I. Privacy policy

Last updated: April 1, 2025

MDepot Retail Technologies Private Limited and its affiliates (“we”, “us”, “our” or “MDepot”) is engaged in operating an online platform offering a wide range of products and services for the design and architecture community, including tiles, plywood, laminates, sanitaryware, and hardware, and as may be carried on by any group Company from time to time. MDepot values your privacy and is committed to safeguarding personal data relating to you (“You”, “Your” or “User”). This Privacy Policy is applicable to MDepot and its group companies including Haut Luxe Technologies Private Limited.

The description of our services can be accessed at https://materialdepot.in/. Personal data refers to information about you that can identify you, such as Your name, email address, or phone number (“Personal Data”). This Privacy Policy explains what Personal Data we process, why we process it, how we use it, with whom we share Your Personal Data, and Your rights regarding Your Personal Data. It describes how we handle Your Personal Data when You interact with us through our website, mobile applications, third-party platforms, surveys, or other means, in Your capacity as a consumer, business customer, business partner, supplier, website visitor, or other person in a business relationship with us (hereinafter referred to as the “Platform”). It also applies when You avail of the products or services offered by MDepot through the Platform, or when You partner with us to deliver such services to customers (collectively, the “Services”).

With other Users: when You share Personal Data or otherwise interact in the public areas with other Users, such information may be viewed by all Users and may be publicly distributed outside. If You interact with other Users or register through a Third-Party Social Media Service, Your contacts on the Third-Party Social Media Service may see Your name, profile, pictures and description of Your activity. Similarly, other Users will be able to view descriptions of Your activity, communicate with You and view Your profile.

With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.

II. Personal Data collected by us

We collect various categories of Personal Data depending on how you interact with our Services—whether as a customer or User or as a business partner or vendor (“Service Provider”). This data helps us deliver personalized experiences, improve our offerings, and ensure secure transactions.

(a) If You are a customer or User:

We may collect the following types of data:

• Personal Data: Name, email, phone number, home/mailing address, and location, age, family details, interests, language, user name, password, User identifiers, purchase history, order history, payment details (e.g., card details, UPI IDs), and order information.
• General usage Data: Booking history, User journey on our Platform, activity logs, interaction patterns, IP address, device type, browser details, operating system, access times, page views, clicks, and general usage pattern.
• Marketing & Communication Data: Preferences, feedback, participation in surveys or discussions, and communication with our team or partners.
• Property Preferences: Property type, size, ownership status, interior style preferences, room details, and number of properties.

(b) If You are a Service Provider:

We may collect the following types of data:

• Contact Information and business profile: Email, phone number, name, date of birth, zip code, Services offered, business media (photos/videos), PAN, financial records, and background verification reports.
• Technical Data: Device and browser info, IP address, operating system details, location data, and app usage metadata.
• Marketing & Communication Data: Testimonials, feedback, communication preferences, call records, responses to polls and surveys, newsletters, telemarketing calls, SMS or push notifications and interactions with Users.

(c) Account and billing information: When you (as a User or Service Provider) create an account on our Platform, we collect Your name, address, contact details, credit/debit card number, cardholder name, expiration date, UPI ID, or wallet details), depending on Your chosen mode of payment, GST number (as applicable) and any voluntary information you provide in relation to billing or invoicing. We use this information only for billing, invoicing, delivery, and order fulfillment.

(d) Aggregated Data:

We may collect and use aggregated, anonymized data (e.g., statistical or demographic data) for analytics, research, or business purposes. While such data does not identify you directly, if it is combined with Personal Data to identify you, we treat it as Personal Data and protect it accordingly.

III. Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods. If you wish to request deletion of your Personal Data, you may do so by sending us an email to contact@materialdepot.in and we will comply with Your request within 30 working days.

IV. Where we collect Your Personal Data from?

We may collect business-related Personal Data from the following sources:

• Direct Interactions: We may collect Your Personal Data when You as a customer or Your authorized representatives as Service Provider interact with us directly, whether through our online Platform or in person at our retail outlets. This includes situations where You create a User account or profile (including with in-store assistance), place orders using our mobile application at the store or at our retail outlets, purchase or inquire about our furniture, interior décor products, or related services, participate in promotions, User polls, surveys, or feedback programs, contact our customer support team, or attend trade events or workshops organized by us, provide testimonials, or otherwise communicate with our customer service team. Information may also be collected through physical or digital forms, call recordings (where permitted), or while providing personalized assistance. The types of Personal Data collected may including Your name, date of birth, contact details, User ID, password, residential or delivery address, household type, family composition, demographic information such as Services You prefer, products bought by You or orders placed by You, purchase history, product preferences, Service usage records, and communication history. In cases where our staff assists with account creation or order placement in-store, information is collected and entered with Your knowledge and consent.
• CCTV Surveillance: For purposes of safety, security, loss prevention, and operational monitoring, our stores/outlets are equipped with CCTV and other video surveillance systems that may capture footage while You are on our premises. This footage is collected to ensure the safety of customers, employees, and property, support risk management, and comply with applicable legal or regulatory obligations. All Personal Data, including CCTV footage, is stored in secure environments with access strictly limited to authorized personnel such as security staff and management, and is retained only for as long as necessary to fulfill its intended purpose or to assist law enforcement or regulatory authorities, after which it is securely deleted or anonymized.
• Automated Data Collection: When you interact with our Platform, we may automatically collect certain technical data about Your device, browsing actions, and usage patterns. This data is collected using cookies, web beacons, pixel tags, server logs, and other similar technologies. We may also receive technical data about you when you visit third-party websites that use our cookies.
• Third Parties and Business Partners: When you inquire about our products and Services as a prospective or current corporate client, dealer, enterprise customer, exporter, partner, supplier, or media/PR representative, through our business inquiry form or customer support channels provided on our Platform. We may also receive Personal Data about you from third-party sources, including analytics providers, authorised resellers, dealers, marketing partners, advertising networks, social media platforms, and publicly available databases, as permitted by applicable law. We ensure such data is obtained lawfully and, where required, with appropriate consent.
• Grievance related information: We may process Your Personal Data when you submit a complaint or grievance related to our products, Services, or deliveries. This may occur through our Platform forms, customer support channels (email or phone), or any other means of communication, and is used solely to address and resolve Your concerns effectively.
• OTP and SMS: We may access SMS/text messages on Your device—only with Your permission—to read One-Time Passwords (“OTPs”) for verifying payments or other transactions. This helps auto-fill verification details during secure financial transactions, either through our platform or trusted third-party payment gateways. We do not share this data with any third party, except as stated in this Privacy Policy and as required by law.
• Social media: When you interact with us on social media (e.g., sharing comments on posts of our official page on any social media platform or post any social media content such as ratings, reviews, tips, photos, comments, likes, bookmarks, friends, list), we may process Your Personal Data publicly available on these platforms.
• Job application: When you engage with us regarding job opportunities at MDepot through the ‘Careers’ section of our website, we collect and process Personal Data such as Your contact information (including name, email address, phone number, country of residence, and home address), details related to Your qualifications, education, and professional experience, as well as any documents you submit. We may also process data necessary for background or employment checks, as permitted by applicable laws, along with information about Your job preferences.

V. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

Your explicit consent will be obtained through a login interface or pop-up notification at the time You access or use our Platform. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other Personal Data.

VI. Why do we process Your Personal Data?

We use Your personal and business-related data only when permitted by law, primarily to deliver our Services, fulfill our contractual obligations, and comply with legal requirements.

Your data may be used for purposes such as:

• Verifying Your identity and creating Your account;
• Processing orders and providing design consultations or interior execution Services;
• Monitoring usage trends, improving our Services, and personalizing Your experience;
• Managing payments, transactions, and customer support;
• Sending updates, service-related communications, and marketing material;
• Enhancing our platform functionality, business operations, and product development;
• Enforcing our terms, meeting legal obligations, and responding to lawful requests.

VII. Disclosure of Your Personal Data

INTERNAL DISCLOSURE

We may share Your Personal Data with one or more of our group companies or affiliates to help detect and prevent fraud, identity theft, and other unlawful activities; to identify and manage related or duplicate accounts; and to enable joint offerings or co-branded Services provided through our Platform.

BUSINESS PARTNERS AND THIRD PARTY CONTRACTORS

We engage trusted third-party service providers to support our operations, including delivery, order fulfilment, communication (e.g., email, SMS, WhatsApp), and marketing. The list of third-party service providers is given in this policy as Annexure-A. These providers process Your Personal Data solely on our behalf and are contractually obligated to use it only as instructed or required by law.

We may also share Your Personal Data with authorised business partners or resellers to help deliver our products or Services. For example, if you request a demo or consultation at a specific location, Your details may be shared with the local dealer/contractor. Such partners may use the data to market our offerings or their own, in accordance with their respective privacy policies.

We ensure that all such disclosures are made securely and only to parties who are bound by appropriate confidentiality and data protection obligations.

BUSINESS TRANSACTIONS

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

LAW ENFORCEMENT

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

OTHER LEGAL REQUIREMENTS

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation, applicable laws and regulations, directions of governmental authorities or law enforcement agencies, court judgments, decree or orders under any law in force
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

VIII. Children’s Privacy

MDepot does not knowingly collect or solicit Personal Data from children under the age of 18 and the Service and its content are not directed at children under the age of 18. In the event that we learn that we have collected Personal Data from a child under age 18 without verification of parental consent, we will delete that information as quickly as possible. If You believe that we might have any information from or about a child under 18. Please contact us at contact@materialdepot.in

IX. How long we keep Your User Content

Following termination or deactivation of Your User account, MDepot may retain Your profile information and User content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, MDepot may retain Your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes.

X. Your rights

You have certain rights over your Personal Data:

• Right to access information about Your Personal Data: You can ask us for a summary of Your Personal Data, the processing activity, and the recipients with whom we have shared Your Personal Data, along with a description of the Personal Data we shared.
• Right to seek correction and erasure of Personal Data: If You believe that the Personal Data we hold is inaccurate, incomplete or outdated, You can write to us. You may also request deletion of Your data; however, in certain cases, we may need to retain it for legal or regulatory reasons as mentioned in clause III (Retention of Your Personal Data).
• Right to grievance redressal: If You wish to file a grievance, You may contact our Data Protection Officer / Grievance Redressal Officer in accordance with this Privacy Policy. Upon submission of Your complaint, a unique ticket number will be provided to You for tracking purposes. If Your grievance remains unresolved, please be informed that You have the right to escalate it to the competent supervisory authority i.e., Data Protection Board. Complaints relating to consumer issues and data processing will be acknowledged within 48 hours and, wherever feasible, resolved within one month of receipt as per the Consumer Protection (E-Commerce) Rules, 2020.

XI. How can You control Your data

If You wish to request deletion of Your Personal Data, You may do so by sending us an email to contact@materialdepot.in and we will comply with Your request within 30 working days. Once the request is raised, the systems administrator will pick up the request on a case by case basis but within a maximum amount of 30 days, the User will receive a response from our team regarding the status of the request.

XII. Disclosure Text for Inclusion in Privacy Policy

We may disclose to third party services certain personally identifiable information listed below:

• information You provide us such as name, email, mobile phone number.
• information we collect as You access and use our service, including device information, location and network carrier.

This information is shared with third-party service providers so that we can:

• personalize the app for you.
• perform behavioural analytics.

XIII. Security of Your Personal Data

We take appropriate security measures to protect against unauthorized access to or alteration, disclosure or destruction of data including accidental or intentional manipulation, loss from access by unauthorised parties. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorized access to systems where we store Personal Data. All Information gathered on the Khata Book App is securely stored within the controlled database. Access to the servers is password-protected and is strictly limited. Our security measures are regularly reviewed and updated to reflect technological developments. Regardless of where Your Personal Data is transferred or stored, we take all steps reasonably necessary to ensure that Personal Data is kept secure, however, please understand that no transmission of data over the internet or any other public network can be guaranteed to be 100% (one hundred percent) secure. We seek to ensure compliance with the requirements of the applicable data protection laws to ensure the protection and preservation of the User’s privacy and Personal Data. We have physical, electronic, and procedural safeguards that comply with the laws prevalent in specific jurisdiction to protect User’s Personal Data. By accepting the terms of this Policy, You agree that the standards and practices being implemented by Us, are reasonable and sufficient for the protection of Your Personal Data. We will contact You regarding any breach of the security, confidentiality, or integrity of Your unencrypted electronically stored Personal Data to You via email or any other feasible manner in the most expedient time possible and without unreasonable delay, insofar as consistent with the legitimate needs of law enforcement and will undertake all measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

XIV. Sensitive Personal Data & security practices

We do not collect biometric data, medical records, health condition, or sexual orientation of Users via our platform. All sensitive information is collected and processed only with the explicit consent of the individual, through secure electronic forms or contractual documentation (for employees and vendors). This consent is recorded and maintained in accordance with applicable data protection laws.

We have adopted reasonable security practices and procedures, including alignment with the IS/ISO/IEC 27001 standards, to safeguard all personal and sensitive data. Access is limited to authorized personnel only, and regular security assessments are conducted to maintain the integrity and confidentiality of Your data.

XV. Cookies

We use cookies and similar tracking technologies to enhance Your experience on our Platforms, improve our Services, and better understand how You interact with our content. You can control how cookies are used through Your browser or device settings, where You can disable or delete all or some cookies. However, disabling or rejecting cookies may limit Your access to all or certain features of our platforms, products or services for which require the use of cookies.

XVI. Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or Services.

XVII. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

XVIII. Contact Us

If You have any questions about this Privacy Policy, You can contact us by email at contact@materialdepot.in or contact our Grievance officer if you have any grievance regarding our products, services and deliveries at the details mentioned herein:

Name: Nirbhay Singh

Contact no.- +91-8126481717

Email ID:- nirbhay.singh@materialdepot.in

---

Annexure-A: List of Third-Party Service Providers

• Bik.ai
• Kaleyra
• MoEngage
• Pidge
• Msg91
• Mysa
• Zoho Books
• GitHub
• Make