Effective 6 October 2026 · v2
Last Updated: 6 October 2026
At Rarita ("Rarita", "we", "our", or "us"), we are committed to protecting your privacy and handling your personal information responsibly. Rarita is a collectibles and rare-items marketplace that enables users to buy, sell, trade, participate in auctions, engage with communities, and access related services through our website, mobile application, and associated platforms (collectively, the "Platform").
This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the Platform.
By accessing or using Rarita, you acknowledge that you have read, understood, and agree to this Privacy Policy.
This Privacy Policy applies to all users of Rarita, including:
This Policy governs all information collected through our Platform, customer support channels, verification processes, and associated services.
When you register for an account, we may collect:
To maintain a trusted marketplace and comply with applicable laws, we may collect:
Such information may be processed through authorized third-party verification providers.
We collect information relating to your activity on the Platform, including:
To support authenticity and trust within the marketplace, we may collect:
These records may be used for transaction validation, dispute resolution, fraud prevention, and authenticity verification.
When you participate in community features, we may collect:
Content shared through community features may be visible to other users depending on Platform functionality.
Rarita does not collect, hold, or transfer payments for orders between buyers and sellers. Buyers pay sellers directly using the payment details provided by the seller and upload proof of payment on the Platform. The seller then confirms receipt of payment and ships the order.
When transactions occur, we may collect:
Payments made to Rarita, such as for paid features on the Platform, may be processed by third-party payment providers. Rarita does not store complete card details, UPI PINs, or net banking login credentials.
We automatically collect:
We may collect records of:
We collect information in the following ways:
Directly From You
When you:
Automatically
Through:
From Third Parties
Including:
We use your information to:
Operate the Platform
Including:
Facilitate Transactions
Including:
Verify Users
Including:
Provide Customer Support
Including:
Improve Platform Performance
Including:
Communicate With Users
Including:
Comply With Legal Obligations
Including:
When you participate in auctions, we may collect and retain:
This information helps ensure transparency, fairness, fraud prevention, and dispute resolution.
Rarita may offer community features that allow users to engage with collectors, sellers, enthusiasts, and other members.
Information collected through community features may include:
Community content may be visible to other users and may remain accessible even after certain account actions, subject to applicable laws and Platform policies.
To maintain a safe environment, Rarita may monitor, review, investigate, or moderate community content.
This may include:
Moderation may be performed by:
Content violating Platform policies may be removed, restricted, archived, or retained for investigation purposes.
We may analyze community interactions to:
We may also use anonymized and aggregated data to understand community trends and improve Platform functionality.
Protecting our users is a core priority.
We may use:
to identify suspicious activity and protect the integrity of the Platform.
We may share information with:
Payment Providers
To process payments made to Rarita, such as for paid features on the Platform, and any related refunds. Card information is handled exclusively by PCI-DSS-compliant third-party payment gateways; Rarita does not store your full card numbers on its servers. Payments for orders between buyers and sellers are made directly to the seller and are not processed by Rarita.
Buyers and Sellers
To complete orders directly between buyers and sellers. When an order is placed, we share the seller's payment details (such as bank account details, UPI ID, or UPI QR code) with the buyer so the buyer can pay the seller directly, the buyer's proof of payment with the seller so the seller can confirm receipt, and the buyer's name, shipping address, and contact details with the seller so the seller can ship the order. Buyers and sellers may use this information only to complete the relevant order.
Verification Providers
To perform identity verification and fraud checks.
Technology & Infrastructure Providers
To host, secure, maintain, and improve Platform operations.
Cloud Hosting
Amazon Web Services (AWS) — our Platform is hosted on AWS infrastructure, configured with industry-standard security controls.
Analytics Providers
Google Analytics — to understand user behaviour and measure Platform and website performance.
Advertising & Marketing Partners
Google Ads and Meta (Facebook/Instagram) — for running targeted advertising campaigns and measuring their effectiveness.
Communication & Messaging Providers
Email, SMS, and WhatsApp providers — to deliver transactional messages, order updates, customer support, and (where permitted) marketing communications and broadcasts.
Regulatory Authorities
Where required by law, regulation, legal process, or governmental request.
Business Transfers
In connection with mergers, acquisitions, financing, restructuring, or sale of assets.
Rarita does not sell, rent, or trade personal information to third parties for profit.
By posting content through community features, users grant Rarita a non-exclusive, worldwide, royalty-free, transferable license to host, store, reproduce, display, distribute, and use such content for the purpose of operating, improving, promoting, securing, and administering the Platform.
Users retain ownership of their content.
When users submit reports regarding content, products, transactions, sellers, buyers, or community members, we may retain:
Such information may be retained to prevent abuse, investigate violations, resolve disputes, and comply with legal obligations.
We retain personal information only as long as necessary to:
Certain transaction, KYC, financial, authentication, and dispute-related records may be retained for up to seven (7) years or longer where required by applicable law.
Specific retention periods include:
We use cookies and similar technologies to:
Users may manage cookie preferences through browser settings.
The categories of cookies and tracking technologies we use include:
Disabling certain cookies may affect Platform functionality. You can also opt out of certain tracking directly with these providers — Google Analytics: https://tools.google.com/dlpage/gaoptout and Meta ad preferences: https://www.facebook.com/settings/?tab=ads.
We implement industry-standard safeguards including:
These safeguards include HTTPS/TLS encryption for data transmitted to and from the Platform, hosting on Amazon Web Services (AWS) with industry-standard security configurations, processing of card payments made to Rarita exclusively through PCI-DSS-compliant payment gateways (we do not store full card numbers on our servers), and restricting internal access to personal data on a strict need-to-know basis.
While we take reasonable measures to protect information, no method of transmission or storage is completely secure.
If a security incident affects personal information, we may investigate, mitigate risks, notify affected users where required, and comply with applicable legal obligations.
Subject to applicable law, users may:
Requests may be subject to identity verification and legal limitations.
We will respond to all valid requests within 30 days. Where retention is required by law (for example, GST and other financial record-keeping obligations), we may be unable to delete certain information until those obligations expire.
You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, replying STOP to a marketing SMS or WhatsApp message, or emailing us at contact@raritaclub.com. Opting out of marketing will not affect transactional or service-related communications relating to your account or orders.
Your information may be processed, stored, or accessed outside India.
Where international transfers occur, Rarita will implement appropriate safeguards to protect personal information.
Rarita is intended only for individuals who are at least 18 years old.
We do not knowingly collect personal information from minors. If such information is identified, reasonable steps will be taken to remove it.
The Platform may contain links to third-party websites, applications, or services.
Rarita is not responsible for the privacy practices of third parties and encourages users to review their respective privacy policies.
Rarita may use automated systems, algorithms, machine learning technologies, and artificial intelligence tools to:
Such systems may process user and transaction information as part of their functionality.
We may modify this Privacy Policy from time to time.
Material changes may be communicated through:
Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.
Rarita complies with applicable laws and regulations including:
In accordance with applicable laws, users may contact our designated Grievance Officer regarding privacy concerns, complaints, or requests.
Grievance Officer
Name: Kaustubh Sharma
Email: kaustubh@raritaclub.com
Address: 1st Floor, Enkay Tower, Plot No. B&B1, Vanijya Kunj, Udyog Vihar, Phase 5, Gurgaon, Haryana – 122016
If you have questions regarding this Privacy Policy or our privacy practices, please contact:
Rarita Technologies Private Limited
Email: contact@raritaclub.com
Website: www.raritaclub.com
Registered Office: 1st Floor, Enkay Tower, Plot No. B&B1, Vanijya Kunj, Udyog Vihar, Phase 5, Gurgaon, Haryana – 122016