Here is a comprehensive Global Privacy Policy customized for Hullabalooo. It incorporates the standard clauses from your provided text while expanding them to meet the strict legal frameworks of both India’s Digital Personal Data Protection (DPDP) Act, 2023 and the EU’s General Data Protection Regulation (GDPR).

Before publishing, please ensure you fill in the bracketed information (such as your contact email and website URL).

GLOBAL PRIVACY POLICY

Welcome to Hullabalooo. We respect your privacy and are committed to protecting your digital personal data. This Global Privacy Policy explains how we collect, process, store, and safeguard your information when you visit our website, in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India) and the General Data Protection Regulation (GDPR) (European Union).

1. Who We Are

• Data Fiduciary / Data Controller: Hullabalooo
• Website: [Insert Website Address]
• (Note: If Hullabalooo operates under a specific registered corporate entity, insert the legal entity name here).

   

2. What Personal Data We Collect

We collect and process the following categories of data to provide and improve our services:

• Identity & Contact Data: Your name, email address, shipping/billing address, and phone number when you register an account or place an order.
• Technical Data: Internet Protocol (IP) address, browser type and user agent string, time zone, and operating system.
• User-Generated Data:
  • Comments: When you leave comments on the site, we collect the data shown in the comments form, alongside your IP address and browser user agent string to assist with spam detection. An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. (The Gravatar privacy policy is available at: https://automattic.com/privacy/). Upon comment approval, your profile picture becomes visible to the public in the context of your comment.
  • Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

3. Lawful Basis for Processing

We only process your personal data when we have a legal foundation to do so. Under the GDPR and the DPDP Act, we rely on:

• Consent: Where you have explicitly given us permission (e.g., accepting marketing communications or non-essential cookies). You may withdraw this consent at any time.
• Contractual Necessity: Processing required to process payments, fulfill orders, and deliver your products.
• Legitimate Uses / Legitimate Interests: To ensure website security, run automated spam detection, and improve user experience, provided these interests do not override your fundamental rights.
• Legal Obligation: Retaining transactional records for tax, administrative, and compliance purposes.

   

4. Cookies

Our website utilizes cookies to enhance functionality and user convenience:

• Comments: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies so you do not have to fill in your details again next time. These cookies last for one year.
• Login & Account: When you log in, we set a temporary cookie to determine if your browser accepts cookies (this contains no personal data and is discarded when you close your browser). We also set several cookies to save your login information (lasts two days) and screen display choices (lasts one year). If you select “Remember Me”, your login persists for two weeks. Logging out removes these cookies.
• Publishing: If you edit or publish an article, an additional cookie is saved in your browser. This contains no personal data, simply indicates the post ID of the article you edited, and expires after 1 day.

   

5. Embedded Content & Third-Party Links

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

6. Data Sharing & Disclosure

We do not sell your personal data. We only share data with trusted third parties to facilitate our services:

• Service Providers: Logistics and shipping partners to deliver your goods, and payment processors for secure checkout.
• Automated Security: Visitor comments may be checked through an automated spam detection service.
• Legal Authorities: When mandated by law, court order, or to protect our legal rights.

   

7. Cross-Border Data Transfers

As a brand operating globally, your data may be transferred to and processed in countries outside of your residence.

• For EU Residents: We ensure any transfer of data outside the European Economic Area (EEA) is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs).
• For Indian Residents: Data transfers outside India are conducted in compliance with the DPDP Act, ensuring data is not transferred to any restricted territories notified by the Central Government.

8. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy:

• Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognize and approve follow-up comments automatically instead of holding them in a moderation queue.
• Registered Users: We store the personal information provided in user profiles indefinitely. All users can see, edit, or delete their personal information at any time (except you cannot change your username). Website administrators can also see and edit that information.
• Order Data: Retained for the duration required by applicable financial and corporate tax laws.
  

   

9. Your Rights Over Your Data

Under the DPDP Act and the GDPR, you retain control over your data. If you have an account on this site, or have left comments, you have the right to:

• Right to Access & Portability: Request an exported file of the personal data we hold about you, including any data you have provided to us.
• Right to Correction: Request the correction of incomplete, outdated, or inaccurate data.
• Right to Erasure: Request that we erase any personal data we hold about you. (Note: This does not include any data we are legally obliged to keep for administrative, tax, or security purposes).
• Right to Withdraw Consent: Revoke your consent for data processing at any time.
• Right to Nominate (DPDP Act): Nominate another individual to exercise your data rights in the event of death or physical/mental incapacity.

Duties of the Data Principal (India): Under the DPDP Act, users must not register false or frivolous grievances or furnish false particulars

10. Children’s Privacy

We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian. Under the DPDP Act, a child is defined as anyone under 18 years of age; under the GDPR, the age is generally under 16. We strictly prohibit behavioral monitoring or targeted advertising directed at children.

11. Grievance Redressal & Contact

If you wish to exercise any of your rights or have a grievance regarding how your data is handled, please contact our designated Data Protection / Grievance Officer:

• Email: [Insert Grievance Officer Email]
• Mailing Address: [Insert Registered Business Address]

We are committed to addressing all legitimate requests and grievances promptly and within the legal timeframes mandated by applicable laws.