1. About This Privacy Policy

This Privacy Policy explains how Bazaar Hungama, operating the Ofably brand and website ofably.com (“Website”), collects, uses, stores, shares, protects and otherwise processes information relating to visitors, customers and users of the Website (“User”, “You” or “Your”).

This Privacy Policy applies to the Website and the products, services, communications and other services offered by us through or in connection with the Website.

By accessing, browsing, registering on or using the Website, or by voluntarily providing your information to us, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your information in accordance with this Policy and applicable law.

If you do not agree with this Privacy Policy, please do not use, register on or otherwise avail the Website or its services.

2. Information We May Collect

Depending on how you interact with Ofably, we may collect different categories of information.

A. Personal Information

Personal information may include information that identifies you or can reasonably be associated with you, such as:

• Your name;
• Email address;
• Mobile or telephone number;
• Billing and shipping address;
• Account or login information, where applicable;
• Order and purchase information;
• Payment and transaction-related information;
• Information you provide when contacting customer support;
• Reviews, feedback, photographs or other content voluntarily submitted by you;
• Information provided when participating in offers, surveys, contests or promotions; and
• Other information that you voluntarily provide to us.

B. Payment Information

Payments made through the Website may be processed by third-party payment gateways, banks, financial institutions or other payment service providers.

Depending on the payment method used, such providers may collect and process payment information directly. We may receive transaction-related information such as payment status, transaction reference numbers and other information necessary to confirm and reconcile your payment.

We do not intend to store complete debit-card or credit-card numbers or CVV/security codes on our own servers. Such information should be handled by the applicable payment service provider in accordance with its own privacy and security practices.

C. Non-Personal & Technical Information

When you interact with our Website, certain technical information may be collected automatically, including:

• Browser type and version;
• Device type;
• Operating system and version;
• IP address;
• Approximate location derived from technical information;
• Language preferences;
• Pages visited and interactions with the Website;
• Referring website or source;
• Date and time of visits;
• Session and diagnostic information; and
• Other technical or usage information generated through interaction with the Website.

3. How We Collect Information

We may collect information:

• When you create or use an account;
• When you place an order;
• When you provide information during checkout;
• When you contact us or communicate with customer support;
• When you subscribe to our email, SMS or other communications;
• When you participate in surveys, contests, promotions or offers;
• When you submit reviews, feedback or other content;
• Automatically through cookies and similar technologies; and
• From service providers and technology partners involved in providing our services.

You may browse portions of the Website without directly providing personal information. However, certain functions, such as placing an order, may require information necessary to complete the requested service.

4. How We Use Your Information

We may use personal information for legitimate business purposes, to provide requested services, to perform contractual obligations, to comply with applicable law, or on the basis of your consent where consent is required.

This may include:

1. Providing and facilitating your use of the Website;
2. Creating and managing your account, where applicable;
3. Processing, confirming and fulfilling orders;
4. Arranging shipping and delivery;
5. Processing or confirming payments;
6. Communicating with you regarding your orders and transactions;
7. Providing customer support;
8. Responding to questions, concerns and requests;
9. Processing returns, exchanges, refunds and related requests;
10. Sending transactional, service and administrative communications;
11. Sending promotional and marketing communications where permitted and, where required, with your consent;
12. Personalising your experience on the Website;
13. Understanding how users interact with the Website;
14. Conducting analytics and internal reviews;
15. Improving products, services, Website functionality and customer experience;
16. Detecting, preventing and investigating fraud, misuse, security incidents and unauthorized activity;
17. Protecting the integrity, security and operation of the Website;
18. Enforcing our Terms & Conditions and other applicable policies;
19. Establishing, exercising or defending legal claims;
20. Complying with legal, regulatory, governmental, tax, accounting or law-enforcement requirements; and
21. For other purposes permitted by applicable law.

5. Cookies & Similar Technologies

Our Website may use cookies, pixels, tags, scripts, local storage and similar technologies to provide functionality, understand Website usage, remember preferences, improve performance and support advertising and analytics.

Cookies are small files or pieces of information stored on or associated with your device when you visit a website.

We may use these technologies for purposes including:

• Keeping the Website functioning properly;
• Maintaining shopping-cart and checkout functionality;
• Remembering preferences;
• Understanding traffic and Website usage;
• Measuring marketing campaigns;
• Improving Website performance;
• Detecting fraud or suspicious activity; and
• Providing or measuring relevant advertising.

Some cookies or similar technologies may be placed or accessed by third-party service providers operating analytics, advertising, payment, social-media or other Website functionality.

You may be able to control or disable certain cookies through your browser or device settings. However, disabling certain cookies may affect Website functionality, including shopping-cart or checkout features.

6. Analytics, Advertising & Marketing

We may use third-party analytics and advertising technologies to understand Website usage, measure campaigns, improve our services and show or measure relevant advertisements.

These technologies may include analytics platforms, advertising platforms, social-media tools, conversion tracking technologies, pixels and similar tools.

Depending on the services enabled on the Website, these providers may receive information such as device information, IP address, browser information, Website interactions, order-related events, advertising identifiers and other information permitted by applicable law and the relevant platform's terms.

We do not permit such service providers to use personal information received from us for purposes prohibited by applicable law or our contractual arrangements with them.

You may opt out of certain marketing communications by using the unsubscribe mechanism included in the relevant communication or by contacting us.

7. When We May Share Your Information

We do not sell or rent your personal information.

We may share information with trusted third parties where reasonably necessary to operate our business, provide requested services, complete transactions, protect our interests or comply with applicable law.

Such recipients may include:

• Shopify and technology providers that host or support our Website and ecommerce infrastructure;
• Payment gateways, banks and payment service providers for processing and verifying transactions;
• Courier, logistics and delivery partners for fulfilling and delivering orders;
• Customer-support and communication providers for responding to customers and sending service communications;
• Analytics and advertising providers for analytics, measurement and marketing;
• IT, security, fraud-prevention and technical service providers;
• Professional advisors, including legal, accounting and tax advisors where necessary;
• Government authorities, regulators or law-enforcement agencies where disclosure is required or permitted by law; and
• Other service providers where reasonably necessary to provide a service requested by you or operate our business.

Where appropriate and required by applicable law, we expect third-party service providers processing personal information on our behalf to maintain appropriate contractual, organizational and technical safeguards.

8. Third-Party Services & External Links

The Website may contain links, integrations, payment options, social-media features, advertisements or services provided by third parties.

Third-party websites and services operate under their own terms and privacy policies. We are not responsible for the privacy practices, security, content or policies of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services before providing information to them.

9. Data Processors & Service Providers

We may appoint third-party service providers or data processors to process personal information on our behalf for activities such as hosting, ecommerce operations, payment processing, logistics, customer support, analytics, marketing, fraud prevention, security and communication.

Such processing may be carried out under contractual arrangements, instructions, safeguards or other measures appropriate to the nature of the processing and applicable law.

We remain responsible for personal data processing undertaken by us or on our behalf to the extent required by applicable law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, complete transactions, maintain business and financial records, resolve disputes, prevent fraud, enforce agreements and comply with legal, tax, accounting and regulatory obligations.

Different categories of information may therefore be retained for different periods.

When personal information is no longer required for the purposes for which it was collected, we may securely delete, anonymise or otherwise dispose of it, subject to applicable legal and regulatory retention requirements.

11. Security of Your Information

The security of your personal information is important to us.

We use reasonable technical, administrative and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, disclosure, loss or destruction, taking into account the nature of the information and applicable risks.

Where appropriate, safeguards may include access controls, authentication mechanisms, secure transmission technologies, restricted access, monitoring, service-provider controls and other security measures.

However, no electronic transmission, storage system or security mechanism can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security of information transmitted to or stored by us.

12. Personal Data Breaches

If we become aware of a personal data breach involving information processed by or on behalf of Ofably, we will take reasonable steps to investigate, contain, mitigate and remediate the incident.

Where notification is required by applicable law, we will notify the relevant authority, affected individuals or other parties in the manner and within the timelines prescribed by applicable law.

We may also take other measures that we reasonably consider necessary to protect affected individuals and restore the security and integrity of our systems.

13. Your Choices & Control Over Your Information

You may choose not to provide certain information. However, if information is necessary to provide a particular service, process an order, complete a transaction or comply with a legal requirement, failure to provide that information may prevent us from providing the relevant service.

Where applicable, you may request access to, correction or updating of your personal information and may request deletion of personal information that is no longer necessary, subject to applicable law and legitimate retention requirements.

Where processing is based on your consent and applicable law gives you a right to withdraw that consent, you may withdraw consent by contacting us or using an available mechanism. Withdrawal of consent will not affect processing already carried out lawfully before withdrawal.

You may also opt out of promotional communications by using the unsubscribe option provided in the communication or by contacting us.

14. Data Principal Rights

Subject to the applicability of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) and other applicable laws, you may have rights relating to your personal data, including rights to:

• Obtain information regarding processing of your personal data;
• Request correction, completion or updating of inaccurate or incomplete personal data;
• Request erasure of personal data where applicable;
• Withdraw consent where processing is based on consent;
• Raise a grievance concerning the processing of your personal data; and
• Exercise other rights available under applicable law.

Requests may be subject to identity verification and applicable legal limitations. We may retain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, complete transactions or otherwise satisfy a lawful purpose.

The rights and procedures described above will apply to the extent and from the date required under applicable law.

15. Marketing Communications

We may send you transactional and service-related communications necessary to fulfil orders, provide services, manage your account or communicate important information.

Where permitted by law, we may also send promotional communications regarding Ofably products, offers, launches, discounts, events or other information that may be relevant to you.

You may opt out of promotional communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Opting out of marketing communications will not prevent us from sending essential transactional, security, account or service-related communications.

16. User-Submitted Content

If you voluntarily submit reviews, photographs, feedback, testimonials or other content to us, the information contained in such submissions may be used in accordance with our Terms & Conditions and applicable law.

Please do not submit sensitive personal information, financial information, passwords, authentication credentials or information relating to another person unless you have the legal right and necessary permission to do so.

17. Children's Privacy

The Website is intended primarily for individuals who are legally capable of entering into transactions.

We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.

Where applicable law requires parental or lawful guardian consent for processing a child's personal data, we will seek to comply with the applicable requirements.

If you believe that a child has provided personal information to us in circumstances where such processing is not permitted, please contact us so that we can take appropriate action.

18. International Data Processing

Some of our technology, payment, analytics, advertising, communication, hosting or other service providers may process information from locations outside India.

Where personal information is transferred, stored or processed outside India, we will take such measures as may be required by applicable law, including applicable requirements relating to cross-border transfers, contractual safeguards or restrictions notified by competent authorities.

19. Legal & Regulatory Disclosures

We may collect, use, preserve or disclose personal information where reasonably necessary to:

• Comply with applicable laws, regulations, court orders or governmental directions;
• Respond to lawful requests from government, regulatory or law-enforcement authorities;
• Prevent, detect or investigate fraud, security incidents or unlawful activity;
• Protect the rights, property, safety or security of Ofably, our customers, users or others;
• Establish, exercise or defend legal claims; or
• Enforce our Terms & Conditions and other applicable policies.

20. Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, transfer of business, financing transaction or similar corporate transaction, personal information may be transferred as part of the relevant business assets or operations, subject to applicable law.

Any successor entity or transferee may process such information in accordance with applicable law and the applicable privacy commitments.

21. Fraud, Security & Abuse Prevention

We may process information to detect, investigate and prevent fraudulent transactions, unauthorized account access, misuse of promotional offers, payment abuse, return or refund abuse, security incidents and other activities that may harm Ofably, our customers or third parties.

Where reasonably necessary, information may be shared with payment providers, logistics partners, technology providers, professional advisors, regulators or law-enforcement authorities for these purposes, subject to applicable law.

22. Accuracy of Information

You are responsible for providing accurate and up-to-date information when interacting with Ofably.

You may contact us to request correction or updating of information where appropriate.

Where permitted by law, we may retain previous versions or records of information where necessary for audit, legal, accounting, fraud-prevention, dispute-resolution or other legitimate purposes.

23. User Discretion & Responsibilities

You may choose not to provide information that is not mandatory. However, certain information may be necessary for placing an order, completing payment, delivering Products, providing customer support or complying with legal requirements.

You should take reasonable precautions to protect your account credentials and devices and should not share passwords, authentication codes or sensitive payment information with persons claiming to represent Ofably through unofficial channels.

24. Important Security Disclaimer

25. Changes to This Privacy Policy

We may update, amend or revise this Privacy Policy from time to time to reflect changes in our services, business practices, technology, applicable law or regulatory requirements.

The revised Privacy Policy will be posted on this page with an updated effective or revision date where appropriate.

You are encouraged to review this page periodically to remain informed about how we handle personal information.

Where required by applicable law, we may provide additional notice or obtain consent for material changes.

Your continued use of the Website following publication of an updated Privacy Policy will constitute acknowledgment of the updated Policy to the extent permitted by applicable law.

26. Grievance & Privacy Requests

If you have questions, concerns, complaints or requests relating to your personal information or this Privacy Policy, you may contact us using the details below.

When submitting a privacy request, please provide sufficient information for us to identify your account or transaction and understand your request. We may request reasonable information to verify your identity before processing a request.

27. Applicable Law

This Privacy Policy shall be interpreted and applied in accordance with applicable laws of India, including applicable data-protection, consumer-protection, ecommerce, information-technology and other laws and regulations, as amended or replaced from time to time.

Nothing in this Privacy Policy is intended to restrict or exclude any right or remedy that cannot lawfully be restricted or excluded under applicable law.