PRIVACY & STEWARDSHIP

Global Data Privacy Standard: MOSI New York

Effective Date: July 2026

MOSI operates on a philosophy of “One Line, One Global Standard.” Regardless of where you reside, your data is treated with the same precision we apply to our tailoring.

1. Our Global Compliance Commitment

We align our data practices with the following frameworks:

• European Union, Germany & Italy: General Data Protection Regulation (GDPR).
• India: Digital Personal Data Protection Act (DPDP), 2023.
• Australia: Privacy Act 1988 (Australian Privacy Principles).
• United States: State-level Consumer Privacy Acts (e.g., CCPA/CPRA).

2. Your Global Rights

Regardless of your location, we guarantee the following fundamental rights:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete data.
• Right to Erasure (The “Right to be Forgotten”): You may request the deletion of your account and personal data, subject to legal record-keeping requirements in your territory (e.g., tax/invoicing).
• Right to Object & Restrict: You may opt out of marketing communications or restrict the processing of your data for specific purposes.
• Right to Portability: You may request your data in a structured, commonly used, and machine-readable format.

3. Cross-Border Data Transfers

As a brand headquartered in the USA with global operations, your data may be processed in the United States or other jurisdictions. By using our services, you acknowledge that your data may be transferred outside your home country. We utilise standard contractual clauses (SCCs) and robust encryption to ensure your data receives the same protection regardless of its physical location.

4. International Grievance & Data Protection

To exercise your rights, or if you have concerns regarding how we handle your information, please contact our dedicated team. We commit to responding to all privacy-related inquiries within the timeframes mandated by your local law (e.g., 30 days for GDPR, or as stipulated by the Indian DPDP Act).

• Primary Contact:singhtexa@gmail.com
• Data Protection/Grievance Officer:Monica/ Chief Officer, Operations
• Regional Specifics:
  • For Global Customers:Please reach out to the mentioned email Address and give us 48-72 hours to get back to you with a solution.

5. Cookies & Technical Integrity

We use cookies to enhance your experience. You are presented with a cookie consent banner upon entering our site. You may manage your preferences at any time. We do not sell your personal information for profit; your data remains within the MOSI ecosystem.

Implementation Strategy for Global Compliance

To maintain this standard across your five territories, apply these operational rules:

1. The “Preference Centre” (Technical): Do not force a single global cookie banner. Use a geo-IP-aware script that presents the highest standard of control (typically the GDPR-compliant version) to all users. This ensures that even if you aren’t legally required to show a banner in one territory, you are providing a gold-standard experience for your brand.
2. Global Data Minimisation: Because the GDPR and DPDP have strict “purpose limitation” clauses, never collect data you don’t need. If you don’t need a birth date to ship a dress, don’t ask for it. This drastically reduces your legal risk in every jurisdiction.
3. Local Legal Representatives:
   • EU/Germany/Italy: Ensure your terms reference the “Data Controller” (MOSI New York).
   • India: You must specifically list your “Grievance Officer” details as discussed previously. This satisfies the “Contact Person” requirement for both the DPDP and the 2021 IT Rules.
   • Australia/USA: Ensure your policy includes a clear link to your “Do Not Sell/Share My Info” process (if applicable) and explicitly states how you handle third-party service providers (like payment processors).