Privacy Policy

FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting it. This Privacy Policy (“Policy”) describes how the Company collects, uses, discloses, and transfers your personal information through the online platforms it controls, including the Company’s website (e.g., our official website) and any mobile sites or applications (collectively, the “Platform”). This Policy applies to all individuals (“Customers”, “you”, or “your”) who access, browse, or use the Platform, or otherwise provide information to the Company in connection with the purchase or use of its products and services. The Policy is formulated in compliance with applicable laws and regulations in India.

This Policy does not apply to information collected from you offline (unless otherwise specified), to any other websites operated by the Company that do not link to this Policy, to Customers outside of India, or to third-party websites that may be linked from our Platform. We encourage you to read this Policy carefully to understand our practices regarding your information.

For the purpose of this Policy, “Personal Information” means any information that relates to an individual and that, either directly or indirectly, in combination with other information available or likely to be available with the Company, is capable of identifying that individual and is collected via or submitted to the Platform and maintained by the Company in an accessible form. However, any information that is freely available or accessible in the public domain, or furnished under the Right to Information Act, 2005 or any other applicable law, is not considered Personal Information for the purposes of this Policy.

By accessing or using our Platform and providing your information, you acknowledge that you have read this Policy and you consent to the collection, use, storage, disclosure, and transfer of your information as outlined in this Policy. This includes, but is not limited to, your consent for sharing your information with third parties in accordance with this Policy. If you do not agree with any term in this Policy, please do not use or access our Platform. Continued use of the Platform signifies your acceptance of this Policy.

Furthermore, by providing your contact information (such as phone number or email) to the Company, you expressly consent to receive communications from us related to our products and services. You agree that we may send you communications (including promotional or marketing messages) via email, SMS, phone calls, or other means. You consent to receive such communications on the mobile number you provide even if it is registered on the Do Not Disturb (DND) / National Customer Preference Register (NCPR).  Notwithstanding any registration you may have with the National Do Not Call Registry or NCPR under the Telecom Regulatory Authority of India’s rules, you hereby provide your explicit consent to receive our communications. You further confirm that any such communication from the Company shall not be considered Unsolicited Commercial Communication under the Telecom Commercial Communications Customer Preference Regulations, 2018 (“TRAI Regulations”), since you have solicited our communication by providing your contact information and consenting to this Policy.

We collect Personal Information about you through various means and sources. These include:

• Information You Provide Directly: When you interact with our Platform or with the Company’s services, you may voluntarily provide Personal Information. This happens, for example, when you create an account, fill in forms on the Platform, enter information in data fields, participate in surveys or promotions, submit inquiries, or contact our customer support. You might provide your name, postal address, email address, phone number, and other details when registering on our Platform, placing an order for our products, signing up for newsletters, requesting information about our products, or responding to surveys and offers. We may also collect information you share with us through sponsored events, contests, or our pages on social media platforms. Please do not provide any Personal Information that we do not explicitly request; to protect your privacy, you should only share information necessary for the relevant service. You can choose not to provide certain information, but doing so might limit your ability to use some features of our Platform (for example, you might not be able to place an order or receive certain notifications if requisite information is withheld).
• Information Collected Automatically: We automatically collect certain information about your visit and usage of our Platform through cookies and other tracking technologies (such as internet tags, pixels, and web beacons). Whenever you interact with the Platform, our systems may collect data about your browsing actions and patterns, including details of your visits such as traffic data, location data, logs, and other communication data. For example, we may log the URL of the website you visited before coming to our Platform, your browser type and version, the pages you view on our Platform, the dates/times of your visits, and other technical information. We may also collect device information such as your device’s unique identifier, operating system, and geolocation (if you have enabled location services on your device). These passive information collection technologies help us to remember your preferences, understand how you use our Platform, customize your experience, compile aggregate statistics to analyze how our Platform is used, and improve our services. Some features of the Platform may not function properly without these technologies. The information collected automatically is generally statistical data about our users’ browsing activities and patterns, and by itself typically does not identify you personally unless combined with other identifying information.
• Information from Third-Party Sources: We may receive information about you from third parties and combine it with data we collect through our Platform. For example, we might obtain updated delivery or contact information from a courier or fulfillment service to correct our records and deliver your next order more easily. If our products or promotions are featured on third-party platforms and you opt-in to receive information from us via those platforms, they may share certain information with us (in accordance with their privacy policies and your settings on those platforms). Additionally, if you choose to engage with our content via social networks or login to our Platform through a social media account, you might allow us to collect (or the third party to share) information such as your social media user ID, public profile information, friends list, email address, or other content you have made public. We might also receive marketing and demographic data about you from analytics partners or advertising networks that enable us to better tailor our offerings and advertisements to your interests. Please note that any information we obtain from third-party sources will be treated in accordance with this Policy. However, the Company is not responsible for the privacy practices of third-party websites or services that it does not own or control. We recommend reviewing the privacy policies of any third-party services you use to ensure you are comfortable with how they collect and share your data.

In addition to the above, please be aware that if you contact our customer care center by telephone, we may record those calls for quality assurance and training purposes. These recordings are treated as confidential and are used solely to improve our customer service and address your queries effectively.

We limit our collection of Personal Information to what is necessary to provide you with our products or services, to process your orders or requests, and to continually improve our offerings. Depending on your interactions with us, we may collect and process various categories of Personal Information, including but not limited to the following:

• Contact Information: Examples include your name, email address, telephone number(s), postal/billing address, shipping address, and country of residence.
• Demographic Details: This may include your date of birth, age or age range, gender (if you choose to provide it), language preferences, and general location information (such as city or region).
• Account Credentials: If you create an account on our Platform, we will collect the username and password that you choose. (Please note that we maintain this information securely and you are responsible for keeping your login credentials confidential.)
• Identifiers and Device Information: We may collect unique identifiers like your IP address, device ID, or other identifiers associated with your devices. We also gather technical information about your device and internet connection (e.g. browser type, operating system, and platform).
• Transactional Information: Details about products you have browsed, added to cart, or purchased from us, including preferences or interests in certain products. We also maintain a record of your purchases and interactions with our Platform (such as your order history, product reviews, and customer service inquiries).
• Financial and Payment Information: When you make a purchase, you may provide payment details such as your credit card, debit card, UPI or other payment instrument information, and billing address. Important: For security, payments on our Platform are processed via PCI-DSS compliant third-party payment gateways. Your payment information is provided directly to these payment processing providers over secure connections. The Company itself does not store your full financial details like credit card numbers or CVV on our servers, except for limited information necessary for transaction records (for example, the last few digits of your card or transaction IDs). Our payment processors are authorized to use this information only to process payments on our behalf and are not permitted to use it for any other purposes.
• Delivery Information: If you ask us to deliver a product to someone else (for example, if you are sending a gift), we collect the name, shipping address, and phone number of the intended recipient. We use this information only to fulfill your requests.
• Publicly Available Data: We might collect information about you that is publicly available, including information you have made public on social media networks, public databases, or information that appears online (for example, public profiles, articles or public records). We treat such information in accordance with applicable laws.
• Preferences and Feedback: This includes any preferences you set on our Platform (such as communication or language preferences) and feedback or opinions you voluntarily provide about our products or services (for instance, through reviews, surveys, or customer support interactions).
• Usage Data: Information about how you use our Platform, such as the pages or content you view, the features you use, your browsing timestamps and durations, referral URLs, and similar usage information. Some of this data is collected automatically via cookies and similar technologies as described in the Cookies section of this Policy.
• Location Information: With your consent, we may collect geolocation data from your browser or mobile device. For example, we might collect your precise location to help you find the nearest retail store carrying our products or to provide location-based services or content (you can control location sharing through your device or browser settings).
• Communications: Copies of your communications with us, whether via email, chat, customer service calls, or social media messages. This may include inquiries you have made, any complaints or feedback, and our responses.
• Miscellaneous Information: Any other information that you voluntarily provide to us (for example, if you respond to a special offer, or submit additional data in a form on the Platform).

Please note that we do not knowingly collect any sensitive personal data (such as information about your health, sexual orientation, medical records, biometric information, etc.) unless it is specifically necessary for providing a service to you and you have explicitly consented to providing such information. We also do not intentionally collect any information about your political or religious beliefs, genetic data, or any data classified as “sensitive personal data or information” under applicable law, except in compliance with the law.

We collect and use your Personal Information for various business and operational purposes in a fair and lawful manner. The primary purposes for which FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED may use your information include:

• To fulfill orders and provide services: To verify your identity, process your registrations or orders, facilitate transactions, and deliver the products or services you have requested. For example, we use your information to process payments, fulfill product purchases, provide order confirmations, and arrange shipping.
• To communicate with you: To communicate about your account or transactions, send you confirmations, updates, invoices, technical notices, security alerts, and support and administrative messages. We may also contact you to inform you about changes to our terms, conditions, and policies.
• Customer service and support: To respond to your inquiries, requests, or complaints, and to help troubleshoot problems. Your information helps us support you efficiently, whether you reach out via phone, email, chat, or social media. For instance, if you contact our customer care, we will use your information to verify your identity and address your concern.
• Marketing and promotional purposes: To send you newsletters, promotional communications, surveys, marketing messages, or other information that may be of interest to you, only if you have not opted out of such communications. This includes responding to any entries you make in contests, promotions, or surveys, and providing you with information about special offers, new products, or other updates. We may ask for your ratings or reviews of our products and follow up with you after you have communicated with us (such as via a customer support chat or an email inquiry) to ensure your issues are resolved or to notify you of related products and services.
• Personalization: To better understand your preferences and to personalize your experience on our Platform. For example, we may use your browsing and purchase history to recommend products or services you might be interested in, or remember your preferences for future visits. Personalization also includes tailoring the content and advertisements you see on our Platform or third-party sites to be more relevant to you.
• Analytics and improvement: To conduct internal research and analytics about user behavior, demographics, interests, and how our customers use our Platform. This helps us identify trends, understand the effectiveness of our marketing and customer service efforts, and improve our products, services, and the functionality of our Platform. For example, we analyze aggregated usage data to see which pages or products are most popular, to fix bugs, and to optimize the user experience and performance of our services.
• Contests and interactive features: To administer and fulfill our contests, sweepstakes, surveys, or other site features that you choose to participate in. If you enter a contest or promotion, we will use your information to register you, ensure you are eligible, contact you if you win, and to provide the contest results (in accordance with the contest terms that will be provided to you separately).
• Social features: To allow you to use social media features on our Platform. For example, if you choose to log in via a social network (such as using your Facebook or Google account) or share activities from our Platform on social media, we will facilitate that login or sharing. We might also post your testimonials or reviews on our Platform (with your permission).
• Advertising: To show you advertisements and sponsored content, both on our Platform and on third-party sites or platforms that we advertise through. We may use your information to keep track of which ads have been shown to you so that you don’t see the same advertisement too many times, and to measure how effective our advertising campaigns are. (For more details on how we use cookies and advertising networks, see the sections on Cookies and Third-Party Analytics below.)
• Order updates and transactional notifications: To send you communications related to your transactions, such as confirmation of your order, updates on shipping status, and any important notices about your account or orders. We may also send you related offers or promotions about similar products and services that might be of interest, as permitted by law.
• Security and fraud prevention: To ensure the security of our Platform and customers. This includes using your information to detect, prevent, or investigate fraud, malware, or other illegal or malicious activity. We may use data to verify accounts and user activity, monitor suspicious or potentially illegal activity, enforce our terms and conditions, and protect the rights and safety of our Company, our customers, or others.
• Legal compliance: To comply with our legal and regulatory obligations. For instance, certain laws might require us to maintain transaction records or respond to legal requests (like court orders or government inquiries). We will use and share your information as necessary to meet such requirements.
• Enforcing terms and defending rights: To enforce our agreements, terms of service, and this Privacy Policy. Also, to establish, exercise, or defend legal claims and protect our rights or the rights of others. For example, if there is a dispute or legal claim, we may use your information as evidence or to demonstrate our compliance with applicable laws. In connection with this, we may seek advice from professional advisors (like attorneys or auditors) and share information with them as needed.
• Other purposes: We may use your Personal Information for other legitimate business purposes, which will be described to you at the point of collection or with your additional consent, if required by law.

We will not collect additional categories of Personal Information or use the collected information for materially different, unrelated, or incompatible purposes without updating this Policy or obtaining your consent as required.

Our processing of your Personal Information is justified by different legal bases under applicable data protection laws (to the extent such laws apply). We rely on the following legal grounds:

• Performance of a Contract: In many cases, the processing of your Personal Information is necessary to perform a contract to which you are a party, or to take steps at your request prior to entering into a contract. For example, when you purchase products from our Platform, we must process your contact details, payment information, and delivery address to fulfill your order. We cannot provide the services you request without this information.
• Legitimate Interests: We may process your information when it is in our legitimate interests to do so, and when these interests are not overridden by your rights. This includes using your Personal Information to maintain and improve our business (such as fraud prevention, securing our Platform, direct marketing to our customers, improving user experience, etc.). For instance, sending you promotional communications about our new products or analyzing your use of our Platform to improve performance are activities we undertake in our legitimate interest. We always consider and balance any potential impacts on you and your rights before processing your Personal Information on the basis of legitimate interest.
• Legal Obligation: Some processing is necessary for us to comply with a legal obligation. For example, we may be required by tax laws, consumer protection laws, or other regulations to retain certain transaction records for a defined period, or to disclose information to governmental authorities in response to legal processes. In such cases, we will process and share your information as required by applicable law or regulation.
• Consent: Where required by law, and in certain other instances, we rely on your explicit consent to process specific Personal Information. For instance, before we collect precise location data from your mobile device or send you certain marketing communications, we will ask for your consent. Similarly, if we ever collect any sensitive personal data, we will do so only with your consent and as per applicable law. When we process data based on your consent, you have the right to withdraw your consent at any time (see the User Rights section below for details on how to withdraw consent). Withdrawal of consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and we may continue certain processing if we have an alternate legal basis to do so (for example, retaining transaction records for legal compliance even after you withdraw marketing consent).

Anonymized and Aggregated Data: In addition to the uses described above, we may also convert your Personal Information into data that cannot be linked to you personally (either by irreversibly anonymizing it or aggregating it with other users’ data). We use anonymized and aggregated information for purposes that include testing our IT systems, research, data analysis, improving our services, and developing new products. Such information does not identify you and is not considered Personal Information. We may share anonymized or aggregated data with third parties (such as research firms or business partners) for analytical or statistical purposes, but we ensure that no individual is identifiable through this data.

Our Platform uses cookies and similar tracking technologies (such as pixel tags and web beacons) to enhance user experience, gather usage information, and support our marketing efforts. A “cookie” is a small data file that a website places on your computer or mobile device when you visit the site. Cookies are widely used by websites to make their operations work more efficiently and to provide analytical information to site owners.

What Cookies Are: Cookies are text files containing small amounts of information that are downloaded to your browser or device when you visit a website. They allow the website to recognize your device on subsequent visits or as you navigate between pages. Cookies may store data such as user preferences, session information, and other details that can improve your browsing experience. For example, a cookie might remember the items in your shopping cart or your login information so you don’t have to re-enter it every time.

How We Use Cookies: We use cookies (and similar technologies) for a variety of purposes, including to:

• Understand and save your preferences for future visits (for example, language selection or items saved in your cart).
• Keep track of advertisements and measure their effectiveness. Cookies help us ensure that the same ad is not shown to you repeatedly and help us understand if you clicked on an ad or visited our site as a result.
• Compile aggregate data about site traffic and site interaction. This helps us identify trends and obtain statistics so we can offer better site experiences and tools in the future. For instance, we may use cookies to see how many users visited a specific page or what links are clicked most often. We may also use trusted third-party services (such as analytics providers) that set their own cookies to assist us in analyzing this information.

Your Choices Regarding Cookies: By continuing to use our Platform, you agree to our use of cookies and similar tracking technologies as described in this Policy. However, we respect your right to choose whether or not to accept cookies. Most web browsers are initially set up to automatically accept cookies, but you can modify your browser settings to notify you when a cookie is being set or updated, or to block cookies altogether.

• Browser Settings: If you do not wish to allow cookies, you can adjust your browser settings to refuse some or all cookies or to alert you when cookies are being sent. Each browser is a little different, so look at your browser’s “Help” menu or settings to learn the correct way to modify your cookie preferences.
• Consequences of Disabling Cookies: If you choose to disable cookies on your browser, please note that some features of our Platform may not function properly or may become unavailable. For example, you may not be able to add items to your cart, proceed to checkout, or use features that rely on remembering your actions or preferences. Despite this, you will still be able to browse the Platform, and you will still be able to place orders by other means (such as contacting customer service) if the online functionality is impaired. Disabling cookies will not prevent you from seeing advertisements; however, those advertisements may be less relevant to you.

Other Tracking Technologies: In addition to cookies, we (and certain third parties) may use other tracking technologies like web beacons (also known as clear GIFs or pixel tags). These are tiny graphics files that contain a unique identifier and track online movements of users or deliver cookies. They help us count users who have visited certain pages or understand usage patterns. For example, in emails, they can tell us if an email was opened or forwarded. These technologies often work in conjunction with cookies. If you disable cookies, web beacons may still detect an anonymous visit, but they will not be able to associate it with your cookie information.

For more information about our use of cookies and how to manage them, you may refer to our Cookie notice (if available) or contact us using the information in the Contact section of this Policy.

We take the security of your Personal Information seriously and implement a range of measures to safeguard it from unauthorized access, alteration, disclosure, or destruction.

Storage of Information: Personal Information collected from you may be stored on our secure servers, and/or on the servers of trusted third-party cloud service providers with whom we have contracted. The Company uses reputable hosting and cloud storage providers that employ robust security practices. Any third parties responsible for storing or processing your data on our behalf are contractually obligated to maintain security measures that are at least as protective as our own standards. These providers are not permitted to access or use your Personal Information except for storage and retrieval purposes essential to their services, and we ensure they adhere to applicable privacy laws.

We may store and process Personal Information in India. In some cases, your data might be transferred to and stored on servers located in another country (for example, if we use a cloud service with data centers outside India). Regardless of where the data is stored, we will ensure that your Personal Information remains protected in a manner that is consistent with this Policy and applicable law. We retain your Personal Information only for as long as necessary, as outlined in the Retention section, and it is securely deleted or anonymized thereafter.

Security Measures: The Company has implemented appropriate physical, technical, and organizational security measures designed to protect your Personal Information. These include:

• Physical Safeguards: We restrict access to offices, databases, and files that contain Personal Information. For example, our facilities and servers are secured with measures such as locked file cabinets for physical documents, access control systems, surveillance, and alarm systems. Only authorized personnel are allowed in areas where sensitive data is stored.
• Technical Safeguards: We use modern security tools and best practices to protect data. This includes the use of strong password protection protocols, encryption technologies, and secure communication channels. Whenever you enter sensitive information (such as payment details) on our Platform, that data is transmitted using Secure Socket Layer (SSL) encryption or equivalent technology. SSL encrypts information during transfer to prevent eavesdropping. Our website and backend systems are protected by firewalls and intrusion detection systems to guard against external attacks. We also employ regular malware and vulnerability scanning on our Platform to detect and neutralize threats.
• Organizational (Administrative) Safeguards: We have internal policies and procedures to ensure Personal Information is handled and protected properly. Access to Personal Information is granted only to employees and contractors on a need-to-know basis – i.e., only to those people who require it to perform their job duties (for example, customer service, order fulfillment, etc.). Those who have access to Personal Information are required to keep it confidential and have signed non-disclosure or confidentiality agreements as part of their terms of employment or service. We provide training to our staff about the importance of privacy and security, and we have designated personnel responsible for monitoring our compliance with data protection practices.

In addition to the above, we maintain secure network infrastructure. Personal data is contained within secured networks and databases that are password-protected. We also implement security measures when you use the Platform; for instance, the Platform is programmed to use encryption and secure protocols when you log in or submit information, and we maintain logs and audit trails for critical transactions. We periodically review our security procedures to consider appropriate new technology and updated methods.

No Guarantee of Absolute Security: While we strive to protect your Personal Information with high standards, it is important to note that no method of transmitting information over the Internet or storing data is completely secure. We cannot guarantee absolute security of your data; any transmission of data to our Platform is at your own risk. In the event of a security breach, we have procedures in place to promptly notify the affected individuals and the appropriate authorities as required by law.

Except to the extent liability cannot be excluded or limited by law, the Company is not liable for any unauthorized access to or disclosure of your Personal Information that is beyond our reasonable control. For example, if an unauthorized actor circumvents our security measures to access your data, or if you share your account credentials with others resulting in unauthorized access, the Company will not be responsible for any resulting loss, damage, or harm. We urge you to keep any account password secure and to contact us immediately if you become aware of any unauthorized use of your account or any other breach of security.

Retention of Personal Information: We will retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable laws and regulations. This means that we keep your data for as long as you maintain an account with us or as long as is needed to provide you with the products or services you have requested. Even after you close your account or cease using our services, we may be required to retain certain data for a longer period to comply with legal obligations (for example, record-keeping under tax or commerce laws), to resolve disputes, to enforce our agreements, or for other legitimate internal business purposes.

For example, we may retain a record of your purchases or communications with us for a certain period as mandated by law or as necessary for legal reporting or auditing requirements. We may also keep information to prevent fraud or protect the Company’s legal interests. In all cases, when determining retention periods, we take into account various criteria such as the type of products or services provided to you, the nature and length of our relationship with you, mandatory retention periods provided by law, and the statute of limitations.

During the period when we store your Personal Information, we continue to apply the security measures outlined in this Policy to protect it. We also ensure that access to retained data is limited to authorized personnel and that it is used only for the purposes it was collected (unless you consent to a new use or as required by law).

Disposal of Personal Information: Once the Personal Information we have collected is no longer necessary for the purposes outlined in this Policy, and we are not otherwise legally required or permitted to continue storing it, we will take appropriate steps to remove it from our systems and records. This may include permanently deleting the information or anonymizing it (so that it can no longer be associated with or used to identify you). We strive to ensure that Personal Information is not retained longer than required.

For instance, if you request deletion of your data and we have no legal obligation to keep it, we will securely delete or anonymize your information. In cases where data is stored as part of backups or archives that are not immediately deletable, we will ensure that it remains securely protected until those archives are overwritten or destroyed in due course.

By retaining your Personal Information as set out above, we are able to maintain the integrity of our databases, fulfill any legal requirements, and ensure that your rights (such as the right to access your transaction history) are preserved. When we dispose of Personal Information, we do so in a manner that prevents loss, theft, misuse, or unauthorized access to the data (for example, by using secure deletion methods for electronic files and shredding physical documents).

We value your privacy and limit the sharing of your Personal Information to what is described in this Policy. The Company does not sell or rent your Personal Information to third parties for their own marketing use. We share your Personal Information only with trusted entities and persons, and only in the ways described below, ensuring that appropriate confidentiality and security measures are in place.

Authorized Personnel: Within the Company, your Personal Information is accessed only by a limited number of personnel who are properly authorized and have a legitimate need to know in order to perform their duties (for example, the teams handling order fulfillment, customer support, accounting, etc.). These persons are bound by confidentiality obligations.

Group Companies and Affiliates: We may share your Personal Information with our parent company, subsidiaries, and affiliated companies (collectively, our “affiliates”) for purposes consistent with this Policy. Our affiliates might assist in processing data, storing information, or providing services to you (for example, a related entity might manage loyalty programs or centralized customer service). Any affiliate that receives your Personal Information will handle it with the same level of care and protection as we do and will use it only for the purposes we specify. In some cases, sharing information with our affiliates helps us detect and prevent fraud, identity theft, or other illegal activities by allowing us to correlate information about common customers or transactions.

Service Providers and Business Partners: We employ or partner with other companies and individuals to perform functions and services on our behalf. This includes, for example:

• Payment processors and financial institutions (to handle secure payment transactions).
• Courier and shipping companies (to deliver your orders to you).
• IT service providers and cloud storage providers (to host our Platform and store data securely).
• Marketing, advertising, and analytics partners (to send communications, serve ads, and analyze data as described in this Policy).
• Customer support service providers or call center operators (to assist with customer inquiries and services).
• Consultants, auditors, or professional advisors (to support our business operations and ensure legal compliance).

These third-party service providers are given access only to the Personal Information necessary for them to perform their specific obligations, and only for the purpose of providing services to us (and, by extension, to you). They are not permitted to use your information for any other purpose. We require that these parties process Personal Information in accordance with this Policy and applicable law, and that they keep the information confidential and secure. For instance, our delivery partners will use your name and address solely to deliver packages; our email service providers will use your email address only to send communications that we instruct them to send.

Business Transfers: As we continue to develop our business, we might sell, merge, or reorganize one or more of our businesses or assets. In the event of a proposed or actual business transfer (such as a merger, acquisition by another company, sale of all or a portion of Company assets, or in connection with any bankruptcy or restructuring), your Personal Information may be disclosed to the prospective or actual acquiring party and its advisors. We will ensure that any such disclosure is subject to appropriate confidentiality protections. If the transaction goes through, your Personal Information will likely be one of the assets transferred to the new owner so that service can continue. The new owner, or merged entity, will be entitled to use your information in the manner described in this Policy, and any choices you have made regarding your information (such as opting out of marketing communications) will be honored by the new entity to the extent possible.

With Your Consent to Third Parties: We may offer you opportunities to receive information or marketing offers from third parties (for example, if we co-sponsor a contest or promotion with a partner, or if we present an option to sign up for a partner’s products or services). If you explicitly consent to us sharing your Personal Information with a named third party (or category of third parties), we will share your information as authorized. In such cases, the information you provide might be used by the third party for their own purposes and under their own policies. We recommend you review the privacy policy of any such third party, as we do not control how they will use your information once you consent to such sharing.

Legal Compliance and Protection of Rights: We may disclose your Personal Information to third parties (such as courts, law enforcement authorities, government agencies, or outside counsel) if we believe that such disclosure is necessary to:

• Comply with any applicable law, regulation, legal process, or governmental request. For example, we might disclose data in response to a subpoena, court order, or regulatory demand.
• Enforce or apply our Terms and Conditions, this Privacy Policy, or other agreements with you, including investigation of potential violations thereof.
• Detect, prevent, or otherwise address fraud, security, or technical issues. If we suspect someone is committing fraud or a cyber-crime related to our operations, we may share data with law enforcement or investigators.
• Protect the rights, property, or safety of the Company, our employees, our customers, or the public. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction, and sharing information in emergency situations to protect someone’s health or safety.

Such disclosures will be made only in accordance with applicable laws. We will not provide more information than what we believe in good faith is required. Whenever feasible and legally permissible, we may notify you if we are required to provide your Personal Information to third parties as part of a legal process.

Anonymized or Aggregated Information: We may share aggregated, anonymized information that cannot reasonably be used to identify you with third parties for any purpose. For instance, we might tell a business partner what percentage of our users live in a certain area or are interested in a certain category of products. This information does not personally identify you.

In all cases of sharing and disclosure, we strive to ensure that any third party who receives Personal Information from us protects it with adequate security measures and uses it only for the purposes provided, consistent with this Policy and any applicable agreements.

We believe it is important that you are able to control your Personal Information. Subject to applicable law, you have certain rights and choices regarding how your information is used and shared. Below we outline various rights you have and how you can exercise them:

• Opt-Out of Marketing Communications: If you no longer wish to receive promotional or marketing communications from us, you may opt out at any time. Every marketing email from us contains an “unsubscribe” link at the bottom – click that link to stop receiving further emails of that type. You can also manage your email preferences by logging into your account on our Platform (if you have one) and adjusting your communication settings under your account profile. If you receive SMS messages or other forms of marketing communications from us, you can follow the specific opt-out instructions provided (such as texting “STOP” for SMS, as may be applicable) or contact our customer support for assistance. Please note that it may take a short time for your opt-out choices to be fully effective; during that time, you might still receive communications already in production. Even after you opt out of marketing messages, we may still send you transactional and administrative messages regarding products or services you have requested (such as order confirmations, shipping notifications, responses to customer service inquiries, or important notices relating to your account or our Platform).
• Access and Correction of Personal Information: We strive to maintain accurate records of your Personal Information. You have the right to access the Personal Information we hold about you and to request corrections of any inaccuracies or incomplete data. If you have an account with us, you can log in and review or update certain information directly (such as your contact details, password, and other profile info). For any information not editable through your account, or if you do not have an account, you can make a formal request to us to provide you with the data we have about you. We may ask for certain details to verify your identity before providing access to ensure that we do not disclose data to the wrong person. If you find that any of your Personal Information is incorrect or outdated, you can request that we correct or update it. We will make the corrections as soon as practically possible, provided we are satisfied with the identity and validity of the request. In certain jurisdictions, you may also have the right to receive information you provided to us in a portable format or to request erasure of your data (see below).
• Withdrawal of Consent: Where we rely on your consent to process Personal Information, you have the right to withdraw that consent at any time. For example, if you consented to share precise location data or to receive promotional emails, you can withdraw your consent by changing the settings in your device (for location sharing), by unsubscribing from emails, or by contacting us directly. If you have given consent for any other optional data processing, you may withdraw it by sending a request to our contact email provided in this Policy. Once we receive notification that you withdraw your consent, we will stop processing your information for the purpose(s) you originally agreed to, unless we have another legitimate basis for doing so in law. Please note that withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal, and in some cases, we may continue to retain certain information if required by law or if it pertains to a transaction you initiated (for example, we might still need to keep records of a purchase you made even if you withdraw consent for marketing).
• Account Deletion: If you have created an account on our Platform and wish to delete it, you can do so by contacting our customer support or using any account deletion function that may be available on the Platform. Deleting your account will remove your profile and personal data from active databases, but note that we may still retain certain information for record-keeping, analysis, or to comply with legal obligations as described in the Retention section. Additionally, information that you have shared in public areas (such as product reviews or forum posts) may continue to be visible to others unless you also request removal of that content.
• Removal of User Content: If you have posted content on our Platform (for example, a product review, comment, or any user-generated content) and you wish to remove it, you may delete it via your account interface (if that functionality exists) or you can send us an email at our support contact with details of the content you want removed. We will endeavor to remove the content from our Platform upon verifying your request. However, please be aware that removal from our live databases may not ensure complete or comprehensive removal of the content from the internet if it has been indexed by search engines or copied by third parties. Archived or cached copies might remain beyond our control.
• Data Erasure: In certain circumstances, you may request that we erase your Personal Information (for example, if it is no longer necessary for the purposes for which it was collected or if you believe it has been unlawfully processed). We will review such requests and, if they meet the criteria under applicable law, we will comply by deleting or anonymizing the data in question. If we cannot delete your data (for instance, because we need to keep it for legal reasons), we will inform you of the reasons and limit any further processing to the extent possible.
• Objecting to Processing: You may have the right to object to certain processing activities. For instance, if we are processing your Personal Information based on legitimate interest, you can object to that processing in some cases. You also have the right to object to the processing of your Personal Information for direct marketing purposes at any time (which is an absolute right under some laws). If you object, we will cease the processing unless we have compelling legitimate grounds to continue or as otherwise permitted by law.

To exercise any of your rights mentioned above, or if you have any other requests regarding your Personal Information, you can contact us using the details provided in the Contact and Grievance Redressal section at the end of this Policy. We will respond to your request as soon as possible and in accordance with applicable law (generally within a reasonable timeframe, or a specific timeframe if required by law). Please note that certain rights may not apply in full in all jurisdictions, and we may refuse requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, or are extremely impractical.

We will not discriminate against you for exercising any of these rights. However, as noted, exercising certain rights (like deleting data or withdrawing consent) might limit our ability to provide you with certain services. We appreciate your understanding and will help explain any consequences at your request.

Social Media Interaction: FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED maintains an active presence on various social media platforms such as Facebook, Instagram, Twitter, LinkedIn, and others for community engagement and marketing purposes. If you use social media features or plug-ins that are available on our Platform (for example, the Facebook “Like” button, or if you use your social media account to log in or share something from our site), those features may collect information about you. This could include your IP address, which page you are visiting on our Platform, and may set a cookie or utilize similar technologies to function properly. Social media features either host the relevant content directly on our Platform or direct you to the social media platform.

If you interact with us through official social media pages or tag us in your own social media posts, we may receive personal information about you such as your public profile information (including your social media username/handle, profile photo, followers list, etc.), and any content you have made public in relation to our brand or tagging us. We may use this information to respond to your posts or messages, or to understand public sentiment about our products.

When you engage with our content on social media or use your social media account to login to our Platform, please be aware that any information that those social networks collect or share about you is governed by their own privacy policies. We do not control the data practices of those platforms. The privacy settings you have on those third-party platforms will dictate what information may be shared with us or others. We recommend reviewing the privacy policies and account settings of any social media services you use to better understand how they handle your data.

Any Personal Information we receive through social media interactions will be treated in accordance with this Policy. For example, if you allow us to collect your email address from your Facebook account to facilitate a login, we will use that email strictly for verification and account purposes unless you consent to additional uses.

Third-Party Links and Services: Our Platform may contain links to websites or services that are operated by third parties (for example, payment gateways, external sites for additional information, or partner websites). Clicking on those links or enabling those integrations may allow the third party to collect or share data about you. Please note that these external sites or services are not under our control and are governed by their own privacy policies. FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED does not endorse or make any representations about third-party websites or services. We are not responsible for the content, reliability, or the privacy practices employed by any third-party websites.

We strongly advise you to review the privacy policy of every website you visit or third-party service you use. If you leave our Platform by clicking a link, or if you utilize a third-party service (such as a map service embedded in our site or a chat application powered by a third party), the privacy and security of your information will be governed by the policies of that third party. Nonetheless, if you encounter any issues with a linked site as it pertains to the integrity of our Platform, please let us know and we will investigate if the link or integration should be reconsidered.

Third-Party Payment Services: As noted earlier, if you choose to make payments through our Platform, you may be directed to a secure payment gateway or a third-party payment processor. These services are provided by external companies compliant with industry security standards (e.g., PCI-DSS for card payments). Any information you provide to these payment services (like credit card details) is submitted directly to them and not collected by us. They may have their own terms of service and privacy policies, which we encourage you to review. We only receive limited information back from such services (for example, a confirmation that payment was completed, the last four digits of your card for reference, etc.), which we handle according to this Policy.

Integration with Third-Party Services: Occasionally, we may integrate additional third-party services to enhance our Platform’s functionality (such as an email subscription service, customer reviews widget, or analytics tools). These services might collect information (through cookies or forms) directly from you on our behalf. We ensure that any third-party tool we integrate is contractually obligated to comply with relevant privacy laws and to use data only for providing services to us and not for their independent purposes. We will describe such integrations in this Policy or via in-context notices on the Platform, so you are aware when a third-party service is involved in data collection.

In summary, while interacting with social media features or external services via our Platform, remember that your data might be moving to or from third parties. We will do our best to ensure a trusted experience, but it’s important for you to read and understand those third parties’ terms and privacy practices as well.

Protecting the privacy of minors is especially important. Our Platform is not directed to or intended for children under the age of eighteen (18) years. We do not knowingly solicit or collect Personal Information from individuals under 18. If you are under 18, you should only use our Platform with the involvement of a parent or guardian. You must not submit any Personal Information to us (for example, do not register on the site, make purchases, or provide any personal details) if you are under 18 years of age.

If we become aware that we have inadvertently collected Personal Information from someone under the age of 18, we will take immediate steps to delete such information from our records. For example, if a minor registers on our site by falsifying their age, and we later learn of this, we will cancel the registration and remove any associated data.

Parents and guardians are encouraged to supervise their children’s online activities and consider the use of parental control tools available from online services and software manufacturers that help provide a child-friendly online environment. These tools can prevent children from disclosing their name, address, and other personal information without parental permission.

If you believe that we might have any information from or about a child under 18, please contact us at the contact information provided in this Policy so that we can take appropriate action.

Our Platform may, from time to time, include a section or feature inviting individuals to explore career opportunities with FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED If you submit an application or expression of interest for employment (for example, by sending your résumé/CV, cover letter, or filling out a job application form on our site), we will collect and use the information you provide for recruitment and human resources purposes.

Use of Job Application Information: The information you provide in connection with a job application (such as your contact details, employment history, education, qualifications, and any other personal details on your resume) will be kept confidential and used solely to evaluate your qualifications for employment and to contact you as part of the hiring process. We may share your application internally with the Company’s recruitment team, hiring managers, and other decision-makers. We will not share this information with third parties outside the Company except with service providers that assist us in our recruitment process (under strict confidentiality and security obligations) or as required by law.

By submitting an application, you agree that we may use your information to consider you for current and future employment opportunities at the Company. If you are not selected for the position you applied for, we may retain your application materials in our talent pool for a reasonable period (unless you instruct us otherwise) in case a suitable position opens up later. If you prefer that we do not retain your details for new opportunities, please let us know and we will delete your application data in accordance with our data retention policies.

We may also contact you to request additional information related to your application or to schedule interviews. If at any point you want to withdraw your application, please inform us and we will cease considering you for the role and will handle your personal data according to your instructions and our legal requirements.

All Personal Information collected from job applicants will be treated in accordance with this Privacy Policy. Note that providing employment-related information is voluntary, but failing to provide sufficient details may affect our ability to consider you for employment.

We use third-party analytics and advertising tools to better understand how our customers use our Platform, to improve our services, and to deliver more relevant advertisements to our customers. These tools are provided by third-party companies (our “analytics partners”) and may involve the use of cookies, pixels, and similar technologies.

One of our primary analytics providers is Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect information such as how often users visit our Platform, what pages they visit, and what other sites they used prior to coming to our Platform. We use the information from Google Analytics solely to improve our Platform and services. Google Analytics collects only the IP address assigned to you on the date you visit the site, rather than your name or other identifying information. The information generated by the Google Analytics cookie about your use of our Platform is transmitted to and stored by Google on servers which may be in the United States or other countries. Google uses this information to evaluate your use of the Platform and compile reports on website activity for us. We do not combine the information collected through the use of Google Analytics with personally identifiable information.

Google Analytics may also set or read cookies on your browser to collect data for providing personalized advertisements (through Google’s advertising network, e.g., Google Ads). To support our advertising efforts, we may utilize features of Google Analytics such as Google Analytics Demographics and Interests Reporting (which provides insight into the age, gender, and interests of visitors, none of which is personally identifiable) or integrate with Google Ads for remarketing.

In particular, we have implemented (or may implement) the following Google Analytics Advertising Features on our Platform:

• Remarketing with Google Ads/AdSense: This enables Google (and us) to show our ads on other websites to people who have previously visited our Platform. It could mean that we advertise to past visitors who haven’t completed a task on our site (for example, abandoned a cart). This could be in the form of an advertisement on the Google search results page or a site in the Google Display Network.
• Google Display Network Impression Reporting: This allows us to understand the impact of our advertisements shown on the Google Display Network. It provides aggregate data such as how many times our ads were displayed and which ads are generating clicks.
• Google Analytics Demographics and Interests Reporting: As noted, this provides us with anonymous demographic information (like age and gender) and interests data about our visitors. We might use this data to tailor our content and marketing to better match our audience’s interests.
• DoubleClick Platform Integration: DoubleClick (owned by Google) cookies might be used on our site to track how ads are served and to measure ad effectiveness. Integration with DoubleClick helps in understanding and improving ad delivery.

These features involve the use of both first-party cookies (like the Google Analytics cookie) and third-party cookies (like the DoubleClick cookie) to inform, optimize, and serve ads based on someone’s past visits to our Platform. For example, through remarketing, if you visited our Platform and consented to cookies, you may later see an advertisement from us when you visit another site in the Google ad network.

Advertising Partners: In addition to Google, we may work with other third-party advertising networks and analytics providers to serve ads on our behalf across the internet and to provide analytics services. These entities may use cookies, web beacons, SDKs, or other technologies on your device to collect information about your use of our Platform and other websites and applications, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by the Company and others to, among other things, analyze and track data, deliver advertising and content tailored to your interests on our Platform or other websites, and better understand your online activity.

Consent to Analytics: By using our Platform, you consent to the processing of data about you by our analytics and advertising partners in the manner and for the purposes set out in this Policy. If we implement any new analytics tools or partners, we will update this Policy accordingly.

Your Choices for Analytics and Advertising: If you do not want Google Analytics to be used in your browser, you can install the Google Analytics Opt-Out Browser Add-on, which prevents Google Analytics from collecting information on web pages you visit. For Google’s advertising settings specifically, you can visit the Google Ads Settings page to control what information Google uses to show you ads. Google also provides an opt-out mechanism for the DoubleClick cookie by visiting the Network Advertising Initiative’s opt-out page (currently available at http://optout.networkadvertising.org) or by visiting Google’s own opt-out page for personalized ads.

For other third-party advertising networks, you may opt out of many interest-based advertising cookies by visiting the industry opt-out pages at Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI), or if you are in the EU, the European Interactive Digital Advertising Alliance (EDAA). Keep in mind that opting out of interest-based advertising does not mean you will no longer see ads; it just means those ads will not be tailored to your interests based on cookies and tracking technologies.

We do not currently respond to “Do Not Track” (DNT) signals because there is not yet a common understanding of how to interpret them. However, we continue to monitor developments around DNT browser technology and the implementation of a standard.

If you have any questions about our use of third-party analytics tools or how to opt out, feel free to contact us via the information below.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices or relevant laws. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

If we make material changes to this Policy, we will notify you by means of a prominent notice on our Platform (for example, by posting a notice on our website homepage or within the mobile app) prior to the change becoming effective. In some cases, we may also notify you via email or other direct communication if you have provided us with your contact information. The notification will outline the changes and, if required, we will seek your consent to those changes.

At the top of this Policy, we will indicate the date of the latest revision (“Last Updated” date). Any changes to this Policy will become effective on the date the revised Policy is posted on our Platform, unless indicated otherwise. Your continued use of the Platform after any such update constitutes your acceptance of the revised terms of the Privacy Policy. If you do not agree to the updated Policy, you should stop using our services and may request that we remove your Personal Information as per your rights described above.

For clarity, no change will retroactively alter how we handle previously collected data unless you consent to the new terms or as may be required by law. If at any point we decide to use Personal Information in a manner significantly different from that stated at the time it was collected, we will notify the affected individuals and allow them to opt out of the new use.

We are committed to addressing any concerns or complaints you may have regarding your privacy or the handling of your Personal Information. If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, you may contact us at:

Name: Vibhav Kukreja

Email: hello@funclab.com

Phone: +91 82919 59606

Address: FUNC LAB HEALTH N WELLNESS PRIVATE LIMITED, 5th Floor, Office No- 501, Sai Commercial Building, BKS Devashi Marg, Near Lakme Company, Govandi East, Mumbai, Mumbai Suburban, Maharashtra - 400088

The Grievance Officer listed above is appointed in accordance with the provisions of applicable Indian laws, including but not limited to the Information Technology Act, 2000 and the Consumer Protection Act, 2019, along with the relevant rules under those laws. This officer is responsible for redressing grievances expeditiously.

If you have any grievances, complaints, or concerns about the content of our Platform or believe that your privacy rights have been violated, you can reach out to the Grievance Officer via the contact details provided. Please include all relevant details of your issue, such as the nature of information concerned, where you encountered the issue on our Platform, and your contact information. We will acknowledge and resolve your concern as per our internal policies and applicable law, typically within 30 days or the period prescribed by law.

In case you do not receive a satisfactory response from us, and if applicable under local laws, you may seek further recourse by approaching government authorities or data protection regulators.

Thank you for reading our Privacy Policy. We value your trust and are devoted to protecting and safeguarding your personal data.