CONFIDENTIALITY DECLARATION

----

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

When you make a purchase from our store, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address, and email address.

When you browse our store, we also automatically receive your computer's Internet Protocol address (IP address), which allows us to obtain more details about the browser and operating system you are using.

Email Marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.


ARTICLE 2 - CONSENT

How do you obtain my consent?

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery, or return a purchase, we assume that you consent to our collecting your information and using it for your purposes. this end only.

If we ask you to provide your personal information to us for another reason, for example for marketing purposes, we will ask you directly for your explicit consent, or we will give you the opportunity to refuse.


How can I withdraw my consent?

If after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information or disclosing it, you can notify us by contacting us at contact@karma-yoga-shop.com or by mail to:

GM PUBLISHING LLC
2915 OGLETOWN ROAD, #2771
NEWARK, DE 19713
USA

ARTICLE 3 – DISCLOSURE

We may disclose your personal information if the law requires us to do so or if you violate our General Conditions of Sale and Use.


ARTICLE 4 – SHOPIFY

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in the general Shopify application. Your data is stored on a secure server protected by a firewall.

Payment:

If you make your purchase through a direct payment gateway, then Shopify will store your credit card information. This information is encrypted in accordance with the payment card industry's data security standard (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is finalized, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the joint effort of companies such as Visa, MasterCard, American Express and Discover.

PCI-DSS requirements ensure the secure processing of credit card information by our store and its service providers.

For more information, please see the Shopify Terms of Service here or the Privacy Policy here.


ARTICLE 5 – SERVICES PROVIDED BY THIRD PARTIES


Generally, the third-party providers we use will only collect, use and disclose your information to the extent necessary to carry out the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions.

With respect to these providers, we recommend that you read their privacy policies carefully so that you can understand how they will treat your personal information.

Please remember that certain suppliers may be located or have facilities located in a different jurisdiction than you or us. So if you decide to pursue a transaction that requires the services of a third-party vendor, then your information may be governed by the laws of the jurisdiction in which that vendor is located or the laws of the jurisdiction in which its facilities are located.

For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your information that was used to complete the transaction may be disclosed under United States legislation. United States, including the Patriot Act.

Once you leave our store site or are redirected to a third party's website or application, you are no longer governed by this Privacy Policy or the General Conditions of Sale and Use. Use of our website.

Connections

You may be required to leave our website by clicking on certain links on our site. We assume no responsibility for the privacy practices practiced by these other sites and recommend that you read their privacy policies carefully.


ARTICLE 6 – SECURITY

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, it will be encrypted through the use of SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 7 - TYPES OF DATA COLLECTED
PERSONAL DATA

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
* E-mail address
* Address
* First and last name
* Cookies and usage data

We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any or all of these communications by following the unsubscribe link or instructions provided in the emails we send.

USAGE DATA
We may also collect information about how our Services are accessed and used (“Usage Data”). This Usage Data may include information such as your computer's IP address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, time spent on these pages, device identifier and other diagnostic data.


TRACKING COOKIE DATA
We use cookies and similar tracking technologies to track activity and maintain certain information.
Cookies are files with a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are tags, tags and scripts to collect and track information and improve and analyze our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use all the features of our service.
Examples of cookies we use:
* Session cookies. We use session cookies to operate our service.
*Cookies preferred. We use preference cookies to remember your preferences and various settings.
* Security cookies. We use security cookies for security purposes.

USE OF DATA
We use the collected data for various purposes:
* To provide and maintain our service
* To notify you of changes to our service
* To provide customer support
* To collect analytics or valuable information so that we can improve our service
* To monitor the use of our service
* To detect, prevent and resolve technical problems
* To provide you with news, special offers and general information about other goods, services and events we offer that are similar to those you have already purchased or inquired about, unless you have opted not to receive this information

SECTION 8 - DATA SECURITY

The security of your information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. Although we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

SECTION 9 - LEGAL BASIS FOR PROCESSING PERSONAL DATA UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)

If you are a member of the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this privacy policy depends on the personal data we collect and the specific context in which we collect it.

WE MAY PROCESS YOUR PERSONAL DATA BECAUSE:

* We must contract with you or ship purchased products to you.
*You have given us permission to do this
* The processing is in our legitimate interests and is not overridden by your rights
*For payment processing
* To comply with the law

DATA RETENTION

*We will only retain your personal data for as long as necessary for the purposes described in this privacy policy.
*We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.


SECTION 10 - YOUR DATA PROTECTION RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)

If you reside in the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to enable you to correct, modify, delete or limit the use of your personal data.

If you would like to be informed about what personal data we hold about you and if you would like to delete it from our systems, please contact us.

IN CERTAIN CIRCUMSTANCES, YOU HAVE THE FOLLOWING DATA PROTECTION RIGHTS:

* The right to access, update or delete information we have about you. Whenever possible, you can access, update or request deletion of your personal data directly in the settings section of your account. If you cannot perform these actions yourself, please contact us to help you.
* The right of rectification. You have the right to have your information corrected if this information is inaccurate or incomplete.
* The right to object. You have the right to object to the processing of your personal data.
* The right of restriction. You have the right to request that we restrict the processing of your personal information.
* The right to data portability. You have the right to receive a copy of the information we have about you in a structured, machine-readable, commonly used format.
* The right to withdraw consent. You also have the right to withdraw your consent at any time where we have relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a data protection authority about our collection and use of your personal data. For further information, please contact your local data protection authority in the European Economic Area (EEA).

ARTICLE 11 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, and that you have given us your consent to allow any of your minor dependents to use this site. website.


SECTION 12 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon posting on the Website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances we disclose it, there is reason to do so.

If our store is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Officer at contact@karma- yoga-shop.com or by mail to:

GM PUBLISHING LLC
2915 OGLETOWN ROAD, #2771
NEWARK, DE 19713
USA

----