GDPR Data Protection

Last updated: 7 October 2026

Mirthuni Apparel Sourcing Service (“Mirthuni Apparel”, “we”, “us” or “our”) is committed to handling personal information responsibly and transparently.

This GDPR data protection page explains how we approach the protection of personal data, the rights available to individuals under applicable data protection laws, and how visitors, prospective buyers, customers, suppliers and other persons who communicate with us may exercise those rights

This page should be read together with our Privacy Policy and Cookie Policy.

1. About Mirthuni Apparel

Mirthuni Apparel Sourcing Service
41/121, Sixth Street
Amarjothi AS Nagar
Kangeyam Road
Tiruppur – 641604
Tamil Nadu, India

Email: enquiry@mirthuniapparel.com
WhatsApp: +91 9940675791
Website: mirthuniapparel.com

Mirthuni Apparel Sourcing Service is a partnership concern based in Tiruppur, Tamil Nadu, India and is managed by Mr. Raghuraman Shantharam.

Questions or requests concerning personal data may be sent to the email address above.

2. Scope of This Page

This page applies to personal information processed through or in connection with mirthuniapparel.com and communications with Mirthuni Apparel.

This may include information provided when a person:

submits an enquiry or contact form;
requests information about apparel manufacturing or sourcing support;
communicates with us by email, WhatsApp or other business communication channels;
provides product, company, shipping or project information;
interacts with website analytics, security or consent technologies; or
otherwise establishes or seeks to establish a business relationship with us.

Separate websites or services operated or maintained in connection with our wider business activities may have their own or supplementary privacy and data protection notices.

3. Personal Data We May Process

Depending on the nature of the interaction, personal data may include:

name;
email address;
telephone or WhatsApp number;
company or brand name;
country or location information;
enquiry and correspondence information;
product and project requirements;
shipping or delivery information where relevant;
IP address and technical device information;
browser and website interaction information; and
other information voluntarily provided to us.

We seek to process only information reasonably relevant to the purpose for which it was provided or collected.

4. Purposes of Processing

Personal data may be processed to:

respond to enquiries;
communicate with prospective buyers, customers and suppliers;
evaluate apparel development, sampling or production requirements;
prepare quotations or commercial proposals;
coordinate sampling, production, quality control and shipment activities;
maintain business records and correspondence;
operate, maintain and secure our website;
understand website usage and performance;
prevent misuse, fraud or security incidents;
comply with legal, regulatory, tax, customs or other applicable obligations; and
establish, exercise or defend legal claims where necessary.

We do not operate online payment processing directly through mirthuniapparel.com.

5. Lawful Bases for Processing

Where the General Data Protection Regulation (GDPR), UK GDPR or similar data protection requirements apply, personal data may be processed on one or more appropriate lawful bases.

These may include:

Consent — where an individual has given valid consent for a particular processing activity.

Contractual necessity — where processing is necessary to take steps requested before entering into a contract or to perform contractual obligations.

Legal obligation — where processing is required to comply with applicable law or regulatory requirements.

Legitimate interests — where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by the rights and interests of the individual.

The applicable lawful basis may differ depending on the particular processing activity.

6. Website Analytics and Similar Technologies

Mirthuni Apparel may use website analytics, performance, security and similar technologies to understand website usage, maintain website security and improve website performance.

Services currently used may include technologies associated with:

Google Analytics;
Microsoft Clarity;
Cloudflare; and
website hosting, content-delivery and security infrastructure.

Some of these services may process technical information such as IP address, browser information, device information, page interactions and approximate geographic information.

Further information is provided in our Cookie Policy and Privacy Policy.

7. International Data Processing

Mirthuni Apparel is based in India and works with international buyers, suppliers and service providers.

Personal information submitted by individuals located outside India may therefore be transferred to, accessed from or processed in India or other jurisdictions where relevant service providers operate.

Where applicable data protection laws require safeguards for international transfers, appropriate contractual, organizational or other lawful safeguards should be used according to the circumstances and the services involved.

8. Data Sharing

We may share personal information with third parties where reasonably necessary for legitimate business operations or legal requirements.

Depending on the circumstances, these may include:

website hosting and infrastructure providers;
analytics and security providers;
email and communication providers;
manufacturing and sourcing partners where necessary for a project;
logistics, freight and shipping providers;
professional advisers;
government, customs, regulatory or law-enforcement authorities where legally required; and
other service providers necessary to fulfil an authorised request or business transaction.

We do not sell personal information to third parties as a business activity.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, including business communication, contractual, accounting, legal, dispute-resolution and regulatory requirements.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably required, it may be deleted, anonymised or otherwise securely disposed of, subject to applicable legal and operational requirements.

10. Data Security

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss or misuse.

These measures may include website security controls, access restrictions, secure hosting infrastructure, HTTPS encryption, security monitoring, backups and other appropriate safeguards.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Your Data Protection Rights

Depending on the law applicable to an individual and the circumstances of the processing, a person may have rights including:

Right of access — to request information about personal data we process about you.
Right to rectification — to request correction of inaccurate or incomplete personal data.
Right to erasure — to request deletion of personal data in circumstances where the applicable law provides that right.
Right to restriction — to request restriction of certain processing activities.
Right to object — to object to processing based on certain lawful grounds, including legitimate interests where applicable.
Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format where the legal requirements for portability are satisfied.
Right to withdraw consent — where processing is based on consent, to withdraw that consent without affecting processing lawfully undertaken before withdrawal.
Right to lodge a complaint — to contact the competent data protection supervisory authority where applicable.

These rights are not absolute and may be subject to statutory exceptions and verification requirements.

12. Exercising Your Rights

To make a privacy or data protection request, contact:

Email: enquiry@mirthuniapparel.com

Please clearly state the nature of your request and provide sufficient information for us to identify the relevant records.

We may request reasonable information to verify identity before disclosing, modifying or deleting personal data. This is intended to protect personal information from unauthorized access or fraudulent requests.

We will respond to valid requests within the timeframe required by the applicable data protection law.

13. EU and EEA Residents

Where the EU General Data Protection Regulation applies to our processing of an individual’s personal data, individuals may exercise the rights available under the GDPR subject to its applicable conditions and exceptions.

Individuals may also have the right to lodge a complaint with the competent supervisory authority in their EU or EEA country.

14. United Kingdom Residents

Where the UK GDPR and Data Protection Act 2018 apply, individuals may exercise applicable data protection rights and may have the right to raise concerns with the United Kingdom Information Commissioner’s Office or another competent authority.

15. Children’s Personal Data

Our website and apparel sourcing services are primarily intended for businesses, brands, importers, retailers and other commercial users.

We do not knowingly seek to collect personal information directly from children through our business enquiry processes.

If we become aware that personal information has been submitted by a child in circumstances requiring parental or guardian authorization, appropriate steps may be taken in accordance with applicable law.

16. Automated Decision-Making

Mirthuni Apparel does not currently use personal data submitted through its website to make solely automated decisions that produce legal effects or similarly significant effects on individuals.

Website analytics, security systems, spam prevention and other automated technologies may nevertheless process technical information to support website operation and security.

17. Third-Party Services and Websites

Our website may contain links to external websites, social networks, service providers or other third-party resources.

Their processing of personal information is governed by their own privacy and data protection practices. Mirthuni Apparel does not control the independent privacy practices of external third parties.

18. Changes to This Page

We may update this GDPR and Data Protection information when our website, business practices, service providers or applicable legal requirements change.

The date shown at the top of this page indicates the latest revision.

19. Contact

For questions concerning this GDPR and Data Protection page or requests concerning personal information, contact: