Privacy Policy

Welcome to Allum ("Allum," "we," "our," or "us"). We respect your privacy and are committed to protecting the personal information that you share with us while accessing or using our website, mobile applications, products, services, customer support channels, marketing communications and any other digital platforms operated by Allum (collectively, the "Services").

This Privacy Policy explains how Allum collects, uses, stores, processes, shares, protects, retains and otherwise handles your personal information when you interact with our Services. It also explains your rights regarding your personal information and the choices available to you concerning how your information is used.

At Allum, protecting customer trust is one of our highest priorities. We recognize that personal information is valuable and deserves to be handled responsibly, transparently and securely. Accordingly, we are committed to processing personal information in accordance with applicable privacy, consumer protection, cybersecurity and data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and other applicable laws depending upon the jurisdiction from which you access our Services.

This Privacy Policy applies to all visitors, customers, registered users, purchasers, subscribers, business partners, applicants and any other individuals who access or use our Services. It governs personal information collected through our website, mobile applications, customer support interactions, marketing campaigns, promotional events, social media engagements, surveys, contests and any other lawful means through which Allum interacts with you.

By accessing, browsing, registering an account, placing an order, subscribing to newsletters, communicating with customer support, participating in promotions or otherwise using the Services, you acknowledge that you have read, understood and agreed to the collection, use, disclosure, storage and processing of your personal information as described in this Privacy Policy.

If you do not agree with this Privacy Policy or any part of it, you should discontinue using the Services and refrain from providing personal information to Allum.

This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, Shipping Policy, Return & Refund Policy, Cancellation Policy and any other policies published by Allum, all of which collectively govern your relationship with us.

As our business evolves, we may introduce new products, technologies, services, payment methods, marketing initiatives, analytics tools, security measures or legal compliance requirements that require updates to this Privacy Policy. We therefore encourage you to review this Policy periodically to remain informed about how your personal information is handled.

Nothing contained within this Privacy Policy shall limit or exclude any mandatory rights available to you under applicable privacy or consumer protection laws. Where applicable law grants you greater protection than this Privacy Policy, the applicable law shall prevail to the extent of such inconsistency.

Allum remains committed to maintaining appropriate administrative, technical, organizational and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, destruction, misuse or accidental loss. However, while we implement commercially reasonable security measures, no method of electronic transmission or digital storage can be guaranteed to be completely secure and therefore absolute security cannot be assured.

By continuing to use the Services, you confirm that you understand how your personal information may be collected, processed, shared, retained and protected in accordance with this Privacy Policy and applicable law.

This Privacy Policy applies to all personal information collected, received, generated, processed, stored, disclosed or otherwise handled by **Allum** in connection with the operation of its website, mobile applications, digital platforms, products, services, customer support channels, marketing activities and all other interactions with customers, visitors, business partners and users (collectively referred to as the **"Services"**).

The purpose of this Privacy Policy is to explain the scope of our privacy practices, identify the categories of information covered by this Policy, clarify when this Policy applies and describe the circumstances under which different privacy terms may govern specific products or services offered by Allum.

This Privacy Policy applies regardless of whether you interact with Allum as a visitor browsing our website, a registered account holder, a customer placing an order, a subscriber receiving marketing communications, a participant in promotional campaigns, a contributor of user-generated content or an individual otherwise communicating with Allum.

Services Covered

This Privacy Policy applies to information collected through or in connection with:

• The official Allum website.
• Mobile applications published by Allum.
• Mobile-optimized websites.
• Customer account registration.
• Product browsing and shopping activities.
• Checkout and payment processes.
• Order fulfillment.
• Shipping and delivery communications.
• Customer support interactions.
• Email communications.
• SMS communications.
• Push notifications.
• Promotional campaigns.
• Loyalty or rewards programs.
• Gift card services.
• Wishlist functionality.
• Product reviews and ratings.
• User-generated content.
• Surveys and questionnaires.
• Contests and promotional events.
• Social media interactions managed by Allum.
• Business enquiries.
• Vendor and supplier communications.
• Recruitment or career portals where applicable.
• Any future digital services officially operated by Allum.

This Policy also applies when you contact Allum through telephone, live chat, messaging platforms, support forms, contact forms or other communication channels provided by the Company.

Persons Covered

This Privacy Policy applies to personal information relating to:

• Website visitors.
• Registered customers.
• Guest checkout users.
• Account holders.
• Purchasers.
• Newsletter subscribers.
• Marketing subscribers.
• Loyalty program members.
• Referral program participants.
• Contest participants.
• Product reviewers.
• Customer support contacts.
• Business partners.
• Suppliers.
• Vendors.
• Service providers interacting with Allum.
• Individuals communicating with Allum for lawful business purposes.

The obligations and rights described in this Privacy Policy apply to all such individuals unless a separate privacy notice specifically governs a particular relationship.

Information Covered

This Privacy Policy applies to personal information collected directly from you, automatically through your use of the Services or obtained from authorized third-party sources.

Information covered by this Policy may include:

• Personal identification information.
• Contact information.
• Account credentials.
• Billing information.
• Shipping information.
• Transaction history.
• Payment-related information.
• Device identifiers.
• Browser information.
• IP addresses.
• Location information where permitted.
• Cookies and tracking technologies.
• Shopping preferences.
• Customer communications.
• Product reviews.
• Marketing preferences.
• Technical usage information.
• Security logs.
• Fraud prevention information.
• Any other information reasonably necessary for providing the Services.

Specific categories of information are described in greater detail later in this Privacy Policy.

Geographic Scope

This Privacy Policy applies regardless of the country or region from which you access the Services, subject to applicable local laws.

Certain rights, obligations, disclosures or legal requirements described in this Privacy Policy may vary depending upon:

• Country of residence.
• State or regional laws.
• Consumer protection regulations.
• Data protection legislation.
• Cross-border transfer requirements.
• Local regulatory obligations.

Where local law provides greater privacy protections than this Privacy Policy, the applicable legal requirements shall prevail.

Information Not Covered

This Privacy Policy generally does not apply to:

• Information processed solely by independent third-party websites.
• Information collected by third-party payment providers under their own privacy policies.
• Information collected by independent courier or logistics companies.
• Information processed by social media platforms.
• Third-party advertising networks.
• Websites linked from the Services but operated independently.
• Employment-related information governed by separate employee privacy notices.
• Information processed under separate contractual agreements with business partners where different privacy terms apply.

Users should review the privacy policies of independent third parties before providing personal information directly to them.

Third-Party Products and Services

The Services may integrate with or provide access to independent third-party services, including payment gateways, authentication providers, analytics platforms, logistics providers, marketing services, cloud hosting providers and social media platforms.

While Allum exercises reasonable care in selecting trusted service providers, this Privacy Policy does not govern the privacy practices of independent third parties operating under their own privacy policies.

Your interactions with such third-party services remain subject to the privacy practices and legal terms of the respective provider.

Future Services

This Privacy Policy shall also apply to future products, digital platforms, mobile applications, customer services, technologies, loyalty programs, promotional initiatives and business operations introduced by Allum unless separate privacy terms are expressly published for those offerings.

Where separate privacy notices apply to specific products or services, such notices shall supplement this Privacy Policy and prevail only to the extent of any inconsistency.

Policy Hierarchy

This Privacy Policy should be read together with:

• Terms and Conditions.
• Cookie Policy.
• Shipping Policy.
• Return & Refund Policy.
• Cancellation Policy.
• Promotional Terms.
• Loyalty Program Terms.
• Any additional legal notices published by Allum.

Where multiple policies apply to a particular interaction, they shall be interpreted together to provide the fullest protection consistent with applicable law.

Reservation of Rights

Allum reserves the right to determine the applicability of this Privacy Policy to specific Services, products, technologies and business activities and may issue additional privacy notices where appropriate.

If any provision of this Privacy Policy is determined to be invalid or unenforceable under applicable law, the remaining provisions shall continue in full force and effect.

By accessing or using the Services, you acknowledge and agree that this Privacy Policy governs the collection, processing, storage, disclosure and protection of your personal information to the extent applicable to your interactions with Allum and its Services.

In order to provide, operate, maintain, improve, personalize, secure and support the Services, **Allum** may collect various categories of personal information, technical information, transactional information and other data relating to individuals who interact with our Services. The type and amount of information collected depends upon the nature of your interaction with Allum, the products or services you use, the device you use to access the Services, applicable legal requirements and your communication or privacy preferences.

We collect information directly from you, automatically through your use of the Services, from authorized third-party sources and from information generated during your interactions with our platform.

The collection of personal information is limited to what is reasonably necessary for legitimate business purposes, legal compliance, fraud prevention, customer support and the provision of our Services.

Categories of Information

Depending upon your interaction with the Services, Allum may collect one or more of the following categories of information.

Identity Information

Identity information helps us identify customers and maintain secure customer accounts.

Examples include:

• Full name.
• First and last name.
• Username.
• Display name.
• Profile photograph.
• Date of birth (where required).
• Gender (where voluntarily provided).
• Customer identification number.
• Account identification information.
• Verification information where legally required.

Contact Information

We may collect information necessary to communicate with you regarding your account, orders, customer support requests, promotions and other service-related matters.

Examples include:

• Email address.
• Mobile number.
• Telephone number.
• Billing address.
• Shipping address.
• City.
• State or Province.
• Postal or ZIP code.
• Country.
• Preferred communication language.

Account Information

When you register an account, we may collect and generate information relating to your customer profile.

This may include:

• Account credentials.
• Encrypted passwords.
• Login history.
• Account preferences.
• Wishlist.
• Saved addresses.
• Saved payment preferences (where supported).
• Loyalty program information.
• Membership status.
• Referral information.
• Shopping preferences.
• Account activity history.

Order and Transaction Information

When you purchase products or interact with our shopping platform, we may collect information relating to your transactions.

This may include:

• Products viewed.
• Products purchased.
• Shopping cart information.
• Order numbers.
• Product quantities.
• Size selections.
• Color selections.
• Purchase history.
• Invoice information.
• Delivery instructions.
• Shipping preferences.
• Return requests.
• Exchange requests.
• Refund history.
• Promotional codes used.
• Gift card usage.
• Store credit information.

Payment Information

To facilitate secure purchases, payment-related information may be collected or processed.

Depending on the payment method used, this may include:

• Payment method selected.
• Transaction identifiers.
• Payment authorization status.
• Billing information.
• Partial payment card information where appropriate.
• UPI transaction references.
• Wallet transaction details.
• Bank transfer references.
• Payment verification information.

Sensitive financial information is generally processed by authorized third-party payment providers rather than being stored directly by Allum, except where necessary for lawful business purposes.

Device Information

When you access the Services, certain technical information about your device may be collected automatically.

Examples include:

• Device type.
• Device model.
• Operating system.
• Browser type.
• Browser version.
• Screen resolution.
• Device identifiers.
• Language settings.
• Time zone.
• Mobile carrier information.
• Device capabilities.

Technical Information

To improve platform performance and maintain security, Allum may collect technical usage information.

Examples include:

• IP address.
• Internet service provider.
• Session information.
• Login timestamps.
• Error logs.
• Crash reports.
• Performance metrics.
• Diagnostic information.
• Website interaction history.
• Navigation behavior.
• Search queries.
• Clickstream information.

Location Information

Where permitted by applicable law and your device settings, we may collect location-related information.

This may include:

• Approximate geographic location.
• Country.
• State.
• City.
• Regional information.
• Time zone.
• IP-based location.
• Delivery location.

Precise device location shall only be collected where you have granted the necessary permissions.

Communication Information

When you communicate with Allum, we may collect records relating to such communications.

Examples include:

• Customer support enquiries.
• Live chat conversations.
• Email communications.
• Contact form submissions.
• Telephone call records where permitted.
• Complaint information.
• Feedback.
• Survey responses.
• Product enquiries.
• Business communications.

Marketing Information

Where permitted by applicable law, we may collect information regarding your marketing preferences.

Examples include:

• Newsletter subscriptions.
• Promotional preferences.
• Campaign participation.
• Offer redemptions.
• Loyalty activities.
• Referral program participation.
• Contest entries.
• Communication preferences.

User Content

Information voluntarily submitted by users may include:

• Product reviews.
• Ratings.
• Photographs.
• Videos.
• Testimonials.
• Comments.
• Questions and answers.
• Styling content.
• Social media submissions.
• Public profile information.

Security Information

To protect the Services and prevent fraud, Allum may collect information relating to security and risk management.

Examples include:

• Login attempts.
• Authentication records.
• OTP verification.
• Password reset activity.
• Device recognition.
• Fraud detection indicators.
• Security alerts.
• Account recovery information.
• Suspicious activity logs.

Cookies and Similar Technologies

Information collected through cookies and similar technologies may include:

• Session identifiers.
• Preference settings.
• Shopping cart information.
• Website interaction data.
• Analytics identifiers.
• Advertising identifiers.
• Device recognition information.
• User preferences.

Further details regarding cookies are provided in the Cookie Policy and the relevant section of this Privacy Policy.

Information You Choose Not to Provide

Certain information requested by Allum may be necessary for providing products or Services.

If you choose not to provide mandatory information, you may be unable to:

• Create an account.
• Place orders.
• Complete payments.
• Receive deliveries.
• Access certain features.
• Participate in promotional campaigns.
• Obtain customer support.
• Receive personalized recommendations.

The specific consequences depend upon the information withheld and the Services requested.

Accuracy of Information

You represent and warrant that all information provided to Allum is accurate, complete, current and lawfully provided.

You agree to promptly update your personal information whenever necessary to ensure continued accuracy.

Providing false, misleading, incomplete or unauthorized information may result in delayed services, failed transactions, account restrictions, cancellation of orders or other actions permitted under applicable law and the Terms and Conditions.

Reservation of Rights

Allum reserves the right to collect additional categories of information where reasonably necessary for new products, technologies, legal compliance, fraud prevention, security improvements, customer support or operational requirements, provided such collection remains consistent with applicable law and the principles set forth in this Privacy Policy.

By accessing or using the Services, you acknowledge and agree that Allum may collect the categories of information described in this Section for the purposes outlined in this Privacy Policy and in accordance with applicable data protection laws.

Allum collects personal information that you voluntarily provide when you interact with our Services. The information you choose to provide enables us to create and manage your account, process orders, provide customer support, personalize your shopping experience, improve our products and services, comply with legal obligations and communicate with you regarding your interactions with Allum.

You are under no general obligation to provide personal information; however, certain information is necessary for us to provide specific products, services or features. Where information is mandatory, failure to provide it may prevent us from fulfilling your request, processing your order or providing the requested Service.

By voluntarily providing personal information, you represent and warrant that the information is accurate, complete, current and lawfully provided and that you have the legal authority to provide such information.

Account Registration

When you create an account with Allum, you may provide information including, but not limited to:

• Full name.
• Email address.
• Mobile phone number.
• Username.
• Password.
• Date of birth (where applicable).
• Gender (optional).
• Preferred language.
• Country or region.
• Communication preferences.

This information enables us to establish your customer account, authenticate your identity, maintain account security and provide account-related services.

Orders and Purchases

When placing an order, you may voluntarily provide information necessary to complete the transaction, including:

• Billing name.
• Shipping recipient name.
• Delivery address.
• Apartment, building or landmark details.
• Postal or ZIP code.
• Contact number.
• Email address.
• Preferred delivery instructions.
• Gift message (where applicable).
• Order notes.
• Tax information where required.
• Business information for commercial purchases.

This information is required to process, fulfill and deliver your order.

Payment Information

When completing a purchase, you may provide payment-related information depending on the payment method selected.

Examples include:

• Billing address.
• Payment method selection.
• UPI details.
• Wallet selection.
• Bank account information where applicable.
• Payment verification information.
• Transaction confirmations.

Sensitive payment credentials are generally collected and processed by certified third-party payment providers rather than being stored directly by Allum, except where required for lawful business purposes.

Customer Support

When contacting customer support, you may voluntarily provide information including:

• Contact information.
• Order details.
• Product information.
• Complaint descriptions.
• Delivery concerns.
• Return requests.
• Exchange requests.
• Refund enquiries.
• Supporting photographs.
• Videos.
• Documents.
• Chat transcripts.
• Call recordings where legally permitted.

This information enables us to investigate and resolve your enquiry effectively.

Product Reviews and Ratings

When submitting product reviews, ratings or testimonials, you may voluntarily provide:

• Written reviews.
• Star ratings.
• Product photographs.
• Styling photographs.
• Videos.
• Product recommendations.
• Experience descriptions.
• Usernames.
• Public profile information where applicable.

Reviews may be publicly displayed on the Services in accordance with our Terms and Conditions.

User-Generated Content

You may voluntarily submit content through various community features, including:

• Comments.
• Questions and answers.
• Fashion styling photographs.
• Social media submissions.
• Contest entries.
• Testimonials.
• Feedback.
• Suggestions.
• Creative content.

You remain responsible for ensuring that any information submitted complies with applicable laws and our Terms and Conditions.

Marketing Communications

Where you voluntarily subscribe to marketing communications, you may provide:

• Email address.
• Mobile number.
• Product preferences.
• Shopping interests.
• Communication preferences.
• Preferred categories.
• Birthday information (optional).
• Consent preferences.

This information enables us to send newsletters, promotional offers, personalized recommendations and marketing updates in accordance with applicable law.

Surveys and Research

From time to time, Allum may invite customers to participate in surveys, questionnaires, product testing, research initiatives or customer satisfaction programs.

Participation is entirely voluntary.

Information provided may include:

• Product opinions.
• Shopping habits.
• Customer preferences.
• Service feedback.
• Feature suggestions.
• Demographic information.
• Satisfaction ratings.
• Future purchasing interests.

Survey responses may be aggregated or anonymized for research and business improvement purposes where appropriate.

Promotional Campaigns

When participating in contests, giveaways, referral programs, loyalty initiatives or promotional campaigns, you may voluntarily provide information such as:

• Contact details.
• Eligibility information.
• Referral information.
• Contest submissions.
• Promotional preferences.
• Verification documents where required.
• Prize delivery information.

Additional terms applicable to specific promotions may govern such information.

Business Communications

If you contact Allum regarding business partnerships, wholesale opportunities, supplier enquiries, media requests, employment opportunities or other commercial matters, you may voluntarily provide:

• Company name.
• Business contact information.
• Professional title.
• Business address.
• Portfolio materials.
• Proposal documents.
• Corporate identification information.
• Correspondence.

Such information shall be processed only for legitimate business purposes.

Information About Other Individuals

Certain Services may allow you to provide information relating to another individual, such as:

• Gift recipients.
• Delivery recipients.
• Emergency contacts where applicable.
• Business representatives.
• Authorized recipients.

By providing such information, you represent and warrant that you have obtained all necessary permissions and legal authority to share that information with Allum for the relevant purpose.

Optional Information

Some information requested by Allum is entirely optional.

Examples may include:

• Profile photographs.
• Style preferences.
• Favorite brands.
• Preferred clothing sizes.
• Birthday.
• Anniversary information.
• Wishlist preferences.
• Personal shopping interests.
• Product customization preferences.

Choosing not to provide optional information will generally not affect your ability to use the core Services.

Accuracy and Updates

You are responsible for ensuring that all information voluntarily provided remains accurate, complete and current.

You agree to promptly update your account whenever changes occur to:

• Contact information.
• Shipping addresses.
• Billing details.
• Communication preferences.
• Account information.
• Other relevant personal information.

Failure to maintain accurate information may result in unsuccessful deliveries, communication failures, account security issues, delayed order processing or inability to access certain Services.

Reservation of Rights

Allum reserves the right to request additional information where reasonably necessary to:

• Verify identity.
• Prevent fraud.
• Comply with legal obligations.
• Complete transactions.
• Resolve disputes.
• Protect customer security.
• Improve customer service.
• Introduce new products or Services.

Any additional information requested shall be collected and processed in accordance with this Privacy Policy and applicable law.

By voluntarily providing personal information to Allum, you acknowledge and agree that such information may be collected, processed, stored and used for the purposes described in this Privacy Policy and in compliance with applicable data protection and privacy laws.

When you access, browse or interact with the Services, **Allum** and its authorized service providers may automatically collect certain technical, device-related, usage and diagnostic information through cookies, pixels, log files, software development kits (SDKs), local storage, web beacons, server logs and similar technologies. This information helps us operate the Services, maintain security, improve performance, understand customer behavior, personalize user experiences, detect fraud and comply with legal and operational requirements.

Automatically collected information generally does not identify you directly on its own. However, where such information is linked with your account or other personal information, it may be treated as personal information under applicable data protection laws.

Device Information

When you access the Services, we may automatically collect information relating to the device you use.

This may include:

• Device type.
• Device manufacturer.
• Device model.
• Operating system.
• Operating system version.
• Browser type.
• Browser version.
• Language preferences.
• Time zone settings.
• Screen resolution.
• Device identifiers.
• Hardware characteristics.
• Network connection type.
• Mobile carrier information.
• Platform information.

This information helps ensure compatibility across different devices and enables us to improve platform performance.

Log Information

Our servers automatically generate log records whenever you access or use the Services.

These logs may include:

• IP address.
• Date and time of access.
• Pages visited.
• Referring website.
• Exit pages.
• Session duration.
• Search queries.
• Click activity.
• Navigation paths.
• Login activity.
• Error reports.
• Performance logs.
• Diagnostic information.
• Browser requests.
• Download activity.

Log information assists us in troubleshooting technical issues, monitoring security and improving website functionality.

Usage Information

We automatically collect information describing how users interact with the Services.

Examples include:

• Products viewed.
• Categories browsed.
• Search history.
• Wishlist activity.
• Shopping cart activity.
• Product comparison behavior.
• Time spent on pages.
• Scroll behavior.
• Button clicks.
• Menu interactions.
• Checkout progression.
• Purchase history.
• Session frequency.
• Feature usage.
• Customer journey information.

Understanding user behavior allows us to optimize the shopping experience and improve website usability.

Cookie Information

The Services use cookies and similar technologies to recognize returning users and improve functionality.

Automatically collected cookie information may include:

• Session identifiers.
• Authentication tokens.
• Shopping cart contents.
• Saved preferences.
• Language settings.
• Region selection.
• Theme preferences.
• Login status.
• Security identifiers.
• Analytics identifiers.
• Advertising identifiers.

Additional information regarding cookies is available in our Cookie Policy.

Location Information

Depending upon your device settings, browser permissions and applicable law, we may automatically collect approximate location information, including:

• Country.
• Region.
• State.
• City.
• Time zone.
• Approximate geographic location derived from IP address.

Where precise device location is requested, we will generally obtain the necessary permissions before collecting such information.

Performance Information

To improve reliability and functionality, we may automatically collect performance-related information, including:

• Page loading speed.
• Website responsiveness.
• Feature performance.
• Application crashes.
• Error messages.
• Network latency.
• Browser compatibility issues.
• Technical failures.
• User interface interactions.
• Resource loading statistics.

This information helps us identify technical problems and continuously improve the Services.

Security Information

For security and fraud prevention purposes, we may automatically collect information such as:

• Login timestamps.
• Authentication attempts.
• Password reset requests.
• Device recognition.
• IP reputation indicators.
• Suspicious activity.
• Failed login attempts.
• Multi-factor authentication events.
• Fraud detection signals.
• Security alerts.

This information enables us to protect customer accounts and maintain platform security.

Advertising Information

Where permitted by applicable law, advertising technologies may automatically collect information relating to advertising effectiveness and customer engagement.

Examples include:

• Advertisement impressions.
• Advertisement clicks.
• Campaign identifiers.
• Referral sources.
• Marketing attribution.
• Conversion events.
• Promotional engagement.
• Campaign performance.

This information helps us evaluate marketing campaigns and improve advertising relevance.

Analytics Information

Allum may utilize analytics technologies to understand how customers use the Services.

Automatically collected analytics information may include:

• Visitor counts.
• Session duration.
• Popular products.
• Navigation flows.
• Conversion rates.
• Device usage.
• Geographic trends.
• Customer engagement.
• Bounce rates.
• Feature adoption.
• Shopping behavior.

Analytics information may be aggregated or anonymized where appropriate.

Fraud Prevention

Automatically collected information may also be used to identify and prevent:

• Fraudulent transactions.
• Account takeovers.
• Payment fraud.
• Bot activity.
• Automated purchasing.
• Spam.
• Unauthorized access.
• Security threats.
• Abuse of promotional campaigns.
• Technical attacks.

Fraud prevention measures are implemented to protect both customers and Allum.

Aggregated and Anonymized Information

Certain automatically collected information may be aggregated, anonymized or de-identified so that it can no longer reasonably identify an individual.

Aggregated information may be used for purposes including:

• Business analytics.
• Website optimization.
• Product development.
• Performance measurement.
• Marketing analysis.
• Trend reporting.
• Operational planning.
• Statistical reporting.

Where information has been irreversibly anonymized, it may no longer be considered personal information under applicable law.

Third-Party Technologies

Some automatically collected information may be gathered through technologies provided by trusted third-party service providers supporting functions such as:

• Website analytics.
• Payment processing.
• Fraud detection.
• Cloud hosting.
• Security monitoring.
• Marketing measurement.
• Customer support.
• Performance monitoring.

Such third-party technologies operate in accordance with contractual safeguards and, where applicable, their own privacy policies.

Your Choices

Depending upon your browser, device and applicable law, you may have the ability to:

• Disable certain cookies.
• Clear stored cookies.
• Restrict browser tracking.
• Modify advertising preferences.
• Withdraw certain permissions.
• Manage device privacy settings.
• Disable location sharing.
• Opt out of certain analytics technologies where available.

Please note that disabling certain technologies may reduce functionality or limit access to certain features of the Services.

Reservation of Rights

As technology evolves, Allum may introduce additional automatic data collection technologies that improve security, performance, personalization, fraud prevention, accessibility or operational efficiency.

Any such technologies shall be implemented in accordance with applicable law and this Privacy Policy.

By continuing to use the Services, you acknowledge and agree that Allum may automatically collect technical, device, usage, diagnostic, security and analytics information as described in this Section for the purposes of operating, protecting, improving and personalizing the Services in compliance with applicable privacy and data protection laws.

In addition to the information that you provide directly and the information collected automatically through your use of the Services, **Allum** may receive information about you from authorized third-party sources where such collection is permitted by applicable law or where you have authorized the sharing of such information.

Third-party information helps us verify customer identities, process payments, deliver products, prevent fraud, improve customer experiences, personalize recommendations, comply with legal obligations and operate our Services efficiently.

Allum does not knowingly obtain personal information from unauthorized sources. Information received from third parties is processed only for lawful and legitimate business purposes consistent with this Privacy Policy and applicable law.

Payment Service Providers

When you complete a purchase using a third-party payment provider, we may receive information relating to the status and outcome of your payment.

Such information may include:

• Payment confirmation.
• Transaction reference numbers.
• Payment status.
• Authorization status.
• Billing verification results.
• Payment method type.
• Refund status.
• Chargeback notifications.
• Fraud alerts.
• Payment verification indicators.

For security reasons, Allum generally does not receive or store complete payment card numbers, CVV codes, PINs or other highly sensitive payment credentials unless required by applicable law or necessary to process a specific transaction.

Logistics and Delivery Partners

Our courier companies, shipping providers, warehousing partners and logistics service providers may provide us with information relating to the delivery and fulfillment of your orders.

This may include:

• Shipment tracking updates.
• Delivery confirmations.
• Delivery attempt records.
• Recipient confirmation.
• Proof of delivery.
• Delivery photographs where available.
• Delivery exceptions.
• Returned shipment information.
• Failed delivery notifications.
• Shipping delays.
• Address verification results.

This information enables us to manage deliveries, resolve shipping issues and provide customer support.

Identity Verification Providers

Where identity verification is required for fraud prevention, legal compliance, account security or payment verification, Allum may receive information from authorized verification providers.

Examples include:

• Identity verification status.
• Address verification results.
• Mobile number verification.
• Email verification.
• Authentication results.
• Fraud risk indicators.
• Customer verification outcomes.

Verification information is processed solely for the purpose for which it was obtained.

Social Media Platforms

If you choose to interact with Allum through social media platforms or use social login features, we may receive information that you authorize the platform to share.

Depending upon your privacy settings and permissions, this information may include:

• Name.
• Email address.
• Public profile photograph.
• User identifier.
• Preferred language.
• Country or region.
• Public profile information.
• Friends or follower information where expressly permitted.
• Account authentication information.

The specific information shared depends upon your privacy settings with the relevant social media platform.

Marketing and Advertising Partners

Where permitted by applicable law, Allum may receive information from authorized advertising, affiliate, marketing or promotional partners.

Examples include:

• Campaign attribution data.
• Referral information.
• Promotion participation.
• Advertisement interaction.
• Conversion information.
• Marketing performance metrics.
• Customer acquisition sources.

Such information helps us evaluate the effectiveness of our marketing activities.

Analytics Providers

Analytics service providers may provide reports and insights regarding customer interactions with the Services.

These reports may include:

• Aggregated visitor statistics.
• Customer engagement metrics.
• Device usage trends.
• Website performance indicators.
• Geographic trends.
• Traffic sources.
• Conversion statistics.
• Shopping behavior insights.

Where possible, analytics information is aggregated or de-identified before analysis.

Fraud Prevention Partners

To protect customers and maintain the security of the Services, Allum may receive information from fraud detection and risk assessment providers.

This may include:

• Fraud risk scores.
• Suspicious transaction alerts.
• Device reputation information.
• IP risk indicators.
• Chargeback history.
• Payment verification alerts.
• Security recommendations.

This information is used solely for fraud prevention, account security and lawful risk management.

Business Partners

Where Allum collaborates with authorized business partners, marketplaces, suppliers, manufacturers or promotional partners, we may receive information necessary to fulfill products or services.

Examples include:

• Inventory availability.
• Product fulfillment updates.
• Warranty registration information.
• Promotional eligibility.
• Gift card redemption status.
• Loyalty program participation.
• Business transaction records.

Such information is limited to what is reasonably necessary for the relevant business purpose.

Publicly Available Information

Where permitted by applicable law, Allum may obtain information from publicly available sources.

Examples include:

• Public business directories.
• Public company information.
• Government registers.
• Public social media posts directed to Allum.
• Publicly available contact information.

Public information is collected only where reasonably necessary and lawful.

Customer Referrals

If another customer refers you through a referral program, we may receive limited information necessary to administer the referral.

Such information may include:

• Name.
• Email address.
• Mobile number.
• Referral identifier.
• Referral code.

We expect customers making referrals to obtain appropriate permission before sharing another individual's contact information.

Combined Information

Information received from third parties may be combined with information already held by Allum in order to:

• Verify customer identity.
• Improve account security.
• Personalize recommendations.
• Complete transactions.
• Prevent fraud.
• Improve customer service.
• Enhance website functionality.
• Comply with legal obligations.

Such combined information shall continue to be protected under this Privacy Policy.

Accuracy of Third-Party Information

While Allum works with trusted service providers, we do not guarantee that information received from third parties is always complete, accurate or current.

Customers are encouraged to review and update their personal information through their account settings whenever appropriate.

Reservation of Rights

Allum reserves the right to receive additional categories of information from trusted third parties where reasonably necessary for new products, services, technologies, fraud prevention, legal compliance, security improvements or operational requirements, provided such collection remains consistent with applicable law and this Privacy Policy.

By using the Services, you acknowledge and agree that Allum may receive and process information from authorized third-party sources as described in this Section for the purposes of providing, securing, improving and operating the Services in accordance with applicable privacy and data protection laws.

• *Allum** uses the personal information collected through the Services only for lawful, legitimate and business-related purposes consistent with this Privacy Policy, our Terms and Conditions and applicable data protection laws. The way we use your information depends on your interaction with the Services, the products or services you use, your communication preferences, applicable legal requirements and the permissions you have granted.

We process personal information only to the extent reasonably necessary to provide our Services, fulfill contractual obligations, improve customer experiences, maintain platform security, prevent fraud, comply with legal obligations and operate our business efficiently.

Providing Our Services

We use your information to provide, operate and maintain the Services offered by Allum.

This includes:

• Creating customer accounts.
• Authenticating users.
• Managing customer profiles.
• Processing purchases.
• Confirming orders.
• Managing shopping carts.
• Saving wishlists.
• Providing account features.
• Delivering digital services.
• Managing loyalty programs.
• Operating promotional campaigns.
• Providing personalized shopping experiences.

Without certain personal information, many of these Services cannot be provided.

Order Processing

Your information is used to process and fulfill orders placed through the Services.

This includes:

• Confirming purchases.
• Processing payments.
• Generating invoices.
• Preparing products for shipment.
• Coordinating fulfillment.
• Managing inventory.
• Processing returns.
• Handling exchanges.
• Issuing refunds.
• Providing order updates.
• Managing warranties where applicable.

Shipping and Delivery

We use your information to deliver purchased products accurately and efficiently.

Examples include:

• Preparing shipping labels.
• Verifying delivery addresses.
• Coordinating with logistics partners.
• Tracking shipments.
• Providing delivery notifications.
• Managing delivery exceptions.
• Handling returned shipments.
• Verifying delivery completion.

Customer Support

Information collected from you may be used to:

• Respond to enquiries.
• Investigate complaints.
• Resolve disputes.
• Process support requests.
• Verify customer identity.
• Assist with account recovery.
• Handle product issues.
• Provide technical support.
• Improve customer satisfaction.

Customer communications may also be reviewed for quality assurance and staff training where permitted by law.

Account Management

We use your information to administer customer accounts, including:

• Password management.
• Login authentication.
• Security verification.
• Profile updates.
• Saved preferences.
• Account settings.
• Communication preferences.
• Membership management.
• Loyalty rewards.

Personalization

To improve your shopping experience, Allum may use your information to personalize the Services.

Examples include:

• Product recommendations.
• Personalized collections.
• Recently viewed products.
• Wishlist suggestions.
• Size recommendations.
• Shopping preferences.
• Language preferences.
• Regional product availability.
• Customized homepage content.

Personalization helps us make the Services more relevant to individual customers.

Marketing Communications

Where permitted by applicable law, we may use your information to send:

• Promotional emails.
• Newsletters.
• Product launch announcements.
• Seasonal campaigns.
• Discount offers.
• Fashion collections.
• Event invitations.
• Loyalty rewards.
• Birthday offers.
• Personalized promotions.

You may opt out of marketing communications at any time through the unsubscribe mechanism or your account settings, subject to applicable law.

Fraud Prevention and Security

Protecting our customers and platform is a key priority.

We use information to:

• Detect fraudulent transactions.
• Prevent unauthorized account access.
• Identify suspicious behavior.
• Verify customer identity.
• Monitor account security.
• Prevent payment fraud.
• Detect bots and automated abuse.
• Investigate security incidents.
• Protect intellectual property.
• Maintain platform integrity.

Security monitoring may occur continuously while the Services are being used.

Legal Compliance

We may process personal information where reasonably necessary to:

• Comply with applicable laws.
• Respond to lawful requests.
• Meet tax obligations.
• Fulfill accounting requirements.
• Satisfy regulatory obligations.
• Respond to court orders.
• Cooperate with law enforcement.
• Protect legal rights.
• Resolve legal disputes.

Processing for legal compliance shall be limited to what is required under applicable law.

Analytics and Improvement

We continually improve our products and Services by analyzing customer interactions.

Information may be used to:

• Improve website performance.
• Optimize user experience.
• Develop new features.
• Evaluate product popularity.
• Analyze shopping trends.
• Improve search functionality.
• Enhance navigation.
• Measure campaign performance.
• Identify technical issues.
• Improve accessibility.

Where appropriate, aggregated or anonymized information may be used for these purposes.

Research and Product Development

We may use information to support:

• Fashion trend analysis.
• Product development.
• Inventory planning.
• Customer satisfaction research.
• Business intelligence.
• Quality improvement.
• Technology innovation.
• Artificial intelligence improvements.
• Operational efficiency.

Where possible, research activities utilize anonymized or aggregated information.

Business Operations

Information may also be processed for general business purposes including:

• Financial reporting.
• Internal auditing.
• Business planning.
• Inventory management.
• Supplier coordination.
• Performance measurement.
• Staff training.
• Risk management.
• Insurance claims.
• Corporate governance.

Communication

We use your information to communicate regarding:

• Orders.
• Payments.
• Deliveries.
• Returns.
• Exchanges.
• Security alerts.
• Account verification.
• Legal notices.
• Privacy updates.
• Changes to policies.
• Service announcements.

Transactional communications are generally necessary for providing the Services and may continue even where marketing communications have been disabled.

Artificial Intelligence and Automation

Where permitted by applicable law, Allum may use automated systems and artificial intelligence technologies to:

• Improve product recommendations.
• Personalize shopping experiences.
• Detect fraud.
• Improve search functionality.
• Enhance customer support.
• Analyze customer preferences.
• Improve inventory forecasting.
• Identify operational efficiencies.

Automated processing shall be implemented responsibly and in accordance with applicable legal requirements.

Corporate Transactions

In the event of:

• Business restructuring.
• Merger.
• Acquisition.
• Investment.
• Sale of assets.
• Corporate reorganization.

personal information may be processed as reasonably necessary to complete the transaction, subject to confidentiality obligations and applicable law.

Protection of Rights

We may process information where reasonably necessary to:

• Enforce our Terms and Conditions.
• Protect customer safety.
• Protect employees.
• Protect business partners.
• Prevent unlawful activities.
• Defend legal claims.
• Protect intellectual property.
• Recover outstanding payments.
• Investigate policy violations.

Consent-Based Processing

Where processing is based upon your consent, you may withdraw such consent at any time where permitted by applicable law.

Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.

Reservation of Rights

Allum reserves the right to process personal information for additional lawful purposes that are compatible with the purposes described in this Privacy Policy, including purposes required by future products, technologies, security enhancements, legal obligations or legitimate business operations, provided such processing remains consistent with applicable data protection laws.

By accessing or using the Services, you acknowledge and agree that Allum may use your personal information for the purposes described in this Section in order to provide, improve, secure, personalize, maintain and lawfully operate the Services.

Allum processes personal information only where there is a lawful basis to do so under applicable privacy and data protection laws. Depending on the jurisdiction from which you access our Services, the legal basis for processing your personal information may vary. Where required by applicable law, including the **Digital Personal Data Protection Act, 2023 (India)** and, where relevant, the **General Data Protection Regulation (GDPR)** or other applicable privacy laws, Allum ensures that every processing activity is supported by an appropriate legal basis.

The legal basis relied upon may depend on the nature of the information being processed, the purpose of processing, your relationship with Allum and the specific Services you use.

Performance of a Contract

We process personal information where it is necessary to enter into, perform, administer or enforce a contract between you and Allum.

This includes processing information to:

• Create and manage customer accounts.
• Process product orders.
• Confirm purchases.
• Accept payments.
• Arrange shipping.
• Deliver products.
• Process returns and exchanges.
• Issue refunds.
• Provide customer support.
• Fulfill warranty obligations.
• Operate loyalty programs.
• Maintain account features requested by you.

Without such processing, Allum may be unable to provide the requested products or Services.

Compliance with Legal Obligations

We may process personal information where necessary to comply with applicable legal, regulatory, judicial or governmental obligations.

This may include processing information for:

• Tax compliance.
• Accounting requirements.
• Financial reporting.
• Consumer protection laws.
• Data protection obligations.
• Anti-fraud measures.
• Court orders.
• Government investigations.
• Regulatory inspections.
• Law enforcement requests.
• Record retention obligations.
• Dispute resolution.

Where legally required, Allum will cooperate with competent authorities while taking reasonable steps to protect customer privacy.

Legitimate Business Interests

Where permitted under applicable law, Allum may process personal information where such processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

Examples include:

• Improving website performance.
• Enhancing customer experience.
• Developing new products.
• Personalizing shopping experiences.
• Conducting analytics.
• Measuring business performance.
• Preventing fraud.
• Maintaining cybersecurity.
• Detecting suspicious activity.
• Managing business operations.
• Protecting intellectual property.
• Securing customer accounts.
• Training customer support staff.
• Conducting internal audits.
• Improving inventory management.
• Evaluating marketing effectiveness.

Before relying on legitimate interests where required by law, Allum considers the impact of such processing on customer privacy and implements appropriate safeguards.

Consent

Certain processing activities are performed based upon your voluntary consent.

Examples include:

• Receiving promotional emails.
• Receiving newsletters.
• Personalized marketing.
• Optional cookies where required.
• Location-based services.
• Push notifications.
• Participation in surveys.
• Promotional campaigns.
• Marketing communications.
• Certain personalization features.

Where consent is required, you may withdraw your consent at any time using the mechanisms provided through the Services or by contacting Allum.

Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal.

Protection of Vital Interests

In exceptional circumstances, Allum may process personal information where reasonably necessary to protect the vital interests of an individual or another natural person.

Such situations may include:

• Responding to emergencies.
• Protecting customer safety.
• Preventing imminent harm.
• Responding to security incidents.
• Cooperating with emergency authorities where legally appropriate.

Such processing shall be limited to circumstances where it is reasonably necessary.

Public Interest

Where applicable law permits, Allum may process personal information where necessary for reasons of substantial public interest or where required by governmental authorities acting within their lawful powers.

Examples may include:

• Compliance with statutory investigations.
• Public safety.
• Regulatory reporting.
• Fraud prevention initiatives.
• Consumer protection obligations.
• Legal proceedings.

Processing under this basis shall occur only where authorized by applicable law.

Automated Decision-Making

Allum may use automated systems to support certain operational activities, including:

• Fraud detection.
• Security monitoring.
• Product recommendations.
• Search optimization.
• Inventory forecasting.
• Marketing personalization.

Where applicable law grants individuals rights relating to automated decision-making, Allum shall provide such rights in accordance with those legal requirements.

Automated systems are designed to support operational efficiency and shall not be used to make decisions producing legal or similarly significant effects where prohibited by applicable law without appropriate safeguards.

Combination of Legal Bases

Certain processing activities may rely upon more than one legal basis.

For example:

• Processing an order may involve contractual necessity, legal compliance and fraud prevention.
• Maintaining financial records may involve contractual obligations and legal compliance.
• Security monitoring may involve legitimate interests and legal obligations.
• Marketing communications may involve consent together with legitimate business interests where permitted by law.

The applicable legal basis will depend upon the specific processing activity.

Changes in Legal Basis

As Allum introduces new Services, technologies, payment methods, security measures or business operations, the legal basis for certain processing activities may evolve.

Where required by applicable law, Allum will update this Privacy Policy or obtain additional consent before relying upon a different legal basis.

Your Rights

Depending upon your jurisdiction and the legal basis relied upon, you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Delete eligible personal information.
• Withdraw consent.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Request portability where applicable.
• Lodge complaints with relevant supervisory authorities.

The availability of these rights may vary depending upon applicable law.

Reservation of Rights

Allum reserves the right to rely upon any lawful basis available under applicable privacy and data protection legislation for the processing of personal information and may update this Section as legal requirements evolve.

Where changes materially affect your rights or require additional notice or consent, Allum shall comply with the applicable legal requirements before implementing such changes.

By accessing or using the Services, you acknowledge that your personal information may be processed on one or more lawful bases described in this Section, as appropriate for the specific purpose of processing and in accordance with applicable privacy and data protection laws.

Allum values the trust that you place in us and is committed to handling your personal information responsibly. We **do not sell your personal information** to third parties for monetary consideration. However, in order to operate our business, provide our Services, fulfill customer orders, comply with legal obligations, protect our customers and improve our platform, we may share or disclose your personal information with trusted third parties under the circumstances described in this Privacy Policy.

All sharing of personal information is carried out only to the extent reasonably necessary for the intended purpose and, where applicable, subject to appropriate contractual, technical, organizational and legal safeguards.

Service Providers

We may share personal information with carefully selected third-party service providers that assist us in operating our business and delivering the Services.

These service providers may include:

• Payment processors.
• Cloud hosting providers.
• Content delivery networks (CDNs).
• Customer support providers.
• Email delivery services.
• SMS providers.
• Marketing automation platforms.
• Website analytics providers.
• Security monitoring providers.
• Fraud detection providers.
• IT support providers.
• Software vendors.
• Data storage providers.
• Customer communication platforms.

Such providers are authorized to process personal information only for the purposes instructed by Allum and in accordance with applicable contractual obligations.

Payment Providers

To process payments securely, Allum shares relevant transaction information with authorized payment partners.

Information shared may include:

• Order amount.
• Billing information.
• Transaction identifiers.
• Payment verification details.
• Refund requests.
• Chargeback information.
• Fraud prevention indicators.

Sensitive payment credentials are generally processed directly by certified payment service providers and are not retained by Allum except where required for legitimate business purposes or applicable law.

Shipping and Logistics Partners

To fulfill and deliver customer orders, Allum may share information with logistics providers, courier companies, warehousing partners, fulfillment centers and shipping service providers.

Information shared may include:

• Customer name.
• Delivery address.
• Contact number.
• Order details.
• Shipment information.
• Delivery instructions.
• Tracking information.

Only the information necessary to complete the delivery is shared.

Business Partners

Where products or services involve authorized business partners, manufacturers, suppliers or distributors, Allum may share limited information necessary to:

• Fulfill orders.
• Verify warranties.
• Process promotional campaigns.
• Support product recalls.
• Resolve quality issues.
• Coordinate inventory.
• Deliver specialized services.

Business partners are expected to process personal information only for the authorized purposes.

Analytics Providers

To understand customer behavior and improve our Services, Allum may share limited information with trusted analytics providers.

Analytics information may include:

• Device information.
• Browser information.
• Website interactions.
• Session statistics.
• Usage trends.
• Performance information.
• Conversion metrics.
• Technical diagnostics.

Where possible, analytics information is aggregated, anonymized or pseudonymized.

Marketing and Advertising Partners

Where permitted by applicable law and your preferences, Allum may share limited information with marketing and advertising partners to:

• Deliver relevant advertisements.
• Measure campaign performance.
• Manage promotional campaigns.
• Personalize marketing communications.
• Prevent advertising fraud.
• Analyze customer engagement.

You may have the ability to manage certain advertising preferences through your browser, device settings or applicable consent mechanisms.

Legal and Regulatory Authorities

Allum may disclose personal information where disclosure is reasonably necessary to:

• Comply with applicable laws.
• Respond to lawful government requests.
• Comply with court orders.
• Respond to legal process.
• Cooperate with regulatory authorities.
• Protect public safety.
• Prevent fraud.
• Enforce our legal rights.
• Defend legal claims.
• Investigate unlawful activities.

Where legally permitted, we may notify affected individuals before disclosing information.

Professional Advisers

We may disclose personal information to our professional advisers where reasonably necessary for business operations.

Examples include:

• Lawyers.
• Auditors.
• Accountants.
• Tax advisers.
• Compliance consultants.
• Insurance providers.
• Corporate advisers.

Such disclosures are subject to professional confidentiality obligations where applicable.

Corporate Transactions

If Allum undergoes or proposes a:

• Merger.
• Acquisition.
• Investment.
• Financing.
• Sale of assets.
• Business restructuring.
• Corporate reorganization.
• Bankruptcy.
• Change of ownership.

personal information may be transferred to prospective or actual purchasers, investors, advisers, lenders or successor entities as part of the transaction, subject to appropriate confidentiality protections and applicable law.

Protection of Rights

We may disclose personal information where reasonably necessary to:

• Protect customers.
• Protect employees.
• Protect business partners.
• Prevent fraud.
• Investigate policy violations.
• Protect intellectual property.
• Maintain platform security.
• Recover outstanding payments.
• Enforce our Terms and Conditions.
• Prevent unlawful activities.

With Your Consent

In circumstances where disclosure is not otherwise authorized by this Privacy Policy or applicable law, Allum will seek your consent before sharing your personal information.

Examples may include:

• Joint promotional campaigns.
• Co-branded marketing initiatives.
• Public testimonials.
• Media features.
• Voluntary participation in special programs.

You may withdraw consent where permitted by applicable law.

Aggregated and De-Identified Information

Allum may share aggregated, anonymized or de-identified information that does not reasonably identify an individual.

Such information may be used for:

• Market research.
• Business analytics.
• Industry reporting.
• Performance benchmarking.
• Product development.
• Academic research.
• Statistical analysis.

Where information has been irreversibly anonymized, it is no longer treated as personal information.

International Disclosures

Where our service providers, business partners or corporate affiliates operate in different jurisdictions, personal information may be transferred internationally in accordance with applicable data protection laws.

Appropriate safeguards shall be implemented where required by law.

No Sale of Personal Information

Except as otherwise permitted or required by applicable law, Allum does **not** sell your personal information to third parties in exchange for monetary payment.

Any sharing of information is limited to the purposes described in this Privacy Policy and does not constitute a sale unless specifically defined as such under applicable law.

Confidentiality Obligations

Where reasonably appropriate, third parties receiving personal information from Allum are contractually required to:

• Protect personal information.
• Use information only for authorized purposes.
• Maintain appropriate security measures.
• Comply with applicable privacy laws.
• Limit further disclosure.
• Assist with legal compliance where applicable.

Reservation of Rights

Allum reserves the right to disclose personal information where necessary to comply with future legal obligations, regulatory requirements, technological developments, corporate transactions, fraud prevention initiatives, security measures or legitimate business operations, provided such disclosure remains consistent with applicable law and this Privacy Policy.

By using the Services, you acknowledge and agree that Allum may share or disclose your personal information in the circumstances described in this Section for the purpose of providing, improving, securing and lawfully operating the Services.

Allum is committed to providing a secure, reliable and trustworthy payment experience. When you purchase products or services through our Services, certain payment-related information is collected and processed in order to complete transactions, verify payments, prevent fraud, comply with legal obligations and provide customer support.

All payment processing activities are conducted in accordance with applicable laws, industry security standards and the contractual obligations of our authorized payment service providers.

Payment Methods

Depending on your location and the Services available at the time of purchase, Allum may support various payment methods, including but not limited to:

• Credit Cards.
• Debit Cards.
• UPI (Unified Payments Interface).
• Net Banking.
• Digital Wallets.
• Buy Now, Pay Later (BNPL) services.
• Cash on Delivery (where available).
• Gift Cards.
• Store Credit.
• Promotional Credits.
• Other payment methods introduced from time to time.

The availability of specific payment methods may vary depending on your location, device, order value, applicable law or payment provider requirements.

Information We Collect

When you initiate or complete a payment, we may collect or receive payment-related information, including:

• Selected payment method.
• Billing name.
• Billing address.
• Transaction amount.
• Currency.
• Transaction reference number.
• Payment authorization status.
• Payment confirmation.
• Refund status.
• Chargeback information.
• Payment timestamps.
• Tax information where applicable.
• Invoice information.
• Order identifiers.

The specific information collected depends upon the payment method selected.

Payment Card Information

For card-based transactions, payment card details are generally collected and processed directly by PCI DSS-compliant third-party payment processors.

Except where required by applicable law or necessary for legitimate business purposes, Allum does **not** store:

• Complete credit card numbers.
• Complete debit card numbers.
• Card Verification Value (CVV).
• Card PINs.
• Authentication passwords.
• One-Time Passwords (OTPs).

Where limited payment information is retained, such retention is performed solely for lawful operational purposes and subject to appropriate security safeguards.

Third-Party Payment Providers

Payments are processed through independent payment service providers that operate under their own privacy policies, security standards and contractual terms.

These providers may perform:

• Payment authorization.
• Fraud screening.
• Identity verification.
• Risk assessment.
• Payment settlement.
• Refund processing.
• Chargeback handling.
• Regulatory compliance.

Your interaction with these providers remains subject to their respective terms and privacy practices.

Payment Verification

To protect customers and prevent fraud, certain transactions may undergo verification procedures.

Verification activities may include:

• Billing address verification.
• Card verification.
• UPI verification.
• Identity verification.
• OTP authentication.
• Device verification.
• Fraud screening.
• Risk assessment.
• Purchase history review.
• Payment authorization checks.

Failure to successfully complete required verification procedures may result in delayed processing, order cancellation or refusal of the transaction.

Fraud Prevention

Payment information may be processed to:

• Detect fraudulent transactions.
• Prevent unauthorized purchases.
• Identify suspicious payment activity.
• Reduce chargeback fraud.
• Verify payment legitimacy.
• Protect customer accounts.
• Prevent financial crime.
• Comply with anti-fraud obligations.

Fraud prevention technologies may utilize automated systems, risk scoring and security monitoring in accordance with applicable law.

Refund Processing

Where refunds are approved under the applicable Return & Refund Policy, payment-related information may be processed to:

• Verify the original transaction.
• Confirm refund eligibility.
• Process refund requests.
• Issue payment reversals.
• Track refund status.
• Resolve payment disputes.

Refunds are generally issued through the original payment method unless otherwise required by law or agreed between the parties.

Chargebacks and Payment Disputes

If a payment is disputed through your financial institution or payment provider, Allum may process relevant payment information to:

• Investigate the dispute.
• Respond to chargeback claims.
• Verify transaction legitimacy.
• Prevent fraud.
• Enforce contractual rights.
• Comply with payment network rules.

Information may be shared with payment providers and financial institutions only to the extent necessary for resolving the dispute.

Cash on Delivery (COD)

Where Cash on Delivery is available, Allum may process information relating to:

• COD eligibility.
• Delivery confirmation.
• Payment collection.
• COD verification.
• Refused deliveries.
• Repeated cancellation history.
• Fraud prevention indicators.

Repeated misuse of Cash on Delivery services may result in restrictions or removal of COD eligibility in accordance with our Terms and Conditions.

Tax and Accounting

Payment-related information may be processed for:

• Tax compliance.
• Invoice generation.
• Financial reporting.
• Accounting.
• Audit requirements.
• Regulatory compliance.
• Record retention.
• Government reporting obligations.

Such processing shall occur only to the extent required by applicable law.

Payment Security

Allum implements commercially reasonable administrative, technical and organizational safeguards designed to protect payment-related information.

Security measures may include:

• Encryption.
• Secure communication protocols.
• Access controls.
• Authentication mechanisms.
• Fraud monitoring.
• Network security.
• Security logging.
• Regular security reviews.
• Vendor risk assessments.

Despite these measures, no internet-based payment system can be guaranteed to be completely secure.

Customers are encouraged to:

• Protect payment credentials.
• Never share OTPs.
• Use secure internet connections.
• Monitor financial statements.
• Report unauthorized transactions immediately.

Payment Record Retention

Payment-related records may be retained for as long as reasonably necessary to:

• Complete transactions.
• Process refunds.
• Resolve disputes.
• Prevent fraud.
• Meet accounting obligations.
• Comply with tax laws.
• Satisfy legal retention requirements.
• Defend legal claims.

Retention periods may vary depending upon applicable legal requirements.

International Payments

Where cross-border transactions occur, payment information may be processed by financial institutions or payment providers located outside your country of residence.

Such processing shall occur in accordance with applicable payment regulations, contractual safeguards and data protection laws.

Reservation of Rights

Allum reserves the right to introduce new payment methods, discontinue existing payment options, enhance payment security measures, implement additional fraud prevention procedures or revise payment processing practices as required for operational, legal, regulatory or security purposes.

Any such changes shall be implemented in accordance with applicable law and reflected in this Privacy Policy where appropriate.

By using the Services and completing purchases through Allum, you acknowledge and agree that payment-related information may be collected, processed, shared with authorized payment providers, retained and protected as described in this Section for the purpose of securely processing transactions and operating the Services in accordance with applicable law.

To enhance your experience, improve the functionality of the Services, maintain security, analyze website performance, personalize content and support our business operations, **Allum** uses cookies and similar tracking technologies. These technologies help us recognize your browser or device, remember your preferences, improve website performance, understand customer behavior and deliver a more seamless shopping experience.

This Section explains the types of tracking technologies we use, the purposes for which they are used and the choices available to you regarding their use. Additional details may also be provided in our separate Cookie Policy where applicable.

What Are Cookies?

Cookies are small text files placed on your computer, mobile device, tablet or other internet-connected device when you visit a website. Cookies enable websites to recognize your device, remember your preferences, maintain login sessions and improve overall functionality.

Cookies generally do not damage your device or access information stored outside your browser. Some cookies are deleted automatically when your browsing session ends, while others remain stored on your device until they expire or are manually removed.

In addition to cookies, Allum may use other technologies that perform similar functions, including:

• Web beacons.
• Pixel tags.
• Clear GIFs.
• Local storage.
• Session storage.
• Software Development Kits (SDKs).
• Device identifiers.
• Server-side identifiers.
• Tracking scripts.
• Application programming interfaces (APIs).

For simplicity, these technologies are collectively referred to as **"Cookies"** throughout this Privacy Policy unless otherwise specified.

Types of Cookies We Use

Essential Cookies

Essential cookies are necessary for the proper operation of the Services and cannot generally be disabled without affecting core functionality.

These cookies may be used to:

• Maintain user sessions.
• Authenticate customers.
• Secure customer accounts.
• Remember shopping cart contents.
• Process checkout.
• Prevent fraudulent activity.
• Maintain website security.
• Enable navigation.
• Support payment processing.
• Load website features correctly.

Without essential cookies, many parts of the Services may not function properly.

Functional Cookies

Functional cookies improve convenience by remembering customer preferences and customized settings.

Examples include:

• Language preferences.
• Region selection.
• Currency preferences.
• Theme preferences.
• Accessibility settings.
• Recently viewed products.
• Saved shopping preferences.
• Wishlist functionality.
• Preferred delivery location.
• Login preferences where permitted.

These cookies help create a more personalized shopping experience.

Performance Cookies

Performance cookies help us understand how customers interact with the Services.

Information collected may include:

• Pages visited.
• Session duration.
• Navigation behavior.
• Search queries.
• Popular products.
• Website speed.
• Loading times.
• Error reports.
• Feature usage.
• Customer journeys.

Performance information assists us in identifying areas for improvement.

Analytics Cookies

Analytics technologies help us measure website performance and customer engagement.

Analytics may be used to understand:

• Visitor numbers.
• Returning customers.
• Traffic sources.
• Device usage.
• Geographic trends.
• Shopping behavior.
• Conversion rates.
• Marketing effectiveness.
• Product popularity.
• User engagement.

Where appropriate, analytics information may be aggregated or anonymized before analysis.

Advertising Cookies

Where permitted by applicable law, advertising cookies may be used to:

• Display relevant advertisements.
• Measure campaign performance.
• Limit repetitive advertisements.
• Understand customer interests.
• Personalize promotional content.
• Evaluate advertising effectiveness.
• Track referral campaigns.
• Prevent advertising fraud.

Advertising cookies may be placed by Allum or authorized advertising partners.

Security Cookies

Security-related cookies help protect the Services and customer accounts.

These cookies may support:

• Login authentication.
• Session integrity.
• Fraud prevention.
• Device recognition.
• Account protection.
• Security monitoring.
• Risk detection.
• Unauthorized access prevention.

Such cookies are essential for maintaining the security of the Services.

Information Collected Through Cookies

Cookies and similar technologies may collect information including:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Language settings.
• Time zone.
• Session identifiers.
• Pages viewed.
• Products viewed.
• Shopping cart contents.
• Login status.
• Referral sources.
• Click behavior.
• Scroll activity.
• Interaction timestamps.
• Website preferences.
• Advertising identifiers.

The specific information collected depends on the technologies used and your browser or device settings.

Third-Party Cookies

Certain cookies may be placed by trusted third-party service providers supporting functions such as:

• Payment processing.
• Website analytics.
• Customer support.
• Marketing campaigns.
• Fraud prevention.
• Security monitoring.
• Cloud hosting.
• Performance optimization.
• Social media integrations.

Third-party cookies remain subject to the privacy practices of the respective provider.

Managing Cookies

Most browsers allow users to manage cookie preferences.

Depending upon your browser and applicable law, you may be able to:

• Accept cookies.
• Reject certain cookies.
• Delete stored cookies.
• Block future cookies.
• Restrict third-party cookies.
• Configure browser privacy settings.
• Clear browser storage.
• Withdraw cookie consent where applicable.

Instructions for managing cookies are generally available through your browser's help documentation.

Impact of Disabling Cookies

If you disable certain cookies, some features of the Services may no longer function correctly.

Examples include:

• Inability to remain logged in.
• Loss of shopping cart contents.
• Reduced personalization.
• Checkout interruptions.
• Limited account functionality.
• Slower website performance.
• Inability to remember preferences.
• Reduced fraud protection.
• Limited accessibility features.

Essential cookies may continue to operate where necessary for the functioning and security of the Services.

Consent

Where required by applicable law, Allum shall obtain your consent before placing non-essential cookies on your device.

You may withdraw or modify your cookie preferences at any time using available consent management tools or browser settings, subject to technical limitations.

Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.

Changes to Cookie Technologies

As technology evolves, Allum may introduce new tracking technologies that provide improved functionality, security, accessibility, analytics or customer experience.

Any such technologies shall be implemented in accordance with applicable law and reflected in this Privacy Policy or our Cookie Policy where appropriate.

Reservation of Rights

Allum reserves the right to modify its use of cookies and similar technologies to accommodate new Services, technological developments, legal requirements, operational improvements, fraud prevention measures or security enhancements.

Where required by applicable law, appropriate notice or consent shall be obtained before implementing material changes.

By continuing to use the Services, you acknowledge and agree that Allum may use cookies and similar tracking technologies as described in this Section to operate, secure, personalize, improve and analyze the Services in accordance with applicable privacy and data protection laws.

To understand how customers interact with the Services, improve website performance, enhance user experience, measure the effectiveness of marketing campaigns and provide relevant promotional content, **Allum** may use analytics technologies, advertising platforms, marketing tools and related services operated by Allum or trusted third-party service providers.

Our objective is to continuously improve the quality, usability, security and relevance of the Services while respecting customer privacy and complying with applicable privacy and data protection laws.

Analytics

Allum may use analytics technologies to understand how visitors and customers interact with our website, mobile applications and digital Services.

Analytics helps us:

• Improve website performance.
• Optimize user experience.
• Identify technical issues.
• Understand customer behavior.
• Measure customer engagement.
• Improve navigation.
• Evaluate feature usage.
• Analyze shopping trends.
• Measure product popularity.
• Improve conversion rates.

Analytics information assists us in making informed business and product development decisions.

Information Collected for Analytics

Analytics technologies may collect information including:

• Device type.
• Browser type.
• Operating system.
• Screen resolution.
• Language preferences.
• Approximate location.
• IP address.
• Session duration.
• Pages visited.
• Products viewed.
• Search queries.
• Click behavior.
• Scroll activity.
• Shopping cart activity.
• Checkout progression.
• Referral sources.
• Website performance metrics.
• Error reports.
• Crash information.
• Navigation paths.

Where reasonably possible, analytics information may be aggregated, anonymized or pseudonymized before analysis.

Website Performance Monitoring

Performance monitoring technologies help us identify and resolve technical issues affecting the Services.

Examples include:

• Page load times.
• Server response times.
• Resource loading.
• Browser compatibility.
• Mobile responsiveness.
• Feature availability.
• Application crashes.
• Error logging.
• Network latency.
• Website uptime.

This information enables us to maintain a reliable and efficient platform.

Marketing Analytics

To evaluate the effectiveness of our marketing efforts, Allum may analyze:

• Campaign performance.
• Advertisement engagement.
• Newsletter performance.
• Referral traffic.
• Promotional participation.
• Coupon redemption.
• Customer acquisition.
• Repeat purchases.
• Customer retention.
• Marketing conversion rates.

Such analysis helps us improve future promotional activities.

Advertising

Where permitted by applicable law, Allum may use advertising technologies to deliver relevant promotional content and measure advertising performance.

Advertising activities may include:

• Display advertisements.
• Search advertisements.
• Social media advertising.
• Retargeting campaigns.
• Personalized product recommendations.
• Email marketing.
• Promotional notifications.
• Sponsored campaigns.
• Affiliate marketing.
• Seasonal promotions.

Advertising content may be based upon your interactions with the Services, your preferences or products that may be of interest to you.

Personalized Advertising

Where permitted by applicable law and your privacy preferences, advertising technologies may use information such as:

• Products viewed.
• Shopping history.
• Wishlist items.
• Browsing behavior.
• Device information.
• Geographic region.
• Language preferences.
• Marketing interactions.

Personalized advertising is intended to present products and offers that may be more relevant to your interests.

Where required by law, personalized advertising will only be provided after obtaining the necessary consent.

Advertising Partners

Allum may work with trusted advertising and marketing partners to:

• Deliver promotional campaigns.
• Measure campaign performance.
• Prevent advertising fraud.
• Manage audience targeting.
• Improve marketing effectiveness.
• Understand customer engagement.

Such partners may use cookies, pixels, SDKs or similar technologies in accordance with their own privacy policies and applicable law.

Social Media Advertising

Where you interact with Allum through social media platforms, certain information may be used to:

• Measure campaign effectiveness.
• Deliver promotional advertisements.
• Promote new collections.
• Improve audience engagement.
• Understand customer interests.
• Manage influencer campaigns.

Your interactions with social media platforms remain subject to the privacy policies of the respective platforms.

Advertising Measurement

We may measure the success of advertising campaigns using metrics including:

• Advertisement impressions.
• Click-through rates.
• Conversion rates.
• Purchase completion.
• Campaign engagement.
• Referral traffic.
• Customer acquisition.
• Return on advertising investment.
• Promotional redemption.

Measurement information is generally used in aggregated form wherever reasonably possible.

Fraud Prevention

Analytics and advertising technologies may also assist in:

• Detecting fraudulent advertisements.
• Preventing click fraud.
• Identifying bot activity.
• Preventing abuse of promotional campaigns.
• Protecting advertising integrity.
• Improving platform security.

These activities help protect both customers and Allum.

Your Choices

Depending upon applicable law and the technologies used, you may have the ability to:

• Withdraw consent for personalized advertising.
• Disable advertising cookies.
• Modify browser privacy settings.
• Adjust device advertising preferences.
• Opt out of marketing communications.
• Manage cookie preferences.
• Disable location sharing.
• Restrict certain tracking technologies.

Some advertising features may become unavailable if these settings are changed.

Aggregated Information

Analytics reports used by Allum may contain aggregated or anonymized information that does not reasonably identify individual customers.

Aggregated information may be used for:

• Business intelligence.
• Market research.
• Product development.
• Operational planning.
• Website optimization.
• Industry benchmarking.
• Performance reporting.

Such information is generally no longer considered personal information once it has been irreversibly anonymized.

Third-Party Analytics

Certain analytics technologies may be provided by trusted third-party service providers acting on behalf of Allum.

Such providers may assist with:

• Website analytics.
• Performance monitoring.
• Error reporting.
• Customer behavior analysis.
• Marketing attribution.
• Technical diagnostics.

These providers process information only for authorized purposes and in accordance with contractual safeguards and applicable law.

Reservation of Rights

As technology and business practices evolve, Allum may introduce new analytics platforms, advertising technologies, marketing tools, personalization features, fraud prevention systems or performance monitoring services.

Any such technologies shall be implemented in accordance with applicable privacy laws and where required, appropriate notice or consent shall be provided before material changes are introduced.

By using the Services, you acknowledge and agree that Allum may collect, analyze and process information for analytics, advertising, marketing measurement, personalization and performance improvement purposes as described in this Section and in accordance with applicable privacy and data protection laws.

Allum may communicate with you through email, SMS, push notifications, in-app messages, telephone calls, messaging platforms or other electronic communication channels in order to provide the Services, respond to your requests, process your orders, maintain account security, deliver marketing communications and comply with applicable legal obligations.

We are committed to ensuring that our communications are relevant, appropriate and compliant with applicable laws governing electronic communications, privacy, consumer protection and marketing practices.

Types of Communications

Depending on your interaction with the Services, Allum may send different categories of communications.

These may include:

• Order confirmations.
• Payment confirmations.
• Shipping updates.
• Delivery notifications.
• Return and refund updates.
• Account verification messages.
• Password reset emails.
• Security alerts.
• Customer support responses.
• Product availability notifications.
• Back-in-stock alerts.
• Promotional emails.
• Marketing campaigns.
• Newsletters.
• Fashion updates.
• Loyalty program notifications.
• Survey invitations.
• Service announcements.
• Policy updates.
• Legal notices.

The specific communications you receive depend on your account activity, preferences and applicable legal requirements.

Transactional Communications

Certain communications are necessary for the operation of the Services and are considered transactional in nature.

Examples include:

• Order confirmations.
• Payment receipts.
• Tax invoices.
• Shipment tracking.
• Delivery confirmations.
• Account security notifications.
• Login verification.
• Password reset requests.
• Return processing.
• Exchange updates.
• Refund confirmations.
• Customer support responses.
• Important service notifications.

Because these communications are necessary to provide the Services, you may continue to receive them even if you have opted out of marketing communications.

Marketing Communications

Where permitted by applicable law and based on your preferences or consent where required, Allum may send marketing communications regarding:

• New product launches.
• Seasonal collections.
• Exclusive offers.
• Promotional campaigns.
• Limited-time discounts.
• Festival sales.
• Flash sales.
• Loyalty rewards.
• Member benefits.
• Personalized recommendations.
• Style inspiration.
• Fashion guides.
• Brand collaborations.
• Event invitations.
• Product announcements.

Marketing communications are intended to keep you informed about products and services that may be relevant to your interests.

Personalization

To improve the relevance of marketing communications, Allum may personalize content using information such as:

• Purchase history.
• Browsing behavior.
• Wishlist items.
• Favorite product categories.
• Preferred brands.
• Shopping frequency.
• Communication preferences.
• Geographic location.
• Language preferences.

Personalization is performed in accordance with applicable privacy laws and any consent requirements.

Push Notifications

If you install the Allum mobile application or otherwise enable push notifications, we may send notifications relating to:

• Order status.
• Delivery updates.
• Security alerts.
• Promotional offers.
• Product launches.
• Wishlist reminders.
• Back-in-stock notifications.
• Account activity.

You may disable push notifications at any time through your device settings.

SMS Communications

Where permitted by law and applicable to your account, Allum may send SMS messages relating to:

• Order confirmations.
• OTP verification.
• Delivery updates.
• Security notifications.
• Promotional campaigns.
• Limited-time offers.
• Account verification.

Standard carrier messaging charges may apply depending on your mobile service provider.

Telephone Communications

Where reasonably necessary, Allum or its authorized representatives may contact you by telephone regarding:

• Delivery coordination.
• Customer support.
• Account verification.
• Fraud prevention.
• Order clarification.
• Service-related enquiries.

Calls may be recorded where permitted by applicable law for quality assurance, training, security, dispute resolution and compliance purposes.

Managing Communication Preferences

Depending upon applicable law, you may manage certain communication preferences through:

• Account settings.
• Email unsubscribe links.
• Customer support.
• Mobile application settings.
• Device notification settings.
• Consent management tools where available.

Changes to communication preferences may take a reasonable period to become effective.

Withdrawing Consent

Where marketing communications are based upon your consent, you may withdraw such consent at any time.

Withdrawal of consent:

• Will not affect the lawfulness of communications sent before withdrawal.
• Will not prevent necessary transactional communications.
• May not affect communications required by applicable law.
• May require a reasonable processing period.

Customer Responsibility

You are responsible for ensuring that your contact information remains accurate and current.

You should promptly update:

• Email address.
• Mobile number.
• Preferred communication language.
• Notification preferences.
• Account information.

Failure to maintain accurate contact information may result in missed notifications, delayed communications or inability to receive important account updates.

Anti-Spam Commitment

Allum is committed to responsible marketing practices.

We do not knowingly send unsolicited commercial communications in violation of applicable anti-spam laws.

Our marketing communications are intended only for customers and individuals who have an appropriate relationship with Allum or where communication is otherwise permitted by law.

Third-Party Communication Providers

To deliver communications efficiently, Allum may utilize trusted third-party providers for:

• Email delivery.
• SMS delivery.
• Push notifications.
• Customer messaging.
• Marketing automation.
• Customer relationship management.
• Notification management.

Such providers process personal information solely on behalf of Allum and in accordance with contractual obligations, this Privacy Policy and applicable law.

Communication Security

While Allum takes reasonable steps to secure communications, electronic communications transmitted over the internet or telecommunications networks cannot be guaranteed to be completely secure.

Customers should:

• Protect account credentials.
• Verify official communications.
• Avoid sharing OTPs.
• Report suspicious emails.
• Notify Allum of suspected phishing attempts.

Allum will never request your password, OTP or complete payment credentials through unsolicited communications.

Reservation of Rights

Allum reserves the right to modify its communication practices, introduce new communication channels, discontinue existing methods or update marketing preferences in response to technological developments, legal requirements, operational improvements or customer feedback.

Where required by applicable law, appropriate notice or consent shall be provided before material changes are implemented.

By using the Services, you acknowledge and agree that Allum may communicate with you through the methods described in this Section for transactional, operational, security, customer support, and, where permitted, marketing purposes in accordance with this Privacy Policy and applicable law.

Creating an account with **Allum** allows you to access various features and services designed to provide a personalized, convenient and secure shopping experience. Your account enables you to manage orders, save preferences, maintain delivery addresses, participate in loyalty programs, receive personalized recommendations and access other account-related features.

This Section explains how Allum collects, uses, stores, protects and manages information associated with your customer account.

Account Registration

When you create an account, you may be required to provide certain information necessary to establish and maintain your account.

Such information may include:

• Full name.
• Email address.
• Mobile phone number.
• Username.
• Password.
• Date of birth (where applicable).
• Gender (optional).
• Preferred language.
• Country or region.
• Communication preferences.

Some information may be mandatory for account creation, while other information is optional and may be provided at your discretion.

Profile Information

Your customer profile may include information that helps personalize your shopping experience.

Examples include:

• Profile photograph.
• Saved addresses.
• Preferred clothing sizes.
• Wishlist.
• Favorite products.
• Preferred categories.
• Shopping preferences.
• Language settings.
• Currency preferences.
• Style preferences.
• Communication preferences.

Providing optional profile information is voluntary and generally enhances the Services available to you.

Account Authentication

To protect your account and personal information, Allum may use authentication mechanisms including:

• Password authentication.
• One-Time Password (OTP) verification.
• Email verification.
• Mobile verification.
• Device recognition.
• Session validation.
• Multi-factor authentication (where available).
• Risk-based authentication.

These measures are designed to reduce unauthorized access and protect customer accounts.

Account Security

You are responsible for maintaining the confidentiality and security of your account credentials.

You agree to:

• Choose a strong password.
• Keep login credentials confidential.
• Protect your devices.
• Log out from shared devices.
• Notify Allum immediately of suspected unauthorized access.
• Avoid sharing OTPs or verification codes.
• Update passwords periodically where appropriate.

You remain responsible for activities conducted through your account unless unauthorized access results solely from Allum's failure to implement reasonable security measures.

Saved Information

For your convenience, Allum may store certain account-related information, including:

• Saved shipping addresses.
• Billing addresses.
• Wishlist items.
• Recently viewed products.
• Order history.
• Communication preferences.
• Loyalty rewards.
• Gift card balances.
• Store credit.
• Product preferences.

Certain saved information may be removed or modified by you through your account settings.

Account Activity

Allum may maintain records relating to account activity, including:

• Login history.
• Logout events.
• Password changes.
• Security updates.
• Device recognition.
• Order history.
• Purchase records.
• Return requests.
• Refund history.
• Customer support interactions.
• Preference updates.

Such information assists in account management, fraud prevention, customer support and legal compliance.

Account Verification

In certain circumstances, Allum may require verification of your identity before permitting access to specific account features or processing sensitive requests.

Verification may be required for:

• Password recovery.
• Email changes.
• Mobile number updates.
• Payment verification.
• High-value purchases.
• Fraud prevention.
• Account recovery.
• Security investigations.

Verification requirements are intended to protect customer accounts and reduce unauthorized access.

Linked Accounts

Where supported, you may choose to link your Allum account with third-party authentication providers.

Examples include:

• Google.
• Apple.
• Facebook.
• Other supported identity providers.

If you use such services, Allum may receive certain account information in accordance with your permissions and the provider's privacy policy.

Account Preferences

Customers may manage various account settings, including:

• Personal information.
• Saved addresses.
• Password changes.
• Communication preferences.
• Marketing preferences.
• Notification settings.
• Language.
• Currency.
• Wishlist.
• Privacy preferences where available.

Certain changes may require additional verification for security purposes.

Inactive Accounts

Accounts that remain inactive for extended periods may be retained, archived, restricted, anonymized or deleted in accordance with applicable law, operational requirements and our data retention practices.

Before permanent deletion, Allum may retain information where necessary to:

• Comply with legal obligations.
• Resolve disputes.
• Prevent fraud.
• Enforce agreements.
• Maintain accounting records.
• Protect legitimate business interests.

Account Closure

You may request closure of your account by contacting customer support or through available account settings where supported.

Closure of your account does not automatically result in immediate deletion of all associated personal information.

Certain information may continue to be retained where reasonably necessary to:

• Complete pending orders.
• Process refunds.
• Resolve disputes.
• Prevent fraud.
• Comply with legal obligations.
• Maintain tax records.
• Enforce contractual rights.
• Protect business interests.

Information that is no longer required may be deleted, anonymized or retained in accordance with applicable law and this Privacy Policy.

Unauthorized Accounts

If Allum reasonably believes that an account has been:

• Created fraudulently.
• Used unlawfully.
• Compromised.
• Used in violation of the Terms and Conditions.
• Associated with fraudulent activity.
• Used for payment abuse.
• Used for unauthorized automation.

we reserve the right to:

• Suspend the account.
• Restrict account access.
• Require additional verification.
• Cancel pending orders.
• Remove account privileges.
• Permanently terminate the account where appropriate.

Such actions shall be taken in accordance with applicable law and our Terms and Conditions.

Account Data Portability

Where required by applicable law, eligible customers may request access to or portability of certain personal information associated with their accounts.

Such requests may be subject to:

• Identity verification.
• Legal limitations.
• Technical feasibility.
• Applicable regulatory requirements.

Reservation of Rights

Allum reserves the right to introduce new account features, authentication methods, security measures, profile options, loyalty programs, personalization features or account management tools from time to time.

Any such additions shall be implemented in accordance with applicable privacy and data protection laws and reflected in this Privacy Policy where appropriate.

By creating or using an Allum account, you acknowledge and agree that Allum may collect, maintain, process, protect and manage your account information as described in this Section for the purpose of securely providing and improving the Services while complying with applicable legal obligations.

Allum retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide the Services, comply with legal obligations, resolve disputes, enforce contractual rights, protect customers, prevent fraud and support legitimate business operations.

We recognize that retaining personal information longer than necessary may increase privacy risks. Accordingly, Allum regularly reviews the categories of personal information it holds and applies appropriate retention periods based on the nature of the information, the purpose for which it was collected, applicable legal requirements, industry standards, operational needs and the rights of our customers.

Retention periods may vary depending on the type of information involved and the legal obligations applicable to Allum.

General Retention Principles

When determining how long personal information should be retained, Allum considers factors including:

• The purpose for which the information was collected.
• Whether the information remains necessary for providing the Services.
• Customer relationship status.
• Applicable statutory limitation periods.
• Accounting requirements.
• Tax obligations.
• Regulatory compliance.
• Fraud prevention needs.
• Security investigations.
• Dispute resolution.
• Contract enforcement.
• Business continuity requirements.

Information is not retained indefinitely unless there is a lawful reason to do so.

Account Information

Information associated with your customer account may be retained while your account remains active.

Following account closure, certain information may continue to be retained where reasonably necessary for:

• Legal compliance.
• Fraud prevention.
• Security investigations.
• Tax obligations.
• Accounting records.
• Contract enforcement.
• Resolution of disputes.
• Customer support history.
• Business continuity.

Where information is no longer required, it may be deleted, anonymized or securely archived.

Order and Transaction Records

Order-related information may be retained for purposes including:

• Order fulfillment.
• Warranty administration.
• Returns and exchanges.
• Refund processing.
• Customer support.
• Financial reporting.
• Tax compliance.
• Accounting.
• Fraud prevention.
• Regulatory compliance.
• Legal claims.

Retention periods for transaction records may be determined by applicable accounting, taxation or consumer protection laws.

Payment Information

Payment-related records may be retained only for as long as reasonably necessary to:

• Verify completed transactions.
• Process refunds.
• Resolve payment disputes.
• Investigate chargebacks.
• Prevent fraud.
• Meet financial reporting obligations.
• Comply with tax laws.
• Satisfy legal record-keeping requirements.

Highly sensitive payment credentials are generally not retained by Allum except where expressly permitted or required by applicable law.

Customer Support Records

Communications with customer support may be retained for purposes including:

• Resolving ongoing enquiries.
• Quality assurance.
• Staff training.
• Fraud prevention.
• Service improvement.
• Dispute resolution.
• Legal compliance.
• Complaint handling.

Support records may include emails, chat transcripts, call records where permitted and related documentation.

Marketing Information

Marketing preferences may be retained until:

• You withdraw consent.
• You unsubscribe.
• Your account is deleted.
• Marketing information is no longer required.
• Applicable legal obligations require removal.

Even after unsubscribing, Allum may retain limited information necessary to ensure that future marketing communications are not sent contrary to your preferences.

Security Records

Security-related information may be retained to:

• Detect fraud.
• Investigate suspicious activity.
• Protect customer accounts.
• Respond to cybersecurity incidents.
• Enforce Terms and Conditions.
• Maintain system integrity.
• Meet legal obligations.

Retention periods may vary depending upon the nature of the security incident or investigation.

Cookies and Tracking Data

Information collected through cookies and similar technologies may be retained for varying periods depending upon:

• Cookie type.
• Browser settings.
• User preferences.
• Technical requirements.
• Applicable law.

Certain cookies expire automatically at the end of a browsing session, while others remain until manually deleted or until their configured expiration date.

Further details are available in our Cookie Policy.

Legal Obligations

Certain categories of information may be retained for longer periods where required to:

• Comply with applicable laws.
• Respond to government requests.
• Meet regulatory obligations.
• Defend legal claims.
• Enforce contractual rights.
• Comply with court orders.
• Satisfy audit requirements.
• Maintain statutory records.

Where legal retention requirements apply, information will generally be retained only for the legally required period.

Anonymization

Where continued business analysis is appropriate but personal identification is no longer necessary, Allum may anonymize or de-identify information.

Once information has been irreversibly anonymized such that it can no longer reasonably identify an individual, it may be retained and used for purposes including:

• Statistical analysis.
• Business intelligence.
• Product development.
• Market research.
• Operational planning.
• Performance measurement.
• Trend analysis.

Anonymized information is generally no longer considered personal information under applicable law.

Secure Deletion

When personal information is no longer required and no legal basis exists for continued retention, Allum will take commercially reasonable steps to securely delete, destroy, anonymize or otherwise render the information permanently inaccessible.

Deletion methods may vary depending upon:

• Data format.
• Storage medium.
• Technical feasibility.
• Legal requirements.
• Industry standards.

Residual copies may remain temporarily in backup systems until overwritten in accordance with normal backup retention cycles and applicable legal obligations.

Customer Requests

Subject to applicable law, customers may request deletion of certain personal information.

Such requests may be subject to limitations where continued retention is necessary to:

• Complete transactions.
• Fulfill contractual obligations.
• Detect or prevent fraud.
• Comply with legal obligations.
• Exercise legal rights.
• Defend legal claims.
• Protect public interests.
• Maintain security.

Where deletion cannot legally be completed immediately, Allum will inform the customer where required by applicable law.

Third-Party Retention

Where personal information has been shared with authorized service providers, payment processors, logistics partners or other third parties, those organizations may retain information in accordance with:

• Their contractual obligations.
• Applicable laws.
• Regulatory requirements.
• Independent privacy policies.

Allum cannot control the independent retention practices of third parties operating under their own legal obligations.

Reservation of Rights

Allum reserves the right to modify its data retention practices in response to changes in:

• Applicable laws.
• Regulatory guidance.
• Industry standards.
• Security requirements.
• Operational needs.
• Business practices.
• Technological developments.

Any material changes shall be reflected in this Privacy Policy where appropriate.

By using the Services, you acknowledge and agree that Allum may retain, archive, anonymize or securely delete your personal information as described in this Section for the purposes of providing the Services, complying with legal obligations, protecting customers and supporting legitimate business operations in accordance with applicable privacy and data protection laws.

Allum is committed to protecting the confidentiality, integrity, availability and security of the personal information entrusted to us. We recognize that safeguarding customer information is essential to maintaining trust and providing secure Services. Accordingly, we implement commercially reasonable administrative, technical, organizational and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, misuse, accidental loss and other unlawful forms of processing.

Our security program is continuously reviewed and improved to address evolving cybersecurity threats, technological developments, operational requirements and applicable legal obligations.

While we strive to maintain a high level of security, no website, mobile application, cloud platform, network or method of electronic transmission can be guaranteed to be completely secure. Therefore, although Allum takes reasonable precautions, we cannot guarantee absolute security.

Security Principles

Our security practices are designed around the following objectives:

• Protect customer information.
• Prevent unauthorized access.
• Maintain data integrity.
• Ensure service availability.
• Detect security threats.
• Prevent fraud.
• Minimize cybersecurity risks.
• Support regulatory compliance.
• Maintain business continuity.
• Respond promptly to security incidents.

These principles guide the development and operation of our security controls.

Administrative Safeguards

Allum maintains administrative safeguards intended to reduce security risks and support responsible handling of personal information.

Examples include:

• Internal security policies.
• Employee confidentiality obligations.
• Role-based access controls.
• Security awareness training.
• Privacy governance procedures.
• Vendor risk assessments.
• Incident response procedures.
• Data handling standards.
• Internal audits.
• Risk management processes.

Access to personal information is limited to authorized personnel who require such access to perform legitimate business functions.

Technical Safeguards

We implement a variety of technical safeguards designed to protect our systems and customer information.

These measures may include:

• Encryption of data in transit.
• Encryption of sensitive data at rest where appropriate.
• Secure communication protocols.
• Authentication mechanisms.
• Password hashing.
• Multi-factor authentication where supported.
• Network security controls.
• Firewalls.
• Intrusion detection and prevention systems.
• Malware protection.
• Security monitoring.
• Vulnerability management.
• Security logging.
• Access monitoring.
• Automated threat detection.

Technical safeguards are regularly reviewed and updated as technology evolves.

Physical Safeguards

Where personal information is stored or processed within physical facilities controlled by Allum or its authorized service providers, reasonable physical security measures may include:

• Controlled facility access.
• Visitor management procedures.
• Secure office environments.
• Surveillance systems where appropriate.
• Equipment protection.
• Environmental controls.
• Secure disposal of physical records.
• Device protection procedures.

Physical safeguards are implemented according to operational requirements and applicable legal obligations.

Access Controls

Access to personal information is granted only to individuals who require such access for legitimate business purposes.

Access management measures may include:

• User authentication.
• Role-based permissions.
• Least-privilege access.
• Password policies.
• Session management.
• Access logging.
• Periodic access reviews.
• Account deactivation procedures.

Unauthorized access attempts may be investigated and restricted.

Encryption

Where appropriate, Allum utilizes encryption technologies to protect information during transmission and storage.

Encryption may be applied to:

• Customer account information.
• Payment-related information.
• Authentication data.
• Communications.
• Administrative systems.
• Backup systems.
• Sensitive operational data.

The specific encryption methods used may evolve over time to reflect current industry standards.

Payment Security

Payment transactions are processed using secure payment technologies provided by authorized payment processors.

Payment security measures may include:

• PCI DSS-compliant payment processing.
• Secure payment gateways.
• Tokenization where supported.
• Transaction monitoring.
• Fraud detection.
• Authentication mechanisms.
• Risk analysis.

Allum generally does not store complete payment card numbers, CVV codes, PINs or authentication credentials.

Security Monitoring

To maintain the security of the Services, Allum may continuously monitor:

• Login activity.
• Authentication attempts.
• Device recognition.
• Suspicious transactions.
• Fraud indicators.
• Malware activity.
• Unauthorized access attempts.
• Website integrity.
• System performance.
• Network traffic.
• Security alerts.

Monitoring helps identify and respond to potential threats in a timely manner.

Incident Response

Despite appropriate safeguards, security incidents may occasionally occur.

Where a security incident is identified, Allum may:

• Investigate the incident.
• Contain the threat.
• Mitigate potential harm.
• Restore affected systems.
• Preserve evidence.
• Notify affected individuals where legally required.
• Notify regulatory authorities where applicable.
• Cooperate with law enforcement where appropriate.
• Review and strengthen security controls.

Incident response procedures are designed to minimize operational disruption and protect customer information.

Customer Responsibilities

Security is a shared responsibility.

Customers are encouraged to:

• Create strong passwords.
• Protect login credentials.
• Never share OTPs.
• Enable available security features.
• Use trusted internet connections.
• Install software updates.
• Keep devices secure.
• Monitor account activity.
• Report suspicious activity immediately.
• Avoid phishing attempts.

Failure to follow reasonable security practices may increase the risk of unauthorized access beyond Allum's control.

Third-Party Security

Allum works with carefully selected service providers that support payment processing, cloud hosting, logistics, analytics, communications and other business operations.

Where appropriate, we require such providers to implement reasonable security measures and contractual safeguards designed to protect personal information.

However, Allum cannot guarantee the independent security practices of organizations operating outside our direct control.

Business Continuity and Disaster Recovery

To support the continued availability of the Services, Allum may maintain business continuity and disaster recovery measures including:

• Secure backups.
• System redundancy.
• Infrastructure resilience.
• Recovery planning.
• Operational continuity procedures.
• Disaster recovery testing.
• Data restoration capabilities.

These measures are intended to reduce the impact of unexpected operational disruptions.

Security Reviews

Our security practices may be reviewed periodically through:

• Internal assessments.
• Risk evaluations.
• Security testing.
• Vulnerability assessments.
• Compliance reviews.
• Vendor assessments.
• Operational audits.

Security improvements may be implemented based on evolving threats, industry standards, technological developments and legal requirements.

No Absolute Security

While Allum uses commercially reasonable measures to protect personal information, no system connected to the internet can be guaranteed to be entirely secure.

Accordingly, customers acknowledge that:

• Internet communications involve inherent risks.
• Unauthorized third parties may attempt to circumvent security measures.
• Security incidents cannot always be completely prevented.
• Absolute protection cannot be guaranteed despite reasonable safeguards.

Customers use the Services with an understanding of these inherent technological limitations.

Reservation of Rights

Allum reserves the right to modify, strengthen, replace or expand its security measures, technologies, authentication procedures, monitoring systems, incident response practices and operational safeguards at any time to address evolving cybersecurity threats, technological advancements, regulatory requirements and business needs.

By accessing or using the Services, you acknowledge and agree that Allum may implement and maintain the security measures described in this Section to protect personal information and ensure the secure operation of the Services in accordance with applicable privacy, cybersecurity and data protection laws.

Allum may collect, store, access, process, transmit, disclose or otherwise handle personal information in multiple jurisdictions where necessary to provide the Services, operate our business, support customers, maintain technical infrastructure, collaborate with trusted service providers, comply with legal obligations and improve our products and services.

As our technology infrastructure and business operations may involve cloud service providers, payment processors, analytics platforms, communication providers, logistics partners and other authorized third parties located in different countries, your personal information may be transferred to, processed in or accessed from jurisdictions outside your country or region of residence.

Whenever personal information is transferred internationally, Allum is committed to implementing appropriate safeguards designed to protect your information in accordance with applicable privacy and data protection laws.

Reasons for International Transfers

International transfers may occur for legitimate business purposes including:

• Cloud infrastructure hosting.
• Data backup and disaster recovery.
• Payment processing.
• Fraud prevention.
• Customer support operations.
• Website analytics.
• Security monitoring.
• Email delivery.
• SMS delivery.
• Push notification services.
• Marketing automation.
• Software development.
• Platform maintenance.
• Technical support.
• Business continuity.
• Regulatory compliance.

International transfers are performed only where reasonably necessary for the operation of the Services.

Countries Where Data May Be Processed

Depending upon the technologies and service providers used by Allum, personal information may be processed in:

• India.
• Countries where our authorized service providers operate.
• Countries where cloud infrastructure is located.
• Countries where payment processors conduct transactions.
• Countries where logistics providers coordinate international deliveries.
• Other jurisdictions reasonably necessary for providing the Services.

The specific countries involved may change as our business and technology infrastructure evolve.

Legal Safeguards

Where required by applicable law, Allum shall implement appropriate safeguards for international transfers of personal information.

Such safeguards may include:

• Contractual data protection obligations.
• Standard contractual clauses where applicable.
• Data processing agreements.
• Confidentiality obligations.
• Security assessments.
• Vendor due diligence.
• Technical safeguards.
• Organizational safeguards.
• Regulatory compliance measures.

Transfers shall be conducted only where appropriate protections are available or otherwise permitted by applicable law.

Service Providers

Certain trusted third-party providers supporting the Services may process personal information outside your jurisdiction.

Examples include providers supporting:

• Cloud hosting.
• Website infrastructure.
• Payment services.
• Analytics.
• Customer support.
• Fraud prevention.
• Security monitoring.
• Marketing communications.
• Email delivery.
• Mobile notifications.
• Technical operations.

Such providers are contractually required, where appropriate, to implement reasonable privacy and security measures.

Data Protection Standards

Regardless of where personal information is processed, Allum endeavors to ensure that personal information receives a level of protection consistent with this Privacy Policy.

Measures may include:

• Encryption.
• Access controls.
• Security monitoring.
• Confidentiality obligations.
• Vendor oversight.
• Incident response procedures.
• Employee training.
• Technical safeguards.

Where local laws provide stronger protections, Allum will comply with those legal requirements to the extent applicable.

Compliance with Local Laws

International data transfers are carried out in accordance with applicable legal requirements, including:

• Data protection legislation.
• Consumer protection laws.
• Financial regulations.
• Tax obligations.
• Government reporting requirements.
• Cross-border data transfer restrictions.
• Industry standards.

Where applicable law restricts international transfers, Allum will implement appropriate compliance measures before proceeding.

Customer Rights

Depending on your jurisdiction, you may have certain rights relating to international transfers of your personal information.

Such rights may include:

• Receiving information regarding transfer mechanisms.
• Requesting additional information regarding safeguards.
• Exercising applicable privacy rights.
• Submitting complaints to relevant supervisory authorities.
• Requesting access to transferred personal information.

The availability of these rights depends upon applicable law.

Business Transactions

If Allum participates in a merger, acquisition, investment, restructuring, sale of assets or similar corporate transaction involving entities located in different jurisdictions, personal information may be transferred internationally as part of the transaction.

Any such transfer shall remain subject to appropriate confidentiality obligations and applicable legal requirements.

Government Requests

Where personal information is processed internationally, it may become subject to lawful requests from governmental authorities or courts within the jurisdiction where the information is processed.

Allum evaluates such requests carefully and discloses personal information only where legally required or otherwise permitted under applicable law.

Where legally permitted, we may seek to limit the scope of such disclosures and protect customer privacy to the maximum extent possible.

Security of International Transfers

International transfers utilize commercially reasonable security measures designed to reduce risks associated with cross-border processing.

Security measures may include:

• Encrypted communications.
• Secure transmission protocols.
• Authentication controls.
• Access restrictions.
• Vendor security reviews.
• Monitoring systems.
• Incident response procedures.

Although reasonable safeguards are implemented, international electronic communications remain subject to inherent technological risks.

Changes to International Operations

As Allum expands its business, adopts new technologies or engages additional service providers, the locations where personal information is processed may change.

Where required by applicable law, material changes affecting international data transfers shall be reflected in this Privacy Policy and, where necessary, communicated to customers through appropriate notice.

Reservation of Rights

Allum reserves the right to transfer, process, store or access personal information internationally where reasonably necessary for business operations, legal compliance, security, technology infrastructure, customer support, fraud prevention or operational efficiency, provided that such transfers are carried out in accordance with applicable privacy and data protection laws.

By accessing or using the Services, you acknowledge and agree that your personal information may be transferred to and processed in jurisdictions outside your country of residence as described in this Section, subject to appropriate safeguards and applicable legal requirements.

Allum is committed to protecting the privacy and personal information of children. Our Services are designed for use by individuals who are legally capable of entering into binding agreements under applicable law. We do not knowingly collect, solicit, process or maintain personal information directly from children in violation of applicable privacy or child protection laws.

If you are below the minimum age required to independently use our Services under the laws applicable in your jurisdiction, you should access the Services only with the involvement, supervision and consent of a parent or legal guardian where such use is legally permitted.

Intended Audience

The Services are intended primarily for:

• Adults.
• Individuals legally capable of entering into binding contracts.
• Customers purchasing products for personal or commercial use.
• Individuals authorized to create customer accounts.
• Parents or guardians purchasing products for minors.

The Services are not specifically directed toward children.

Age Requirements

Depending on the laws applicable in your jurisdiction, you may be required to meet a minimum age requirement before:

• Creating an account.
• Making purchases.
• Providing personal information.
• Participating in promotions.
• Submitting product reviews.
• Joining loyalty programs.
• Entering contests.
• Receiving marketing communications.

Where required by applicable law, parental or guardian consent may be necessary before certain activities can occur.

Information Collected from Children

Allum does not knowingly request or intentionally collect personal information directly from children where such collection is prohibited by applicable law.

If personal information relating to a child is inadvertently received, we will take appropriate steps to:

• Verify the circumstances.
• Assess applicable legal requirements.
• Restrict access where appropriate.
• Delete the information where legally required.
• Obtain parental consent where applicable.
• Prevent further unauthorized collection.

Parent or Guardian Responsibilities

Parents and legal guardians are encouraged to:

• Supervise children's online activities.
• Monitor the use of internet-connected devices.
• Protect account credentials.
• Review information shared online.
• Educate children regarding online privacy.
• Contact Allum regarding concerns involving a child's information.

Parents should not permit children to create accounts or submit personal information where prohibited by applicable law.

Purchases for Children

Adults may purchase products intended for use by children.

Where purchases are made on behalf of children:

• Billing information shall generally relate to the purchasing adult.
• Customer accounts remain associated with the responsible adult.
• Communications regarding the purchase shall generally be directed to the purchasing adult.
• Payment responsibilities remain with the purchasing adult.

Educational and Promotional Activities

Unless expressly stated otherwise, Allum does not intentionally target marketing campaigns, contests, surveys or promotional activities toward children where prohibited by applicable law.

Where participation by minors is permitted, additional eligibility requirements, parental consent procedures or age verification measures may apply.

Parental Requests

Subject to applicable law, parents or legal guardians may contact Allum regarding personal information believed to relate to a child.

Where appropriate and legally required, parents or guardians may request:

• Access to the child's personal information.
• Correction of inaccurate information.
• Deletion of eligible information.
• Withdrawal of previously provided consent.
• Restriction of further processing.

Before processing such requests, Allum may require reasonable verification of the identity and authority of the requesting parent or guardian.

Age Verification

To support compliance with applicable laws, Allum may implement reasonable measures to verify age in circumstances where age is relevant to:

• Account registration.
• Promotional eligibility.
• Product purchases.
• Legal compliance.
• Consent requirements.
• Privacy obligations.

Age verification methods may vary depending on the circumstances and applicable legal requirements.

Third-Party Services

Certain third-party services integrated with the Services may maintain their own age requirements and privacy practices.

Examples include:

• Payment providers.
• Social media platforms.
• Authentication providers.
• Marketing platforms.
• Analytics services.

Parents and guardians are encouraged to review the privacy policies of such third-party services independently.

Children's Safety

Allum encourages responsible online behavior and supports efforts to protect children from:

• Identity theft.
• Online fraud.
• Unauthorized data collection.
• Inappropriate communications.
• Privacy violations.
• Cybersecurity threats.

Where we become aware of activity involving a child that may present a safety concern, we reserve the right to take appropriate measures consistent with applicable law.

International Requirements

Age requirements and parental consent obligations may vary depending on the country or region from which the Services are accessed.

Where local law provides greater protections for children, Allum shall comply with those legal requirements to the extent applicable.

Reservation of Rights

Allum reserves the right to implement additional age verification procedures, parental consent mechanisms, account restrictions, security measures or child privacy protections as required by applicable law, technological developments, operational needs or future regulatory guidance.

Where required, this Privacy Policy shall be updated to reflect such changes.

By using the Services, you represent and warrant that you satisfy the applicable legal age requirements to use the Services or that you are accessing the Services under the supervision and authorization of a parent or legal guardian where permitted by applicable law. You further acknowledge that Allum may take reasonable steps to protect children's privacy and comply with applicable child protection and data privacy laws.

Allum believes that individuals should have meaningful control over their personal information. Subject to applicable privacy and data protection laws, you may have certain rights regarding the personal information that Allum collects, uses, stores, processes, shares and otherwise handles.

The availability and scope of these rights may vary depending on your country of residence, the applicable legal framework, the nature of the information involved and the specific circumstances of the processing activity.

Allum is committed to honoring applicable privacy rights in accordance with relevant laws while balancing legal, security, contractual and operational obligations.

Right to Access

Subject to applicable law, you may request confirmation as to whether Allum processes your personal information.

Where applicable, you may also request access to information including:

• Categories of personal information processed.
• Purposes of processing.
• Categories of recipients.
• Sources of information where applicable.
• Retention practices.
• Applicable privacy rights.
• Information regarding international transfers where required.
• Information regarding automated processing where applicable.

Access requests may require verification of your identity before information is disclosed.

Right to Correction

If you believe that personal information maintained by Allum is inaccurate, incomplete or outdated, you may request correction or update of such information.

Examples include:

• Name corrections.
• Email updates.
• Mobile number changes.
• Shipping address updates.
• Billing information.
• Communication preferences.
• Profile information.

Certain information may also be updated directly through your customer account.

Right to Deletion

Subject to applicable legal requirements, you may request deletion of personal information that is no longer necessary for the purposes for which it was collected.

Deletion requests may be honored where:

• The information is no longer required.
• Consent has been withdrawn where processing depends upon consent.
• Processing is no longer lawful.
• Applicable law requires deletion.

However, Allum may retain certain information where continued retention is necessary to:

• Complete pending transactions.
• Comply with legal obligations.
• Meet accounting requirements.
• Prevent fraud.
• Resolve disputes.
• Defend legal claims.
• Enforce contractual rights.
• Protect security.
• Maintain required business records.

Right to Withdraw Consent

Where personal information is processed based upon your consent, you may withdraw that consent at any time.

Withdrawal of consent may affect:

• Marketing communications.
• Promotional campaigns.
• Optional cookies.
• Personalized advertising.
• Certain optional features.
• Location-based services.

Withdrawal of consent shall not affect processing that occurred lawfully before the withdrawal.

Right to Restrict Processing

Where provided by applicable law, you may request that Allum temporarily restrict certain processing activities under circumstances including:

• Disputes regarding data accuracy.
• Pending verification requests.
• Objections to processing.
• Ongoing legal claims.
• Other situations recognized under applicable law.

During periods of restricted processing, certain Services may become unavailable.

Right to Object

Where permitted by applicable law, you may object to certain processing activities, particularly where processing is based upon legitimate business interests.

You may object to processing relating to:

• Direct marketing.
• Personalized advertising.
• Certain profiling activities.
• Certain analytics activities where applicable.
• Other processing permitted under applicable law.

Allum will evaluate such objections in accordance with applicable legal requirements.

Right to Data Portability

Where applicable law provides such rights and where technically feasible, you may request a copy of certain personal information in a structured, commonly used and machine-readable format.

Portability requests may apply only to information:

• Provided directly by you.
• Processed using automated means.
• Processed on specified legal bases recognized by applicable law.

Technical limitations and legal restrictions may affect the scope of portability.

Right to Marketing Choices

You may control certain marketing communications by:

• Using unsubscribe links.
• Updating account preferences.
• Contacting customer support.
• Modifying notification settings.
• Adjusting consent preferences where available.

Even after opting out of marketing communications, you may continue receiving transactional communications necessary for providing the Services.

Right to Cookie Choices

Where applicable, you may manage certain cookie preferences through:

• Browser settings.
• Cookie consent tools.
• Device privacy settings.
• Advertising preference controls.

Disabling certain cookies may affect the functionality of portions of the Services.

Right to Lodge Complaints

If you believe that Allum has not processed your personal information in accordance with applicable privacy laws, you may have the right to submit a complaint to:

• Relevant data protection authorities.
• Privacy regulators.
• Consumer protection authorities.
• Other competent governmental agencies.

Nothing in this Privacy Policy limits your statutory rights to seek available legal remedies.

Verification of Requests

To protect customer privacy and prevent unauthorized disclosure, Allum may require reasonable verification of identity before processing requests relating to personal information.

Verification methods may include:

• Email verification.
• Mobile verification.
• Account authentication.
• Identity confirmation.
• Additional supporting documentation where appropriate.

Failure to complete reasonable verification procedures may delay or prevent fulfillment of certain requests.

Response Time

Allum will make commercially reasonable efforts to respond to valid privacy requests within the timeframes required by applicable law.

Response times may vary depending upon:

• Request complexity.
• Applicable legal requirements.
• Verification procedures.
• Volume of requests.
• Technical feasibility.

Where additional time is permitted by law, customers will be informed where appropriate.

Limitations

Certain privacy rights may be limited where processing remains necessary for:

• Legal compliance.
• Tax obligations.
• Fraud prevention.
• Security investigations.
• Contract performance.
• Public interest.
• Legal claims.
• Regulatory obligations.
• Protection of the rights of others.

Where Allum cannot fully comply with a request, we will provide an explanation to the extent permitted by applicable law.

Non-Discrimination

Where required by applicable law, Allum will not unlawfully discriminate against individuals for exercising their privacy rights.

However, certain Services or features may no longer be available where the requested processing is necessary for their operation.

Reservation of Rights

Allum reserves the right to establish reasonable procedures, verification requirements, documentation standards and operational processes for handling privacy requests in accordance with applicable law.

As privacy laws evolve, additional rights may become available. Allum may update this Privacy Policy to reflect such developments and ensure continued legal compliance.

By using the Services, you acknowledge that you understand your privacy rights as described in this Section and may exercise such rights in accordance with applicable law and the procedures established by Allum.

Certain web browsers and devices offer a feature known as **"Do Not Track" ("DNT")**, which allows users to indicate a preference that their online activities should not be tracked across websites and online services.

At present, there is **no universally accepted industry standard** governing how websites, mobile applications, advertising technologies, analytics providers or other online services should interpret or respond to Do Not Track signals. As a result, different browsers and service providers may implement DNT differently and there is no consistent legal or technical framework requiring websites to honor such signals in every jurisdiction.

This Section explains Allum's current approach to Do Not Track signals and similar browser-based privacy preferences.

Current Position

Because there is presently no universally recognized technical standard for interpreting Do Not Track requests, Allum does not automatically alter its data collection, cookie usage, analytics processing, advertising technologies or website functionality solely in response to browser-based Do Not Track signals.

Instead, Allum provides customers with various privacy controls, cookie management tools, communication preferences and account settings that allow customers to exercise meaningful control over many aspects of personal information processing.

Browser Privacy Controls

Although Allum may not automatically respond to Do Not Track signals, you may still control certain privacy settings through your browser or device.

Depending on your browser, you may be able to:

• Block cookies.
• Delete existing cookies.
• Restrict third-party cookies.
• Disable browser storage.
• Limit advertising identifiers.
• Disable location sharing.
• Configure tracking protections.
• Restrict website permissions.
• Clear browsing data.
• Disable JavaScript where appropriate.

Please note that restricting certain browser features may affect the functionality of portions of the Services.

Cookie Preferences

Where applicable, customers may also manage certain tracking technologies through:

• Cookie consent banners.
• Cookie preference centers.
• Browser settings.
• Mobile device privacy controls.
• Operating system privacy settings.
• Advertising preference settings.

Additional information regarding cookies is available in our Cookie Policy.

Personalized Advertising

If you choose to disable certain tracking technologies, personalized advertising and product recommendations may become less relevant.

Disabling tracking technologies may affect:

• Personalized promotions.
• Product recommendations.
• Shopping preferences.
• Recently viewed products.
• Marketing personalization.
• Advertising relevance.
• Website customization.

However, you may still receive non-personalized advertisements and general promotional content.

Analytics Technologies

Certain analytics technologies may continue to operate where necessary to:

• Maintain website security.
• Measure website performance.
• Detect technical issues.
• Prevent fraud.
• Support essential functionality.
• Produce aggregated usage statistics.

Where required by applicable law, non-essential analytics technologies will operate only after obtaining the necessary consent.

Third-Party Technologies

Some third-party providers integrated with the Services may independently recognize or respond to browser privacy settings or Do Not Track signals according to their own policies.

Examples include providers offering:

• Website analytics.
• Advertising services.
• Social media integrations.
• Payment processing.
• Customer support tools.
• Performance monitoring.

Allum does not control how independent third parties interpret or respond to Do Not Track signals.

Customers are encouraged to review the privacy policies of such providers for additional information.

Global Privacy Controls

As privacy technologies continue to evolve, certain browsers or operating systems may introduce additional privacy mechanisms, including:

• Global Privacy Control (GPC).
• Browser privacy preferences.
• Device-level privacy settings.
• Advertising identifier controls.
• Tracking prevention features.

Where applicable law requires recognition of such signals, Allum will make commercially reasonable efforts to comply with those legal requirements.

Future Standards

Industry standards relating to browser privacy controls, Do Not Track signals, Global Privacy Control and similar technologies continue to evolve.

As recognized standards become more widely adopted or legally required, Allum may modify its practices to support such technologies where appropriate.

Any material changes to our approach shall be reflected in this Privacy Policy.

Customer Choices

Customers seeking greater control over online privacy are encouraged to use the privacy controls available through:

• Browser settings.
• Device settings.
• Cookie preference tools.
• Account privacy settings.
• Marketing preference controls.
• Operating system privacy features.

Using these controls generally provides more reliable and comprehensive privacy management than browser-based Do Not Track signals alone.

Reservation of Rights

Allum reserves the right to modify its practices relating to Do Not Track signals, browser privacy controls, Global Privacy Control technologies, cookies, analytics, advertising technologies and similar privacy mechanisms in response to technological developments, evolving industry standards, legal requirements, regulatory guidance or operational improvements.

Where required by applicable law, appropriate notice or consent shall be provided before implementing material changes.

By using the Services, you acknowledge that Allum currently does not automatically respond to browser-based Do Not Track signals due to the absence of a universally accepted technical standard and that you may exercise available privacy choices through the mechanisms described in this Privacy Policy and applicable browser or device settings.

The Services provided by **Allum** may contain links to, integrate with, embed or otherwise provide access to third-party websites, applications, marketplaces, social media platforms, payment providers, logistics partners, authentication services, analytics platforms, marketing tools, customer support systems and other independent online services (collectively, **"Third-Party Services"**).

These Third-Party Services are operated independently of Allum and are governed by their own terms of use, privacy policies, security practices, cookie policies and legal obligations. This Privacy Policy applies only to the Services operated by Allum and does not apply to information collected, processed, stored or disclosed by independent third parties unless expressly stated otherwise.

Customers are encouraged to carefully review the privacy policies and terms of any Third-Party Service before providing personal information or using such services.

Links to External Websites

For your convenience, the Services may include links directing you to third-party websites.

Examples include:

• Payment providers.
• Courier companies.
• Brand partners.
• Fashion publications.
• Government resources.
• Customer support resources.
• Promotional partners.
• Affiliate websites.
• Social media pages.
• Blog articles.
• Educational resources.

The inclusion of such links does not imply endorsement, sponsorship, recommendation, approval or guarantee by Allum regarding the third-party website or its services.

Independent Privacy Practices

Third-Party Services maintain their own privacy practices regarding the collection, use, disclosure, storage and protection of personal information.

Allum does not control:

• Privacy policies.
• Cookie practices.
• Security procedures.
• Data retention policies.
• Marketing activities.
• Tracking technologies.
• Customer communications.
• Business practices.
• Legal compliance.
• Information processing methods.

Your interactions with Third-Party Services are governed solely by the applicable policies of those providers.

Payment Providers

Payments processed through independent payment service providers remain subject to the privacy practices and security measures of those providers.

Such providers may collect information including:

• Payment credentials.
• Billing information.
• Transaction identifiers.
• Authentication information.
• Fraud prevention information.

Allum encourages customers to review the privacy policies of payment providers before completing transactions.

Logistics and Shipping Partners

Courier companies and logistics providers involved in delivering your orders may independently collect or process information relating to:

• Delivery confirmation.
• Proof of delivery.
• Recipient verification.
• Delivery attempts.
• Shipment tracking.
• Address verification.
• Customer communications.

Such activities are subject to the privacy obligations of the respective logistics provider.

Social Media Platforms

The Services may allow interaction with social media platforms through features such as:

• Social sharing.
• Login using social accounts.
• Product sharing.
• Promotional campaigns.
• User-generated content.
• Brand engagement.
• Embedded social media content.

Information shared with social media platforms is governed by the privacy policies and account settings of the respective platform.

Analytics Providers

Third-party analytics providers assisting Allum may collect information regarding:

• Website usage.
• Device information.
• Browser information.
• Navigation behavior.
• Technical performance.
• Customer engagement.
• Marketing attribution.

Such providers process information in accordance with contractual obligations and their own applicable privacy policies.

Marketing and Advertising Partners

Advertising and marketing partners may utilize technologies to:

• Measure campaign performance.
• Deliver advertisements.
• Personalize marketing.
• Analyze customer engagement.
• Prevent advertising fraud.
• Evaluate promotional effectiveness.

Customers may have the ability to manage advertising preferences through browser settings, device settings or applicable consent mechanisms.

Third-Party Authentication

Where supported, customers may choose to access their Allum account using third-party authentication services.

Examples include:

• Google.
• Apple.
• Facebook.
• Other supported identity providers.

When using such authentication services, certain account information may be shared with Allum in accordance with your permissions and the privacy policy of the authentication provider.

Embedded Content

Certain pages of the Services may display embedded content provided by independent third parties.

Examples include:

• Videos.
• Maps.
• Social media posts.
• Interactive content.
• Product demonstrations.
• Customer support tools.

Embedded content may function as though you visited the third-party website directly and may collect information according to the provider's own privacy practices.

Customer Responsibility

Before using Third-Party Services, customers are encouraged to:

• Review applicable privacy policies.
• Understand cookie practices.
• Verify website authenticity.
• Review security practices.
• Understand data-sharing arrangements.
• Evaluate personal privacy preferences.

Customers access Third-Party Services at their own discretion and risk.

No Responsibility for Third Parties

Except to the extent required by applicable law, Allum is not responsible for:

• Privacy practices of third parties.
• Security incidents affecting third-party systems.
• Third-party content.
• Accuracy of third-party information.
• Cookies placed by third parties.
• Marketing practices.
• Data retention.
• Unauthorized disclosures by third parties.
• Third-party legal compliance.

Any concerns relating to third-party processing should be directed to the relevant third-party provider.

Future Integrations

As Allum expands its Services, additional third-party technologies, service providers, payment systems, logistics partners, analytics platforms or business integrations may be introduced.

Where such integrations materially affect the processing of personal information, this Privacy Policy shall be updated accordingly.

Reservation of Rights

Allum reserves the right to introduce, replace, suspend, remove or modify third-party integrations, external links, technology providers, authentication services, payment providers, logistics partners, analytics platforms, marketing partners or embedded content at any time as reasonably necessary for operational, security, legal or business purposes.

By accessing or using the Services, you acknowledge and agree that your interactions with Third-Party Services are governed by the applicable terms and privacy policies of those independent providers and that Allum's responsibility for such Third-Party Services is limited to the extent described in this Privacy Policy and applicable law.

Allum may provide features that enable customers to interact with our brand through social media platforms, publish reviews, upload photographs, share styling content, participate in promotional campaigns, submit testimonials, engage with community features or otherwise contribute content to the Services (collectively, **"User-Generated Content"** or **"UGC"**).

This Section explains how personal information and User-Generated Content may be collected, processed, displayed, used, shared and protected when you participate in social media activities or contribute content through the Services.

Participation in these features is entirely voluntary.

Social Media Features

The Services may include social media functionality such as:

• Social media login.
• Product sharing.
• Wishlist sharing.
• Referral programs.
• Social media campaigns.
• Brand hashtags.
• User mentions.
• Social media contests.
• Product tagging.
• Community engagement.
• Embedded social media content.
• Influencer collaborations.

These features may allow information to be exchanged between Allum and the relevant social media platform depending upon your privacy settings and permissions.

Information You Choose to Share

When you voluntarily participate in social media activities or submit User-Generated Content, you may choose to provide:

• Profile name.
• Username.
• Profile photograph.
• Product reviews.
• Ratings.
• Comments.
• Questions.
• Answers.
• Fashion styling photographs.
• Videos.
• Testimonials.
• Social media posts.
• Captions.
• Public profile information.
• Contest submissions.

Only information that you voluntarily submit or authorize will be collected through these activities.

Public Visibility

Certain User-Generated Content may be publicly visible through the Services.

Examples include:

• Product reviews.
• Ratings.
• Styling photographs.
• Testimonials.
• Questions and answers.
• Comments.
• Public usernames.
• Community posts.

Before submitting public content, you should carefully consider whether you wish such information to be visible to other users.

Marketing Use of User-Generated Content

Where you grant permission or otherwise authorize Allum to use your content, Allum may use User-Generated Content for lawful business purposes including:

• Product pages.
• Marketing campaigns.
• Social media promotions.
• Digital advertising.
• Email campaigns.
• Printed marketing materials.
• Lookbooks.
• Fashion editorials.
• Promotional videos.
• Brand storytelling.
• Website galleries.

Such use shall remain subject to the permissions granted by you, applicable law and our Terms and Conditions.

Social Media Campaigns

Participation in social media campaigns, contests, giveaways, hashtag campaigns or influencer collaborations may involve additional terms and conditions.

Information collected during such campaigns may include:

• Entry submissions.
• Contact information.
• Social media usernames.
• Campaign participation.
• Prize delivery information.
• Eligibility verification.
• Promotional preferences.

Specific campaign rules may supplement this Privacy Policy where applicable.

Reviews and Ratings

When submitting product reviews or ratings:

• Reviews may become publicly visible.
• Your chosen display name may be shown.
• Product photographs may be displayed.
• Ratings may be aggregated.
• Reviews may be used to improve products and Services.
• Reviews may be moderated in accordance with our Terms and Conditions.

Allum reserves the right to remove reviews that violate applicable laws or our community standards.

Community Standards

Users submitting User-Generated Content agree not to publish content that:

• Is unlawful.
• Is fraudulent.
• Is defamatory.
• Is abusive.
• Is threatening.
• Is discriminatory.
• Is obscene.
• Violates intellectual property rights.
• Contains confidential information.
• Invades another person's privacy.
• Promotes illegal activities.
• Contains malware or malicious links.
• Violates applicable laws.

Violation of these standards may result in removal of content or restriction of account privileges.

Intellectual Property

Users remain responsible for ensuring that any content submitted to Allum:

• Is lawfully owned.
• Is properly licensed.
• Does not infringe copyrights.
• Does not infringe trademarks.
• Does not violate publicity rights.
• Does not violate privacy rights.
• Does not violate contractual obligations.

By submitting User-Generated Content, you grant Allum the rights described in the Terms and Conditions relating to User Content.

Social Media Platforms

Where you interact with Allum through third-party social media platforms, those platforms may independently collect information relating to:

• Your interactions.
• Account information.
• Device information.
• Cookies.
• Advertising preferences.
• Engagement metrics.

Such information is governed by the privacy policies of the respective platform rather than this Privacy Policy.

Removal Requests

Subject to applicable law and operational requirements, you may request removal of certain User-Generated Content submitted by you.

Removal requests may be subject to:

• Identity verification.
• Ownership verification.
• Legal obligations.
• Contractual rights previously granted.
• Technical limitations.
• Legitimate business interests.

Certain content may continue to be retained where required by law or where necessary to protect legal rights.

Moderation

To maintain a safe and respectful community, Allum may:

• Review submissions.
• Moderate public content.
• Remove inappropriate material.
• Restrict visibility.
• Suspend community privileges.
• Investigate reported violations.
• Cooperate with law enforcement where appropriate.

Moderation decisions are made in accordance with our Terms and Conditions, Community Guidelines and applicable law.

Reservation of Rights

Allum reserves the right to introduce new social media features, community tools, interactive services, influencer programs, promotional campaigns or User-Generated Content functionality from time to time.

Where such features materially affect the collection or processing of personal information, this Privacy Policy shall be updated accordingly.

By participating in social media activities, submitting User-Generated Content or interacting with community features, you acknowledge and agree that Allum may collect, display, process, store, use and manage such information as described in this Section and in accordance with this Privacy Policy, our Terms and Conditions and applicable privacy and data protection laws.

As Allum continues to grow, expand, invest in new technologies, enter new markets, establish strategic partnerships or restructure its business operations, circumstances may arise in which ownership or control of certain business assets changes. In connection with such events, personal information may be transferred, disclosed or otherwise processed as part of the relevant corporate transaction, subject to appropriate legal, contractual and security safeguards.

This Section explains how personal information may be handled during mergers, acquisitions, investments, reorganizations or other business transactions.

Corporate Transactions

Personal information may be transferred or disclosed in connection with:

• Mergers.
• Acquisitions.
• Business combinations.
• Joint ventures.
• Strategic partnerships.
• Investments.
• Corporate restructuring.
• Internal reorganizations.
• Sale of assets.
• Sale of business units.
• Share transfers.
• Corporate financing.
• Insolvency proceedings.
• Bankruptcy proceedings.
• Receivership.
• Liquidation.
• Similar corporate transactions.

Such transfers are carried out only where reasonably necessary to evaluate, negotiate, complete or implement the relevant transaction.

Information That May Be Transferred

Depending upon the nature of the transaction, information that may be transferred includes:

• Customer account information.
• Order history.
• Transaction records.
• Customer support records.
• Loyalty program information.
• Marketing preferences.
• Business relationship information.
• Vendor information.
• Supplier information.
• Contractual records.
• Technical information.
• Operational records.

Sensitive payment credentials such as complete payment card numbers or authentication credentials are generally **not** transferred except where legally required or lawfully processed by authorized payment providers.

Due Diligence

Before completing certain corporate transactions, prospective purchasers, investors, lenders, advisers or business partners may require access to limited business information for due diligence purposes.

Where personal information is included in such reviews, Allum will make commercially reasonable efforts to ensure that:

• Appropriate confidentiality agreements are in place.
• Information access is limited.
• Security measures are maintained.
• Applicable privacy laws are respected.
• Access is restricted to legitimate business purposes.

Successor Organizations

If ownership or control of Allum changes, the acquiring or successor organization may continue processing personal information in accordance with:

• This Privacy Policy.
• Updated privacy policies.
• Applicable contractual obligations.
• Applicable data protection laws.
• Consumer protection laws.

Where legally required, customers will be notified of material changes affecting the processing of their personal information.

Internal Reorganization

Personal information may also be shared within the Allum corporate group, including parent companies, subsidiaries, affiliates and controlled entities, for legitimate business purposes such as:

• Operational management.
• Customer support.
• Financial reporting.
• Internal administration.
• Technology management.
• Security operations.
• Compliance activities.
• Product development.
• Business planning.

Such internal transfers remain subject to appropriate confidentiality and security obligations.

Financing and Investment

In connection with financing activities, fundraising, investment transactions or strategic business discussions, Allum may disclose limited business information to:

• Investors.
• Financial institutions.
• Lenders.
• Venture capital firms.
• Private equity firms.
• Strategic partners.
• Professional advisers.

Where personal information is involved, disclosure will be limited to what is reasonably necessary and protected by appropriate confidentiality obligations.

Legal Obligations During Transactions

Corporate transactions may require disclosure of personal information where necessary to:

• Comply with legal requirements.
• Obtain regulatory approvals.
• Complete financial audits.
• Satisfy tax obligations.
• Meet accounting standards.
• Respond to governmental authorities.
• Fulfill contractual obligations.

Such disclosures shall occur only where authorized or required by applicable law.

Customer Rights

Business transfers do not automatically eliminate your privacy rights.

Subject to applicable law, customers may continue to exercise applicable privacy rights, including:

• Access requests.
• Correction requests.
• Deletion requests.
• Consent withdrawal.
• Marketing preference changes.
• Complaint submission.

The availability of these rights may depend on the specific transaction and applicable legal requirements.

Security During Corporate Transactions

Allum takes commercially reasonable measures to protect personal information throughout corporate transactions.

Such measures may include:

• Confidentiality agreements.
• Access controls.
• Secure document sharing.
• Encryption where appropriate.
• Vendor due diligence.
• Security assessments.
• Controlled access procedures.
• Legal protections.

These measures are intended to minimize unnecessary disclosure of personal information.

No Sale of Personal Information

A transfer of personal information occurring solely as part of a bona fide merger, acquisition, restructuring, financing or sale of business assets shall **not** be considered a sale of personal information where such treatment is not required by applicable law.

Where applicable law defines such transfers differently, Allum will comply with those legal requirements.

Notification of Material Changes

Where required by applicable law, Allum will provide appropriate notice if:

• Ownership changes materially affect privacy practices.
• A successor organization adopts materially different privacy practices.
• Additional consent becomes legally required.
• Customers are entitled to specific legal notifications.

Notifications may be provided through:

• Website notices.
• Email communications.
• Account notifications.
• Mobile application notices.
• Other reasonable communication methods.

Reservation of Rights

Allum reserves the right to engage in mergers, acquisitions, restructurings, investments, corporate reorganizations, financing transactions, asset sales or other legitimate business activities at any time.

Where such activities involve the processing or transfer of personal information, Allum will implement appropriate safeguards and comply with applicable privacy and data protection laws.

By using the Services, you acknowledge and agree that your personal information may be transferred, disclosed or processed as part of legitimate corporate transactions or organizational changes in accordance with this Privacy Policy and applicable law.

Allum reserves the right to modify, amend, update, supplement, replace or revise this Privacy Policy at any time to reflect changes in our business operations, products, services, technology, legal obligations, regulatory requirements, security practices, industry standards or customer expectations.

As our Services continue to evolve, we may introduce new features, payment methods, marketing tools, analytics technologies, security measures or business processes that require updates to the way personal information is collected, used, shared, stored or otherwise processed. We are committed to maintaining transparency regarding such changes and will update this Privacy Policy whenever appropriate.

Right to Update

Allum may update this Privacy Policy for reasons including, but not limited to:

• Introduction of new products or services.
• Expansion into new markets.
• Changes in applicable privacy laws.
• Regulatory guidance.
• Technological advancements.
• Security improvements.
• Fraud prevention enhancements.
• New payment methods.
• New customer support channels.
• Business restructuring.
• Changes to analytics or advertising technologies.
• Improvements to customer experience.
• Operational requirements.

Updates will be made in accordance with applicable law.

Effective Date

Unless otherwise stated, revisions to this Privacy Policy shall become effective upon publication on the Services.

Where applicable law requires advance notice or additional consent before certain changes become effective, Allum will comply with those legal requirements.

The **"Last Updated"** date appearing at the beginning or end of this Privacy Policy indicates the date on which the most recent revision became effective.

Notification of Material Changes

Where changes materially affect the way personal information is processed, Allum may notify customers through one or more of the following methods:

• Website notices.
• Account dashboard notifications.
• Email communications.
• Mobile application notifications.
• SMS notifications where appropriate.
• Cookie banners where applicable.
• Customer support announcements.
• Other reasonable communication methods.

The method of notification may vary depending upon the nature of the change and applicable legal requirements.

Customer Responsibility

You are encouraged to review this Privacy Policy periodically to remain informed about how Allum handles personal information.

Your continued access to or use of the Services after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Policy and, where permitted by applicable law, your acceptance of the updated terms relating to the processing of your personal information.

If you do not agree with any material changes, you should discontinue using the Services and may contact Allum regarding any applicable privacy rights available under law.

Changes Requiring Consent

Certain changes may require your consent before implementation, including where required by applicable privacy or data protection laws.

Examples may include:

• New categories of sensitive personal information processing.
• New marketing practices requiring consent.
• New non-essential tracking technologies.
• Material changes to the purposes of processing.
• Other processing activities requiring consent under applicable law.

Where consent is required, Allum will seek such consent before proceeding with the relevant processing activity.

Previous Versions

For compliance, auditing, dispute resolution and legal purposes, Allum may retain previous versions of this Privacy Policy.

Historical versions may be maintained internally and, where required by law, may be made available upon reasonable request or through our website.

Reservation of Rights

Allum reserves the right to modify this Privacy Policy whenever reasonably necessary to maintain legal compliance, improve transparency, enhance customer privacy, strengthen security, support new technologies or reflect changes in our business operations.

Any updates will be implemented in accordance with applicable privacy and data protection laws.

By continuing to use the Services after any revisions become effective, you acknowledge that you have reviewed the updated Privacy Policy and understand that your personal information will be processed in accordance with the version then in effect, subject to any rights provided by applicable law.

Allum is committed to maintaining transparency, accountability and open communication regarding the collection, processing, use, storage, sharing and protection of personal information. If you have any questions, concerns, requests or complaints regarding this Privacy Policy or our privacy practices, we encourage you to contact us through the official communication channels listed below.

We will make commercially reasonable efforts to respond to legitimate privacy enquiries within a reasonable period and in accordance with applicable privacy and data protection laws.

General Privacy Enquiries

If you have questions regarding this Privacy Policy or the manner in which Allum handles your personal information, you may contact us using our official privacy contact channels.

Examples of enquiries include:

• General privacy questions.
• Requests for clarification.
• Information regarding data collection.
• Questions about cookies.
• Marketing preference enquiries.
• Account privacy concerns.
• Security-related questions.

Privacy Rights Requests

Subject to applicable law, you may contact Allum to exercise your privacy rights, including requests relating to:

• Access to personal information.
• Correction of inaccurate information.
• Updating account details.
• Deletion of eligible personal information.
• Withdrawal of consent.
• Restriction of processing.
• Objection to certain processing activities.
• Data portability where applicable.
• Marketing preferences.
• Cookie preferences.

To protect customer privacy, Allum may require reasonable identity verification before processing such requests.

Security Incident Reporting

If you believe that:

• Your account has been compromised.
• Unauthorized access has occurred.
• You have received suspicious communications claiming to be from Allum.
• Your personal information may have been exposed.
• You suspect fraud involving your Allum account.

you should notify Allum as soon as reasonably possible through our official customer support or security contact channels.

Prompt reporting helps us investigate potential incidents and protect customer accounts.

Complaints

If you believe that Allum has processed your personal information in a manner inconsistent with this Privacy Policy or applicable law, you may submit a written complaint.

Your complaint should, where possible, include:

• Your full name.
• Registered email address.
• Contact information.
• Description of the concern.
• Relevant account or order details.
• Supporting documentation where available.
• The resolution you are seeking.

We will review complaints fairly, objectively and in accordance with applicable legal requirements.

Regulatory Authorities

Subject to applicable law, you may also have the right to submit complaints directly to:

• Data protection authorities.
• Privacy regulators.
• Consumer protection authorities.
• Other competent governmental agencies.

Nothing contained in this Privacy Policy limits your statutory rights to seek available legal remedies.

Response Time

Allum will make commercially reasonable efforts to acknowledge and respond to legitimate privacy requests within the timeframes required by applicable law.

Response times may vary depending upon:

• Identity verification requirements.
• Request complexity.
• Applicable legal obligations.
• Technical feasibility.
• Volume of requests received.
• Regulatory requirements.

Where additional time is permitted by law, we will inform you where appropriate.

Identity Verification

Before processing requests involving personal information, Allum may require reasonable verification of your identity.

Verification methods may include:

• Email verification.
• Mobile verification.
• Account authentication.
• Identity confirmation.
• Additional supporting documentation where appropriate.

Verification is intended to protect customers against unauthorized disclosure of personal information.

Updates to Contact Information

Allum reserves the right to update its:

• Customer support channels.
• Privacy contact information.
• Business addresses.
• Email addresses.
• Telephone numbers.
• Office locations.
• Operating hours.
• Communication methods.

The most current contact information will always be published on our official website.

Official Contact Details

• *Allum**

• *Website:** [https://www.allum.in](https://www.allum.in) *(replace with your official website if different)*

• *Customer Support Email:** [support@allum.in](mailto:support@allum.in)

• *Privacy Email:** [privacy@allum.in](mailto:privacy@allum.in)

• *Legal Email:** [legal@allum.in](mailto:legal@allum.in)

• *Business Email:** [business@allum.in](mailto:business@allum.in)

If you appoint a **Data Protection Officer (DPO)** or **Grievance Officer** in the future, their name, designation, contact details and office address may also be published here in accordance with applicable legal requirements.

Entire Privacy Policy

This Privacy Policy, together with the Terms and Conditions, Cookie Policy, Shipping Policy, Return & Refund Policy, Cancellation Policy and any other policies expressly incorporated by reference, constitutes the complete privacy framework governing the collection, use, disclosure, storage, transfer and protection of personal information by Allum.

If any provision of this Privacy Policy is determined to be invalid or unenforceable under applicable law, the remaining provisions shall continue in full force and effect.

By accessing or using the Services, creating an account, placing an order or otherwise interacting with Allum, you acknowledge that you have read, understood and agree to the practices described in this Privacy Policy, subject always to your rights under applicable privacy and data protection laws.