Privacy & Policy | Rishivishnu

PRIVACY NOTICE

Rishi Vishnu

We take the privacy of your information seriously. This privacy notice (“Privacy Notice”) describes the types of personal information we collect from you, through our stores, other premises, website (including sub-domains and microsites), mobile applications, or other means. It describes the purposes for which we collect that personal information, the other parties with whom we may share it, and the measures we take to try and protect it. It also tells you about some of your rights and choices with respect to your personal information, and how you can contact us about our privacy practices.

You are advised to carefully read this Privacy Notice before using or availing yourself of any of our products and/or services. By doing so, you are consenting to the collection and processing of your Data (including SPDI) in accordance with the practices and policies outlined in this Privacy Notice.

Our products and services are targeted at users in India, and this Privacy Notice is intended to comply with the laws of India. If you are accessing or using the website or mobile application from an overseas location, you are requested to independently validate the impact of any applicable local laws.

If you do not agree with this Privacy Notice at any time, in part or as a whole, write to our Grievance Office at the address specified below.

1. DEFINITIONS

In this Privacy Notice, the following terms are defined as:

Cookies A small file stored on your device by our website or mobile application when you visit or use certain features. Cookies enable the website to remember your actions or preferences over a period of time.

Data Refers to personal information and Sensitive Personal Data or Information (SPDI) about you, which can identify you either directly or indirectly when combined with other information. This applies when you visit our stores, website, or mobile application.

Data Protection Laws Any applicable laws governing the processing of Data, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011, along with any amendments or replacements.

Partners Selected third parties, including Rishi Vishnu Entities, with whom we have agreements to offer products or services. Your Data may be disclosed to these Partners for relevant purposes.

Service Providers Organizations or entities that process your Data to provide services to us under written contracts.

SPDI (Sensitive Personal Data or Information) Defined under Data Protection Laws, this includes: (a) Passwords (b) Financial information (e.g., bank account, credit/debit card details, or payment instruments) (c) Information about physical, physiological, and mental health conditions (d) Sexual orientation (e) Medical records and history (f) Biometric information

User or You The individual accessing our stores, website, or mobile application.

2. WHAT DATA DO WE COLLECT ABOUT YOU

Rishi Vishnu collects Data for various purposes set out in this Privacy Notice. This Data includes, without limitation, the following categories:

Contact Information: First and last name, email address, postal address, country, employer, phone number, and other similar contact data.
Financial Information: Payment instrument information, transactions, transaction history, preferences, method, mode and manner of payment, spending pattern or trends, and other similar data.
Technical Information: Website, device, and mobile app usage, Internet Protocol (IP) address, and similar information collected via automated means, such as cookies, pixels, and similar technologies.
Transaction Information: The date of the transaction, total amount, transaction history, preferences, and related details.
Product and Service Information: Your account membership number, registration and payment information, and program-specific information, when you request products and/or services directly from us or participate in marketing programs.
Personal Information: Age, sex, date of birth, marital status, nationality, details of government identification documents provided, occupation, ethnicity, religion, travel history, or any other personal information provided in responses to surveys or questionnaires.
Your Reviews, Feedback, and Opinions: About our products, programs, and services.
Loyalty Programme Information: Your loyalty membership information, account details, profile or password details, and any frequent flyer or travel partner programme affiliation.
Payment Instrument Information: Through our application pages, you may choose a third-party payment service provider of your choice for making payments and may agree to store your payment instrument details with the chosen service provider(s). The payment instrument data is managed by service provider(s).

3. HOW WE COLLECT DATA
We collect Data in the following ways:

Information You Give Us: We receive and store any information you enter on our website or mobile application or provide to us in any other way (e.g., at outlets, stores, hotels, kiosks). Please refer to the section titled "Data Shared by You" for more information.
Automatic Information We Collect: We use "cookies," pixels, and similar technologies to collect and store certain types of information whenever you interact with us. Please see the section below, titled "Data that is Collected Automatically," for more details.
E-mail Communications: To help us make emails more relevant and interesting, we often receive a confirmation (if your device supports such capabilities) when you open an email from us or click on a link in the email. You can choose not to receive marketing emails from us by clicking on the unsubscribe link in any marketing email.
Automatic Information We Collect from Other Websites: We may collect and store certain types of information when you interact with third-party websites that use our technology or with whom we have a specific agreement. Since we process this information on behalf of the relevant website operators, the collection, processing, and use of such data are subject to the privacy policies of those website operators and are not covered by our Privacy Notice.
Information from Other Sources: We may obtain information from other sources. For example, if you authorize a third-party website (such as another website affiliated with "Rishi Vishnu") to interact directly with our website or mobile application to provide or receive data about you, we might receive such data used by that third-party website to identify your account with them.
Information Previously Provided to "Rishi Vishnu" Entities: If you have previously shared information with any of the entities associated with "Rishi Vishnu" and consented to the further sharing of such information, it will be shared with us by those entities.

You have choices regarding the collection and use of your data. For instance, you can access, edit, or remove your data on our website or mobile application. When asked to provide data, you may decline, but please note that in such cases, you may not be able to avail certain products, programs, services, or access our stores or physical premises.

4. DATA SHARED BY YOU

"Rishi Vishnu" may collect your data in several ways from your use of our stores, website, or mobile application. For example:
When you register with us to receive our products and/or services;
When you conduct a transaction with us or attempt a transaction at our stores, on our website, or mobile application;
When you complete surveys conducted by or for us;
When you elect to receive any communications (including promotional offers) from us;
From the information gathered during your visit to our stores, website, or mobile application; or
By way of correlation or inferences from information sourced from other sources, which have collected or processed this data based on your consent.

5. DATA THAT IS COLLECTED AUTOMATICALLY

We automatically collect some information when you visit our website or use our mobile application. This information helps us improve our content and navigation. The information collected automatically includes your IP address.
Our web servers or affiliates who provide analytics and performance enhancement services collect IP addresses, operating system details, browsing details, device details, and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed, and similar information. "Rishi Vishnu" uses this information to measure site usage, improve content, ensure safety and security, and enhance the performance of our website or mobile application.
We may collect your data automatically via cookies, pixels, and similar technologies in line with settings on your browser. For more information about cookies, please refer to the section below titled "Cookies."

6. OUR USE OF DATA

Any or all of the above data may be required by us from time to time to provide information relating to "Rishi Vishnu" and to enhance the experience when using our website or mobile application. Specifically, data may be used by us for the following reasons:

Carry out our obligations arising from any contract entered into between you and us;
Provide (including customizing and improving) products and/or services and communicate with you about products and/or services offered by us;
Enable payment, billing, and invoicing related purposes;
Enable "Rishi Vishnu" service providers and partners to offer their products and/or services and communicate with you about such products and/or services;
Process, disclose, transmit, and/or share the data with "Rishi Vishnu" entities, and other third parties that have business or contractual dealings with us for any legitimate purpose/use in terms of this Privacy Notice;
Provide you with offers (including for financial products and/or services), personalized services and recommendations, and improve your experience on our website and mobile application;
Operate, evaluate, and improve our business (including for administration and management purposes), website, and mobile application;
Generate aggregated data to prepare insights to enable us to understand customer behavior, patterns, and trends, to learn more about your preferences or other characteristics;
Provide privileges and benefits to you, marketing, and promotional campaigns based on your profile;
In connection with loyalty programs owned and operated by us or other "Rishi Vishnu" entities;
Communicate with you (including responding to your requests, questions, feedback, claims, or disputes) and customize and improve our services;
Enforce the terms of use of our website and mobile application;
Protect against and prevent fraud, illegal activity, harm, financial loss, and other legal or information security risks; and
Serve other purposes for which we provide specific notice at the time of collection, and as otherwise authorized or required by applicable law.

We treat these inferences as personal information (or SPDI, as the case may be), where required under applicable law. Some of the above grounds for processing will overlap, and there may be several grounds that justify our use of your personal information.

Where required under applicable law, we will only use your personal information with your consent; as necessary to provide you with products and/or services; or for such other purpose as is permissible under applicable law. We may make broader use of anonymized personal information from which individuals cannot be identified.

7. MINORS

Our website and mobile application do not offer products or services for use by minors. If you are under 18, you may use our website or mobile application only with the consent of a parent or guardian. In the event that we learn that we have collected personal information from a minor without verification of parental consent, we will delete that information at the earliest. If you believe that we might have any such information, please contact the Grievance Officer.

8. SHARING OF DATA

We may share your data with/for:

Partners: We may make available to you services, products, or applications provided by our partners for use on or through our website or mobile application. If you choose to use such services, customer information related to those transactions may be shared with the respective partner. These partners will be required to respect the security of your data and treat it in accordance with this privacy policy and applicable law.
Rishi Vishnu Entities: We may make available to you products, services, and/or applications of "Rishi Vishnu" entities, to assist them in reaching out to you in relation to their programs or campaigns and to process your queries and requests. Accordingly, we may share your data with "Rishi Vishnu" entities. We may also share your data with "Rishi Vishnu" entities as is relevant for the purposes set out in Clause 7 above, and to facilitate the operation of our business.
Rishi Vishnu Platform: Your data may be shared with "Rishi Vishnu" entities and other participating entities on the Rishi Vishnu platform for purposes of enrolment, offering you products, services, and benefits. Accordingly, we may share your data with other "Rishi Vishnu" entities, partners, and service providers.
Service Providers: We or other "Rishi Vishnu" entities may share your data with service providers. Examples include storing and analyzing data, protecting and securing our systems, providing search results and links, providing customer service, credit analysis, processing your information for profiling, user analysis, and payment processing.
These service providers will be required to process data only in accordance with express instructions and as necessary to perform services for the purposes set forth in this Privacy Notice. Service providers will also be required to safeguard the security and confidentiality of the data they process by implementing appropriate technical and organizational security measures and confidentiality obligations binding on employees accessing data.
When "Rishi Vishnu" acts as a Service Provider: We may process and share your data with "Rishi Vishnu" entities and partners when we act as a service provider to such entities and partners.
Protecting "Rishi Vishnu": We may release data when we believe release is appropriate to comply with applicable law or legal process, enforce or apply the Terms of Use of our website or mobile application and other agreements, protect "Rishi Vishnu" against harm or financial loss, when we believe disclosure is necessary to protect individuals’ vital interests, or in connection with an investigation of suspected or actual fraudulent or illegal activity. This may include exchanging information with other companies and organizations for fraud protection, risk management, and dispute resolution. This does not include selling or otherwise disclosing personally identifiable information from users for commercial purposes in violation of this Privacy Notice.
Business Transfers: As we continue to develop our business, we might sell or buy subsidiaries or business units. Your data (including in relation to loyalty programs) may be transferred as part of such transactions or in the course of exploratory activities related thereto, including due diligence and audit exercises. The relevant transferee may thereafter make use of data in accordance with the applicable law.
Third Parties: We may also share your data with other third parties where:
- You request or authorize us to do so;
- We need to comply with applicable law or respond to valid legal process;
- We need to operate and maintain the security of our website or mobile application, including to prevent or stop an attack on our computer systems or networks.

We require these third parties by contract to process sensitive personal data only in accordance with our instructions and as necessary to perform services on our behalf or in compliance with applicable law. We also require them to safeguard the security and confidentiality of the sensitive personal data they process on our behalf by implementing appropriate confidentiality, technical, and organizational security measures.

Please note that "Rishi Vishnu" entities and partners may have privacy practices that differ from those of "Rishi Vishnu." The use of your data will be governed by their privacy statements when you provide data on their websites.

9. KEEPING DATA SECURE

We will use technical and organizational measures to safeguard your data, and we store your data on secure servers. Technical and organizational measures include measures to deal with any suspected data breach. If you suspect any misuse, loss, or unauthorized access to your data, please let us know immediately by contacting us by email.

10. RETENTION OF DATA

Rishi Vishnu retains data for as long as necessary for the use of our products and/or services or to provide access to and use of our website or mobile application, or for reasonable purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements, or as otherwise stated in this Privacy Notice, and for such periods or purposes as are permitted under applicable law. Since these needs can vary for different data types and purposes, actual retention periods may vary significantly. Even if we delete your data, including upon exercise of your right under Clause 12 below, it may, subject to applicable law, persist on backup or archival media for audit, legal, tax, or regulatory purposes.

11. YOUR RIGHTS AND CHOICES

When we process data about you, we do so with your consent and/or as necessary to operate our business, meet our contractual and legal obligations, protect the security of our systems and customers, or fulfill other legitimate interests of Rishi Vishnu as described in this Privacy Notice. We may transfer data we collect about you to recipients in India, where we are headquartered. India may not have the same data protection laws as the country in which you initially provided the information. When we transfer your data to India, we will protect that information as described in this Privacy Notice, as disclosed to you at the time of data collection or as described in our program-specific privacy notice.

Depending on the data protection laws applicable to you, you may have the right or choice to:

Opt out of some collection or uses of your data, including the use of cookies, pixels, and similar technologies and the use of your data for marketing purposes.
Access your data, rectify it, restrict or object to its processing, or request its deletion or anonymization.
Change or edit information submitted to us.
Receive the data you provided to us to transmit it to another company.
Withdraw any consent provided or alter your preferences.
Where applicable, lodge a complaint with your supervisory authority.

You may submit a request as described in the "How to Contact Us" section below. We will not charge you for any request. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will inform you of the reasons why.

Below, you will find additional privacy information that you may find important. Data protection laws, depending on your country, may include the following rights in relation to your data:

Right to Confirmation and Access – The right to confirm our methods of processing and request copies of the information we hold about you at any time, or that we modify, update, or delete such information.
Right to Correction – The right to have your data rectified if it is inaccurate or incomplete.
Right to be Forgotten – The right to request that we delete or remove your data from our systems.
Right to Restrict / Object to Our Use of Your Data – The right to limit the way in which we can use it.
Right to Data Portability – The right to request that we move, copy, or transfer your data.
Right to Withdraw Consent – The right to withdraw your consent provided earlier.
Right to File Complaints – The right to raise complaints to a regulatory authority.

For information about managing your data and promotional communications, please email us at customerservice@rishivishnu.com.

It is important that the data we hold about you is accurate and current. Please keep us informed if your personal information changes during the period for which we hold it.

12. WHERE WE STORE DATA

Data collected under this Privacy Notice is hosted on servers located in India. Subject to applicable law, we may, at our sole discretion, transfer data, including sensitive personal data (SPDI), to any other third party that agrees to ensure the same level of data protection as is provided by us under the terms hereof, located outside India. You hereby consent to the storage and processing of data, including SPDI, in locations outside India.

13. PROCESSING YOUR DATA

We take steps to ensure that the data we collect under this Privacy Notice is processed according to the provisions of this Privacy Notice and the requirements of applicable law. To ensure that your data receives an adequate level of protection, we have put in place appropriate written contracts with Rishi Vishnu entities, partners, and service providers that we share your data with. This ensures your data is treated by such parties in a way that is consistent with applicable law.

Rishi Vishnu implements standard measures to protect against unauthorized access to and unlawful interception of data. However, no internet site can fully eliminate security risks. Rishi Vishnu endeavors to take all measures to protect the security, integrity, and confidentiality of the data against unauthorized breach and hacking. For the purpose of checking possible vulnerabilities and attacks, Rishi Vishnu may conduct periodic internal reviews of data and security measures. However, the internet is not an absolutely secure environment, and we cannot ensure or warrant 100% security.
If you are provided with any identification code, password, or any other piece of information as part of the security procedure adopted by us, you should treat such information as confidential and not disclose it to any third party, including other users. You are solely responsible for the activities that occur under your account, including the confidentiality of your password, and Rishi Vishnu is not responsible for the same.
Notwithstanding anything contained in this policy or elsewhere, Rishi Vishnu shall not be held responsible for any loss, damage, or misuse of the data if such loss, damage, or misuse is attributable to a Force Majeure Event. A "Force Majeure Event" means any event that is beyond the reasonable control of Rishi Vishnu and includes, without limitation, fire, flood, explosion, acts of God, civil commotion, strikes, lockouts, or industrial action of any kind, riots, insurrection, war, acts of government, power failure, sabotage, computer hacking, unauthorized access to computer data and storage devices, system failure, virus, attacks, bugs, computer crashes, breach of security, and encryption.

15. SEVERABILITY

If any court or competent authority finds that any provision of this Privacy Notice (or part of any provision) is invalid, illegal, or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Notice will not be affected.

16. CHANGES TO THIS PRIVACY NOTICE

Our business changes constantly, and our Privacy Notice will change as well. We may email periodic reminders of our notices and conditions unless you have instructed us not to, but you should check our website and mobile application frequently to see recent changes. The updated version will be effective as soon as it is accessible. Any changes will be immediately posted on our website and mobile application, and you are deemed to have accepted the terms of the updated Privacy Notice on your first use of our website or mobile application or first purchase of the products and/or services following the alterations. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information. Your continued access to our stores, physical premises, website, or mobile application, following any such amendments to the Privacy Notice, will be deemed as implicit acceptance of the Privacy Notice in its amended form.

17. HOW TO CONTACT US

To request to review, update, or delete your personal information or to otherwise reach us, please submit a request by emailing us at customerservice@rishivishnu.com. You may contact us for information on service providers, partners, and Rishi Vishnu entities with whom we may share your data in compliance with this Privacy Notice and applicable law. We will respond to your request within 30 days.

18. GRIEVANCE REDRESSAL

For information about the management of your data, please reach out to us at
Email: grievanceofficer@rishivishnu.com