Privacy Policy
- We collect only what we need to make and deliver your order: name, phone, size and back print.
- Razorpay handles your payment details. We never see your card or UPI PIN.
- We share your name, size and back print with your organiser and our printer, and nothing with advertisers.
- You can ask us to see, correct or delete your data at any time.
1. Who is responsible for your data
MerchDrop, owned by Ayushman Mohapatra, BHR, SUIIT, Jyoti Vihar, Burla, Sambalpur, Odisha 768019, decides how your personal data is used. We follow the Digital Personal Data Protection Act, 2023 and its rules.
2. What we collect
| Who | What we collect |
|---|---|
| Members who order | Name, WhatsApp number, size, quantity, name and number for the back print, order and payment status, Razorpay payment ID |
| Organisers | Name, phone, email, club or group, uploaded artwork, and the UPI ID or bank details used to pay rewards |
| Everyone using the site | Basic technical data our hosting provider records, such as IP address and browser type. Your theme choice is saved only in your own browser. |
We do not use advertising cookies or trackers.
3. Why we use it
- To take, print and deliver your order, and to send order updates on WhatsApp, SMS or email.
- To process refunds and pay organiser rewards.
- To keep the accounting and tax records the law requires.
- To prevent fraud and fake orders.
We use your data on the basis of the consent you give at checkout, and for uses the law allows, such as keeping tax records. We will ask again before using it for anything new, such as marketing.
4. Who we share it with
- Your drop's organiser: your name, size, back print and whether you've paid, so they can hand out pieces.
- Our printer: sizes and back prints. Not your phone number.
- Razorpay: to process payments and refunds.
- Service providers that host the site, send email and messages, and store data for us, under contracts that limit how they use it.
- Authorities, only when the law requires it.
We never sell your personal data.
5. How long we keep it
We keep order data while your order is active and then for as long as tax and accounting laws require. We keep security logs for at least one year. Uploaded artwork is deleted 90 days after a drop is delivered, unless the organiser asks us to keep it for a reorder.
6. Your rights
- See what data we hold about you.
- Correct or update it.
- Ask us to delete it, where we don't need to keep it by law.
- Withdraw your consent. This won't affect orders already completed.
- Nominate someone to exercise these rights for you.
- Complain to our Grievance Officer, and then to the Data Protection Board of India.
Write to support@merchdrop.in. We aim to reply within 7 days, and always within the time the law allows.
7. Children
If you are under 18, please order with a parent's or guardian's consent. We collect only what is needed for your order.
8. Keeping data safe
We limit access to people who need it, use providers with strong security, and never store payment card details. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
9. Changes
If we change this policy, we will update the date at the top and tell active users about important changes.
10. Contact
Grievance Officer: Ayushman Mohapatra, Grievance Officer, support@merchdrop.in.