1) Who is the Data Controller?

Rey Del Mercado Online Services (Mangal Mall)

2/673 A, K.S.A Rajadurai Nagar, Near Vilampatti Road, Sivakasi - 626124

Contact: [email protected] | 7867891000

2) Scope of this Notice

This notice covers personal data processed when you browse our website, create an account, plan events, book venues or vendors, send invitations, manage guest lists/RSVPs, use microsites, or contact support.

3) What Data We Collect

We do not store full payment card numbers on our servers; payments are handled by our payment processor.

4) Purposes & Legal Bases

• Contract – to create and manage your account, provide event planning tools, process bookings, and deliver support.
• Legitimate Interests – to improve services, prevent fraud/abuse, ensure security, and personalise basic experience.
• Consent – for analytics/marketing cookies, email/SMS marketing, contact sync, or other optional features.
• Legal Obligation – to comply with tax, accounting, and other mandatory requirements.

5) Cookies & Similar Technologies

We use:

• Strictly Necessary – required for the site to function.
• Analytics – only with your consent (e.g., GA4). IP anonymisation is enabled where supported.
• Marketing – only with your consent (e.g., remarketing pixels).

6) Sharing Your Data

We share personal data with trusted processors who help us operate Mangal Mall, such as:

• Hosting and infrastructure providers
• Email/SMS/OTP delivery providers
• Payment processors (for billing and fraud prevention)
• Analytics and performance tools (only when consented)
• Customer support tools

We require processors to protect your data and process it only under our instructions.

7) International Transfers

Where data is transferred outside the EU/EEA/UK, we implement appropriate safeguards (e.g., Standard Contractual Clauses) and technical measures (encryption, access controls).

8) Data Retention

We keep personal data only as long as needed for the purposes described above, including to comply with legal, accounting, or reporting requirements. You can request deletion where applicable (see “Your Rights”).

9) Your Rights (GDPR)

• Access, rectification, and erasure
• Restriction or objection to processing
• Data portability
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with a supervisory authority in the EU/UK

To exercise rights, contact us at [email protected].

10) Children’s Data

Our services are not directed to children where parental consent is required under applicable law.

11) Changes to this Notice

We may update this page. Material changes will be highlighted here with a new “Last updated” date.