• We may share your Information with third parties under a confidentiality agreement which inter alia provides for that such third parties not disclosing the Information further unless such disclosure is for the purpose of completing your requirement
Examples of third parties we work with are:

IT companies who support our website and other business systems. (in case we hire any company for website marketing like we had hired ANS digital)

Operational companies such as delivery couriers.

Employees/ parties who help us manage our marketing communications with you.

• We may share your basic data like demographics, email, name, phone number to google analytics for web marketing on google, Facebook, Instagram etc User's phone number and email address to run marketing campaigns.
• With these Mirana toys' marketing employees can contact users through email and WhatsApp to provide new product advertisements provide advertising and marketing assistance. In case the user is not interested in receiving any marketing campaigns or any communication other than details about the purchases and deliveries from Mirana the user shall have the option to do so.
• We may also disclose personal information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process.
• We may disclose personal information to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms or Privacy Policy; respond to claims that an advertisement, posting, or other content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public.
• If we sell or otherwise transfer the whole or part of our assets of Mirana Innovations during transaction like the merger / takeover, your information personal and non-personal collected through our platforms may be among the items sold or shared. The Buyer of the Transferred will have to honour the commitments we have made in this privacy policy.

RELEASE OF NON-PERSONALLY IDENTIFIABLE INFORMATION

We may disclose or share Non-Personally Identifiable Information with Partners, Affiliates and Advertisers. We may share aggregated demographic information (which does not include any Personally Identifiable Information) with "Third Party Advertisers" or "Third Party Advertising Companies". We also use Third Party Service Providers to track and analyze Non-Personally Identifiable usage and volume statistical information from our Users to administer our Platforms and constantly improve its quality. We may also publish this information for promotional purposes or as a representative audience for Advertisers. Please note that this is not Personally Identifiable Information, only general summaries of the activities of our Users. Such data is collected on our behalf and is owned and used by us.

UPDATING/ DELETING INFORMATION

You will have the ability to access and edit or delete the Personally Identifiable Information you have provided us. You may change any of your Personally Identifiable Information by accessing through your login and password.

We would request you to promptly update your Personally Identifiable Information if it changes.

The Company is not responsible for the authenticity of the personal information or sensitive personal data or information supplied by the provider of information.

SECURITY OF INFORMATION

Unfortunately, the transmission of data via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of the data transmitted to our site; any transmission is at your own risk.

Once we have received your Personal Data, we use strict procedures and security features to try and prevent unauthorised access.

To prevent unauthorised access or disclosure, we have in place physical, electronic and managerial procedures to safeguard and secure the Personal Data we process.

All communication to the back-end servers is encrypted during transit with secure server(HTTPS)protocol. Back-end database is hosted on AWS cloud at united states.

We take appropriate precautions to protect the security of Personally Identifiable Information. We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, transaction information and data stored on our Site.

You can access your Personally Identifiable Information on our Platforms through your login and password. We recommend that you do not share your password with anyone. In addition, your Personally Identifiable Information resides on a secure server that only selected personnel and contractors have access to. Mirana toys strives to ensure the security of Your Personal Information and to protect Your Personal Information against unauthorized access or unauthorized alteration, disclosure or destruction.

We encrypt certain sensitive information using Secure Socket Layer (SSL) technology to ensure that your Personally Identifiable Information is safe as it is transmitted to us. Mirana shall adopt reasonable security practices and procedures as mandated under applicable laws for the protection of Your Information.

Provided that Your right to claim damages shall be limited to the right to claim only statutory damages under Information Technology Act, 2000 and You hereby waive and release Mirana from any claim of damages under contract or under tort.

If you choose a payment gateway to complete any transaction on Platforms then Your credit card data may be stored in compliance with industry standards/ recommended data security standard for security of financial information such as the Payment Card Industry Data Security Standard (PCI-DSS).

However, Mirana Innovations is not responsible for any breach of security or for any actions of any third parties that receive your Personal Information.

Mirana is not liable for any loss or injury caused to you as a result of You providing Your Personal Information to third party (including any third-party Platforms, even if links to such third party Platforms are provided on the Platforms).

We release information when we believe release is appropriate to comply with the law; enforce or apply our terms of use and other agreement. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. Obviously, however, this does not include selling, renting, sharing, or otherwise disclosing personally identifiable information from customers for commercial purposes in violation of the commitments set forth in this Privacy Notice. Accordingly, we cannot ensure or warrant the security of any information that you transmit to us, so you do so at your own risk.

PRIVACY POLICIES OF THIRD-PARTY PLATFORMS

This Privacy Policy only addresses the use and disclosure of information we collect from you. Other websites that may be accessible through the platforms have their own privacy policies and data collection, use and disclosure practices. If you link to any such websites, we urge you review the websites' privacy policy. We are not responsible for the policies or practices of third parties.

MISCELLANEOUS PRIVACY ISSUES

Children. Minors under the age of 18 are not supposed to use the Platform without adult supervision. We allow basic features like playing with a toy and collect non personnel information that is used to enhance the play experience for minors under the age of 18 year. If you are under 18 and still want to use all the features of Mirana, you may use Mirana with the involvement of a parent or guardian.

SUSPICIOUS COMMUNICATION THROUGH PHONE CALLS, E- MAILS OR MESSAGES

Mirana does not run any contests that require you to pay to participate by paying through a link which is not connected to our Platforms or App or by giving your bank details for any lottery or cash transaction. Please do not believe any communication using Mirana logo and branding requesting you to pay money in exchange for any gifts or prizes. Such fake communication could look like real emails from Mirana and could direct you to a false Platforms that looks like the Mirana Platforms. Please do not provide your account information and password or any sensitive information as it could be used to commit fraud. Do not open any attachments or click any links from suspicious emails or text messages. Further, Mirana will never e- mail or call you to disclose or verify your password, credit card or bank-account number, CVV, or any other personal information. If you get any such calls from a caller stating to be from Mirana, please be alert when responding to such calls and never reveal sensitive information or details that can identify you. If you have ever responded to a suspicious call, e- mail or message and provided any personal or sensitive information, we urge you to immediately update your Mirana password immediately and report such calls to the nearest police station. If you have provided financial information, you may want to contact your bank or credit card provider.

Note: Should you have any doubts regarding such suspicious communication contact so we can help you. Always use customer care numbers displayed on our Platforms and do not access unknown links or Platforms for our customer care details

Grievance redressal Policy

We hope that you are pleased with any purchase you've made or service you've received from Mirana Toys, and that you will never have reason to complain.

Step 1- If you wish to complain you can

• send us an email on info@miranatoys.com
• Write to us at the Company address mentioned below:-

201, Plot No. T-33, T Block, MIDC Road, Bhosari Pune Maharashtra India 411026

Step 2: Grievance Processing and Investigation:

The COMPANY shall assign a unique grievance reference number to each complaint for tracking purposes.

Grievances shall be reviewed and investigated by a designated Grievance Redressal Officer (GRO) (Mr. Ravi Yadav) within 7 working days.

The GRO may seek additional information or documents from the complainant if necessary.

The COMPANY shall maintain confidentiality

Step 3: Grievance Resolution:

The GRO shall make a fair and objective assessment of the grievance based on the available information.

The COMPANY shall aim to resolve grievances within a specified period, typically 30 days from the date of receipt.

If additional time is required, the complainant shall be informed of the delay and provided with regular updates.

The COMPANY shall communicate the resolution to the complainant, either in writing or through an agreed-upon channel.

In case the grievance is found to be valid, appropriate corrective actions shall be taken promptly.

Step 4: Escalation and Appeal:

If the complainant is dissatisfied with the resolution provided, they may escalate the matter to a designated authority within the COMPANY.

The designated authority shall review the case independently and provide a final response within a reasonable time frame.

If the complainant remains dissatisfied with the resolution, they may have the option to approach relevant external authorities, as per applicable regulation.

The content of emails sent to us, including any attachments, may be processed for reasons of security and for monitoring compliance with office policy.

Email monitoring or blocking software may also be used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.

However, if we do receive a complaint from you by email, or in writing we will create a file containing the details of the complaint.

A complaint file would typically contain your name, contact details, the name of any other individuals involved in the complaint (where applicable), the reason for the complaint, correspondence relating to the complaint and details of the conclusion.

We will only use your Personal Data to process your complaint and to check on the level of service we provide. We do compile statistics on the number of complaints we receive and the reasons behind them but not in a format which contains any Personal Data.

We may need to disclose your identity if the complaint is about an employee. This is inevitable where, for example, the accuracy of a person's record is in dispute. Where you do not want your identity to be disclosed, we will try to respect that. However, it may not always be possible to handle a complaint on an anonymous basis.

We will keep your Personal Data, in a secure electronic complaint file, for one year from closure, in line with our retention policy. Access to it will be restricted according to the 'need to know' principle.

This document is an electronic record in terms of Information Technology Act, 2000 and rules there under as applicable and the amended provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000. This electronic record is generated by a computer system and does not require any physical or digital signatures.

Please read the following terms and conditions very carefully as your use of service is subject to your acceptance of and compliance with the following terms and conditions