Privacy Policy
Effective date: 16 October 2026 · Last reviewed: 16 October 2026
1. Who We Are
This Privacy Policy applies to miryalan.com and the sites, applications and portals operated under it, including all Miryalan Dynasty divisions (Avinya, Indrajala, Prakrithi, Pranika, SiriX, Myriad, MeghVahan, Mertis) and their registration, KYC and dashboard systems (collectively, the "Platform"), which are owned and operated by Miryalan Dynasty Pvt. Ltd. ("Miryalan", "we", "us", "our"), headquartered at Mukundapuram, Telangana, India, with an office in Chennai, Tamil Nadu. This Policy explains what personal data we collect, why we collect it, how it is used, stored and protected, and the rights available to you under applicable Indian law, principally the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
2. Personal Data We Collect
We collect only the data reasonably necessary to provide our services. Depending on how you use the Platform, this may include:
- Identity & contact data — name, email address, mobile number, postal address.
- Account credentials — username and password (stored using industry-standard one-way hashing; we never store plain-text passwords).
- Business/KYC data — GSTIN, PAN, company registration documents, entity ID (for foreign entities), submitted during Myriad buyer/seller and SiriX company registration.
- Investor data — portfolio details and government-issued identity documents, submitted during SiriX investor registration.
- Verification data — one-time passwords (OTP) sent to your email or mobile to confirm account ownership.
- Financial & product data — company financials, product listings and certification records submitted to Mertis, Myriad and SiriX.
- Communications — messages you send us through contact forms, RFQs or the site chatbot.
- Usage data — pages visited, visit counts, device/browser type and approximate location inferred from IP address, collected via our visitor-counter and standard server logs.
- Cookies & similar technologies — see our Cookies Policy for details.
We do not knowingly collect sensitive personal data beyond what is described above, and we do not collect special-category data (e.g., health, biometric, or genetic data) unless a specific division feature explicitly requests it with your separate, informed consent.
3. Why We Collect It (Purpose & Legal Basis)
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, buyer/seller/investor/vendor/client/employee dashboards | Performance of a contract with you; your consent |
| KYC verification (GSTIN/PAN/ID/OTP) for Myriad, SiriX and Mertis registrations | Legal/regulatory compliance; your consent |
| Responding to enquiries, RFQs and support requests | Legitimate interest in operating our business; your consent |
| Improving the Platform, measuring visits, and site security | Legitimate interest |
| Sending service updates, OTPs and transactional messages | Performance of a contract; consent |
| Marketing communications (only if you opt in) | Consent, which you may withdraw at any time |
4. How We Share Your Data
We do not sell your personal data. We may share it only with:
- Employees and personnel of Miryalan Dynasty and its divisions who need it to perform their role, under confidentiality obligations.
- Service providers who process data on our behalf (e.g., hosting, SMS/email OTP delivery, payment processing) under contractual data-protection terms.
- Government or regulatory authorities, where required by law, court order, or to establish, exercise or defend legal claims.
- A successor entity in the event of a merger, acquisition or restructuring of Miryalan Dynasty or a division, subject to this Policy continuing to apply.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, tax, accounting or regulatory requirements (including KYC record-keeping obligations), or to resolve disputes. When data is no longer required, we securely delete or anonymise it.
6. Data Security
We apply reasonable technical and organisational security measures appropriate to the sensitivity of the data involved, including access controls, encrypted password storage, and restricted administrative access. No method of transmission or storage is 100% secure, and while we work to protect your data, we cannot guarantee absolute security.
7. Children's Data — Pranika
Pranika publishes information about our child-welfare and education programmes. Where Pranika content features children (e.g., programme photos or stories), it is published only with the verified consent of a parent or legal guardian. We do not knowingly collect personal data directly from children under 18 through the Platform; any registration or account-creation flow on the Platform is intended for adults (18+) acting on their own behalf or on behalf of a registered business or investment entity. If you believe a child has provided us with personal data without appropriate consent, please contact us using the details in Section 11 and we will act promptly to remove it.
8. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data, subject to our legal/regulatory retention obligations.
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
- Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
- Lodge a grievance with our Grievance Officer (Section 11), and thereafter with the Data Protection Board of India if unresolved.
9. Cross-Border Data Transfer
Where we use service providers located outside India (for example, cloud hosting), your data may be processed outside India. In such cases we require providers to maintain security and confidentiality standards consistent with this Policy and applicable law.
10. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be indicated by updating the "Effective date" above. Continued use of the Platform after a change constitutes acceptance of the revised Policy.
11. Grievance Officer & Contact
For any privacy questions, requests or grievances, please contact:
Grievance Officer, Miryalan Dynasty Pvt. Ltd.
Email: privacy@miryalan.com
Registered office: Mukundapuram, Telangana, India
This Policy is provided for general informational purposes and does not constitute legal advice. We recommend Miryalan Dynasty Pvt. Ltd. have this Policy reviewed by qualified legal counsel prior to go-live, and update the Grievance Officer's name and contact details accordingly.