Privacy Policy

Meraki Merchandise respects your privacy and handles personal data responsibly. This policy applies to www.merakimerchandise.com and to people who interact with us through it — website visitors, people submitting enquiries or quote requests, people downloading catalogues, customers and prospective customers, users of company stores and portals we operate for corporate clients, and people who contact us electronically by email, phone or WhatsApp.

It is written with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 in mind, and includes a short section for visitors located outside India.

[Registered office address — to be added by Meraki in Admin → Global Settings → Privacy]

We have not appointed a statutory Data Protection Officer. For privacy and personal-data questions, you may contact Meraki Merchandise at hello@merakimerchandise.com.

We only collect what we actually need. Depending on how you use the site, this may include:

• Identity: your name, and job title or designation if you choose to share it.
• Contact: business email, phone or mobile number, and a WhatsApp number if you voluntarily provide one.
• Business details: company name, country, city, your requirement, approximate order size or quantity, budget indication and preferred contact method.
• Enquiry content: product, event, gifting, customisation and packaging requirements, and any message you write to us.
• Catalogue activity: which catalogue you requested and the details submitted with that request.
• Kit builder: the configuration you build (goal, recipients, budget band, selected products) when you request a proposal.
• Technical data: IP address, browser and device information, operating system, referring URL, pages visited and interactions. Approximate country may be derived from this.
• Marketing and measurement data: campaign parameters (such as UTM tags), Google and Meta click identifiers, cookie and analytics identifiers, and conversion events — only as described in the cookies section.
• Account and order data: only for people invited to a corporate portal or company store we operate — name, work email, company, department, role, cart, orders and approvals.

We do not ask for and do not knowingly collect sensitive personal data such as government ID numbers, financial account details, health information or biometric data through this website.

• Directly from you — enquiry and quote forms, catalogue download forms, the Build Your Kit proposal request, email, telephone and WhatsApp.
• When a corporate client invites you to a company store or portal we operate on their behalf.
• Automatically — cookies and similar technologies, server logs, and analytics or advertising measurement tools where you have allowed them.
• From advertising and analytics platforms, in aggregated or pseudonymous form, when we measure campaign performance.

• Responding to your enquiry and preparing quotations or proposals.
• Sending you the catalogue or resource you requested.
• Fulfilling and delivering orders, and handling customisation and packaging requirements.
• Operating company stores, portals, approvals and related account administration for corporate clients.
• Customer support and service communication.
• Website security, fraud and abuse prevention, and maintaining our systems.
• Improving the website and measuring how it performs.
• Understanding marketing campaign performance and measuring Google and Meta advertising conversions, where those technologies are enabled and permitted.
• Sending marketing communications where you have opted in or another lawful basis applies.
• Meeting legal, accounting and tax obligations, handling disputes and enforcing agreements.

We keep to the purpose you gave the information for, and we do not collect more than we need for it.

Where we rely on your consent, that consent is voluntary, specific, informed, unconditional and unambiguous, and is given by a clear affirmative action — for example, submitting a form after reading the notice beside the button, or choosing your cookie preferences.

• We do not pre-tick marketing consent boxes.
• Agreeing to marketing is never a condition of requesting a quote or downloading a catalogue.
• You can withdraw consent at any time, and withdrawing is as easy as giving it: use the unsubscribe link in our emails, change your cookie choices, or email us.

Withdrawing consent does not affect processing that already took place, and we may still need to keep some records to meet legal obligations.

Every public form on this site shows a short notice next to the submit button explaining what we will do with the information. Marketing consent, where offered, is a separate unticked checkbox.

When you request a catalogue we collect your name, work email, phone (optional), company, country, the catalogue requested and any requirement you describe. We use this to send you the catalogue, respond to your enquiry, keep a record of the request, and understand which catalogues are useful.

Catalogue PDFs are stored in private storage and delivered through a short-lived, single-purpose link created only after your request is submitted. We do not build advertising audiences from catalogue contact details.

We group cookies and similar technologies into four categories:

• Essential — security, page delivery, session handling and remembering your cookie choice. These always run.
• Functionality and preference — browser storage that remembers things like a saved kit draft or that you have already seen a promotion.
• Analytics — understanding which pages are used so we can improve them.
• Advertising and measurement — measuring the performance of our Google and Meta campaigns.

Non-essential technologies do not load until your consent state allows them. In regions where prior opt-in is required, nothing non-essential runs until you choose. You can change or withdraw your choice at any time: open cookie settings. The full list of technologies actually in use is in our Cookie Policy.

We use Google technologies (Google Tag Manager, Google Analytics and Google Ads conversion tracking) to understand website traffic, measure conversions such as completed enquiries and catalogue requests, and understand how our advertising performs.

When these are active, information such as cookie or advertising identifiers, pages viewed, campaign parameters and the fact that a conversion occurred is shared with Google for measurement, subject to Google's policies, your consent where required, and Google Consent Mode signals that we set from your cookie choices. We do not send your name, email address, phone number or WhatsApp number to Google through these events.

We use the Meta Pixel to measure the performance of our advertising, understand which website actions follow an ad, and improve advertising relevance. When you allow advertising technologies, the pixel shares event information — such as page views and that a conversion occurred — with Meta. We do not send your name, email address or phone number to Meta through these events. The Meta Conversions API is not in use.

We share personal data only where there is a reason to:

• Meraki team members who need it to answer your enquiry or deliver your order.
• Our hosting and application infrastructure provider, which stores website data and files.
• Our commerce platform (Shopify), for product catalogue and order-related processing where applicable.
• Our email provider (Zoho), which sends and receives enquiry and transactional email.
• Our CRM (Zoho CRM), where enquiry records are managed by our sales team.
• Analytics and advertising measurement providers (Google, Meta, Microsoft Clarity, LinkedIn) — only within the consent you have given.
• Production partners, printers and logistics or courier partners, where needed to make and deliver your order.
• Professional advisers, and government, regulatory or law-enforcement authorities where legally required or to handle disputes, security or fraud.

Meraki Merchandise does not sell personal data for monetary consideration. We do not share your enquiry details with other customers or with unrelated marketers.

We receive visitors from many countries and use international technology providers. Personal data may therefore be processed or stored outside India where that is necessary to operate our website, infrastructure, analytics and communications. Where applicable, Meraki will take the steps required by applicable data protection laws in relation to international transfers, including any restrictions notified under the Indian framework.

We apply technical and organisational safeguards appropriate to the information we hold, including:

• HTTPS/TLS encryption for all website traffic.
• Authentication and role-based access for portals and administrative areas.
• Database row-level security so that a company's users can only reach their own company's data.
• Private storage with short-lived signed links for gated files such as catalogues.
• Restricted administrative access, server-side handling of credentials, logging and monitoring, and routine security updates.

While we take reasonable measures to protect personal data, no method of transmission or storage can be guaranteed to be completely secure.

We keep personal data only for as long as reasonably necessary for the purpose it was collected for — responding to and servicing your enquiry, delivering orders, maintaining business records, meeting legal, accounting and tax requirements, resolving disputes, preventing fraud or abuse, enforcing agreements, and security.

When personal data is no longer needed for those purposes, it is deleted, anonymised or securely isolated in line with applicable law and our operational requirements. You may ask us to erase data we no longer need — see the rights section below.

Under India's Digital Personal Data Protection Act, 2023 you may, subject to the Act:

• Ask for a summary of the personal data we hold about you and how it is processed.
• Ask us to correct, complete or update inaccurate or incomplete data.
• Ask us to erase personal data where the purpose is no longer being served, subject to legal retention requirements.
• Withdraw your consent where consent is the basis for processing.
• Nominate another individual to exercise your rights in the circumstances the Act provides for.
• Raise a grievance with us and have it addressed.

Depending on your location and applicable law, you may have additional rights. Where those laws apply to us, we will address such requests in accordance with them.

Email hello@merakimerchandise.com with the subject line “Privacy Request — Meraki Merchandise” and include:

• Your name.
• The email address or mobile number you used when you contacted Meraki.
• What you would like us to do (access, correction, erasure, withdrawal of consent, or a grievance).
• Enough detail for us to find your records.

We may need to verify that the request comes from you before we disclose or change personal data. We will only ask for what is necessary to do that.

If you are unhappy with how your personal data has been handled, contact us and we will look into it.

[Named grievance contact person — to be added by Meraki in Admin → Global Settings → Privacy]

This website is intended for businesses and for adults acting in a professional or business capacity. We do not knowingly solicit or collect personal data from children, and we do not direct marketing at them. If we become aware that personal data relating to a child has been collected contrary to applicable requirements, we will take appropriate steps in accordance with applicable law. We do not operate age verification on this website.

Our website links to third-party sites — social media profiles, partner and supplier sites, and resources. We are not responsible for the privacy practices of independent third parties. Please review the privacy policy of any site you visit from here.

We may contact you about a quote or catalogue you requested, your order, or customer service matters — these are service messages, not marketing. Where you have opted in, or another lawful basis applies, we may also send occasional updates about relevant products and services. Every marketing email includes an unsubscribe link, and you can also email us to opt out. You never have to accept marketing to request a quote or a catalogue.

We maintain incident-response practices appropriate to our size and systems. If a personal data breach occurs, we will take the steps required by applicable law, including notifying the relevant authority and affected individuals where that is required.

If Meraki Merchandise is reorganised, merged, acquired, or sells part of its business or assets, personal data may be transferred as part of that transaction, subject to applicable law.

We may update this policy as our services, technologies or legal obligations change. The effective date, last-updated date and version are shown at the top of this page, and previous versions are retained in our version history. Where changes are material, we will make that clear on the website.

Prefer to talk it through? Contact us.