Privacy Policy

DISCLAIMER: Use of this service is subject to the terms and conditions stated below. By accessing the service, you agree to abide by these terms.

This Privacy Policy governs the manner in which Eclat Engineering Pvt. Ltd. (“Company”), a company incorporated under the Companies Act 1956 in India, collects, uses, maintains, and discloses Personally Identifiable Information (“PII”) of users of the MyLOFT platform (including websites, mobile applications, web applications, browser extensions, and other services launched from time to time), collectively referred to as the “Website”, “Site”, “Platform”, or “Application”.

This policy does not apply to the practices of companies that the Company does not own or control, or to people that the Company does not employ or manage.

PII means information that can identify you, such as name, email address, postal address, and phone number.

In this Privacy Policy, “we”, “our”, and “us” refer to the Company and its affiliates. “You” and “your” refer to any individual, institution, or organization accessing or using the Platform.

1. IN BRIEF

Protecting your privacy is of highest importance to the Company. This policy explains what personal data we collect, how we use it, and when we may share it with third parties. It should be read together with our Terms and Conditions.

By using the Platform or Services, you are deemed to have read and accepted this Policy. If you do not accept it, you must not use the Platform.

This policy may be updated from time to time without notice. Continued use after changes constitutes acceptance. Your initial consent to cookies also permits their use on every subsequent visit. Consent to the browser extension allows tracking of visits and analytics.

2. COLLECTION AND PROCESSING OF PERSONAL DATA

Use of the Platform may involve collection and processing of your personal data (including IP addresses). We process personal data only where legally permitted — with your consent, for performance of a contract, compliance with legal obligations, or for legitimate interests (unless overridden by your rights).

By accessing the Platform, you provide explicit unconditional consent to the collection, storage, and processing of your PII. Institutions onboarding users are solely responsible for obtaining necessary consents. The Platform disclaims liability for any non-compliance by such institutions, who agree to indemnify the Company. (See also Clause on Warranties in Terms & Conditions.)

3. PERSONAL INFORMATION WE COLLECT

We collect the following information (including but not limited to):

1. Computer and device information: IP address, geographical location, browser type and version, operating system.
2. Usage data: referral source, length of visit, page views, navigation paths.
3. Registration information: email address, name, profile picture, gender, date of birth, interests, educational and employment details.
4. Identity proofs submitted for verification.
5. Information entered while using services.
6. Transaction data: purchase details, payment information (name, address, telephone, email, credit card).
7. Communications sent to us (including content and metadata).
8. Referral information (email, phone) — you warrant having obtained consent of the referred person.
9. Device clipboard data (for URL retrieval and enhanced functionality).

Certain features require Registration Information. We do not request government or institutional login credentials. You must obtain consent before sharing another person’s personal information.

4. PROCESSING OF PERSONAL INFORMATION

We collect and use your personal information for the following purposes:

1. Administrative notices and transactional communications.
2. Enabling applications for products/services.
3. Market research, troubleshooting, fraud detection and prevention.
4. Sharing with third-party contractors bound by confidentiality.
5. Enforcing Terms & Conditions.
6. Legal, regulatory, and compliance purposes.
7. Analyzing usage and improving services and security.
8. Performing analytics for better user experience.
9. Fulfilling contractual obligations and providing requested services.
10. Informing you about similar services (with consent).
11. Notifying account changes.
12. Responding to inquiries and supporting interactive features.

5. CONSENT TO OVERRIDE DND

You explicitly consent to receiving transactional and service-related communications (including OTPs, status updates) via phone, SMS, WhatsApp, or email, even if registered under DND with TRAI/DoT or other authorities.

6. SHARING OF PERSONAL DATA

We do not sell personal information. We may share it with:

• Employees, officers, and professional advisors as necessary.
• Group companies.
• Third-party service providers (payment gateways, identity verification, fraud prevention, marketing, analytics, etc.) on a need-to-know basis under confidentiality agreements.
• As required by law, to protect rights/safety, in legal proceedings, or during mergers/acquisitions (with notice where feasible).
• In anonymized or aggregated form for analytics and business reporting.

AICurate Service: Integrated for personalized recommendations. No PII is shared with or processed by the AICurate service.

The Company acts as data controller. Contact: privacy@eclateng.com

7. SECURITY OF PERSONAL INFORMATION

We implement reasonable technical and organizational measures including firewalls, encryption, and authentication to protect your data. Financial transactions use encryption. Passwords are stored in hashed form.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. DATA TRANSFERS

Your data may be stored and processed in any country where we operate. You expressly consent to such international transfers. Data localization is not practiced.

9. MARKETING PURPOSES

We may use aggregated data for marketing and may share anonymized data with third parties. You may receive promotional communications if you have consented. Third-party service providers are contractually restricted in their use of your data.

10. RETENTION OF PERSONAL INFORMATION

We retain personal data as long as necessary to provide services, manage our business, or comply with legal obligations. Upon withdrawal of consent, we may still retain data as permitted by law. Technical remnants may be retained with measures to prevent further use.

11. CHANGES TO YOUR PERSONAL INFORMATION

You may update your information via the Platform. To request account cancellation or deletion of data, contact us at the email provided in the Contact Us section. We will retain data as required for legal compliance, dispute resolution, and enforcement of agreements.

12. LOG FILES

We automatically collect and store log information including IP address, browser type, ISP, referring/exit pages, operating system, timestamps, and clickstream data for service improvement, marketing, and analytics.

13. TRACKING TECHNOLOGIES / COOKIES

We use cookies, beacons, tags, and similar technologies for functionality, analytics, and personalization. By continuing to use the site, you consent to cookie usage. See our Cookie Policy for details.

14. TESTIMONIALS, BLOGS, AND FORUMS

By consenting, we may publish your testimonial with your name. You may request removal. Content posted in public forums is visible to others and not controlled by us. Contact us to request removal (removal may not always be possible).

15. WIDGETS AND THIRD-PARTY LINKS

Widgets and links to third-party sites are governed by their respective privacy policies. We are not responsible for their data practices.

16. BEHAVIORAL TARGETING / RE-TARGETING

Third-party partners may use cookies to serve interest-based advertisements. Their practices are governed by their own policies.

17. SINGLE SIGN-ON (SSO)

Login via institutional SSO, Google, Facebook, or OpenID may share basic profile information (name, email) with us.

18. LIKE / SHARE BUTTONS

Use of social sharing features may share activity with your social networks per their privacy settings.

19. LINKS TO THIRD-PARTY SITES

We are not responsible for the privacy practices of linked websites.

20. OPTING OUT

You may unsubscribe from promotional emails/newsletters. Service-related communications will continue.

21. YOUR RESPONSIBILITIES

• Maintain confidentiality of your login credentials.
• Do not share Company confidential information.
• Immediately report suspected compromise of credentials to support@myloft.xyz.
• We are not liable for unauthorized access due to your negligence.

Complaints or security concerns: privacy@eclateng.com

22. CHANGES TO THIS POLICY

We may update this Privacy Policy. Please review it periodically.

23. CONTACT US

For questions or concerns: privacy@eclateng.com

This Policy is governed by the laws of India. Exclusive jurisdiction lies with the courts at Ahmedabad, Gujarat.

X. IPR OWNERSHIP

You shall not copy, modify, transmit, distribute, reverse engineer, or exploit any content, products, or materials except for your individual permitted use. All IPR belongs exclusively to the Company. Any infringement may result in legal action.

Y. CHILDREN’S PRIVACY

Our Services are not directed at children under 18. We do not knowingly collect data from children under 18. If we become aware of such data, we will delete it, except where institutions have obtained proper consents and assume full responsibility for compliance. Parents/guardians should contact us if their child’s information needs removal. Users under 18 must use the Platform under parental/legal guardian supervision.