INTRODUCTION

At GreenKarmas ("we," "us," "our"), we value your privacy and are committed to protecting  your personal information when you visit our website [https://greenkarmas.com]  ("Website"). This Privacy Policy explains how we collect, use, and safeguard your personal  data in compliance with the applicable data protection regulations, ensuring a secure  browsing and transactional experience.

By accessing our Website, you consent to the practices described in this policy. If you do not  agree, you may withdraw your consent or choose not to provide your personal information.  For any privacy concerns, please contact us at care@greenkarmas.com

DATA WE COLLECT

We may collect the following personal information:

• Name

• Email address

• Phone number

• Shipping and billing address

• Company name (if applicable)

• Location information

• IP address, device information, and browser type

• Any other data you voluntarily provide through our Website’s forms (e.g., ‘Contact  Us,’ ‘Farm Visits,’ ‘Shop Retail/Franchisee Form’)

Cookies and Tracking Technologies Our Website uses cookies and similar technologies to  enhance your browsing experience. These help us:

• Analyse usage patterns

• Recognize user preferences

• Improve Website functionality

• Prevent fraudulent activities

• Enhance security measures

Types of cookies we use:

• Essential Cookies – Necessary for core functionality

• Performance Cookies – Help enhance site performance

• Marketing Cookies – Used for advertising and promotions

• Security Cookies – Help detect and prevent security threats

You may disable cookies in your browser settings, though this may affect site functionality.

How We Use Your Data Your personal information is used to:

• Process and fulfil orders

• Provide customer support

• Improve our products and services

• Send promotional emails (with an opt-out option)

• Prevent fraud and security breaches

• Conduct data analytics for business optimization

• Comply with legal and regulatory requirements

Data Security Measures We take data security seriously and implement the following  measures:

• Reasonable Security Practice and Procedure: We have initiated the implementation  of ISO 27001 on "Information Technology - Security Techniques - Information  Security Management System - Requirements"

• Encryption: Data is encrypted during transmission and storage.

• Secure Payment Processing: Transactions are processed via industry-standard  encrypted gateways.

• Firewalls and Intrusion Detection: Our systems are protected against unauthorized  access.

• Regular Security Audits: We conduct regular security checks to identify and address  vulnerabilities.

• Access Control: Only authorized personnel can access personal data.

Despite our efforts, no system is entirely secure. Users should exercise caution when sharing  personal information online.

Sharing of Data We do not sell or rent your personal data. However, we may share it with:

• Affiliates – To improve services

• Service Providers – For order processing, payments, marketing, and security  monitoring

• Legal Authorities – When required by law or to prevent fraudulent activities • Business Transfers – In case of mergers or acquisitions

All third parties we work with are bound by strict confidentiality agreements and comply  with security protocols.

Data Retention and Deletion We retain your personal information only as long as necessary  for the purposes outlined in this policy. After this period, data is securely deleted or  anonymized. If you wish to request data deletion, please contact us at [insert email].

Your Rights You have the right to:

• Access, update, or correct your data

• Request data deletion

• Withdraw consent for data processing

• Restrict or object (if permitted under applicable law)to data processing • Request a copy of your data in a structured format

For any data-related requests, contact us at [insert email]. We will respond within the  legally mandated timeframe.

Children’s Privacy Our Website is not intended for individuals under 18. If a child has  provided us with personal data, please contact us for immediate removal.

Opt-Out Choices You may opt out of promotional communications by:

• Clicking "unsubscribe" in emails

• Contacting us at [insert email]

• Adjusting notification settings in your user account

Even if you opt out of marketing communications, we may still contact you regarding  transactions, or other essential notifications.

Electronic Communication Consent By using our Website and providing your contact  details, you consent to receive communications from us via email, SMS, calls, or other  mediums for order confirmations, security alerts, and customer support purposes.

Data Breach Notification In the unlikely event of a data breach, we will:

• Assess the extent and impact of the breach

• Take immediate corrective action to prevent future breaches

• Take any other action as required by law.

Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect  legal, technical, or business changes. Any modifications will be posted on this page with a  revised "Last Updated" date. We encourage you to review this policy regularly.

For questions, contact us at [info@greenkarmas.com]. For any discrepancy or grievance,  please contact our Grievance Officer at [insert contact details]. Last Updated: 8 Apr 2025