Privacy Policy for Real Gold Enterprises / MarcCure

Last Updated: 22 September 2026

At MarcCure, operated by Real Gold Enterprises (“Company”, “MarcCure”, “we”, “us” or “our”), we respect the privacy of our customers, users and visitors and are committed to protecting personal data entrusted to us.

This Privacy Policy explains how we collect, receive, use, process, store, disclose and protect personal data when you access or use https://marccure.com/ (“Website”), create an account, purchase products, communicate with us, contact customer support or otherwise interact with MarcCure through digital or electronic means.

This Privacy Policy should be read together with our Terms & Conditions, Shipping Policy, Refund/Return Policy and other policies published on the Website.

1. ABOUT US

The Website is operated by:

Real Gold Enterprises / MarcCure
3072/41, Gola Market, Darya Ganj,
Delhi – 110002, India.
Email: support@marccure.com
Phone: +91-9076608818 / +91-8081343990
Toll-Free: 18008892101

MarcCure operates an online platform offering products including Ayurvedic medicines, food/dietary supplements, calcium supplements and other wellness-related products.

The categories of personal data collected and the manner in which such data is processed may depend upon the services, products and features used by you.

2. APPLICABLE DATA-PROTECTION AND OTHER INDIAN LAWS

This Privacy Policy is intended to operate in accordance with applicable Indian law, including, where applicable:

• The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
• The Digital Personal Data Protection Rules, 2025, including provisions as and when they come into force and become applicable;
• The Information Technology Act, 2000;
• Applicable provisions of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable and legally operative;
• The Consumer Protection Act, 2019;
• The Consumer Protection (E-Commerce) Rules, 2020, as amended;
• Applicable rules, regulations, notifications, circulars, directions and guidelines issued by the Ministry of Electronics and Information Technology (MeitY);
• Applicable cybersecurity directions issued by the Indian Computer Emergency Response Team (CERT-In); and
• Other applicable Indian laws, rules, regulations and governmental directions relating to privacy, data protection, cybersecurity and electronic commerce.

The Digital Personal Data Protection Act, 2023 provides the principal legal framework for the protection and processing of digital personal data in India, supplemented by the Digital Personal Data Protection Rules, 2025, which prescribe the relevant procedural and compliance requirements.

Where a particular provision of law is not applicable to a specific processing activity, such provision shall not be interpreted as imposing obligations beyond its statutory scope.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data collected or processed by MarcCure through:

1. The Website;
2. Customer accounts;
3. Online orders;
4. Customer-support communications;
5. Email communications;
6. Telephone communications relating to orders or customer support;
7. Website forms;
8. Cookies and similar technologies;
9. Promotional and marketing communications;
10. Feedback, reviews and other User Content; and
11. Other digital interactions with MarcCure.

This Privacy Policy does not automatically apply to websites, applications, payment gateways, courier services or other third-party platforms that are independently operated by third parties. Such third parties may have their own privacy policies.

4. PERSONAL DATA WE MAY COLLECT

Depending upon your interaction with MarcCure, we may collect the following categories of personal data.

4.1 Identification Information

This may include:

• Full name;
• Username;
• Account information;
• Billing information;
• Delivery information; and
• Other information voluntarily provided by you.

4.2 Contact Information

This may include:

• Email address;
• Telephone/mobile number;
• Postal address;
• Delivery address;
• Billing address; and
• Other contact details.

4.3 Account Information

If you create an account, we may collect:

• Username;
• Login-related information;
• Account preferences;
• Order history;
• Saved addresses; and
• Other information necessary to administer your account.

We do not intend to collect your password in plain text.

4.4 Order and Transaction Information

When you place an order, we may collect:

• Products ordered;
• Order number;
• Quantity;
• Delivery address;
• Billing information;
• Transaction details;
• Payment status;
• Invoice information;
• Refund information;
• Cancellation information; and
• Customer-service communications relating to the order.

Where payment is processed through an authorised third-party payment gateway, payment-card details may be processed directly by the payment service provider in accordance with its applicable policies and security practices.

4.5 Communications

If you contact us, we may collect:

• Your name;
• Email address;
• Telephone number;
• Contents of your communication;
• Attachments voluntarily submitted by you;
• Order information; and
• Information reasonably necessary to respond to your request or complaint.

4.6 Technical and Device Information

When you access the Website, certain technical information may be automatically collected, including:

• Internet Protocol (“IP”) address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Date and time of access;
• Referring webpage;
• Pages visited;
• Approximate interaction information;
• Website usage information; and
• Technical error or diagnostic information.

We may use this information to maintain security, administer the Website, analyse performance and improve our services.

4.7 Cookies and Similar Technologies

We may use cookies, pixels, web beacons, local storage and similar technologies to:

• Remember preferences;
• Maintain sessions;
• Support account functionality;
• Understand Website usage;
• Improve Website performance;
• Analyse traffic;
• Prevent fraud and misuse; and
• Support marketing activities, where legally permitted.

Further information is provided in the Cookies section below.

5. INFORMATION PROVIDED VOLUNTARILY BY YOU

You may voluntarily provide personal data when you:

1. Create an account;
2. Place an order;
3. Contact customer support;
4. Request information;
5. Subscribe to communications;
6. Submit a review;
7. Submit feedback;
8. Participate in promotional activities;
9. Communicate with us through telephone, email or other permitted channels; or
10. Otherwise interact with MarcCure.

You should ensure that the personal data provided by you is accurate and up to date.

6. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

We may process personal data for legitimate and lawful purposes, including:

6.1 Providing Products and Services

We may process personal data to:

• Process and fulfil orders;
• Deliver products;
• Provide customer support;
• Manage accounts;
• Process returns and refunds;
• Communicate order updates; and
• Provide services requested by you.

6.2 Payment Processing

We may use relevant information to:

• Process payments;
• Verify transactions;
• Process refunds;
• Detect fraudulent transactions; and
• Maintain transaction records.

Payment processing may be carried out through third-party payment service providers.

6.3 Customer Support and Grievance Redressal

We may process information to:

• Respond to questions;
• Resolve complaints;
• Investigate defective or damaged products;
• Handle returns and refunds;
• Investigate disputes; and
• Comply with applicable consumer-protection requirements.

6.4 Website Operation

We may process information to:

• Operate and maintain the Website;
• Troubleshoot technical problems;
• Improve Website functionality;
• Understand Website usage;
• Maintain security; and
• Prevent misuse.

6.5 Fraud Prevention and Security

Personal data may be processed to:

• Detect suspicious transactions;
• Prevent fraud;
• Identify unauthorised account activity;
• Protect customers and the Company;
• Investigate security incidents; and
• Protect the integrity of the Website.

6.6 Legal and Regulatory Compliance

We may process and retain information where necessary to:

• Comply with applicable Indian law;
• Respond to lawful requests from government authorities;
• Comply with court orders;
• Comply with regulatory requirements;
• Maintain legally required records;
• Investigate suspected unlawful activity; and
• Establish, exercise or defend legal claims.

6.7 Marketing and Promotional Communications

Where permitted by applicable law and based on the appropriate lawful basis, we may use your contact information to send:

• Product information;
• Promotional offers;
• Newsletters;
• Special offers;
• New-product announcements; and
• Other marketing communications.

You may unsubscribe from promotional communications through the mechanism provided in the communication or by contacting us.

Withdrawal of consent for marketing communications will not necessarily affect processing required for fulfilling an order or complying with law.

7. LAWFUL BASIS FOR PROCESSING

MarcCure shall process personal data only in accordance with applicable law.

Depending upon the circumstances, processing may be based on:

1. Your consent;
2. Processing necessary for providing goods or services requested by you;
3. Compliance with applicable legal obligations;
4. Responding to lawful requests or exercising legal rights;
5. Preventing fraud, misuse or security threats; or
6. Other grounds recognised under applicable Indian law.

Where processing is based on consent, consent shall be obtained in the manner required by applicable law.

The DPDP Act and the Digital Personal Data Protection Rules, 2025 establish requirements concerning notice, consent, withdrawal and rights of Data Principals, subject to their respective commencement and applicability.

8. NOTICE AND CONSENT

Where consent is required, MarcCure shall seek consent in accordance with applicable law.

The information provided to you regarding processing of personal data shall be presented in clear and reasonably understandable language.

Where required under the DPDP framework, the notice shall provide information concerning:

1. The personal data proposed to be collected;
2. The purpose for processing;
3. The goods, services or uses enabled by such processing;
4. Mechanisms for withdrawing consent;
5. Mechanisms for exercising applicable rights; and
6. Mechanisms for raising complaints.

The Digital Personal Data Protection Rules, 2025 specifically provide for a clear, standalone and understandable notice containing an itemised description of personal data and the purposes of processing, along with mechanisms for withdrawal and exercising rights.

9. WITHDRAWAL OF CONSENT

Where processing is based on consent, you may withdraw your consent in accordance with applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Withdrawal of consent may also affect our ability to provide certain products or services where the relevant processing is necessary for those services.

Where applicable, we shall provide a mechanism for withdrawing consent that is reasonably accessible and not unnecessarily burdensome.

10. SHARING AND DISCLOSURE OF PERSONAL DATA

We may disclose personal data to third parties where necessary and legally permitted, including:

10.1 Service Providers

We may share relevant information with service providers that assist us with:

• Website hosting;
• Technology services;
• Payment processing;
• Logistics and delivery;
• Customer support;
• Communications;
• Analytics;
• Cybersecurity;
• Fraud prevention;
• Marketing services; and
• Technical maintenance.

Such parties may process personal data only for authorised purposes and subject to applicable contractual, legal or regulatory requirements.

10.2 Payment Service Providers

Payment-related information may be shared with payment gateways and financial service providers to process transactions, refunds and payment-related disputes.

10.3 Logistics and Delivery Partners

We may share information such as:

• Name;
• Delivery address;
• Telephone number; and
• Order details.

This information may be shared with logistics and courier providers to fulfil and deliver your order.

10.4 Government and Regulatory Authorities

We may disclose personal data where required or authorised by law, including in response to:

• Court orders;
• Government directions;
• Regulatory requests;
• Law-enforcement requirements;
• Tax requirements;
• Consumer-protection proceedings; or
• Other legally valid requests.

10.5 Legal and Professional Advisers

Where necessary, information may be shared with lawyers, auditors, accountants, insurers or other professional advisers for legitimate business, legal or regulatory purposes.

11. THIRD-PARTY LINKS AND SERVICES

The Website may contain links to third-party websites, applications, payment gateways, social-media platforms or other services.

Once you leave our Website or interact directly with a third-party service, that third party's privacy policy may apply.

MarcCure does not control the privacy practices of independent third parties and cannot guarantee their policies or security practices.

You should review the applicable privacy policy before providing personal data to any third-party service.

12. PAYMENT INFORMATION

MarcCure may use third-party payment processors to facilitate online payments.

We do not ordinarily store complete credit-card, debit-card or banking credentials on our own systems where such information is processed directly by the payment service provider.

Payment processing may be subject to:

• The Payment and Settlement Systems Act, 2007;
• Applicable Reserve Bank of India (RBI) directions;
• Applicable payment-security requirements; and
• The terms and privacy policy of the relevant payment provider.

Customers should not provide complete payment-card credentials through email, telephone or customer-support communications unless specifically required by a secure payment provider.

13. DATA RETENTION

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, unless a longer retention period is required or permitted by applicable law.

Retention periods may depend upon:

1. The nature of the information;
2. The purpose for which it was collected;
3. The duration of the customer relationship;
4. Accounting and tax requirements;
5. Consumer-protection requirements;
6. Legal claims or disputes;
7. Fraud-prevention requirements;
8. Regulatory obligations; and
9. Applicable statutory limitation periods.

When personal data is no longer required and there is no legal requirement to retain it, we shall take reasonable steps to delete, anonymise or otherwise appropriately dispose of it, subject to applicable law.

14. DATA SECURITY

MarcCure shall implement reasonable technical and organisational measures appropriate to the nature of the personal data and the risks associated with its processing.

Security measures may include:

1. Access controls;
2. Authentication mechanisms;
3. Encryption or other appropriate security measures where suitable;
4. Monitoring and logging;
5. Secure hosting arrangements;
6. Employee and service-provider access controls;
7. Backup and recovery mechanisms; and
8. Measures designed to detect and respond to security incidents.

No electronic transmission or storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.

15. PERSONAL DATA BREACHES

In the event of a personal-data breach, MarcCure shall take appropriate steps in accordance with applicable law.

Depending upon the nature and severity of the breach, this may include:

1. Investigating and containing the incident;
2. Taking steps to mitigate potential harm;
3. Maintaining appropriate records;
4. Notifying relevant authorities where required;
5. Notifying affected individuals where required; and
6. Implementing corrective measures.

Where applicable, breach-related obligations shall be governed by the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and applicable directions issued by competent authorities.

16. CHILDREN'S PERSONAL DATA

MarcCure does not knowingly seek to collect personal data from children except where such processing is permitted by applicable law and appropriate safeguards are implemented.

The processing of children's personal data shall be subject to the requirements of applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules.

Where required, appropriate parental or lawful guardian consent and safeguards shall be implemented.

We do not knowingly use children's personal data for targeted advertising or other activities prohibited by applicable law.

If you believe that personal data relating to a child has been provided to us in violation of applicable law, please contact us so that we can investigate and take appropriate action.

17. COOKIES AND TRACKING TECHNOLOGIES

MarcCure may use cookies and similar technologies.

Cookies may be used for:

1. Essential Website functionality;
2. Login and session management;
3. Remembering preferences;
4. Analytics;
5. Security;
6. Performance monitoring; and
7. Marketing, where legally permitted.

Where required by applicable law, we shall provide appropriate notice and obtain consent before using non-essential cookies or similar technologies.

You may also manage cookies through your browser settings.

Disabling certain cookies may affect Website functionality.

18. LOG FILES AND ANALYTICS

Our servers or third-party service providers may automatically collect technical information such as:

• IP address;
• Browser type;
• Device information;
• Operating system;
• Referring pages;
• Pages visited;
• Date and time of access; and
• Technical information relating to Website interactions.

This information may be used for:

• Security;
• Website administration;
• Performance analysis;
• Troubleshooting;
• Analytics; and
• Service improvement.

Where such information constitutes personal data under applicable law, it shall be processed in accordance with applicable data-protection requirements.

19. MARKETING COMMUNICATIONS

Where permitted by applicable law, we may send marketing communications through:

• Email;
• SMS;
• Telephone;
• WhatsApp or other messaging platforms;
• Website notifications; or
• Other permitted communication channels.

You may opt out of promotional communications by:

1. Using the unsubscribe mechanism provided in the communication;
2. Contacting customer support; or
3. Using another mechanism made available by MarcCure.

You may continue to receive essential service communications, such as:

• Order confirmations;
• Payment notifications;
• Delivery updates;
• Account-security alerts;
• Refund communications; and
• Legally required notices.

20. USER REVIEWS AND USER-GENERATED CONTENT

If you submit a review, photograph, comment, testimonial or other User Content, we may process the personal data contained in that submission for purposes of displaying, moderating, administering or managing the relevant content.

Please do not submit sensitive or unnecessary personal information in public reviews.

Where User Content is published publicly, other Website visitors may be able to view the information contained in it.

You should therefore exercise appropriate caution before submitting personal information in a public review or comment.

21. SENSITIVE OR HEALTH-RELATED INFORMATION

MarcCure may receive information from customers that relates to health, medical conditions, allergies, medication or other health-related matters if a customer voluntarily provides such information during customer support or other communications.

Customers should avoid providing unnecessary health information through general contact channels.

Where such information constitutes personal data protected under applicable law, MarcCure shall process it only as permitted by applicable law and for the relevant legitimate purpose.

MarcCure does not intend to provide medical diagnosis through the Website.

22. CROSS-BORDER DATA TRANSFERS

Where personal data is transferred outside India, such transfer shall be undertaken in accordance with applicable Indian law.

The Company may use third-party technology, hosting, payment, analytics or service providers whose infrastructure or processing arrangements may involve locations outside India.

Where applicable, cross-border transfers shall be subject to the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and applicable governmental restrictions or requirements.

23. YOUR RIGHTS AS A DATA PRINCIPAL

Subject to the applicable provisions, commencement and conditions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you may have rights including:

23.1 Right to Access Information

You may have the right to obtain information regarding personal data processed by MarcCure, subject to applicable law.

23.2 Right to Correction

You may request correction or updating of inaccurate or incomplete personal data, subject to applicable law.

23.3 Right to Erasure

You may request erasure of personal data where permitted under applicable law and subject to lawful retention requirements.

23.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent in accordance with applicable law.

23.5 Right to Grievance Redressal

You may raise a grievance regarding processing of your personal data through our designated grievance mechanism.

23.6 Right to Nominate

Where applicable under the DPDP framework, a Data Principal may have the right to nominate another individual to exercise rights in accordance with applicable law.

The precise scope, conditions and procedure for exercising these rights shall be governed by the DPDP Act, 2023 and applicable rules.

24. HOW TO EXERCISE YOUR DATA RIGHTS

To exercise applicable rights or raise a privacy-related complaint, contact:

Privacy / Grievance Contact
Real Gold Enterprises / MarcCure
3072/41, Gola Market, Darya Ganj,
Delhi – 110002, India.
Email: support@marccure.com
Phone: +91-9076608818 / +91-8081343990

Please include sufficient information to enable us to identify your account or request.

We may request reasonable information necessary to verify your identity before processing certain requests, where permitted by law.

25. GRIEVANCE REDRESSAL

MarcCure shall maintain an appropriate mechanism for receiving and addressing privacy and consumer grievances.

For consumer grievances, the Website shall comply, where applicable, with the Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020.

The Consumer Protection (E-Commerce) framework requires e-commerce entities to provide a grievance mechanism and display relevant grievance-officer information.

Grievance Officer
Name: [Insert Grievance Officer Name]
Designation: Grievance Officer
Email: [Insert Grievance Officer Email]
Address: 3072/41, Gola Market, Darya Ganj, Delhi – 110002, India.
Customer Support: support@marccure.com

26. THIRD-PARTY ADVERTISING AND MARKETING PARTNERS

Where MarcCure uses third-party advertising, analytics or marketing service providers, such providers may process limited information in accordance with their contractual arrangements and applicable law.

We shall take reasonable steps to ensure that third-party processing is undertaken for authorised purposes.

Where required, appropriate consent or other lawful basis shall be obtained before personal data is used for targeted advertising or similar activities.

27. SOCIAL MEDIA

MarcCure may maintain or operate accounts on third-party social-media platforms.

If you interact with MarcCure through such platforms, the relevant platform may independently collect and process your personal data under its own privacy policy.

MarcCure does not control the privacy practices of independent social-media platforms.

28. DATA OF BUSINESS CUSTOMERS AND SERVICE PROVIDERS

Where you interact with MarcCure in a professional or business capacity, we may collect business contact information such as:

• Name;
• Designation;
• Organisation;
• Business email;
• Business telephone number;
• Correspondence; and
• Transaction-related information.

Such information shall be processed in accordance with applicable law.

29. DATA RELATING TO ORDERS AND LEGAL RECORDS

We may retain information relating to orders, invoices, payments, refunds, complaints and communications where necessary for:

1. Accounting;
2. Taxation;
3. Auditing;
4. Consumer protection;
5. Fraud prevention;
6. Legal claims;
7. Regulatory compliance; or
8. Other legally permitted purposes.

Such retention shall be subject to applicable statutory and regulatory requirements.

30. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

1. Changes in applicable law;
2. Changes in our products or services;
3. Changes in data-processing practices;
4. Changes in technology;
5. Regulatory requirements; or
6. Improvements to our privacy practices.

The updated Privacy Policy will be published on the Website with a revised “Last Updated” date.

Where applicable law requires notice or consent for a material change, we shall provide such notice or obtain such consent in accordance with applicable law.

31. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Without limiting the foregoing, the processing of personal data through the Website may be governed, where applicable, by:

• The Digital Personal Data Protection Act, 2023;
• The Digital Personal Data Protection Rules, 2025;
• The Information Technology Act, 2000;
• Applicable rules and regulations concerning information security and electronic records;
• The Consumer Protection Act, 2019;
• The Consumer Protection (E-Commerce) Rules, 2020, as amended; and
• Applicable notifications, directions, rules and regulations issued by competent Indian authorities.

In the event of a conflict between this Privacy Policy and a mandatory provision of applicable law, the mandatory provision shall prevail.

32. CONTACT INFORMATION

For privacy-related questions, requests or complaints, please contact:

Real Gold Enterprises / MarcCure
3072/41, Gola Market, Darya Ganj,
Delhi – 110002, India.
Email: support@marccure.com
Phone: +91-9076608818 / +91-8081343990
Toll-Free: 18008892101

Privacy / Grievance Officer
Name: [Insert Privacy / Grievance Officer Name]
Designation: Grievance Officer / Privacy Contact
Email: [Insert Privacy / Grievance Officer Email]
Postal Address: 3072/41, Gola Market, Darya Ganj, Delhi – 110002, India.

© 2026 Real Gold Enterprises / MarcCure. All Rights Reserved.