Privacy policy

Last updated on February 28, 2024

We respect your concerns about privacy and value the relationship we have with you. This privacy policy (“Policy” or "Privacy Policy")  for The Oil Chemist LLP (“Company,” “we,” “us,” or “our“), describes how and why we might collect, store, use, and/or share (“process“) your information (“Data” or “Information” or “Personal Data” or “Personal Information”) when you use our services (“Services“), such as when you:

• Visit our Website at https://theoilchemist.in/, or any Website of ours that links to this Policy (“Website”);
• Engage with us in other related ways, including any sales, marketing, or events.

The words "you" or "your" or “User” or "Customer" as used herein, refer to all individuals and/or entities browsing, accessing, or using the Website for any reason. We also describe the measures we take to protect the security of the Information, how long we retain it and how our Customers can contact us about our privacy practices and how to exercise their rights. By using or accessing the Services through our Website or otherwise, whether through a mobile device, mobile application, computer or any other device and/or at retail stores, you agree to be bound by the provisions of this Policy. You further consent to the Company’s collection, retention, processing, use, disclosure, and protection of Personal Information, when you create an account / login credentials or make a purchase in our retail stores, to avail the Services. We commit to respecting your privacy and recognize your need for appropriate protection and management of any Personal Information you share with us.

Users are provided with the option to review and accept our Privacy Policy and terms of service before providing their personal information. By providing their personal information, users acknowledge and agree to the terms outlined in our Privacy Policy.

This Policy DOES NOT apply to information that you provide to, or that is collected by, any third parties, such as social networks that you use which are not in connection with our Services.

 

Questions or concerns?
Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@theoilchemist.in

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with The Oil Chemist LLP and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?
We do not process sensitive personal information.

Do we receive any information from third parties?
We do not receive any information from third parties.

How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud and preserve security and to comply with the applicable laws. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information?
We may share information in specific situations and with specific third parties.

How do we keep your information safe?
We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to breach our security protocols and improperly collect, access, steal, or modify your information.

What are your rights?
Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?
The easiest way to exercise your rights is by contacting us. We will consider and act upon any request, on a case to case basis, in accordance with applicable data protection laws.

Want to learn more about what The Oil Chemist LLP does with any information we collect?

TABLE OF CONTENTS

• WHAT INFORMATION DO WE COLLECT?
• HOW DO WE PROCESS YOUR INFORMATION?
• WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
• DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
• HOW DO WE HANDLE YOUR SOCIAL LOGINS?
• HOW LONG DO WE KEEP YOUR INFORMATION?
• HOW DO WE KEEP YOUR INFORMATION SAFE?
• DO WE COLLECT INFORMATION FROM MINORS?
• WHAT ARE YOUR PRIVACY RIGHTS?
• CONTROLS FOR DO-NOT-TRACK FEATURES
• DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
• DO WE MAKE UPDATES TO THIS NOTICE?
• HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
• HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

We may obtain your Personal Information from various sources. When you visit or use our Website or avail the Services, we may collect, use, or disclose the following data about you:

Personal information you disclose to us

In Short: We collect Personal Information that you provide to us.

We collect Personal Information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. You hereby agree to provide us with accurate Information and ensure that you update such Information as required.

Personal Information Provided by You. The Personal Information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The Personal Information we collect may include the following:

• Identification details such as name, date of birth, gender, photograph, etc. used for the purpose of creating an account on the Website or making a purchase;
• Correspondence details such as phone numbers, email addresses, contact preferences, mailing addresses, billing addresses, postal code, shipping, and billing information (such as delivery address, and billing address), etc. for the purpose of communicating with you, resolving your queries and provision of other support services;Financial data such as bank account details, payment account number, credit, or debit card number, etc. which are used for the purpose of enabling and effecting transactions on the Website;
• Information about your purchase history, product preferences, your skin/hair type, your physical characteristics, and your skincare concerns which you provide to us while availing our Services, which are used to provide Services to you.Information you provide to us through social media networks or applications (such as your name, profile picture, likes, location, friend list and other information described on the social media network or application sign-up page); and

Information or content which you may provide to us (such as photographs, videos, reviews, articles, questions, survey responses and comments) when you leave us a message, during customer support conversations survey, or in connection with a promotion, or for assistance in case of matters related to law enforcement, or investigations. Please note that we may also collect and store your Personal data we receive from third party sources. Please be advised that third parties have their own privacy policies, and you should refer to them for any questions you may have about the information they may collect about you.

Information we collect automatically:

We may collect certain Personal Data from you automatically through our servers that keep an activity log tracing all Users of the Website. The information we collect may include but is not limited to your Internet Protocol (“IP”) address, home address, time of access, date of access, web page(s) visited, number of clicks, software crash reports, browser/app details, session identification number, search terms, search results, referring website's addresses, information about things near your device, such as wi-fi access points, cell towers, operating system, mobile network information including carrier name and phone number, and application version number, and bluetooth-enabled devices subject to your settings and device permissions. Additionally, when you visit our retail stores and / or attend our event(s), we may collect your video surveillance footage which can be used to directly or indirectly identify you. We may include functionality for the customer's convenience in our applications that allows you to remain logged-in to the application so that you do not have to re-enter a password each time you want to access the application. IF YOU CHOOSE TO REMAIN LOGGED-IN, YOU SHOULD BE AWARE THAT ANYONE WITH ACCESS TO YOUR DEVICE WILL BE ABLE TO ACCESS AND MAKE CHANGES TO YOUR ACCOUNT AND MAY BE ABLE TO MAKE PURCHASES THROUGH YOUR ACCOUNT. For this reason, if you choose to remain logged-in to the application, we strongly recommend you enable the security features on your smartphone, tablet, or personal computer to protect against unauthorized access to and use of your device and your user account in the application.

Information We Receive from Third Parties

We may receive Information about you from a third party if you have provided your consent for such Information to be shared with us. We may combine and process such data internally towards our Services. We also work closely with select third parties (including, for example, subcontractors such as advertising networks, analytics providers, search information providers, infrastructural services, including cloud service providers) and may receive information about you from such sources. We may also collect and receive information in an aggregated form such as statistical or demographic data from different browser types for analysis.

Sensitive Information.

We do not process sensitive information.

Payment Data.

We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument.

Social Media Login Data.

We may provide you with the option to register with us using your existing social media account details, like your Facebook, Twitter, or any other social media account.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

1. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We only have access to and/or collect Personal Data that you give us or that is collected while accessing or making purchases from our Website, using our Services or via e-mail or other direct contact from you. By using our Services, creating a user account, accessing the Website you grant us the permission to collect, use, copy, transmit, store and back-up your Personal Data for purposes of the Services and/or for any other purpose(s) as contemplated by the Policy. We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud and preserve security, and comply with the applicable laws. We may also process your information for other purposes with your consent. We process your Personal Information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts. We may process your Information so you can create and log in to your account, as well as keep your account in working order.

To deliver and facilitate delivery of services to the user. We may process your Information to provide you with the requested service.

To respond to user inquiries/offer support to users. We may process your Information to respond to your inquiries and solve any potential issues you might have with the requested service.

To send administrative information to you. We may process your Information to provide you with details about our products and services, changes to our terms and policies, and other similar Information.

To enable user-to-user communications. We may process your Information if you choose to use any of our offered Services that allow for communication with another user.

To request feedback. We may process your Information when necessary to request feedback and to contact you about your experience while using of our Services.

To send you marketing and promotional communications. We may process the Personal Information you send to us for our marketing purposes, if the same is in accordance with your marketing preferences. You can choose to opt out of our marketing emails at any time. To deliver targeted advertising to you. We may process your Information to develop and display personalized content and advertising tailored to your interests, location, and more.

To post testimonials. We post testimonials on our Services that may contain Personal Information.

To evaluate and improve our Services, products, marketing, and your experience. We may process your Information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.

To identify usage trends. We may process Information about how you engage with and use our Services to better understand how they are being used and engaged with so we can improve the same.

We may also process your Personal Data for other purposes such as ensuring that the content of the Website is presented in the most effective manner for you and for your computers and other devices, compliance with the applicable laws and regulations, for legal proceedings, including collecting overdue amounts and seeking professional advice, providing customer service or respond to your inquiries, improving Customer experience and customizing your experience, or any other purpose directly related or incidental to any of the above.

We will only use your Personal Data for the purposes for which we collect it as specified above,

unless we reasonably consider that we need to use it for another purpose and that purpose is

compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

1. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties. Personal Data will also be used to facilitate communication, and processing of internal administrative and record keeping. We do not rent lists, sell or otherwise disclose Personal Data we collected from you, except as described herein. We will keep the Personal Data we hold confidential and take steps to prevent unauthorized disclosures of the same to the best of our ability.

However, you agree that we may need to share your Personal Information in the following situations:

Business Transfers. We may share or transfer your Information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business, to another company.

When we use Google Maps Platform APIs. We may share your Information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). To find out more about Google’s apps and services, we use, please read below:

Google Analytics.

1. Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google's ability to use and share information collected by Google Analytics is in accordance with its policies (http://www.google.com/policies/privacy/partners/). Google Analytics uses cookies to collect anonymous traffic data to help us analyse how you use the Website. The information generated by cookies (including your IP address) will be transmitted to and stored by Google on servers. Google will use this information for the purpose of evaluating your use of the Website, compiling user activity reports, and providing other Services. Google may also transfer this information to third parties where required to do so by applicable law, or where such third parties process the information on Google's behalf. By using the Website, you consent to the processing of data about you by Google in the manner and for the purposes described in this Policy.
2. You can prevent Google’s collection and processing of data by using the Google Ads Settings page or by downloading and installing its browser plug-in (https://tools.google.com/dlpage/gaoptout).

We may also disclose such information to:

1. our personnel, employees, agents, advisers, auditors, contractors, financial institutions, and service providers to the extent reasonably necessary for the provision and maintenance of the Services or in connection with any of our operations. Please note that we do not authorize such agents, advisors, auditors, contractors, financial institutions, and service providers to use or disclose the information except as necessary to perform Services on our behalf or to comply with legal requirements;
2. our overseas offices, affiliates, business partners and counterparts (if any);
3. the requisite persons in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violation of the Policy;
4. persons under a duty of confidentiality to us;
5. persons to whom we are required to make disclosure to comply with applicable laws, a court order, a request from law enforcement or other legal process;
6. from time to time, to reveal general statistical information about our Website and visitors, such as number of visitors, number and type of products and Services purchased, etc; or
7. actual or proposed transferees or participants of our Services.

Further, you agree that we may share your Personal Data for the following activities from time-to-time:

Advertisements. When you access the Website, use our Services or enter Personal Data on the Website, such Personal Data is used by us in accordance with the terms of this Policy. We may also aggregate (gather up data of all Customers) information and disclose such information in a non-personally identifiable manner to advertisers and other third parties for other marketing and promotional purposes. We don’t share Personal Data that personally identifies you with advertisers, such as your name or email, unless you ask us to.

Other Users. When you share Personal Information or otherwise interact with public areas of the Services, such Personal Information may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook etc.), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

Provided that we may share your Personal Data without obtaining your prior consent with: (i)

government authorities mandated under the applicable laws to obtain information including Personal Data or information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences; and (ii) any third party by an order under the applicable laws for the time being in force.

1. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may automatically track certain information about you based upon your behaviour on our

Website or while accessing our Services. You agree that we may use such information to do internal research on our Customers’ demographics, interests, and behavior to better understand, protect and serve our Customers.

Cookies are small text files of letters and numbers that record your preferences to uniquely identify your browser and are stored on your browser or the hard drive of your computer or other device if you agree ("Cookies").

The Website uses Cookies to distinguish you from other Users using the Website. This helps us to provide you with a good experience when you browse the Website and also allows us to improve the Website. By continuing to browse the Website, you are agreeing to our use of Cookies. Usage of a Cookie is in no way linked to any personally identifiable information on our Website. We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

1. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or Twitter login details). In the event you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends or followers list, as applicable and profile picture, as well as other information you choose to share or make public on such a social media platform.

We will use the information we receive only for the purposes that are described in this Policy or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their Policy to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

1. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your Information for as long as necessary to fulfill the purposes outlined in this Policy, including but not limited to processing orders, providing customer support, and complying with legal obligations, and unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law or if necessary to defend against legal claims (such as tax, accounting, or other legal requirements). It may be archived as long as we believe that the purpose for which it was used still exists or as necessary for our legitimate business interests or for complying with legal obligations.

To determine the appropriate retention period, we consider the categories, amount, nature and sensitivity of Personal Data, the potential risk of harm from unauthorized use or disclosure of the Personal Data, the purposes for which we process the Personal Data, if we can achieve the purpose through other means, and the applicable legal requirements.

If you decide to delete your user account, we will delete all such data within a reasonable time

after the termination of your user account or after cessation of the subject matter to which such Personal Data relates, subject to retention for purposes of complying with applicable laws, resolving disputes, enforcing the terms of our Privacy Policy and protecting our intellectual property rights. Please note that some of your Personal Data may still exist within our systems, for example, if it is waiting to be overwritten. For our purposes, this data has been put beyond use, meaning that, while it still exists in the electronic ether, our personnel will not have any access to it or use it again.

Your Personal Data may be transferred to and stored in locations outside of India by us or our

affiliates where necessary to fulfil the purposes described in this Policy. Please note that those

countries may not have the same data protection laws as your country of residence and your Personal Data will be subject to applicable foreign laws. When we transfer your Personal Data to other countries, we will protect that information in the manner described in this Policy and comply with the applicable data protection laws for such transfer.

In most cases, we keep the Information you provide for the duration of our relationships, plus a

reasonable period in order to be able to run regular deletion routines or to take into account the applicable statute of limitation period or if required under applicable laws. If you wish to receive marketing communications, we will keep the information necessary to send you these communications following the end of our customer relationship or following their collection, if you are a prospective customer.

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize such Information, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

1. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your Personal Information through a system of organizational and technical security measures. We are committed to the safety and security of your Personal Data. We use our internal servers and a cloud infrastructure provider for storing all information and for hosting the Website. We place your Personal Data in an encrypted database. Some of the safeguards we use to protect your Information are firewalls, data encryption, disaster recovery plans and information access controls. However, no security system is perfect, and we cannot promise that your Personal Data will remain secure in all circumstances, including the security of your data during transmission to us or the security of data on your application.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any Personal Information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to breach our security protocols and improperly collect, access, steal, or modify your information. Although we will do our best to protect your Personal Information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. You shall accordingly agree that we shall not be held liable for any accidental dissemination of Personal Data that has occurred in spite of our best efforts and procedures to maintain confidentiality.

If you suspect any misuse or loss or unauthorized access to your Personal Data, please let us know immediately. Please raise your concern with hello@theoilchemist.in in the first instance, and we will investigate the matter and update you as soon as possible on the next steps.

1. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that Personal Information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at hello@theoilchemist.in.

1. WHAT ARE YOUR PRIVACY RIGHTS?

In Short:  You may review, change, or terminate your account at any time.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

If you are located in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable laws, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

You further have the following rights:

(a) to check whether we hold Personal Data about you and to access such data;

(b) to ascertain our policies and practices in relation to Personal Data and the kind of Personal Data held by us;

Please send requests for such objections, access to data, correction of data, information regarding policies and practices and kinds of data held, questions or complaints to hello@theoilchemist.inWe reserve the right to charge a reasonable fee for processing any data access request(s). Occasionally, it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

1. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this point of time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

1. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, USA, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with whom we shared Personal Information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. archives, backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines a “resident” as:

(1) every individual who is in the State of California for other than a temporary or transitory purpose and

(2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose

All other individuals are defined as “non-residents.”

If this definition of “resident” applies to you, we are obligated to adhere to certain rights and obligations regarding your personal information.

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	NO
B. Personal information categories listed in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	NO
C. Protected classification characteristics under California or federal law	Gender and date of birth	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other Websites, applications, systems, and advertisements	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, visual, thermal, olfactory, or similar information	Images and audio, video or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from other personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	NO
L. Sensitive Personal Information	Passwords, financial information such as Bank account or credit card or debit card or other payment instrument details, and any other data capable of identifying such person providing the information	NO

We may also collect other Personal Information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation of the delivery of our Services and response to your inquiries.

How do we use and share your personal information?

More information about our data collection and sharing practices can be found in this privacy notice.

You may contact us by email at hello@theoilchemist.in, or by referring to the contact details at the bottom of this document.

If you are using an authorized agent to exercise your right to opt out, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Will your information be shared with anyone else?

We may disclose your Personal Information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf, following the same strict privacy protection obligations mandated by the CCPA.

We may use your Personal Information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be “sale” of your Personal Information.

The Oil Chemist LLP has not disclosed, sold, or shared any Personal Information to third parties for a business or commercial purpose in the preceding twelve (12) months. The Oil Chemist LLP will not sell or share personal information in the future belonging to Website visitors, users, and other consumers.

Your rights with respect to your personal data

Right to request correction of the data

You have the right to request correction of the Personal Data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of any new data you provide to us.

Right to request deletion of the data — Request to delete

You can ask for the deletion of your Personal Information. If you ask us to delete your Personal Information, we will try our best efforts to respect your request and delete your Personal Information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.

Right to be informed — Request to know

Depending on the circumstances, you have a right to know:

• whether we collect and use your Personal Information;
• the categories of Personal Information that we collect;
• the purposes for which the collected Personal Information is used;
• whether we sell or share Personal Information to third parties;
• the categories of Personal Information that we sold, shared, or disclosed for a business purpose;
• the categories of third parties to whom the Personal Information was sold, shared, or disclosed for a business purpose;
• occurrence of a personal data breach;
• the business or commercial purpose for collecting, selling, or sharing personal information; and
• the specific pieces of Personal Information we collected about you.

In accordance with the applicable laws, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information

We do not process consumer’s sensitive Personal Information.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with the information you have previously provided to us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on record, or we may contact you through a specific communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use Personal Information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, preservation of security and prevention of fraud. We will delete such additionally provided information as soon as we finish verifying your identity and information.

Other privacy rights

• You may object to the processing of your Personal Information.
• You may request correction of your Personal Data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
• You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit sufficient proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You may request to opt out from future selling or sharing of your Personal Information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

Please send requests for such objections, access to data, correction of data, information regarding policies and practices and kinds of data held, questions or complaints to or to exercise any other such right, you can contact us by email at hello@theoilchemist.in, or by referring to the contact details at the bottom of this document. We reserve the right to charge a reasonable fee for processing any data access request(s). If you have a complaint about how we handle your data, we would like to hear from you.

1. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

1. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at hello@theoilchemist.in or by post to:
The Oil Chemist LLP

1. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect from you, change that information, or delete it , under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if the processing is based on consent and consent is withdrawn.

Upon the expiration of the retention period or upon request from the user, we will securely delete or anonymize personal information in our possession. This deletion process will be carried out in a manner that ensures the irretrievability of the data and prevents unauthorized access.

Miscellaneous

Right to Opt-Out

You have provided us your Personal Data in connection with the use, browsing, and access of the Website, to purchase our products and to process any application for Services from us, where failure to supply such Personal Data may result in the application for Services being rejected.

We cannot use your Personal Data without your consent and request that you provide the same. You have the right to opt-out or withdraw consent to the use of such Personal Data by writing to us at [----------------------------]. Customers must also note that such Opt-Out will not apply to any co-branding partner to whom you have consent or shall consent to the provision of your Personal Data separately.

Please note that if you DO NOT wish for us to use your Personal Data in direct marketing and DO NOT wish to receive direct marketing materials by phone, SMS, mail, email, fax or any other communication channels and DO NOT wish for us to provide your Personal Data to any other persons for their use in advertising and marketing, whether or not such persons are members of the Business, except where you have applied for or will apply for any service that is provided by us jointly with a co-branding partner, you may avail the ‘Opt-Out’ option given in such marketing emails/messages. Such Opt-out will not apply to such co- branding partner to whom you have consented or shall consent to the provision of your Personal Data separately.

Text Messaging

If you so elect, you may provide your mobile phone number in order to receive text message alerts containing product and event information, cosmetics tips or promotion (including WhatsApp messages for Indian Customers) ("Text Messages"). We do not charge a fee for you to receive Text Messages from us, however, your mobile service provider may charge you for sending and/or receiving text messages and air time, as well as any other standard applicable rates charged by a mobile service provider.

Text Messages are distributed via a third party mobile network providers and, therefore, we cannot control certain factors relating to message delivery or guarantee availability or performance of this service, including liability for transmission delays or message failures.

We may also obtain the date, time and content of your messages in the course of your use of Text Messages. We will use the information we obtain through Text Messages in accordance with this Policy.

Push Notifications

When you access our Website, we may provide you with the option to opt in to receive push notifications from us on your smartphone, tablet, or personal computer. These push notifications may include promotional communications regarding our products and/or Services.

Data Protection

We will: (i) comply with all applicable data protection laws and privacy laws; (ii) comply with all standards that relate to data protection law and privacy laws and the privacy and security of your Personal Data; (iii) refrain from any action or inaction that could cause breach of any data protection and privacy laws; (iv) do and execute, or arrange to be done and execute, each act, document and thing we deem necessary in our business judgment to keep us compliant with the data protection laws and privacy laws; and (v) immediately report theft or loss of Personal Data.

Indemnity and Limitation of Liability

For any breach of the provisions of this Policy, we shall indemnify you in accordance with the indemnification and limitation of liability provisions set forth in the Terms.

Please note that we endeavor to safeguard Customer’s Personal Data to ensure that the same is kept private. However, we cannot guarantee the security of Customer’s Personal Data. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of the Customer’s Personal Information at any time.

We shall not be liable for any loss or damage sustained by reason of any disclosure (inadvertent or otherwise) of any Personal Data concerning the Customer’s User Account and/or information relating to or regarding online transactions using credit cards/debit cards and/or their verification process and particulars nor for any error, omission, or inaccuracy with respect to any information so disclosed and used.

Assignment

We may assign any of our responsibilities/obligations to any other person without notice to the Customer, at our sole discretion. However, you shall not assign, sub-license or otherwise transfer any of your rights or obligations under this Policy to any other Party, unless a written consent is taken from us.

Severability

If any term or provision of this Policy is held by a court of competent jurisdiction to be invalid, void or unenforceable, the remainder of the terms and provisions of this Policy shall remain in full force and effect and shall in no way be affected, impaired or invalidated.

Dispute Resolution, Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws, rules and regulations of India, and the courts of Kolkata shall have exclusive jurisdiction over any disputes arising between the Parties.

In case of any grievance in respect of a personal data breach or a breach in observance of any obligations by us, as mentioned under this Privacy Policy, please contact: [hello@theoilchemist.in]

Further, you have the right to make a complaint to the Data Protection Board of India in such manner and as may be prescribed under the applicable laws.

Notices

Any notice given by either Party to the other must be in writing, by email, and will be deemed to have been given on transmission, unless the recipient can satisfactorily establish that the email was not received by the recipient’s email or web server. Notices to us must be sent by email to hello@theoilchemist.in or to any other email address notified by email to the Customer by us from time to time for such purpose.

Third Parties

No third party shall have any right, benefit, or entitlement to enforce any terms of this Policy.

Grievance Officer

In the event you have any grievances or questions about the Policy or if you wish to make a complaint regarding any violation of the provisions of the Policy and the way your Personal Data is processed, you may contact us at the details as set out below, pursuant to which your grievance shall be acknowledged within 48 (forty eight hours) and redressed within 1 (one) month from the date of receipt of grievance/complaint.

Email ID: hello@theoilchemist.in

Contact No: 8100963816

We reserve the right to update, change or modify this Policy at any time to comply with applicable law or to meet our changing business requirements. The amendment to this Policy shall come to effect from the time of such update, change or modification. We will provide you notice of any changes to the Policy. You are encouraged to check and read this Policy from time to time to familiarize yourself with such updates, as they will be binding on you. Continued use of the Website or availing our Services constitutes agreement of the Customer to the terms contained herein and any amendments thereto.