Privacy Policy

MoroccGlow LLP, trading as Marraké ("we", "us"), respects your privacy. This policy explains what personal data we collect when you visit marrake.in or buy from us, why we collect it, who we share it with, and the choices you have.

We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023, and we handle it in accordance with that Act and with the Information Technology Act, 2000 and the rules made under them.

What we collect

Information you give us

• Identity and contact details: name, email address, phone number
• Delivery and billing addresses, including PIN code
• Order information: what you bought, order value, order history
• Account details: if you create an account, your login credentials in encrypted form
• Communications: emails, WhatsApp messages, social media messages, support tickets, and any photographs or videos you send us in support of a claim
• Content you share publicly: reviews, tagged posts and campaign submissions
• Preferences: hair, lip or skin concerns and product preferences, if you choose to tell us

Information collected automatically

• IP address, approximate location, device type, browser and operating system
• Pages viewed, products browsed, time on site and referring website
• Cookies and similar technologies, as described below

Information we receive from others

• Payment confirmation and status from Razorpay
• Delivery status and location updates from our logistics partners
• Aggregated advertising and analytics data from Google and Meta

We never collect or store your full card number, CVV, UPI PIN or net banking password. Payment credentials go directly to Razorpay.

Why we use it

• To process, pack, dispatch and deliver your order, and to handle payments, store credit and cancellation refunds
• To send you transactional updates: order confirmations, dispatch and tracking notifications
• To provide customer support and investigate claims
• To send you marketing about new launches and offers by email, SMS and WhatsApp, where you have consented
• To improve our products, website and service
• To measure and target advertising, where you have consented to those cookies
• To prevent fraud, abuse and misuse of our website, including misuse of Cash on Delivery
• To meet our legal, tax and accounting obligations

We process your data on the basis of your consent, and for the certain legitimate uses permitted by the DPDP Act, including where you have voluntarily given us data for a purpose you have not objected to, and where processing is necessary to comply with law.

Who we share it with

We do not sell your personal data. We share it only with:

• Shopify, which hosts this store and processes order data on our behalf
• Velocity Shipping, our logistics partner, and the courier partners it engages, who need your name, address and phone number to deliver your order
• Razorpay, to process payments and refunds
• Communication providers: the email, SMS and WhatsApp services we use to send transactional and marketing messages
• Google Analytics and Meta, for analytics and advertising, subject to your cookie choices
• Our product reviews provider, where you choose to leave a review
• Professional advisers: accountants, auditors and lawyers, under obligations of confidentiality
• Authorities, where we are required to disclose by law, court order or a valid government request

Each of these partners may use your data only for the purpose we engage them for.

Where your data is stored

Our store runs on Shopify, and some of our service providers operate outside India. Your personal data may therefore be stored or processed on servers located in other countries. Where that happens, we take reasonable steps to ensure it is protected to a standard consistent with this policy and with applicable Indian law.

Cookies and tracking

We use cookies and similar technologies to keep your cart and session working, to remember your preferences, to understand how the website is used through Google Analytics, and, with your consent, to measure and personalise advertising through the Meta Pixel.

Strictly necessary cookies are required for the website to function and cannot be switched off. You can accept or decline analytics and advertising cookies through the banner shown on your first visit, change your choice at any time through the cookie settings link in our footer, and block or delete cookies through your browser settings. Blocking some cookies may affect how the website works.

Marketing, WhatsApp and how to opt out

We send marketing only where you have opted in. WhatsApp marketing requires your specific, separate consent, which we ask for at the point we collect your number. Consenting to marketing emails does not opt you in to WhatsApp messages.

You can opt out at any time by:

• Clicking unsubscribe in any marketing email
• Replying STOP to a marketing SMS or WhatsApp message
• Emailing customer@marrake.in

Opting out of marketing does not stop transactional messages about an order you have placed. You will still receive confirmations and tracking updates.

How long we keep it

We keep your personal data only for as long as we need it for the purpose it was collected, or as long as the law requires. Order and invoice records, for example, must be retained for tax and accounting purposes. When data is no longer needed, we delete or anonymise it.

How we protect it

Our website runs over an encrypted HTTPS connection, and payments are handled by a PCI-DSS compliant gateway. We limit internal access to personal data to those who need it. No system is completely secure and we cannot guarantee absolute security, but if a breach affects your data we will notify you and the Data Protection Board of India as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• Access — a summary of the personal data we hold about you and how we have processed it
• Correct — data that is inaccurate, and complete or update data that is incomplete
• Erase — your personal data, where we no longer need it for the purpose it was collected and no law requires us to keep it
• Withdraw consent — at any time, with effect going forward
• Nominate — another person to exercise these rights on your behalf in the event of your death or incapacity
• Complain — to us, and then to the Data Protection Board of India

To exercise any of these, email grievance@marrake.in. We may need to verify your identity first, and we will respond within the timelines the law prescribes.

Children

Our products and this website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please write to us and we will delete it.

Contact and grievances

For any question about this policy or about your personal data:

We acknowledge every request within 48 hours and aim to resolve it within one month.

Changes to this policy

We may update this policy. The "Last updated" date at the top will always tell you when. If we make a significant change, we will tell you by email or by a notice on the website.