PRIVACY AND COOKIES POLICY

Background

1. RootedObjects Private Limited having its registered office at 314 Raheja Arcade, Koramangala, Bangalore – 560095, Karnataka, India, (also referred to as "Company", “our”, “us” or "we") operates an online e-commerce portal through the website rootedobjects.com (hereinafter referred to as the “Portal”).
2. Your privacy is very important to us. This Privacy Policy covers: (i) the type of information collected from the users through the Portal including sensitive personal data or information; (ii) the purpose, means and modes of usage of such information; and (iii) how and to whom such information which has been collected will be disclosed.
3. For the purpose of this Privacy Policy, wherever the context so requires "you", “your” or “user” shall mean any natural person who uses the Portal.
4. We reserve the right to make changes to this Privacy Policy at any time. Any such modifications will become effective immediately upon posting to the Portal and your continued use of the Portal and/or the Services (as defined in the Terms of Use) constitutes your agreement to such modifications. You agree to periodically review the current version of the Privacy Policy as posted on the Portal. If you do not agree with the terms of this Privacy Policy, please do not use the Portal and/or the Services.

Information that we collect

1. Information that is collected as you use the Portal and its Services includes the following:
2. Your Personal Information: When you sign up and register with us through the Portal, we ask you for your Personal Information. “Personal Information” means information that would allow someone to identify or contact you, such as your name; registered User Account information like username and password; email address; contact number and complete address. However, Personal Information does not include aggregated information that, by itself, does not permit the identification of individual persons and does not include Activity Information (defined in paragraph 3).
3. Payment Information: In order to purchase Product(s) from the Portal, you are required to make payment for such Product(s). While making payment we collect your billing details such as name, billing address contact number and IP Address and redirect you to our third party payment gateway. We do not collect or store your credit/debit card details or your netbanking details on the Portal. You agree and acknowledge that Your submission of credit/debit card details or your netbanking details on the third party payment gateway will be governed by the terms of such third party payment gateway’s privacy policy and terms of use.
4. Cookie Policy: When you use the Portal, our servers may automatically record certain information that your device sends whenever you visit any website and use certain apps (“Activity Information”). Cookies are widely used in order to make a website work, or to work more efficiently, as well as to provide information to the owners of the website. These server logs may include information such as your web or app request, Internet Protocol ("IP") address (IP information is collected only during payment), browser type, browser language, referring/exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time of your request, and one or more cookies that may uniquely identify your browser. We may use third party cookies, such as buttons to track visitor behaviour (which may include, but not be limited to: (a) Buttons clicked; (b) scroll distance on a page; (c) number of visits for each page etc. to tailor the experience of the user wherever possible. However, such cookies will not store any kind of personal information, nor will such information be disclosed to any third party.

We may occasionally update this Cookie Policy to reflect changes in our practices and services. When we bring changes to this Cookie Policy, the same shall be updated on the Portal. We, therefore recommend that you check this page from time to time to inform yourself of any changes in this Cookie Policy.

How we use the information

1. We will use the information that we collect for the following amongst other purposes related to the Services:
2. We will use your name in order to customise all our communications sent to You.
3. Your E-mail address will be used to communicate the following:
1. All Service related messages including but not limited to confirmation of: (a) your order(s); (b) cancellation and refund requests; or (c) return or exchange requests;
2. Promotional messages regarding the Services and/or Products offered by RootedObjected Private Limited from time to time; and
3. Any other communication that we wish to send to You in relation to the Portal.
4. Your Phone number will be an alternative method to contact You either via SMS and/or Whatsapp, for communicating any Service related messages. We will share your phone number with the third party carrier in order to facilitate a seamless delivery experience.
5. Your address will be shared with the third party carrier or the Vendor, to facilitate delivery of the Product(s) purchased on the Portal to you.
6. In order to improve the quality of Our Portal and/or the Services we may ask You to provide us with information regarding Your experiences on Our Portal. Users have the option of choosing not to provide Us with this information.
7. To track your usage of the Services;
8. To improve the quality, features and functionality of the Services;
9. To improve the security of the Services;’
10. To back up our systems and allow for disaster recovery; and
11. As may be necessary to enforce the terms of this Policy or your Terms of Use.

Legal bases for processing information under the GDPR for users in the European Union (EU)

1. The Company processes information of Users in the EU in accordance with Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data (“GDPR”).The GDPR governs how the Company may process your information, and the rights that EU Users have in relation to your information. This means that the Company will collect and use your information only where:
2. We need such information to provide you the Service and fulfil our obligations to you under our Terms of Use available here. This includes the functionalities of the Portal and/or Services;
3. The collection and use of your information is justified because of a legitimate interest such as for improving the Portal and marketing the Services (but only where our legitimate interest isn’t overridden by your interest in protecting your information);
4. We have obtained your consent for using your information in a certain way;
5. The collection and use of your information is necessary for compliance with our legal obligations;
6. You may withdraw your consent for using your information at any time. Depending on the situation you can either withdraw your consent by writing to hello@rootedobjects.com. Where we are using your information because of a legitimate interest to do so, you have the right to object to that use. However, if you do so, you may not be able to continue using the functionalities of the Portal and/or the Services.

Disclosure of the information

1. The Company does not sell, trade, or rent or disclose Your Personal Information or Your Sensitive Personal Information to any third party. However, the Company cannot fully ensure that such information will not be disclosed to third parties. For example, we may be legally obligated to disclose information to the government or third parties under certain circumstances, third parties may circumvent the Company’s security measures to unlawfully intercept or access transmissions or private communications, or an error may occur in the administration of the Portal. In the unlikely event that the Company needs to investigate or resolve possible problems or inquiries, we may, and you authorize the Company to, disclose any information about you to government officials as permitted by applicable law.
2. We reserve the right to disclose any Personal Information and/or Sensitive Personal Information as required by applicable law and when we believe, at our sole discretion that disclosure is necessary to protect our rights, protect someone from injury and/or to comply with a judicial proceeding, court order, or legal process served on our Portal
3. The Company shall disclose Personal Information such as name, e-mail address as well as order details with third party platforms solely for the purposes of sending personalized communications to you like newsletters and order details relating to your use of the Portal. In the event that do not wish to receive any further personalized communications from such party, you may click on the ‘UNSUBCRIBE’ button provided for at the end of any such communications. Please note that you will not be able to unsubscribe from any information relating to order details that is sent to you from any such third party
4. If the Company becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, personal information will be transferred to the new entity for the continued performance of Services.

Cross-border transfers of information (for users in the EU)

1. In the event we transfer information of Users in the EU to a third party service provider located outside the EU and/or is not subject to an adequacy decision by the EU Commission, we will ensure that:
2. we obtain your prior consent for such transfer; and
3. such third party service providers have appropriate safeguards for your information by way of entering into a binding agreement that provides for the same.

Information retention

1. If you are a User from non-EU countries, on receiving a request to deactivate your Use Account, the Company will deactivate your User Account and archive your Personal Information. Archived information will be retained by the Company for a period of 26 months in it’s secure database for the purpose of our records. Non-personally identifiable information of Users from non-EU countries is retained 26 months for analytics. However, Your Sensitive Personal Information, collected by us, if any, will be destroyed on deactivation of your account.
2. If you are a User in the EU, on receiving a request to deactivate your User Account, the Company will deactivate your User Account and all Personal Information and Sensitive Personal Information, collected by us, if any, will be destroyed. Non-personally identifiable information of Users in the EU may be retained indefinitely for analytics subject to the same being kept separate from other information including but not limited to unique identifiers, that, in combination with such non-personally identifiable information of the Users, may render the same personally identifiable.

Rights in respect of your information

1. The laws of some countries grant particular rights in respect of personal information. If you are a User in such jurisdictions, you may have the right to:
1. Request a copy of your personal information;
2. Request that we correct inaccuracies relating to your personal information;
3. Request that your personal information is deleted or that we restrict access to it;
4. Request a structured electronic version of your personal information; and
5. Object to our use of your personal information;
2. Should you wish to make a request in respect of your personal information please contact us at privacy@rootedobjects.com.
3. In some circumstances, the Company may not be able to comply with a request that you make in respect of your personal information. For example, we may not be able to provide a copy of your personal information where it infringes on the rights of another User. We may also be required to retain certain personal information that you ask us to delete for various reasons, such as where there is a legal requirement to do so.
4. If we are unable to resolve your request, or if you are concerned about a potential violation, you may be entitled to report the issue or make a complaint to the data protection authority in your jurisdiction.

Third party links

1. The Portal may contain links to other websites ("Linked Sites"). The Linked Sites are not under the control of the Portal. We are not responsible for the content of any Linked Site, including, without limitation to, any link contained in a Linked Site, or any changes or updates to a Linked Site.
2. the Company does not intend the Linked Sites to be referrals to, endorsements of, or affiliations with the linked entities
3. On accessing the Linked Sites, you shall be governed by the terms of use, privacy policy and such other additional policies of the Linked Sites. You further acknowledge and agree that the Company shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any such content, advertising, products, services or other materials available on or through any Linked Sites or for any errors, defamatory content, libel, slander, omissions, falsehoods, obscene content, pornographic material, or any profanity contained therein.

Security procedures

1. We have implemented industry standard security policies, rules and technical measures, as required under Section 8 of the Information Technology (Reasonable security practices and procedures and sensitive personal information) Rules, 2011 in order to protect any kind of personal sensitive information that we have under our control from unauthorized access. You should know, however, that the Company cannot fully eliminate such risks.

Governing law and jurisdiction

1. This Privacy Policy shall be governed by and constructed in accordance with the laws of India, without reference to conflict of laws principles. The courts in Bangalore shall have exclusive jurisdiction to determine any disputes arising in relation to, or under, the terms of this Privacy Policy. You agree to submit to the jurisdiction of the courts in Bangalore and agree to waive any and all objections to the exercise of jurisdiction over the parties by such courts.