Government & Law-Enforcement Data Request Policy
Effective: 22 October 2026
This policy explains how Sebretail India Private Limited ("Sebretail", "we"), which operates MarCat, handles requests from government bodies, regulators, courts and law-enforcement agencies ("public authorities") for personal data we hold. It covers all MarCat services and all personal data we process, including data we receive from Meta through the WhatsApp Business Platform.
It sits alongside our Privacy Policy (Section 6) and our Terms of Service (Section 11).
1. Who handles requests
All requests from public authorities go to our Grievance Officer, Swarbhanu Gupta, Director, Sebretail India Private Limited, at privacy@marcat.in. No one else at Sebretail may disclose personal data in response to such a request.
2. Review of legality
We disclose personal data only when a request is legally valid under Indian law. Before acting on any request we check that:
- it is in writing and comes from an authority with the legal power to make it;
- it cites the law it relies on (for example a court order, a summons, or a notice under a specific statute); and
- it identifies the data sought with enough precision to answer it.
Informal, verbal or unsupported requests are refused. Where a request concerns data a retailer controls (MarCat processes retailers' customer data on their behalf), we direct the authority to the retailer unless the law requires us to respond directly.
3. Challenging unlawful or overbroad requests
If a request appears unlawful, unclear or broader than the law allows, we ask the authority to clarify or narrow it, and where appropriate we object to or challenge it through the legal means available to us. Where the law allows, we notify the affected retailer or individual before disclosing, so they have a reasonable opportunity to object.
4. Data minimisation
When we must disclose, we disclose only the minimum personal data needed to comply with the specific request: the specific people, time period and data categories it lawfully covers, and nothing more.
5. Records of requests
We keep a record of every request we receive, including the requesting authority, the date, the legal basis cited, the data requested, our assessment, our response, the data disclosed (if any) and the people involved in the decision. We keep these records for at least 7 years.
6. National-security requests
We have received no requests from public authorities for personal data on national-security grounds. We will update this page if that changes, to the extent the law allows.
7. Contact
Questions about this policy: privacy@marcat.in.
Sebretail India Private Limited, Shop G.F-06, Prahladnagar, B/H Titanium City Center, Jivraj Park, Ahmedabad, Gujarat 380051, India.