Privacy Notice

Scope of This Notice

This Notice applies to personal data collected from individuals who visit or interact with Cocoblu’s website and Services. This Notice does not apply to:

• Cocoblu employees – Please contact privacy@cocoblu.com for information regarding employee personal data handling practices.
• Job applicants – Please refer to Cocoblu’s Job Applicant Privacy Notice for recruiting-related personal data from candidates.

Cocoblu acts as a Data Fiduciary in respect of personal data collected through its website, as defined under the DPDPA.

About Cocoblu

Cocoblu is an e-commerce growth partner that helps brands scale and succeed online by navigating complex product categories and highly competitive marketplaces. We combine proprietary technology, data-driven processes, operational infrastructure, and experienced teams to deliver consistent growth, operational excellence, and customer delight.

Types of Personal Data We Collect

A. Personal Data You Provide Voluntarily

“Personal Data” means any data that can be used to identify you directly or indirectly. This may include:

• Full name
• Email address
• Phone number
• Physical or business address
• Any information you voluntarily provide when contacting us

We collect this information when you:

• Submit inquiries via our “Contact Us” page
• Communicate with us by email or other direct means

We do not knowingly collect personal data from children under 18 years of age. If we become aware that such data has been collected, we will take steps to delete it promptly.

B. Personal Data Collected Automatically

When you access or use our website, we may automatically collect certain technical and usage-related information, including:

• Device identifiers: IP address, Windows machine unique identifier, device type
• Usage data: browser type, language preferences, access times, pages viewed, referring URLs, session duration
• Technical data: operating system, system activity, hardware settings, application version

This information helps us understand how users interact with our website and enables us to improve functionality and performance. For more information, you can refer to Cocoblu’s cookie notice.

Purpose and Legal Basis for Processing Personal Data

We process personal data for the following purposes:

• To operate, maintain, and improve our website
• To respond to inquiries and communicate with you
• To prevent fraud, misuse, and unauthorized access
• To comply with applicable legal and regulatory obligations

Processing is carried out based on:

• Your consent (where applicable)
• Legitimate business interests
• Legal obligations under applicable laws

Sharing and Disclosure of Personal Data

Cocoblu does not sell, trade, or rent personal data to third parties. We may disclose personal data only in the following circumstances:

A. Legal and Regulatory Authorities

We may disclose personal data where disclosure is:

• Required by law or regulation
• Necessary to comply with legal process or government requests
• Necessary to protect the rights, property, safety, or security of Cocoblu, our users, or the public

B. Protection Against Harm

If we determine that an individual has engaged in unlawful, fraudulent, or harmful conduct that could damage Cocoblu’s reputation or operations, we may disclose relevant personal data to appropriate authorities or third parties to prevent or mitigate harm.

Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes described in this Notice
• Provide our Services
• Meet legal, regulatory, or contractual requirements

Once personal data is no longer required, it is securely deleted or anonymized in accordance with our internal data retention policies.

Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, disclosure, alteration, or destruction. We also require third-party service providers who process data on our behalf to maintain industry-standard security measures.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you wish to know more about the security measures to protect personal data, kindly contact privacy@cocoblu.in.

Third-Party Websites and Services

Our website may contain links to third-party websites or services that are not operated or controlled by Cocoblu. These third parties have independent privacy practices, and Cocoblu is not responsible for their content or data handling.

Your Rights Under the DPDPA, 2023

Subject to the requirements of the Digital Personal Data Protection Act, 2023, you have the following rights:

We may require identity verification before fulfilling requests.

Exercising Your Rights

To exercise your rights or raise concerns, please contact us at privacy@cocoblu.com. We aim to resolve the request within 90 days, subject to legal and regulatory requirements.

Requests may be declined or limited where:

• Compliance would adversely affect the rights of others
• Disclosure would reveal trade secrets or confidential information
• Retention is required by law

In case we are unable to proceed with the request, we shall inform you of the same.

Changes to This Privacy Notice

We may update this Notice from time to time. If material changes are made, we will notify users through a prominent notice on our website. Continued use of our services following such updates constitutes acceptance of the revised Notice.