Bomb SHots — Brand: Two Cute (Twice the Fun)

Bomb SHots (“Company”, “we”, “us”, or “our”) values your privacy and is committed to protecting your personal data in accordance with applicable Indian laws, including the Information Technology Act, 2000, the SPDI Rules 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, purchase products under the brand Two Cute — Twice the Fun, or interact with our services.

1. COLLECTION OF PERSONAL DATA

We collect personal data that you voluntarily provide to us when:

• Creating an account on our website

• Placing an order

• Subscribing to newsletters or promotions

• Contacting customer support

• Logging in through third-party platforms (Google, Facebook, etc., if enabled)

We may also collect data indirectly from:

• E-commerce marketplaces such as Amazon, Flipkart, Zepto, Blinkit, Instamart

• Payment gateways

• Social media platforms

• Advertising or analytics providers

2. TYPES OF PERSONAL DATA COLLECTED

2.1 Personal Information

Name, email address, phone number, billing/shipping address.

2.2 Transaction Information

Order history, payment confirmation details, delivery information.

2.3 Technical Information

IP address, browser type, cookies, device identifiers, usage analytics.

2.4 Sensitive Personal Data

We do not intentionally collect sensitive personal data such as financial passwords or biometric data unless required for lawful purposes and with explicit consent, as defined under the SPDI Rules.

3. PURPOSE OF DATA PROCESSING

We process personal data only for lawful purposes under Indian law, including:

• Processing orders and delivering products

• Providing customer service and support

• Improving website performance and user experience

• Marketing communications (with consent)

• Fraud prevention and security monitoring

• Compliance with legal obligations

4. CONSENT

By using our website or services, you consent to the collection and use of your personal data in accordance with this Privacy Policy.

You may withdraw your consent at any time by contacting us; however, withdrawal may affect our ability to provide certain services.

5. DISCLOSURE OF PERSONAL DATA

We may share your personal data with:

• Logistics and delivery partners

• Payment processors

• Marketing and analytics providers

• Technology service providers

• Legal or regulatory authorities when required under Indian law

We do not sell your personal data to third parties.

6. CROSS-BORDER DATA TRANSFER

Your data may be stored or processed outside India through trusted service providers. We ensure reasonable security practices and safeguards as required under applicable laws.

7. DATA RETENTION

We retain your personal data only for as long as necessary:

• To fulfill business or legal obligations

• To maintain transaction records

• To resolve disputes or enforce agreements

After this period, data will be deleted or anonymized.

8. YOUR RIGHTS UNDER INDIAN DATA PROTECTION LAWS

Subject to applicable laws, you may:

• Request access to your personal data

• Request correction or updating of inaccurate data

• Withdraw consent

• Request deletion where legally permissible

• Lodge complaints with the Data Protection Board of India (under DPDP Act)

Requests may be submitted via the contact details below.

9. CHILDREN’S DATA

Our products and services are not directed toward children without parental supervision. Where required by law, parental consent must be obtained before processing children’s personal data.

10. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

• Improve website functionality

• Personalize user experience

• Measure marketing performance

You can manage cookie settings through your browser.

11. DATA SECURITY

We follow reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, including:

• Encryption and secure servers

• Access controls

• Regular monitoring and security updates

12. THIRD-PARTY LINKS

Our website may contain links to external platforms or marketplaces. We are not responsible for the privacy practices of those third parties.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to comply with legal or business changes. Updates will be posted on our website.

14. GRIEVANCE OFFICER (INDIA COMPLIANCE)

In accordance with Indian IT Rules and DPDP Act requirements:

Company: Bomb SHots
Brand: Two Cute — Twice the Fun
Grievance Officer: [Your Name / Designation]
Email: [your email address]
Address: [your business address]

We will respond to grievances within the timelines prescribed under applicable Indian laws.