(Chersom) is the owner and the service provider of an internet based website and mobile application, which endeavors to provide the world with an exclusive range of chocolates under the brand name “CHERSOM”.
We process certain Information because it is necessary for us to be able to provide and administer the Service and its features. We also process certain Information to comply with certain statutory requirements.
Such data is processed based on your consent. To the extent that processing is carried out on the basis of consent, it is for you to give such a consent and you may at any time, wholly or partly, withdraw your consent. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.
Please note that certain Services requires us to access certain Information and if you refuse to provide us the consent, it may result in a suspension of your account.
We collect the following information as and when you access and use the Services as set out below:
While using the Services, You shall not host, display, upload, modify, publish, transmit, update or share any information on to the Services that:
You can control your choices regarding our collection, use and sharing of your information. In accordance with local law, your controls and choices may include:
Further, you may exercise your right to data portability, which means that you have the right to receive the Personal Information processed about you in a structured, commonly used and machine-readable i.e. HTML format. Please note that some of the rights above only may be exercised in certain situations, e.g. the right to data portability, which only applies when the processing is carried out on the basis of an agreement or a consent and if the processing is carried out by automated means. In case you have any questions regarding how we process your Personal Information, want to exercise any of your rights or want to know more about the rights, You may contact us as indicated below.
If you do not want us to process your Personal Information for direct marketing, you can give written notice thereof to us. In each newsletter, you will also be informed that You can opt out of receiving further newsletters.
You are also entitled to lodge a complaint with a supervisory authority if you consider that your Personal Information has been processed in contradiction with applicable data protection legislation.
You may exercise your controls and choices, or request access to your personal information, by contacting, or following instructions provided in communications sent to you. Please be aware that, if you do not allow us to collect personal information from you, we may not be able to deliver certain products and services to you, and some of our services may not be able to take account of your interests and preferences. If you have questions regarding the specific personal information about you that we process or retain, please contact our grievance office mentioned in clause 12.
Use of the Services is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. Our Services are not meant for minors and users below 18 (eighteen) years of age. We do not intentionally collect data from users who are below 18 (years) of age.
We will keep Personal Information regarding you only as long as it is necessary, having regard to the purpose of the processing. This means that Personal Information collected and processed will be stored for as long as you have an account and deleted months after your subscription has ended unless you have given us your voluntary consent to continue to process such data.
We will also, during the same period, keep your account information, to facilitate your easy return. We may store data for longer if required by law or if required in our legal interests, for example if there are ongoing legal proceedings.
The security, integrity and confidentiality of your Personal Information are extremely important to us. We have implemented technical, administrative and physical security measures that are designed to protect guest information from unauthorized access, disclosure, use and modification. From time to time, we review our security procedures to consider appropriate new technology and methods. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable. We limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs.
However, we may be required to share the aforesaid Personal Information with government authorities and agencies for the purposes of verification of identity or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences. You agree and consent for us to disclose your information, if so required under the applicable law.
All interactions with our Services use the Transport Layer Security/Secure Sockets Layer (TLS/SSL) protocol. We use a third-party Payment Gateway to securely process credit card transactions. [D&P Note: Retain if relevant.]
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted. Except for your password, data isn’t encrypted while it’s live in our database (since it needs to be ready to send to you when you need it).
All data that we store in our log files or send to third party softwares that we use to analyze errors with the Software is anonymized and no personal identifiable information is sent to them.
is the data controller for the processing of your Personal Information handled by us. If you have any concerns about privacy or grievances regarding the Services, please contact us with a thorough description and we will try to resolve the issue for you.
What are cookies?
We and certain service providers operating on our behalf collect information about your activity on our Services using tracking technologies such as cookies, flash cookies and web beacons. We use two types: persistent cookies and session cookies. A persistent cookie helps us recognize you as an existing user, so it’s easier to return to the Services or interact with our Services without signing in again. After you sign in, a persistent cookie stays in your browser and will be read by us when you return to one of our products. Session cookies only last for as long as the session (usually the current visit to a website or a browser session). This tracking data is used for many purposes including, for example, to:
While you may block and/or limit our access to cookies, if you limit the ability of websites to set cookies, if may affect your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.
Anonymous Information. Anonymous information means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual guest.
IP address. An IP address is associated with the access point through which you enter the Internet, and is typically controlled by your Internet Service Provider (ISP), your company, or your university. We may use IP addresses to collect information regarding the frequency with which our guests visit various parts of our products hosting our Services, and we may combine IP addresses with personal information.
Notice. Notice may be by email to you at the last email address you provided us, by posting notice of such changes in our Services, or by other means, consistent with applicable law.
Personal information. Personal information means and includes information that identifies (whether directly or indirectly) and Sensitive Personal Information of a person by reference to an identifier such as a name, an identification number, location data or an online identifier to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of such person. When anonymous information is directly or indirectly associated with personal information, this anonymous information also is treated as personal information.
Public Forums. Our Services may offer message boards, conversation pages, blogs, chat rooms, social community environments, profile pages, and other forums that do not have a restricted audience. If you provide personal information when you use any of these features, that personal information may be publicly posted and otherwise disclosed without limitation as to its use by us or by a third party.Sensitive Personal Information. Sensitive Personal Information shall have the meaning ascribed to it under the applicable law and is presently defined to mean such personal information which consists of information relating to (i) passwords; (ii) financial information such as bank accounts or credit card or debit card or other payment instrument details; (iii) physical, physiological and mental health conditions; (iv) sexual orientation; (v) medical records and history; (vi) Biometric information; (vii) any detail relating to the above clauses as provided to body corporate for providing service; and (viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise; provided that any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2000 or any other law for the time being in force shall not be regarded as sensitive personal information.