Privacy Policy

This privacy policy (“Policy”) was last changed on 30 Aug 2019.

For the purposes of this Policy, “we”, “our” and “us” shall mean ONE WORLD (defined below) and “you” and “your” shall include both a Visitor (defined below) and a User (defined below) of the Website.

We reserve the right to modify or update this Policy at any time without prior notice, and any changes made to this Policy will immediately apply to both ONE WORLD and you.

We hold the belief that you should know what data we collect from you, the purposes for which such data is used, and that you should have the ability to make informed decisions about what data you want to share with us.

This is why we want to be transparent about: (i) how and why we collect, store, share and use your personal data through the various capacities in which you interact with us; and (ii) the rights that you have to determine the parameters of this interaction/relationship.

While we would strongly advise you to read the Policy in full, the following summary will give you a snapshot of the salient points covered herein:

This Policy details the critical aspects governing the use, storage and/or transmission of your personal data submitted on CULTURERINGS.COM (“Website”), which is the property of and is operated by MS. Kaveri Sinhji, the sole proprietrix of ONE WORLD, a sole proprietorship concern having its office at No.1761 Nandeeshwara Krupa, Devaraja Nagara, Doddaballapur Pin code. 561203 (hereinafter referred to as “ONE WORLD”, which expression shall, where the context admits, include her heirs, legal representatives, executors and administrators);
The use, storage and/or transmission of your personal data by ONE WORLD varies based on the capacity in which you interact with us/avail of our services (“Services”). You could be: (i) a visitor to https://www.culturerings.com/ (“Website”) or any of the pages thereof (“Visitor”); or (ii) a person who is in the process of availing or has availed of our Services (“User”);
Based on whether you are a Visitor or a User, the type of data we collect and the purpose for which we use it will differ and this Policy details such variations;
This Policy applies to all the Services provided by ONE WORLD through the Website or any other associated modes of communication like email or mobile notification;
As a business service, we neither knowingly collect or store nor use any personal data of any individuals under the age of 18. We do not target our Services towards individuals under the age of 18. Individuals under the age of 18 should seek the consent of their parents before providing any information about themselves, their parents, or other family members on our Website.
This Policy is a part of and should be read in conjunction with our Terms of Service; and
This Policy will clarify the rights available to you vis-à-vis the personal data you share with us.

If you have any queries or concerns with this Policy, please contact us at accounts@culturerings.com. If you do not agree with the Policy, we would advise you to not visit our Website or avail of our Services.

INFORMATION WE COLLECT AND HOW WE USE IT

TYPE OF USER	Visitor	User
WHAT DATA WE MAY COLLECT WHAT	Your IP Address; Your location; How you behave on the Website, (what pages you land on, how much time you spend, etc.); What device you use to access the Website and its details (model, operating system, etc.); and Cookies and web beacon data.	Your name, age, gender, phone number, e-mail address, mailing address; Your food preferences, or medical conditions (if any); How you behave on the Website, (what pages you land on, how much time you spend, etc.); Credit card/debit card/other payment mode information to facilitate payments for our Services; Your IP Address; Your location unless you deactivate location services in the relevant section of the Website How you behave in the relevant product environment and use the features; What device you use to access the Website and its details (model, operating system, etc.); and Cookies and web beacon data.
HOW AND WHY WE USE IT	We use this information to analyse and identify your behaviour and enhance the interactions you have with the Website.	We collect this data in order to help and facilitate the provision of our Services. We may use this data to show age-appropriate content and advertisements. We use the data from the device you access our Website. We use this data to enable you to make payments for our Services. We use a third-party service provider to manage payment processing. This service provider is not permitted to store, retain, or use information you provide except for the sole purpose of processing payments on our behalf. We use this data for processing your requests, enquiries and complaints, customer services and other related activities. We use this data to communicate about existing or new offers, content, advertisements, surveys, key policies or other administrative information. We also use this data to provide you with informative features and services that are developed by us from time to time. We also use this data for providing, testing, improving, or recommending the Services. We also use this data for analytics and reviews to improve the Services. We also use this data to provide support to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law or anti-fraud activities/systems. If you give us your consent, we may send you newsletters and emails to market other products and services we may provide.

WHAT ARE THE COOKIES AND WEB BEACONS REFERRED TO ABOVE?

TYPE OF FILE	COOKIES	WEB BEACON
WHAT THEY DO	Cookies are text files which are sent from our server and downloaded to your device when you visit our Website. They are useful because they allow us to recognize your device when you return. You can disable them through your browser should you so wish. We use cookies to see which parts of our Website are used by Users/Visitors and to record the number of visits to our Website. You can find more information about cookies at: www.allaboutcookies.org	Web beacon (also known as Clear GIF, Web Bugs or Pixel Tag) is a tiny picture file embedded on the Website that tracks your behaviour and navigation. It is similar to a cookie in what it does, but it does not get downloaded on to your device. We use web beacons to manage cookies, record visits, and to learn marketing metrics. We also use web beacons to track and monitor email opening rates as well as link clicks. You can find more information about web beacons at: http://www.allaboutcookies.org/faqs/beacons.html
WHAT THEY WON’T DO	Harvest any personally identifiable information; or Contain any executable software, malicious code or virus.

Usually, browsers have default settings to accept cookies until you change your browser settings. You can choose to reject and remove cookies from our Website by changing your browser settings. If you reject or remove our cookies, it could affect how our Website works.

FOR THE AVOIDANCE OF ANY DOUBT, WE HEREBY CLARIFY THAT IN THE EVENT WE ANONYMIZE AND AGGREGATE INFORMATION COLLECTED FROM YOU, WE WILL BE ENTITLED TO USE SUCH ANONYMIZED DATA FREELY, WITHOUT ANY RESTRICTIONS OTHER THAN THOSE SET OUT UNDER APPLICABLE LAW.

YOUR RIGHTS & PREFERENCES AS A DATA SUBJECT IN THE EU
The European Union’s (“EU”) General Data Protection Regulation (“GDPR”) gives certain rights to individuals who are EU data subjects, in relation to their personal data.
Subject to the GDPR and applicable law’s limitations, the rights afforded to you if you are an EU data subject are:

RIGHT TO BE INFORMED

You have a right to be informed about the manner in which any of your personal data is collected or used, which we have endeavoured to do by way of this Policy.

RIGHT OF ACCESS

You have a right to access the personal data you have provided by requesting us to provide you with the same.

RIGHT TO RECTIFICATION

You have a right to request us to amend or update your personal data if it is inaccurate or incomplete.

RIGHT TO ERASURE

You have a right to request us to delete your personal data.

RIGHT TO RESTRICT

You have a right to request us to temporarily or permanently stop processing all or some of your personal data.

RIGHT TO OBJECT

You have a right, at any time, to object to our processing of your personal data under certain circumstances. You have an absolute right to object to us processing your personal data for the purposes of direct marketing.

RIGHT TO DATA PORTABILITY

You have a right to request us to provide you with a copy of your personal data in electronic format and you can transmit that personal data for using another third-party’s product/service.

RIGHT NOT TO BE SUBJECT TO AUTOMATED DECISION-MAKING

You have a right to not be subject to a decision based solely on automated decision making, including profiling.

In case you want to exercise the rights set out above you can contact us at accounts@culturerings.com.

The data provided by you as a Visitor, or as a User to avail of our Services will be processed by us for the purpose of rendering Services to you or in order to take steps prior to rendering such Services, at your request. Where such data is not being used by us to render Services to you, we shall explicitly seek your consent for using the same. You can choose to withdraw this consent at any time and you agree to inform us of your decision to withdraw consent by emailing us at accounts@culturerings.com. Additionally, we may process your data to serve certain legitimate interests.

Accordingly, the grounds on which we can engage in processing your data are as follows:

NATURE OF DATA	GROUNDS
Visitor Data	Consent; Performance of a Contract; and Legitimate Interest.
Account Registration Data	Performance of a Contract; and Legitimate Interest.
Payment Data	Performance of a Contract; Compliance with applicable laws; and Legitimate Interest.
Service Usage Data	Performance of a Contract; and Legitimate Interest.
Data for Marketing our Services	Consent; and Legitimate Interest.
Personal Stories	Consent.

If you believe we have used your personal data in violation of the rights mentioned above or have not responded to your objections, you may lodge a complaint with your local supervisory authority.

PUBLISHED CONTENT
Any success stories, comments, messages, blogs, scribbles etc. posted/ uploaded/ conveyed/ communicated by you on the public sections of the Website becomes published content. We may publish such published content on our Website so long as you consent. You may request that such published content be taken down at any time and we shall remove such published content. However, we are not responsible for any actions taken by third parties with respect to such published content.
RETENTION OF PERSONAL INFORMATION
We will store any personal data we collect from you as long as it is necessary in order to facilitate your use of the Services and for ancillary legitimate and essential business purposes – these include, without limitation, for improving our Services, attending to technical issues, and dealing with disputes.
Your personal data will primarily be stored in electronic form. We may enter into agreement with third parties to collect, store, process your personal data but under full compliance with applicable laws.
We may need to retain your personal data even if you seek deletion thereof, if it is needed to comply with our legal obligations, resolve disputes and enforce our agreements.
If you are a User, please be advised that after you terminate your usage of our Services, we may, unless legally prohibited, delete any and all data provided or collected by you from our servers.

TRACKING BY OUR ADVERTISEMENT PARTNERS
Upon receiving your specific consent, we may share the data we collect from cookies or web beacons with our advertisement partners to track your visits, establish your non-personal identity and present you with targeted advertisements about our Services.
TRANSFER OF INFORMATION

In the ordinary course of business, we may employ other persons and entities to assist us in providing the Services (or a portion thereof) in compliance with this Policy. To do so, we may need to share your data with them. Where applicable – if the entities to which these transfers are effected are not situated in countries deemed ‘adequate’ by the European Commission or are not registered under the EU-US Privacy Shield framework, we shall enter into appropriate Data Protection Addendums with the transferee parties that comprehensively protect your data. We shall also put in place industry-standard technical and organizational measures (including robust data handling policies) to ensure that such transfers are completed in accordance with applicable laws.

Some of the examples of where we may sub-contract processing activities to third parties include—record keeping, data analysis, marketing assistance, processing payments, and providing customer service.

THIRD PARTY LINKS

We may display links to third-party websites or applications on our Website for advertising or providing you with relevant content. We will not be responsible for such third-party websites or applications if you choose to access them. If you provide any data to such website/application, please ensure you read their policies given that you will no longer be bound by this Policy in doing so.

We may receive data whenever you visit a third-party link through our Website which includes the date and time of your visit to the third-party website, the web address or URL, technical information about the IP address, browser and the operating system you use.

COMPELLED DISCLOSURE

In addition to the purposes set out in the Policy, we may disclose any data we collected or processed from you if it is required:

under applicable law or to respond to a legal process, such as a search warrant, court order, or subpoena;
to protect our safety, your safety or the safety of others or in the legitimate interest of any party in the context of national security, law enforcement, litigation, criminal investigation or to prevent death or imminent bodily harm;
to investigate fraud or credit risk;
in connection with legal proceedings brought against ONE WORLD, its officers, employees, suppliers, affiliates, customers or vendors and any other personnel;
to establish, exercise, protect, defend and enforce our legal rights; or
when we do a business deal or negotiate a business deal, or our assets are merged or acquired by the other business entity, or during restructuring of business or re-organization, we may have to share information provided by you with the other business entities.

SECURITY OF YOUR PERSONAL INFORMATION

We implement industry-standard technical and organizational measures to help protect your data from unauthorized access, use, loss, destruction or disclosure. When we collect particularly sensitive data (such as a credit card number or your geo-location), it is encrypted using industry-standard cryptographic techniques.

ONE WORLD uses AIRPAY to process any payments made through the Website. Neither ONE WORLD nor AIRPAY stores your card data on our or AIRPAY’s servers. The data provided to us by you is encrypted through the Payment Card Industry Data Security Standards (PCI-DSS) while the payment is being processed. No purchase transaction data is saved after the completion of your purchase transaction. Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

The collection, storage, usage, and sharing of your data by the us shall be in compliance with the Indian Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws.

We have taken reasonable steps for the security and protection of all our digital platforms including internal applications, however, we shall not be responsible for any breach of security or the disclosure of personal data for reasons outside our control, such as hacking, social engineering, cyber terrorism, espionage by third parties, or any events by way of force majeure such as sabotage, fire, flood, explosion, acts of God, civil commotion, strikes or industrial action of any kind, riots, insurrection, war or acts of government.

ACCESS, CORRECTION & DELETION

You may request access, correction or updating, and deletion of the data by contacting us at accounts@culturerings.com.

You may note that deletion of certain data or withdrawal of consent may lead to cancellation of our Services to you.

Based on technical feasibility, we will provide you with access to all your personal and sensitive personal data that we maintain about you. We will perform a verification before providing you access to this data.

You may opt out of our marketing emails by clicking on the ‘opt-out’ link provided in the emails. However, we may still send you non-marketing emails about any other transactions with you.