PRIVACY POLICY
This privacy policy ("Privacy Policy") forms an electronic contract within the provisions of the (Indian) Information Technology Act, 2000 ("IT Act") and the rules made thereunder and the amended provisions about electronic documents/records in various statutes as amended by the IT Act, from time to time. This Privacy Policy does not require any physical, electronic or digital signature and this Privacy Policy shall be a legally binding document between you and Topfizz Foods Private Limited. To ensure that you feel safe and happy, the following information gives you a comprehensive guide as to what we do with your data and more specifically how we collect, use and pass on your data.
This Privacy Policy describes how your data is secured and how you can contact us about our privacy practices, including:
1. Data collection: What information do we collect?
2. For which purposes do we use your information and on which legal basis?
3. How do we share your information?
4. What are your rights?
5. Who can you contact in case you have questions or requests? The data protection contact point
6. International Transfers
7. Security
8. Children’s Privacy
9. Changes to this Privacy Policy
Please read this Privacy Policy before using or submitting any personal data.
By providing consent, you confirm that you have read and that you understand the way we collect, process, use and disclose your data as described herein.
Our records of your acceptance of this Privacy Policy, the date thereof, and all future amendments to this Policy shall be regarded as conclusive and written evidence of your consent.
1. Data collection: What information do we collect?
Depending on the purpose of the processing, we need to process the following categories of personal data about you:
- your details (for example, your name, gender, age) which you are asked to provide,
- your contact details(for example, your email address, and phone number), e.g. if you register for our newsletter or if we need to communicate with you to Services you have requested;
- your contact details (for example, your email address, and phone number), e.g. if you register for our newsletter or if we need to communicate with you concerning Services you have requested;
Remember that, when we ask you to fill in your data to give you access to any Service, we will mark certain fields as compulsory, since this information is necessary to be able to give you access to the Services in question. Please take into account that, if you decide not to make such data available to us, you may be unable to complete your user registration or may not be able to enjoy those Services.
2. For which purposes do we use your information and on which legal basis?
Depending on the Services that you wish to use, we will process your data for the following purposes, as justified on the following legal bases:
We will only process your data for specified, explicit and legitimate purposes and we will not process your data further in a way that is incompatible with those purposes. Where required under applicable law, we will also collect your express consent to any of the above-mentioned activities. You have the right to withdraw any given consent at any time.
3. HOW DO WE SHARE YOUR INFORMATION?
For the purposes for which we collect your data and subject to the appropriate legal basis described under Section 2 above, we may disclose your data to the following categories of recipients:
(a) Authorised staff members who access your data on a need-to-know basis;
(b) Affiliates and subsidiary companies, primarily for business and operational purposes;
(c) Business partners: trusted companies that may use your data to provide you with the Service(s) you requested and/or that may provide you with marketing materials (provided that you have consented to receive such marketing materials).
(d) Service providers: companies that provide Services to us, to provide our Services.
(e) Other parties when required by law: We may share your data with other third parties:
- to comply with the law, regulatory requests, court orders, subpoenas, or legal processes;
- to verify or enforce compliance with policies and agreements; and
- to protect the rights, property or safety of Krishna Enterprises, its customers, visitors to this store and/or the public;
(f) Other parties in connection with corporate transactions such as a merger, acquisition, sale of assets, joint venture, or any other transaction that results in a change in control or ownership of Krishna Enterprises, in whole or in part;
(g) Other parties with your consent or upon your instruction: We may share your data with third parties when you consent to or request such sharing; and
Please be aware that service providers who may offer products and/or services to you through their services or via their channels may separately collect personal data from you. In such a case, we are not responsible for the collection of this data. These third parties are solely responsible for the control of such personal data and the processing of your data will be subject to their Privacy Policy.
The above recipients of your data may be located within or outside the EEA, including in countries not recognized by the European Commission as offering an adequate level of protection of personal data.
4. WHAT ARE YOUR RIGHTS?
Under the conditions set forth under applicable data protection laws, you have the right to access and rectify your data, as well as the right to object at any time to the processing of your data for direct marketing purposes, including profiling related to such direct marketing, and, in certain cases, to object to the processing based on grounds relating to your particular situation. In addition, you have the right to request the restriction of the processing and the erasure of your data (right to be forgotten) as well as the right to data portability. When the processing of personal data is based on your consent, you have the right to withdraw your consent at any time.
You can exercise these rights by sending a written request to our data protection contact (see Section 5 “WHO CAN YOU CONTACT IN CASE YOU HAVE QUESTIONS OR REQUESTS?”).
If you require further information about your privacy rights or would like to exercise any of these rights, please also contact our data protection officer (see Section 5 “WHO CAN YOU CONTACT IN CASE YOU HAVE QUESTIONS OR REQUESTS?”).
5. WHO CAN YOU CONTACT IN CASE YOU HAVE QUESTIONS OR REQUESTS? THE DATA PROTECTION CONTACT POINT
Topfizz Foods Private Limited has in place a data protection contact point available for you to submit your questions or requests relating to the processing of your data: support@hayatiworld.com
When you exercise these rights, we may collect your name, e-mail address and your request details. Please be aware that we only require your e-mail address and request to process your request. Other details are optional for you to share with us. Your details will be saved only so that we can respond to your request, and will subsequently be deleted unless there are legal requirements stipulating the retention of these data.
Please contact our data protection contact point or our data protection officer indicated above if you wish to exercise your rights as a data subject in the terms described in Section 4.
6. INTERNATIONAL TRANSFERS
The information is hosted by servers located in India and abroad. In connection with any transfer of your data outside the European Economic Area (= member states of the European Union + Iceland, Norway, and Liechtenstein, “EEA”) in countries that the European Commission does not recognise as offering an adequate level of data protection (no 'adequacy decision'), we implement appropriate safeguards to ensure an adequate level of protection of your data. These safeguards can, for instance, consist of agreeing with recipients on standard data protection clauses in the form of entering into template model clauses such as the Standard Contractual Clauses for the transfer of personal data to third parties adopted by the European Commission guaranteeing such adequate level of protection.
7. SECURITY
We ensure that appropriate technical and organisational security measures are taken against unlawful or unauthorised access or use of your data, as well as against accidental loss or damage to the integrity of your data.
We update and test our security technology on an ongoing basis. We restrict access to your data to those employees who need to know that information to provide benefits or Services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees' privacy responsibilities.
Your data will only be processed by a third-party data processor if that data processor agrees to comply with those technical and organisational data security measures.
Maintaining data security means guaranteeing the confidentiality, integrity and availability of your data:
(a) Confidentiality: we will protect your data from disclosure to third parties.
(b) Integrity: we will protect your data from being modified by unauthorised third parties.
(c) Availability: we will ensure that authorized parties can access your data when needed.
8. CHILDREN’S PRIVACY
Our Services are not intended for individuals under the legal drinking age. If we learn that an individual under the legal drinking age has provided us with personal information, we will delete it.
1. CHANGES TO THIS PRIVACY POLICY
Except to the extent limited by applicable law, we may decide at any time − at its discretion − to change, modify, and/or add all or parts of this Privacy Policy in the future. Any change to this Privacy Policy will be notified to you by e-mail (where appropriate or required by law and to the extent that we have your e-mail address). We will indicate at the top of this Privacy Policy the date on which the Policy was last modified.
Where required by law, we may also ask you to expressly confirm your consent to the modified Privacy Policy.