Welcome To Dravya

• INTRODUCTION
• IMPORTANT INFORMATION
• DETAILS OF OWNER AND DATA CONTROLLER
• TYPES OF PERSONAL DATA COLLECTED
• HOW PERSONAL DATA IS COLLECTED AND USED
• PERMISSIONS
• DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
• INTERNATIONAL TRANSFERS
• SECURITY OF YOUR DATA
• DATA RETENTION
• USER RIGHTS AND PRIVILEGES

Introduction

Thank you for using 'Dravya'!

The 'Dravya' digital platform collects some Personal Data from the Users of its Applications/Websites.

We, at Kerala Ayurveda (hereinafter, referred to as “Kerala Ayurveda” or “We” or “Our” or “Us” or “Company”), respect the privacy of our users' (hereinafter, referred to as “user” or you”) and take great care in protecting your personal data. We have created this Privacy Policy document to help you have a full understanding of our policy on the types of user and device data we collect thorough our mobile and web application called 'Dravya' and its associated domains and sub domains including www.dravya.app, www.dravyaonline.com, www.blog.dravyaonline.com; services and extensions such as blogs and forums (hereinafter, collectively referred to as “Digital Platform or Platform”), and on how we use and protect this data.

Apart from us, the owners and you the user, the individuals or organizations who provide IT and system administration services on our behalf or provides a product or service to us for the purpose of conduct, growth, analysis and marketing of our digital platform are hereinafter, referred to as “third parties” in this document.

This Privacy policy informs you about your privacy rights as a user and how the law protects your privacy. The Privacy Policy forms an integral part of the Terms of Use and we insist you to carefully read our full Privacy Policy.

IMPORTANT INFORMATION

1. Changes to the Privacy Policy

This version of the document was last updated on 12th May 2021. We occasionally make changes to the Privacy Policy document to remain compliant to the applicable laws and as part of giving you the best service we can. We will try and contact you through the digital platform and direct communication channels such as emails to notify you of any modification. However, we request you to periodically go through this document for any modifications

2. Changes in your personal Information

In case of changes in your personal information during the usage period of the digital platform, ensure that your personal information is accurately updated with us.

3. Third Party Links

Our Digital Platform may include external URLs (links to other sites) to third-party platforms and services such as websites, plug-ins and applications. Clicking on these links or enabling those connections may allow third parties to collect or share your personal data. Kerala Ayurveda has no control or opinion over these third-party websites and are not responsible for their privacy statements. When you leave our platforms to visit third party platforms, we encourage you to read the privacy policy of every such third party link you visit.

4. Policy Towards Children

Our digital platform is not intended for children and we do not knowingly collect personal data from children under 13. Accidental collection of personal data from children shall be immediately deleted from our records as soon as we become aware of such data.

5. Raising a Concern

In case of a concern, you have every right to approach the Data Protection Agency of your country. However, before doing so, we would highly appreciate it, if you can contact us first and give us a chance to resolve your concern before approaching the Data Protection Agency.

Details of Owner and Data Controller

1. Full Name of the Owner and Data Controller

Kerala Ayurveda Private Limited

(a company duly incorporated under the provisions of the Companies Act, 2013, having its CIN # L24233KL1992PLC006592)

2. Registered Address

Kerala Ayurveda Private Limited

IV/118, Ganapathimukku,

Elamkunnapuzha P. O. Vypin,

Ernakulam District- Kerala

India- 682503

3. Email address

mail@keralaayurveda.biz

Types Of Personal Data Collected

By 'Personal Data' or 'Personal Information' we mean the any information with which you may be identified and differentiated from other users. This 'Personal Data' may be collected, used, stored or transferred by our digital platform by itself or through third parties when you either enter them to the digital platform by yourself or when you grand permission to the digital platform or third parties to collect it from the device in which you use the digital platform.

The 'Personal Data' can be of various types which may be included but not limited to the following categories:

- Data for identification: Personal name, username or similar identifier

- Contact data: Email ID, specifically Gmail, for registration and correspondence

- Technical data: Operating system, OS or browser type and version, your computer's Internet Protocol (IP) address, login data, time zone, location and other technology in your device to access our digital platform

- Usage data: Usage patterns, frequency and duration of usage of our digital platform

- Communications and Marketing data: Data on user choices and preferences on receiving and interacting with marketing and general communications from us

- User generated data: Feedbacks, interaction records like bookmarks, comments, search history, username, passwords and surveys

- Aggregated Data: Statistical or demographic data compiled from personal data and usage data. Aggregated data do not reveal your identity directly or indirectly. This data is used to generate analytical data such as total users or most searched keywords of our digital platforms.

We, under any circumstances, do not collect or have access to any type of information about you other than the above categories of data. This includes details about your physical, mental, racial, ethnic, sexual, religious, philosophical, political, financial or criminal status, orientation, preferences or history.

How Personal Data Is Collected And Used

1. Collection of Personal Data

We collect personal data of our users and other third parties by different methods including and not limited to:

a. Directly: When you create an account in our digital platform, subscribe to our services, interacting with our marketing channels, submit applications, forms or surveys, competitions, feedback or any correspondence with us by post, phone, email or other media.

b. Automatically: By interacting with our digital platform, some technical data about your device, browser, search actions and patterns are collected automatically. We may use cookies, SDKs or other similar technologies for this purpose.

c. From third parties: We may collect personal data from publically available sources or through third parties providing personal data as a service or through third party platforms that are associated with us, with which you have shared your personal data.

We are in control of the personal data you provide us exclusively and the ownership of this data is not passed to third parties without your explicit consent.

2. Use of Personal Data

By accepting our Privacy Policy and using our digital platform, we understand that you are trusting us with your personal data and treats it as one of our prime responsibilities to use this data judiciously within the provisions of the law and protect it the best way we can.

Your personal data belonging to categories including identity, Contact, Profile, Technical, Marketing, Communication and Usage are collected, stored and processed by us under the lawful bases including the legitimate interests such as performance of a contract with you, legal obligation, our legitimate interest to keep our records updated, to study how customers use our products and services, to develop our products and services, to run, organize, declare, secure and grow our business and marketing, to meet the purposes and activities of our digital platform. The most common circumstances where your personal data is used by us are as follows:

a. To validate and perform the contract(s) including the Terms of Use, we are about to enter or have entered with you.

b. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

c. Where we need to comply with a legal or regulatory obligation.

d. To register you as a new customer.

e. To manage our relationship with you by issuing notifications and receiving feedback and, review or survey.

f. To enable you to partake in a prize draw, competition or complete a survey.

g. To run, organize, secure, grow our digital platform and business by operations including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data.

h. To provide relevant content to you.

i. To deliver relevant advertising to you and to measure or understand the effectiveness of the advertising we serve to you.

j. To use data analytics to improve our digital platform and other products and services, marketing, customer relationships and experiences.

k. To make suggestions and recommendations to you about products and services that may be of interest to you.

l. To use advertising platforms, to target potential customers or retarget existing users based on current customers' data.

m. To identify and log you into our associated services such as blogs (blog.dravyaonline.com) and forums (forum.dravyaonline.com)

3. If Personal Data is not provided

Providing your personal data is essential for some of our products and services to work and may be warranted under the law or the Terms of Use contract we have or trying to enter with you. If you fail to provide personal data when requested, we may not be able to fulfil the terms of this contract, including providing a product or service, and may have to cancel the same with due notification when needed.

Wherever in our digital platform, it is specifically mentioned that some data is not mandatory, you are free not to share this Data and avail the specific product or service without any consequences.

4. Opting out

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email or text message.

In case of direct marketing messages from us or third parties, you have the right to withdraw the consent and can ask us or third parties to stop sending you marketing messages at any time by contacting us. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of product registration.

In case of Cookies, you can enable your browser to alert you when our digital platform tries set or access cookies. You may also set your browser to refuse all or some browser cookies. Please note that some parts of our digital platform may become inaccessible or dysfunctional if you disable or refuse cookies.

5. Change of Purpose

We are committed not to use your personal data for any purpose other than which we collected it for, or any other reason which we reasonably consider to be compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please Contact us.

Your personal data will be used for any unrelated purpose only after duly notifying you and explaining the legal basis and legitimate interest for doing so.

Your personal data may be used by us without your knowledge or consent only in compliance with the above rules, where this is required or permitted by law.

Permissions

Our digital platform via its apps or websites may seek permissions for the use or access of the following:

- INTERNET: Most of the services of our digital platform are enabled via the internet. Hence internet access is a prerequisite for its seamless functioning.

- NETWORK STATE: This allows our digital platform to access information about network connections such as which networks exist and are connected.

- WRITE EXTERNAL STORAGE: This enables our digital platform to store content and media in your SD card or other storage components. This is required for multiple services including downloading content, bookmarking and saving search history.

- READ EXTERNAL STORAGE: This permission is retrieve information stored in your devise by our digital platform.

- VIBRATE: This permission allows our digital platform to control the vibrator. This is especially required for alerts of notifications.

- WAKE LOCK: Granting this permission prevent s your device from going to sleep while using our digital platform.

- BILLING: This enables our digital platform to perform billing of subscriptions and other transactions.

- RECEIVE: This permission is required to receive notifications in your device from our digital platform.

Disclosure Of Personal Data To Third Parties

Your personal data may be shared with the following parties for the purposes set out in clause 5.2 above.

1. Third parties who are defined as in clause 1 above

2. External Service Providers to Kerala Ayurveda including but not limited to:

a. Cc Avenues

b. Facebook AdsManager

c. Google Ads

d. Google Pay

e. LinkedIn Ads

f. PayTM

g. Twitter Ads

h. Survey Monkey

(Please contact us for a full list of third parties that we may share your personal data with)

3. Parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Sharing data with the above parties are essential for our legitimate interest such as to operate and develop our products and services and to grow our business.

All the above parties are required to respect the security of your personal data and to treat it in accordance with the law. We prohibit the above parties from using your personal data obtained from us, for their own purposes. They are only permitted to process your personal data for specified purposes and in accordance with our instructions and requirements as stated in clause 5.2 above. We associate with the above parties only after ensuring their compliance to international data protection laws and we review them regularly. If found to be non-compliant to our objectives or if their service is no longer satisfactory to our business, we may choose to discontinue their service.

International Transfers

Depending on your location, personal data may be transferred to devices outside your state, province or country and stored in such remote locations. These locations may be under a different government jurisdiction where data protection laws may be different and not as stringent as those in your location. Our digital platforms transfer personal data to India and are stored and processed there. When you accept this Privacy policy, share your personal data and continue using our digital platform, we consider it as your agreement to such international transfers of your personal data.

Security of Your Data

We have ensured appropriate security measures to protect your personal data from accidental loss or corruption, inadvertent use or unauthorized access, alterations or disclosure. Only the most required office personnel or external contractors, who process this data on our instructions, are granted access of your personal data. This is provisioned only on a need to know basis and strictly under a non-disclosure agreement.

We have put in place several physical, electronic and administrative implementations to safeguard your personal data and to deal with any suspected personal data breach. However, there may be imperfections and unidentified vulnerabilities in any data protection system and therefore absolute data protection cannot be guaranteed. We will notify you and any applicable regulator of an identified or suspected breach where we are legally required to do so.

Data retention

Your personal data will be retained by us for only a duration that is necessary to fulfil the purposes we collected it for, including for the purposes of meeting any legal, technical, accounting, or reporting requirements or those requirements as set forth in clause 5.2 above. We consider whether we can satisfy our requirements through other means and legal requirements to minimize or avoid retention of personal data as much as possible.

The duration for which your personal data is retained by us is determined by considering the sensitivity, nature and volume of this data and the least amount of time and resources needed to securely retain it to satisfy the purposes for which we process your personal data. We at all times consider the potential risks from the inadvertent and unauthorized use or disclosure of this data.

User Rights and Privileges

You, our user, enjoys certain rights and privileges in certain circumstances, under data protection laws in relation to your personal data, such as:

1. Request access to your personal data

2. Request correction of your personal data

3. Request erasure of your personal data

4. Object to processing of your personal data

5. Request restriction of processing your personal data

6. Request transfer of your personal data

7. Right to withdraw consent

We shall happily oblige to help you exercise any of your rights set above. You are not required to pay any fees to exercise any of your rights. Requests that are repetitive, excessive or clearly unfounded may however be charged a reasonable fee. We may also choose to refuse or comply with such requests.

In order to prevent unauthorized access or inadvertent use of personal data by any person who has no right to access it, and to facilitate you to exercise the rights set above, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights) as a security measure. You may also be contacted directly by our representatives for more information pertaining to your request.

We try to respond to all genuine requests within a period of one month. In case of multiple or complex requests which requires longer processing time than usual, it may take longer. In such circumstances, we shall notify and update you.