Introduction

This Privacy Policy describes how THE HOLLY HERBS and its affiliates (collectively “THEHOLLYHERBS.COM”, “we”, “our”, “us”) collect, use, share, protect or otherwise process your personal data through our website www.thehollyherbs.com (hereinafter referred to as “Platform”).

We do not offer any product/service outside India and your personal data will primarily be stored and processed in India.

By visiting this Platform, providing your information or availing any product/service, you agree to be bound by this Privacy Policy, Terms of Use and applicable Indian laws relating to data protection and privacy. If you do not agree, please do not use our Platform.

Information Collection

We collect your personal data when you use our Platform or interact with us. This may include:

• Name, date of birth, address, mobile number, email ID
• Identity/address proof information
• Bank account, debit/credit card or payment information (with consent)
• Biometric or facial data (if required for specific features)
• Transaction details and purchase history

You may choose not to provide certain information, but this may limit access to specific services.

If you receive any suspicious call/email asking for your debit/credit card PIN or banking password claiming to be HOLLY HERBS, do not share such information and report immediately to authorities.

Usage of Information

• Provide and improve our services
• Process orders and transactions
• Enhance customer experience
• Resolve disputes and issues
• Send offers and product updates
• Prevent fraud and illegal activities

You may opt-out of marketing communications at any time.

Information Sharing

We may share information with:

• Internal group entities and affiliates
• Business partners
• Logistics partners and payment providers
• Government authorities if required by law

Third-party partners may have their own privacy policies, and we encourage you to review them before sharing your information.

Security Precautions

We adopt reasonable security practices to protect your personal data from unauthorized access, misuse or disclosure.

However, transmission of data over the internet cannot be guaranteed as 100% secure. Users are responsible for maintaining the confidentiality of their login credentials.

Data Deletion & Retention

You may delete your account through your profile settings or by contacting us.

Account deletion may be delayed if there are pending grievances or transactions.

We retain personal data only as long as required under applicable law or for legitimate business purposes. Anonymized data may be retained for research and analytical purposes.

Your Rights

You may access, update, or rectify your personal data directly through the Platform functionalities.

Changes to this Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be notified as required under applicable laws.

Consent

By using our Platform, you consent to collection, use, storage and processing of your information in accordance with this Privacy Policy.

You may withdraw consent by writing to our Grievance Officer with the subject line:“Withdrawal of consent for processing personal data”.

Withdrawal will not be retrospective and may restrict certain services.