Privacy Policy

1. Who We Are

Mini Street is operated by Quantyra Commerce Pvt. Ltd, registered at G1, 1-8-853,19/3RT,F, LANE2 STREET 5, PRAKASHAMNAGAR, BEGUMPET, Secunderabad, Hyderabad, Telangana 500016. GSTIN: 36AABCQ1799A1ZI.

For the purposes of the DPDP Act 2023, Quantyra Commerce Pvt. Ltd is the "Data Fiduciary" responsible for your personal data.

2. Data We Collect

Information You Provide:

• Name, email address, phone number, and shipping address when placing an order
• Payment information (processed through secure third-party gateways; we do not store card data per RBI Tokenisation Guidelines)
• Contact form submissions and customer service communications
• Account information when creating a user account

Information Collected Automatically:

• Device type, browser type, IP address, and operating system
• Pages visited, time spent, and browsing patterns on our website
• Cookies and similar tracking technologies (see Cookie section below)

3. Purpose of Data Collection

We collect personal data only for the following specific, lawful purposes:

• Processing and fulfilling your orders, including shipping and delivery
• Communicating order status, tracking updates, and delivery confirmations
• Customer service and grievance resolution
• Improving our website, products, and user experience
• Complying with legal obligations under Indian law
• Sending promotional communications (only with your explicit consent)

4. Consent

Under the DPDP Act 2023, we obtain your consent before collecting and processing your personal data. By placing an order on Mini Street, you provide informed consent for us to process your data for order fulfillment. For marketing communications, we seek separate, explicit opt-in consent.

You may withdraw your consent at any time by emailing info@ministreet.store. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Data Storage and Security

Your data is stored on secure servers with industry-standard encryption. We implement technical and organizational measures to protect against unauthorized access, alteration, or destruction of your personal data, including:

• SSL/HTTPS encryption for all data transmission
• Secure, password-protected database access
• No storage of credit/debit card information (per RBI Tokenisation Guidelines)
• Regular security audits and updates

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Order data is retained for a minimum of 8 years for tax and legal compliance under Indian law. You may request deletion of your personal data (subject to legal retention requirements) by contacting us.

7. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

• Shipping and logistics partners (name, address, phone number) for order delivery
• Payment gateway providers for secure transaction processing
• Government authorities when required by law

8. Your Rights Under DPDP Act 2023

As a Data Principal, you have the following rights:

• Right to Access: Request a summary of your personal data we hold
• Right to Correction: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data (subject to legal retention periods)
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Grievance Redressal: File a complaint with our Grievance Officer
• Right to Nominate: Nominate an individual to exercise your rights in case of death or incapacity

9. Cookies

We use cookies to provide essential functionality (such as shopping cart) and to improve your browsing experience. We use localStorage for cart data, which remains on your device and is not transmitted to our servers until checkout.

10. Children's Data

While Mini Street sells children's products, our website is intended for use by adults (parents/guardians). We do not knowingly collect data from children under 18. If a child's data has been inadvertently collected, please contact us immediately.

11. Grievance Officer

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

13. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana.