Legal

Privacy Policy

Last updated: July 2026

MERCANNE respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights.

1. Information We Collect

Account data: When you create an account, we collect your name, phone number, and optionally your email address.

Order data: We collect your delivery address, payment method, and order history to fulfil and track your orders.

Usage data: We may collect anonymised analytics about how you interact with our website to improve our service.

2. How We Use Your Data

We use your data to: process and deliver your orders; send order status updates via WhatsApp; provide customer support; and improve our product catalogue and user experience.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. WhatsApp Communication

We use WhatsApp (via Meta Business API) to send you one-time passwords for login and order notifications. By creating an account, you consent to receiving these messages. You may opt out at any time by contacting us.

4. Data Security

Your data is stored securely on MongoDB Atlas (hosted in a certified data centre). Passwords are never stored — we use phone OTP authentication only. Session tokens are stored in secure HttpOnly cookies.

5. Data Retention

We retain your account and order data for as long as your account is active or as required by law. You may request deletion of your account and associated data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at imshah200@gmail.com.

7. Cookies

We use a single session cookie (mercanne_session) to keep you logged in. We do not use advertising or tracking cookies.