Privacy Policy

Introduction
The CRM Application (“Baam Loyalty Program”) is owned and operated by Modji India Private Limited (“we,” “our,” or “us”). We appreciate the trust our Application customers, and users (“you” “your” or “yours”) have placed in us. While accessing or using the Application, we may become privy to certain personal information of yours, including information that is confidential. Therefore, we insist that in order to discover more about how we collect, use, and disclose your personal information when you visit or make a purchase from the Application, you read our Privacy Policy (“Policy”) given below.
This Policy aims at safeguarding your confidentiality. We strive to take reasonable care to protect the information we receive from you and to abide by applicable data and privacy protection laws and regulations including but not limited to the Information Technology Act, 2000, The Digital Personal Data Protection Act, 2023, or any amendments, or rules thereof. We have established and created this Policy to inform you about the type of personal information we collect from you, how we use it, and what options you have to limit our use of the personal data related to you (“Personal Data”).
When you create your user account on the Application (“User Account”), you are deemed to have given the consent to allow us to collect, store, disclose, process, deal with, or transfer such Personal Data in the manner and for the purposes mentioned in this Policy or in any other policy on the Application (“Policies”). You may withdraw your consent at any time in accordance with the terms of this Policy. However, you are cautioned that once the consent is withdrawn, we have the right to discontinue any services provided to you.
By downloading, accepting updates to this application, or using it, you explicitly consent to the collection, use, and disclosure of your personal data in accordance with the terms outlined in our Policy. If you do not agree to these terms, please refrain from using or accessing the application.
Further, by accessing or using the Application or by otherwise giving us your Personal Data, you confirm that you have the capacity to enter into a legally binding contract as per the laws of India and consequently, you shall be deemed to have read, understood and agreed to the practices, terms and policies present in the Application and agree to be bound by their terms. Therefore, please read all the policies & terms present in the Application carefully before using the Application.
This Policy shall form an integral part of the Terms of Use and other Policies provided on the Application and shall be read or reviewed together.

This Policy applies exclusively to the collection of information through this Application and does not extend to Baam’s collection of information through other applications, by other means, or by any parent company or subsidiaries of Baam (“Other Entities”).
1. Collection of Personal Data
This Application collects your Personal Data in two ways: Personal Data submitted by you or permitted by you to be obtained.User Account Data: When you use the Application, create a User Account, or sign up for our services, you voluntarily give us certain Personal Data, such as your name, email address, contact number, and password.
Customer Support Data: We may collect your information when you contact us through (a) email or other means/tools available on the Application; or (b) telephone, including IVR channels or SMS for requesting support concerning the Application and/or services. This includes:(a) Information solicited by our support staff to validate your User Account and identity.
(b) A record of communication between you and our support staff, which may be used for monitoring and quality improvement.
(c) A response to a query or comment about the Application, products, or services.
(d) For reinstatement of accounts blocked or suspended by us on any ground under the Policies.
Sensitive Personal Data or Information (“SPDI”): The Application collects and stores personal information from you only when you voluntarily provide it.
Order Information: When you place an order through the Application, we may collect the following information: name, billing address, shipping address, payment information (including credit card numbers, debit card numbers, internet banking details, UPI ID), email address, and phone number, among others.
Personal Data shared automatically with us. When you access or use the Application, some Personal Data may get created or recorded automatically. Here are some of the types of Personal Data we collect:Device Information: We may collect information about the device on which you are using the services. The device information may include Personal Data such as type of device, operating system, device settings, unique device identifiers, and crash data. This information is necessary to optimise our Application according to the data gathered.
Log Data: In addition to the Device Information, while accessing or using the Application, our servers automatically record Personal Data, including Personal Data that your browser sends whenever you visit an Application. This log data may include:IP address
Browser type and settings
Operating system
Referring web page
Pages visited
Browsing history
Time zone
Location
Search terms
Cookie data
Interaction with the Application
Certain log data is automatically collected when you access our Application using cookies, log files, web beacons, tags, pixels, and default email collectors, etc., as we contract with third parties to provide payment gateway services. This is necessary to provide you with a fast and easy customer support service if you face any problems while accessing our Application.
Cookie Data: Depending on how you access the services, we may use “cookies” (a small text file sent by your device each time you visit the Application, unique to your User Account or browser) or similar technologies, such as web beacons or pixels, to record log data, analyse trends, gather demographic information, or track navigation through our Application.
Other Sources: To develop our services, we may search through the internet to receive further information concerning you, such as IP addresses, demographic information, location, email address, name, and use of social media Applications.
Some other types of information that we may collect about you are as follows:Demographic information: We may collect information that is not unique to you and refers to selected population characteristics including age, gender, location, and occupation.
Behavioural information: In addition to log data, we may collect information about how the Website is being used, including usage statistics, traffic data, access times and locations, your previous orders and transactions, including the product and pricing details, transaction information, and payment and browsing history.
Indirect information: Your use of certain third-party websites and applications requires us to collect such information as is considered necessary for that purpose.
We collect various types of data when you access or use the Application, including log data, cookie data, device information, demographic details, behavioural insights, and indirect information. Additionally, we collect User Account Information, Order Information, Customer Support Data, and Sensitive Personal Data or Information (SPDI) directly from you (collectively referred to as “Personal Information”). This data is essential for facilitating your use of the Application, enhancing its functionality, providing services, or as otherwise detailed in the policies outlined in the Application. By sharing your Personal Information with us, you expressly consent to its collection, storage, processing, transfer, and disclosure to third parties in accordance with the terms of this Policy. You may choose to not provide us with any or all the Personal Information, but in the event you do so, we may not be able to provide you with some or all of the services related to the Application.
Use and basis of use of Personal Data
We use the Personal Data we collect to provide our services to you and make them more effective, develop new products and services and protect us and our users.

Providing customized content:

Personal Data is essential for delivering the products or services you request, fulfilling our contracts, collecting payments, informing you about online and offline offers, products, services, and updates, processing your payment information, arranging shipping, and providing invoices or order confirmations/cancellations.
Personal Data enables us to communicate with you effectively, screen orders for potential risks or fraud, and, in line with your preferences, share information or advertisements related to our products.
Personal Data may be disclosed to our processor for business purposes.
Personal Data helps ensure the Application loads accurately and supports analytics to optimize your experience with the Application.
We use your Personal Data to troubleshoot issues, promote a secure service, gauge consumer interest in our products and services, customize your experience, enforce our terms and conditions, and for purposes disclosed at the time of collection.
Personal Data may also be used to provide you with targeted advertisements or marketing communications that we believe may align with your interests.
We may also use the Personal Data we collect to:

To Provide updates about activities on the Application, including email newsletters, promotional materials, and other information that may interest you. You have the option to stop receiving these updates or unsubscribe from email newsletters and notifications by updating your settings or following the provided procedures.
To Respond to your questions or comments.
To Send emails, invoices, and notifications related to billing and payment collection for the use of the Application and its services.
To Deliver system notifications, such as version updates, warnings, or changes to our Policies.
To Communicate with you in various contexts, including providing customer support, meeting legal obligations, or ensuring compliance with our Policies.
We may also use the Personal Data we collect to:

Operate and enhance the Application to ensure a positive user experience and support the overall improvement of our business.
Analyze data, track trends, build algorithms, and create databases for rating systems and recommendation engines.
To Conduct research for purposes such as frequency capping, compliance, billing, ad reporting or delivery, market research, or product development.
To Perform audits and quality assessments for the Application and its services.
To Analyze resource usage, troubleshoot issues, and optimize the Application and services.
To Investigate, prevent, or address illegal activities, suspected fraud, potential safety threats, violations of the Terms of Use or Policies, or comply with legal requirements, including initiating legal proceedings if necessary.
Respond to queries, communicate important information, and provide notifications about promotions, alerts, or updates related to the Application.
Reach out periodically to gather your feedback on the application and its current services, as well as explore potential future offerings.
We process Personal Data for these purposes on the following basis:

To fulfil the contract we have entered into with you or to take pre-contractual measures at your request.
To establish, exercise, or defend legal claims or proceedings.
To comply with legal and regulatory obligations and statutory requirements.
To serve legitimate interests, including those outlined above.
Based on your consent.
The Personal Data we collect may be “personally identifiable” (i.e., used to uniquely identify you) or “non-personally identifiable” (i.e., not capable of uniquely identifying you unless combined with other data). We use and process both types of data, as well as their combinations.

We may use, transfer, or store Personal Data in any location where we conduct business, including outside your country of residence, and with third parties on their servers acting on our behalf. Such activities are always conducted in accordance with this Privacy Policy and applicable laws or regulations.
Control over Personal Data?
Our goal is to provide you with straightforward options to exercise control over your Personal Data. If you have a User Account, many of these controls are integrated into the Application or accessible through your settings.

Scope
For example, you can modify or delete Personal Data from your profile at any time. Additional options may also be available through the device or software you use to access the Application. For instance, your browser may allow you to manage cookies or other forms of local data storage. For more details, refer to the Personal Data policies provided by your device manufacturer or software provider.

Deactivation or Deletion of Your User Account
You may deactivate your User Account anytime by accessing your settings and selecting “Deactivate Account.” After deactivating, you can request to reactivate or delete your User Account. To delete your User Account and associated Personal Data, select “Delete Account” in your settings. Once deleted, your Personal Data will be removed from our systems within a maximum of 365 days unless required by law or legitimate business purposes, such as fraud prevention or spam mitigation. Please note that once your User Account and data are deleted, this action cannot be undone.

Be aware that some Personal Data shared on third-party applications may remain accessible, as we do not control those platforms. Your Personal Data might also appear in online searches or remain visible if shared with others or copied by other users. Only share Personal Data with trusted individuals, as they may save or re-share it, including syncing it to other devices.

Retention
In all other cases, we will retain your Personal Data in compliance with applicable data protection laws unless you explicitly request its deletion.

Further Rights to Your Personal Data
You can adjust your preferences regarding your Personal Data rights, as outlined in Section 7 of this Privacy Policy.
Sharing and Disclosure of Personal Data
Limited Instances of Sharing Your Personal DataLegal Compliance and Protection: To comply with laws, regulations, or legal requests; to protect the safety, rights, or property of the public, businesses, or individuals; to detect, prevent, or address fraud, security, or technical issues; and to comply with subpoenas, enforce search warrants, or respond to other lawful requests. Such actions are taken in good faith to safeguard our rights or the rights of others.
Business Transactions: In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, or any similar transaction or proceeding involving the transfer of Personal Data as outlined in this Privacy Policy.
Service Providers and Third Parties: To authorized third parties performing functions on our behalf, including but not limited to administrative services, IT support, telecommunication services, mailing, payment processing, data storage, and auditing. We may share your Personal Data with these service providers and other corporate entities to facilitate service delivery, fulfill contracts, comply with legal obligations, support marketing and advertising activities, or investigate fraudulent or illegal activities.
These service providers and entities may promote their products and services to you unless you explicitly opt out. Sharing your data is essential for delivering our services and ensuring compliance with our obligations as described in this Privacy Policy.
Protection of Personal Data
To safeguard your Personal Data in compliance with applicable data protection and privacy laws, we have implemented robust technical and organizational measures. These measures ensure the highest level of security against potential loss, misuse, or unauthorized alteration of the data under our control.

Technical Measures

We utilize industry-leading technology to protect your Personal Data. Key steps include:

Encryption: Your confidential Personal Data is automatically encrypted during transmission from your device to our servers using Secure Sockets Layer (SSL) protocol with a 128-bit encryption key, the highest level commercially available. Before you sign up or log in to our Application, our server verifies that your browser supports SSL 3.0 or higher.
Secure Servers: Once collected, your Personal Data is stored on secure servers protected by electronic firewalls. These servers are not directly connected to the internet, ensuring that your data is accessible only to authorized systems.
Fraud Detection and Monitoring: We use automated processes to analyze account activity for fraudulent or unusual behavior. These measures help detect and respond to abuse, remove inappropriate content or links, and suspend or disable accounts that violate security protocols.
Organizational Measures

We maintain detailed records of Personal Data and processing activities for the duration required by law. This ensures compliance with legal obligations while supporting the secure management of your Personal Data.

By implementing these measures, we strive to uphold the security and integrity of your Personal Data at all times.
Protection measures by you
To help protect your Personal Data, we recommend the following security measures:

Limit Access: Do not grant third parties access to your computer or devices when using the Application.
Keep Credentials Confidential: Safeguard your login credentials, including access codes and passwords for both your devices and the Application.
Update Antivirus Software: Regularly update your antivirus software as requested by the provider or whenever an update becomes available.
Avoid Sending Confidential Information: Refrain from sending confidential information through the Application and services. When using our services, your email may pass through multiple servers as it travels across the internet, and server administrators may potentially access your information.
While we implement robust measures to protect your Personal Data, we ask for your cooperation in following the above personal security practices.

By using the Application, you agree that the security measures we have in place are reasonable to safeguard your Personal Data. However, we disclaim liability for any breach of security, unintended loss, or disclosure of your Personal Data. We can only ensure that your Personal Data is accurate and up-to-date if you provide us with the necessary information and notify us of any changes.
Your rights
Consent: You have the right to give or withdraw your consent for us to collect and process your Personal Data for the purposes described in our Privacy Policies. You may modify or withdraw your consent at any time by adjusting your settings or by contacting us directly at dharmendra.y@ozone-india.com.
Irreversibility of Deletion: Please note that once your Personal Data is deleted, it cannot be restored. Additionally, withdrawing your consent or deleting your User Account may prevent us from providing our services and could terminate any existing relationship we have with you. You also have the right to object to the processing of your Personal Data, subject to applicable legal restrictions.
Access and Confirmation: You are entitled to request confirmation and information about whether, where, and for what purposes your Personal Data is being processed. You may access your Personal Data without limitations.
Rectification: You can update or correct your Personal Data at any time through your settings. It is your responsibility to ensure that your Personal Data remains complete, accurate, and up-to-date.
Storage and Retention: Your Personal Data will be retained for as long as your User Account remains active or as required by law. During the deactivation of your User Account, we may continue to store your Personal Data. If you request deletion, we will remove your Personal Data within 365 days, unless retention obligations apply.
Retention for Legal Purposes: We may retain your Personal Data for legal purposes, such as the exercise or defence of legal claims, compliance with legal obligations, requests from official authorities, or archiving purposes in the public interest.
Breach Notification: In the event of a data security incident that may pose a high risk to your rights and freedoms, we will notify you immediately.
Third-Party Links
The Application may contain hyperlinks to external Applications, advertisements, or other third-party resources (“Third-Party Links”).
We do not control the content or practices of these Third-Party Links, which are provided by entities other than us. By using the Application, you acknowledge and agree that we are not responsible for any collection, use, or disclosure of your information by external sites, applications, or companies. This Privacy Policy governs the information provided to us through this Application and does not apply to information you share with third parties. You are subject to the privacy policies and terms of use of those third-party sites.
The presence of Third-Party Links on the Application should not be interpreted as an endorsement, recommendation, or solicitation of content, products, services, or materials found on such links. We do not guarantee that we have reviewed or approved the content of any third-party resources.
You further acknowledge and agree that we are not liable for any loss or damage resulting from the collection or disclosure of your information via Third-Party Links or any reliance on the accuracy, completeness, or existence of advertising, products, services, or other materials found on those links.
Any transactions or exchanges of information between you and third-party sites or resources are strictly between you and the third party. We are not responsible for any disputes arising from such transactions.
Third-party applications or resources linked to via Third-Party Links may have their own privacy policies governing the collection, use, retention, and disclosure of your information, and you may be subject to those policies.
We recommend that you exercise caution and use sound judgment when interacting with third-party sites, including reviewing their privacy policies before making any transactions or exchanging personal information.
Use of Website by a Minor
The Application, its services, and the products and services available on the Application are not intended for use by children. We do not knowingly collect Personal Data from users under the age of 18.

If we discover that we have inadvertently collected Personal Data from a child, we will promptly delete such data in accordance with applicable laws. If you become aware that a minor has created a User Account or listed their information on the Application, please contact us immediately at the address provided below. Upon such discovery, we will immediately discontinue providing services to the user and take appropriate action to remove their information.
Do Not Track
Please be aware that, as there is no consistent industry standard or understanding regarding how to respond to “Do Not Track” (DNT) signals, we do not alter our data collection and usage practices in response to such signals detected from your browser when using the Application.
Updates to Privacy Policy
We may update this Privacy Policy from time to time, and any changes will be posted on this page. If we believe a revision is significant, we may, at our sole discretion, notify you. We also reserve the right to determine the most appropriate method of notification, and you agree to receive notices electronically if we choose to do so.

You are encouraged to review this Privacy Policy periodically. Your continued access or use of the Application and/or its services after a revision becomes effective indicates your acceptance of the updated policy and your agreement to be bound by it. If you do not agree with the revised policy, please discontinue your use of the Application and/or its services and refrain from providing any further information to us.
Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Thane Maharashtra, India.
Queries
If you have any questions concerning our Privacy Policy or would like to make a complaint, please contact us by e-mail at dharmendra.y@ozone-india.com or write to us at the addresses provided below:

P1/5, Munidhara, Munisurat Complex Phase-2, Anjur Phata, Village-Rehnal, Taluka-Bhiwandi, District -Thane, MAHARASHTRA – 421302