consent you provide when submitting the form, and our legitimate interest in operating the Site securely:
- to contact you regarding the launch of Mercentry and to provide priority onboarding to early registrants;
- to understand demand by shop type and location for the purpose of planning our rollout;
- to maintain the security and integrity of the Site and to detect, prevent and address fraud, abuse and technical issues; and
- to comply with applicable legal and regulatory obligations.
We will not use your personal data for any purpose that is incompatible with those stated above without first obtaining your consent.
Disclosure of Personal Data
We do not sell, rent or trade your personal data. We may disclose personal data only:
- to service providers and processors who perform functions on our behalf (such as hosting and email delivery), under contractual obligations of confidentiality and security, and strictly as necessary to provide the service;
- where required to do so by law, regulation, legal process, or a lawful request by a public authority; and
- in connection with a corporate transaction (such as a merger, financing or acquisition), subject to the protections of this Policy.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes set out in this Policy — that is, until Mercentry launches and you are onboarded or decline to proceed, or until you request erasure — after which it is deleted or anonymised, save where a longer retention period is required or permitted by law.
Information Security
Personal data is stored on infrastructure under our control and is not made publicly accessible. We implement reasonable technical and organisational measures appropriate to the risk, including transmission over HTTPS, access controls limiting access to authorised personnel, rate-limiting and abuse-prevention on the form, and server configuration that prevents the data store from being served over the web. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
Your Rights
Subject to applicable law, you have the right to:
- access and obtain a copy of the personal data we hold about you;
- seek correction or updating of inaccurate or incomplete data;
- request erasure of your personal data;
- withdraw consent and unsubscribe from communications at any time; and
- where applicable under the GDPR, exercise rights of portability and to object to or restrict processing.
To exercise any of these rights, write to admin@mercentry.in. We will verify your request and respond within the timelines prescribed by applicable law. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
International Transfers
Your personal data is primarily processed on servers located in India. Where data is processed by a service provider outside your jurisdiction, we take steps to ensure that an adequate and appropriate level of protection is maintained in accordance with applicable law.
Children's Privacy
The Site and Mercentry's services are intended for business owners and are not directed to, nor intended for use by, children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we may delete it.
Changes to this Policy
We may amend this Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date above indicates when the Policy was last revised. Where changes are material, we will take reasonable steps to notify registered individuals.
Grievance Officer and Contact
If you have any question, concern or complaint regarding this Policy or the processing of your personal data, you may contact our Grievance Officer, who will acknowledge and address your grievance in accordance with applicable law:
Grievance Officer — Mercentry
Email: admin@mercentry.in
This document is provided for transparency about our data practices and does not constitute legal advice. It should be reviewed by qualified counsel before being relied upon for compliance purposes.
← Back to Mercentry