Privacy Statement — GreenSpace Herbs

Effective Date: June 30, 2023

GreenSPACE Pvt. Ltd. and its subsidiaries and affiliates (“GreenSPACE”) collect, use, and disclose data from visitors of our websites (“Sites”) in accordance with the following statement (“Privacy Statement”). The Privacy Statement does not apply to any data GreenSPACE collects offline or through web or mobile sites that do not link to this Privacy Statement.

Your use of the Sites, and any dispute over privacy, is subject to this Privacy Statement and our Terms of Use, including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Privacy Statement.

For visitors outside the EEA/UK: By visiting our Sites, you agree that your data will be handled as described in this Privacy Statement. Additional information is provided below for visitors located in the European Economic Area (EEA) and United Kingdom (UK), and for residents of California.

Types of Data Collection; Data Collected

The information we collect from you depends on how you use our Sites. If you send a request through our website, we will collect the data that you submit to us. For example, if you request ingredients and/or samples, register for e-mail alerts or webcasts, or if you receive commercial documentation from GreenSPACE, either via a GreenSPACE website, to enable the fulfillment of the request you may provide personal data such as your name and contact information.

GreenSPACE automatically collects certain information when you use our Sites, including but not limited to the activities you perform on our Sites, the type of hardware and software you are using (for example, your operating system or browser), information stored in cookies, IP address, access times, the web pages from which you came, the regions from which you navigate the web page, and the web pages you visit.

Purposes of Data Collection

GreenSPACE uses your personal data for its business purposes including to:

Operate Our Business. We use the personal data we collect to allow you to maintain your account and otherwise run our day-to-day operations.
Provide You Products and Services. We use the personal data we collect to provide you with sample requests, fulfil orders, or renew or modify products and services we provide to you.
Communicate With You. We use the personal data we collect to communicate with you about your use of our Sites and services, to respond to your inquiries, to provide you with the information and documents you request, and for other customer service purposes.
Evaluate and Improve Our Products and Services. We use the personal data we collect to evaluate, analyse, improve, and develop our products and services, including our Sites, and to tailor the content and information that we may send or display to you.
Analytics. We use analytics tools, such as Google Analytics, to evaluate usage and traffic on our Site and Services. These analytics providers use cookies, pixels, and other tracking technologies to collect usage data that helps us analyse, improve, and enhance performance and user experience.
Research. We use the personal data we collect to administer surveys and questionnaires, such as for market research or member satisfaction purposes.
Marketing and Advertising. We may use your personal data for marketing and promotional purposes, including to send you promotional communications about products, services, features, and options we believe may interest you. We may also use your information to serve you advertisements or customized content online.
Inferences. We may use the information we collect to better understand how you access and use our Site and the products and services available on our Site, both on an aggregated and individualized basis.
Security Purposes. We may use the personal data we collect to mitigate fraud and protect GreenSPACE and others.
Legal Requirements. We use the personal data we collect to investigate, enforce, and apply this Privacy Statement and our Terms of Use, and to otherwise protect our own rights and interests, such as to resolve any disputes or to respond to requests from law enforcement, court orders, regulators, or other legal processes.
Business Transfers. We may also use the personal data we collect and receive to consider and implement mergers, acquisitions, reorganizations, refinancing, and other business transactions, and where necessary to the administration of our general business, accounting, recordkeeping, and other legal functions.

How We May Disclose Personal Data

When permitted by applicable law, including, if applicable, when we have obtained your consent, we may disclose your personal data to our affiliates, business partners, vendors, and others as follows:

Affiliates, Subsidiaries, and Business Partners. We disclose the personal data we collect with our affiliates, subsidiaries, and agents. We also partner with other businesses to offer products, services, or credit, and we may disclose your personal data to those organizations.
Agents, retailers, and distributors. We disclose the personal data we collect with our agents, retailers, and distributors to facilitate the sale and distribution of our products and services, which may include marketing communications consistent with your choices.
Vendors and Service Providers. We may disclose the personal data we collect with vendors who perform functions on our behalf, such as helping complete transactions and process payments, handle order fulfillment and shipping, and provide IT services, website hosting and analytics, auditing services, and similar functions.
Marketing and Advertising Partners. We may also disclose the personal data we collect, such as name and contact information, with our marketing and advertising partners to send you content about certain products.

We also may disclose your personal data in the following circumstances:

Business Transfers. As we continue to develop our business, we may buy, merge, sell, or partner with other companies, and may disclose personal data as part of those commercial transactions, as well as in contemplation of such transactions.
In Response to Legal Process. Personal data may be disclosed to third parties as required by law or subpoena, or if we reasonably believe such action is necessary to comply with the law and the reasonable requests of regulators, law enforcement, or other public authorities, including those outside your country of residence.
To Protect Us and Others. We may disclose the personal data we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Statement or our Terms of Use, or as evidence in litigation in which we are involved.
Aggregate and De-Identified Information. We may disclose aggregate or de-identified information about users with third parties for marketing, advertising, research, or other purposes.
With Your Permission. We may disclose personal data in other ways not described above. If we do so, we will notify you and, if necessary, obtain your consent.

Third-Party Links

Our Sites may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Statement but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Security

No data transmission over the internet or any wireless network can be guaranteed to be 100% secured. As a result, while GreenSPACE strives to protect your personal data through implementation of security measures, GreenSPACE cannot warrant the security of any information you transmit to GreenSPACE.

What Choices Do I Have Regarding Use of My Data?

We may send periodic promotional emails to you, with your consent if required by applicable law. You may opt-out of promotional emails at any time by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about any services you have requested or received from us.

Children Under 13

Our Sites and services are not designed for children under 13. If we discover that a child under 13 has provided us with information, we will delete such information from our systems.

Information Storage and International Transfers

GreenSPACE and its affiliates and service providers process and store your personal data on servers around the world, including in the United States.

Contact

If you have any questions about our Privacy Statement, please contact GreenSPACE’s Chief Privacy Officer by e-mail at dpo@greenspaceherbs.com or by mail addressed to Chief Privacy Officer, GreenSPACE, HNS Nutra LLC, 30 Knightsbridge Rd, Piscataway, NJ 08854.

Changes to this Privacy Statement

This Privacy Statement is current as of the Effective Date set forth above. We may change this Privacy Statement from time to time, so please be sure to check back periodically. We will post any changes to this Privacy Statement on our site. If we make any changes that materially affect our practices with regard to the personal data we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Sites.

Information for Individuals Located in the EEA and UK

This section applies only if you use our Site from a country that is a Member State of the EEA or from the UK, and it supplements the information in the remainder of our Privacy Statement above. GreenSPACE or its respective subsidiary or affiliate is the controller of your personal data. For a visitor of this website or an investor, the data controller is GreenSPACE, HNS Nutra LLC, 30 Knightsbridge Rd, Piscataway, NJ 08854. For all other individuals, including contacts of customers and suppliers, the data controller is the legal entity that manages your business relationship with GreenSPACE.

Legal bases for processing

We rely on one of several different legal bases to process your personal data, which are as follows:

To take necessary steps prior to entering into a contract with you, and to perform a contract with you — we need to process your personal data to fulfil sample requests, answer questions and requests from you, and provide customer support.
Based on legitimate interests — we process personal data to protect the security and safety of our customers and stakeholders, to minimize our legal exposure and protect our reputation by detecting and preventing fraud, and to grow our business.
Based on compliance with EEA/UK legal obligations to which we are subject — we may need to process your personal data to comply with relevant laws, regulatory requirements, and to respond to lawful requests, court orders, and legal process.
Based on your freely given consent, for tracking your activities in accordance with the GreenSPACE Cookie policy, and (where required by law) for sending marketing communication.

Purposes for using your data

GreenSPACE collects personal data through our Sites to:

Provide, customize, and improve the functionality of the site (legal basis: legitimate interests in improving our marketing efforts to grow our revenues);
Provide you e-mail alerts, access to webcasts or other services (legal bases: consent, where required by applicable law; otherwise, our legitimate interests in promoting our company, products and services); and
Fulfil sample requests or contractual obligations (legal basis: pre-contract necessity).

User’s rights

Subject to the conditions set forth in applicable law, you have the following rights with regard to our processing of your personal data:

Right to access, correct and delete your personal data. You have a responsibility to ensure you provide us accurate personal data and to notify GreenSPACE of changes in personal circumstances so that we keep your personal data up-to-date.
Right to withdraw consent. Where your personal data is processed on the basis of your consent, you have the right to withdraw consent at any time by sending an email to law.department@greenspaceherbs.com, without affecting the lawfulness of processing based on consent before its withdrawal.
Data portability. To the extent we use your personal data for performance of contract and that data is processed by automatic means, you have the right to receive such data in a structured, commonly used and machine-readable format, and to require us to transmit it to another data controller where technically feasible.
Right to restrict personal data use in the circumstances permitted under applicable law.
Right to object to the processing of your personal data on grounds relating to your particular situation, and to object to the use of your personal data for direct marketing purposes (including profiling).
Lodge a complaint. You have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, if you consider that the collection and use of your personal data infringes this Notice or applicable law.

For further information regarding your rights, or to exercise any of your rights (other than the right to lodge a complaint with an authority), please contact dpo.eame@greenspaceherbs.com.

Transfer of personal data

Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Site, you understand that your personal data will be transferred to countries outside of your country of residence, which may have data protection rules different from those of your country.

Data retention

We retain your personal data only for as long as necessary for the relevant activity unless a longer retention period is required or permitted by law. For more information, please contact us at law.department@greenspaceherbs.com.

Privacy Policy and Notice at Collection for California Residents

This Privacy Policy and Notice for California Residents (“Notice”) supplements the information contained in GreenSPACE’s Website Privacy Statement to provide California residents with specific information regarding our collection, use, and disclosure of their personal data. This Notice is also intended to satisfy our applicable notice at collection requirements under the California Consumer Privacy Act (CCPA).

What is personal data? In this Notice, “personal data” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. It does not include publicly available information or information that is exempt under the CCPA.

What isn’t covered by this Notice? This Notice does not apply to our collection of consumer credit reports and background checks, publicly available information lawfully made available from state or federal government records or that we have reason to believe was made publicly available by the individual, or other information that is exempt under the CCPA.

Categories of data that we collect, disclose and sell

Our collection, use, and disclosure of personal data about California residents will vary depending upon the circumstances and the nature of our interactions or relationship with such resident. Under the CCPA’s broad definition of “sell” and “share,” the use of cookies and other tools for website analytics and targeted advertising may be considered “selling” or “sharing” of personal data. We do not disclose personal data to third parties in exchange for money. The categories of personal data we collect include:

Name, Contact Information, and Other Identifiers such as a real name, address, unique personal identifier, online identifier, Internet Protocol (IP) address, and email address.
Customer Records — paper and electronic customer records containing personal information, such as name, signature, education, current employment, and employment history.
Commercial Information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
Internet or Other Electronic Network Activity Information, including browsing history, clickstream data, search history, and information regarding a resident’s interaction with a website, application, or advertisement, including access logs and other activity information related to your use of any GreenSPACE websites, applications, or other online services.
Profiles and Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

Please see the “Types of Data Collection” and “Purposes of Data Collection” sections of this Privacy Statement for information regarding the purposes for which we collect your personal data, and the “How We May Disclose Personal Data” section for the categories of third parties with whom we share your personal data.

Sources of personal data

As further described in the “Types of Data Collection” section of our Website Privacy Statement, we may collect personal data directly from you, automatically through your use of our Sites, and from our affiliates, service providers, and business partners.

Retention of personal data

We retain the personal data we collect only as reasonably necessary for the purposes described in this Notice, or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as necessary to comply with our tax, accounting, and recordkeeping obligations, to provide you with products and services or service your account, and for research and development.

Deidentification of personal data

Occasionally, we may deidentify personal data and use the deidentified information for our internal purposes. We commit to maintaining and using this information in deidentified form and will not attempt to reidentify the information except to determine whether our deidentification process is effective.

Rights regarding your personal data

The CCPA provides California residents with specific rights regarding personal data. Subject to certain exceptions, California consumers have the right to make the following requests: the Right to Know the personal data we have collected about you in the prior twelve (12) months, the Right to Delete personal data we have collected from you, the Right to Correct inaccurate personal data, and the Right to Opt-Out of the “sale” or “sharing” of personal data. We will not discriminate against you for exercising any of these rights.

Submitting requests

To submit a request to exercise your rights, please contact us at law.department@greenspaceherbs.com. We will verify your request using the information associated with your account or interactions with us, and may request additional information where necessary to confirm your identity.

Do Not Track

Some browsers offer a “Do Not Track” signal. Because no common industry standard for “Do Not Track” has been adopted, our Sites do not currently respond to such signals.

Changes to this Notice

We may update this Notice from time to time. We will post any changes on this page, and we encourage you to review this Notice periodically.

Contact us

If you have questions about this statement, please contact us at law.department@greenspaceherbs.com.