TLL GOAT Brand Labs Private Limited (“we”, “our”, “us”) is committed to protecting the privacy of all individuals who interact with us, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

This Privacy Policy explains how we collect, process, use, store, share, and protect your personal data, and informs you of your rights as a Data Principal under the DPDP Act, 2023.

By using our website, applications, or services, you consent to the practices described in this Privacy Policy.

1. What Personal Information Do We Collect?

We may collect the following types of personal data from you:

• Name, email address, phone number, and mailing address.
• Payment and billing information (processed only through secure third-party gateways; we do not store card details).
• Login details or account information (if applicable).
• Any other information voluntarily shared by you while registering, ordering, or interacting with our services.

2. How Do We Collect Information?

We collect personal data when you:

• Register on our website.
• Place an order or subscribe to newsletters.
• Respond to surveys, promotions, or marketing campaigns.
• Contact us for support or grievance redressal.
• Interact with cookies and website analytics.

3. Why Do We Use Your Information? (Purpose of Processing)

We will only process your personal data for lawful purposes, including:

• Fulfilling your orders and providing our services.
• Sending updates and promotions (with your consent).
• Personalizing your experience and improving our website.
• Complying with legal obligations.
• Preventing fraud, misuse, or violations of law.

We do not use your personal data for purposes beyond those for which it was collected unless required by law or with your consent.

4. Consent and Your Rights Under DPDP Act, 2023

• We collect and process your personal data only with your free, specific, informed, unconditional, and unambiguous consent, unless another lawful ground applies.

You have the right to:

• Access your personal data.
• Correct or update inaccurate or incomplete data.
• Withdraw consent at any time (without affecting processing prior to withdrawal).
• Request erasure of your personal data when it is no longer necessary.
• Seek grievance redressal through our appointed officer.

To exercise your rights, please contact us at the details provided below.

5. Age Restrictions

The Website is intended solely for individuals who are 18 years of age or older and are legally capable of entering into binding contracts. If you are under 18 years of age or otherwise not competent to enter into a legally enforceable agreement, you must not access the Website or submit any personal or other information.

If the Company becomes aware that any information has been provided by a person under 18 years of age or by an individual who is not legally eligible to contract, such information shall be deleted without prior notice.

6. Data Protection and Security

We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:

• Secure networks and encryption practices.
• Restricted access to authorized personnel only.
• Use of third-party payment gateways with industry-standard compliance.
• Regular monitoring for vulnerabilities and attacks.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes stated above or as required by applicable law. Once data is no longer required, it will be deleted or anonymized.

8. Use of Cookies

We may use cookies and similar technologies to:

• Remember items in your shopping cart.
• Understand user preferences and improve services.
• Analyze site traffic and performance.

You may disable cookies in your browser settings; however, some features may not function properly.

9. Sharing of Personal Data

We do not sell, trade, or rent your personal data to third parties. We may share your data only with:

• Service providers (such as hosting, analytics, and payment partners) bound by confidentiality obligations.
• Authorities, where disclosure is required by law or to protect rights and safety.
• Affiliates and partners only for legitimate business purposes, with safeguards in place.

Cross-border transfers, if any, will comply with the DPDP Act and applicable government notifications.

10. Grievance Redressal

In accordance with the DPDP Act, we have appointed a Grievance Officer. If you have any concerns, complaints, or requests relating to your personal data, you may contact:

Grievance Officer – Legal Head
No. 688, Sector 2, HSR Layout,
Bangalore, Karnataka – 560102
Email: legal@goatbrandlabs.com

We will acknowledge and resolve your grievance within the timelines prescribed under the DPDP Act.

11. Governing Law

This Privacy Policy is governed by the laws of India. You hereby irrevocably consent to the exclusive jurisdiction of the competent courts located at Bangalore, Karnataka, India for all disputes arising out of or relating to this Policy.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time, in compliance with applicable law. Significant changes will be notified on our website or through other appropriate means.

13. Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at:

TLL GOAT Brand Labs Pvt Ltd
No. 688, Sector 2, HSR Layout,
Bangalore, Karnataka – 560102
Email: legal@goatbrandlabs.com