THIS PRIVACY POLICY IS PUBLISHED AND SHALL BE CONSTRUED IN ACCORDANCE WITH THE PROVISIONS OF APPLICABLE LAWS FOR COLLECTION, USE, STORAGE AND TRANSFER OF SENSITIVE PERSONAL DATA OR INFORMATION. IT IS AN ELECTRONIC RECORD IN THE FORM OF AN ELECTRONIC CONTRACT FORMED UNDER THE APPLICABLE LAWS, THE RULES MADE THEREUNDER AND THE AMENDED PROVISIONS PERTAINING TO ELECTRONIC DOCUMENTS / RECORDS IN VARIOUS STATUTES. THIS PRIVACY POLICY DOES NOT REQUIRE ANY PHYSICAL, ELECTRONIC OR DIGITAL SIGNATURE.

At Hefty Art Inc. (“Hefty”, “we”, “us”, “our”), we are strongly committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) covers your access and use of the website viz. “hefty.art” (“Website” as well as the associated website, content and software (“Services”) for transacting in non-fungible tokens (“NFTs”) and associated purposes.

This Policy explains our information gathering practices in connection with information about you that we receive online through our Services and offline (e.g., via the phone, conferences, and other correspondence). It must be read in conjunction with the Hefty’s Terms of Use. Capitalized terms not defined herein shall have the meaning attributed to them under the Terms of Use. This Policy is a legal and binding agreement between you and Hefty. By clicking on “I agree” while registering on the Website, you agree to be bound by this Policy and Hefty’s Terms of Use. You hereby expressly consent to the processing of your personal information and non-personal information in accordance with this Policy. Your information may be collected, transferred to, and stored by us in some other jurisdiction and by our affiliates and service providers that are based in other countries. Therefore, your personal information may be processed outside of your country. Some countries have implemented transfer restrictions for personal information, in connection with which Hefty takes various measures, including:

• Where required, implementing standard contractual clauses approved by the European Union commission, or similar contractual clauses in other jurisdictions;

• Transferring personal information to countries that regulators deemed to have adequate protections for the treatment of personal information; and

• Where required by law, obtaining your consent to share your personal information outside of your country.

Any critical personal data, as may be notified by the relevant authority, shall only be processed where permitted and shall be transferred outside the territory as may be provided under the applicable data protection laws.

By mere use of or access to our products and/or Services, you expressly consent to our use and disclosure of your information and other information in accordance with this Policy, however, without prejudice to above, you will be required to confirm and provide your consent over an email that you agree to the terms of this Policy and have no objection to the use of the information and data provided by you. This Policy is incorporated into and is subject to the Hefty Terms of Use by reference. You hereby expressly grant your written consent to us through the Website to collect, possess, receive, upload, store, deal with, handle and/or use the personal information. Further, you also hereby grant your written consent to enable the Website and/or its independent service providers to collect non-personal data by placing cookies etc. Once the information is collected, we shall have the right to use the same for the purposes for which it was collected. If you do not agree to the terms of this Policy, please do not use or access our products and/or Services.

This Policy describes the usage of information provided or collected through sites and applications where this Policy is accessible from, and affiliate or third-party sites/platforms through which the Services and/or any of its features may be provided. We follow this Policy in accordance with the applicable laws of the jurisdiction. In some cases, we may provide additional data privacy notices specific to certain features or services. Those notices are to be read in combination with this Policy. Please also keep in observance that our sites and applications may contain links to other sites not owned or controlled by us and we are not responsible for the privacy policy of the said sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your personal information.

• INTRODUCTION

  • This Policy explains when, why and how we collect, store, transfer and use personal information of people who visit our Website or use our Services (“User(s)”), the conditions under which we may disclose your personal information to others, and how we keep your personal information secure. We advise Users to familiarize themselves with our privacy practices.
  • We may change this Policy from time to time. Your continued use of our Services after we make changes is deemed to be acceptance of those changes. Hence, we request you to check the Policy periodically for updates.
  • By accessing or using any of our Services you provide us your consent to the collection, transfer, storage, disclosure, and use of your personal data in accordance with this Policy. This Policy applies when we are acting as a data controller with respect to the personal data of our users. If you do not agree with the terms and conditions of this Policy, we advise you to refrain from accessing or using the Services.
  • Use of the Website and the Services are governed by this Policy and associated Terms of Use, which shall be deemed to be incorporated into this Policy and shall be read in addition to this Policy. In the event of any inconsistency or ambiguity arising between the Terms of Use and the terms of this Policy, the provisions of this Policy shall prevail to the extent of such inconsistency or ambiguity. Your use of the Services and any dispute over privacy are and will be governed by this Policy.
  • The Services provided by Hefty are only limited to the people who have attained the age of majority. Thus, this Policy is not applicable to minors or individuals who are not competent to enter into a contract. You therefore acknowledge that you have attained the age of majority and are competent to enter into a contract, Hefty shall not be responsible for you and has no control over any information submitted by you for the purpose of using the Services.

• PERSONAL DATA WE COLLECT AND HOW WE COLLECT IT

  • INFORMATION YOU GIVE TO US
    • When you make an account on the Website to use our Services (“Account”) or otherwise contact Hefty, we collect your account data depending on your use our Services which may include personal identification information such as your name, date of birth, age, nationality, gender, signature,  phone number, physical mailing and/or billing address, and/or email address (business or personal), and formal identification information such as Tax ID number, passport number, driver's license details, national identity card details, photograph identification cards, and/or visa information (collectively, “Account Data”).

The Account Data may be processed for the purposes of providing our Services to you, satisfying anti-money laundering and know-your-customer obligations, and ensuring the security of the Services, maintaining back-ups of our databases and communicating with you. This information is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested Services.

• We process financial information such as bank account details, credit card, cryptocurrency wallet details or other information when you use our Services in order to facilitate the processing of payments (“Personal Data”). The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.

• We may automatically process information contained in or relating to any communication that you send to us (“Correspondence Data”). The Correspondence Data may include the communication content and metadata associated with the communication. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.

• We may process information included in your personal profile, which may include your location, time zone, website and any other such related data (“Profile Data”). The Profile Data may be processed for the purposes of providing you a better user experience when using the Services. The legal basis for this processing is your consent.

• INFORMATION WE AUTOMATICALLY COLLECT FROM YOUR USE OF THE SERVICES. 

When you use our Services, we may automatically process information about your computer and internet connection (including your unique device identifiers, operating system, browser type and domain name), your mobile carrier, device information (including device and application IDs), search terms, web pages that you view, the additional links you click on, cookie information, your activity on our Website as well as information about the timing, frequency and pattern of your use of our Services, information about to the transactions you make on our Services, such as the name of the recipient, your name, the amount and timestamp, your interactions with our customer support such as the date, time, and reason for contacting us, transcripts of any chat conversations; and if you call us, your phone number and call recordings, advertisement identifiers such as identifier for advertising, google advertising identifier, and data related to your interaction with the advertisements that are served on the Website and/or Services (“Service Data”). The Service Data is processed for the purpose of providing our Services. We may generate reports and analysis based on the Service Data for internal analysis, monitoring and marketing decisions. The legal basis for this processing is the adequate performance of the contract between you and us, to enable us to comply with legal obligations and our legitimate interest in being able to provide and improve the functionalities of the Services.

We may also collect information about your activity on our Services which is not personally identifiable with you but may be linked to your account information including but not being limited to, your Account including but not being limited to, your username, the NFTs you have viewed, bid on or purchased. 

From time to time, we may obtain information about you from third party sources as required or permitted by applicable law, such as public databases, credit bureaus, ID verification partners, resellers and channel partners, joint marketing partners, and social media platforms. ID verification partners use a combination of government records and publicly available information about you to verify your identity. Such information includes your name, address, job role, public employment profile, credit history, status on any sanction’s lists maintained by public authorities, and other relevant data. We obtain such information to comply with our legal obligations, such as anti-money laundering laws. The legal basis for the processing such data is compliance with legal obligations.

• THIRD-PARTY WALLETS
  • To use our Services, you may be required to use third-party wallets in order to facilitate transactions on blockchains. Your interactions with any third-party wallet providers are governed by the applicable terms of use and privacy policy of such third party. We urge you to familiarize yourself with the terms of use and privacy policy of such third party.
• DISCLOSURE OF PERSONAL DATA
  • We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
  • We may disclose Service Data to a variety of third-party service providers insofar as reasonably necessary to improve the functionalities of the Services and customise our user experience.
  • We may share aggregated data (information about our users that we combine together so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.
  • In the event of a dispute in P2P transaction, we may disclose some of your Personal Data with the counterparty to such transaction to the extent we deem required, in our discretion, to resolve any dispute or to facilitate the transaction.
  • Further, we may disclose your personal data if we believe that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; or in order to protect your vital interests or the vital interests of another natural person; to protect the safety or integrity of the Services, or to explain why we have removed content or accounts from the Services; or to address fraud, security, or technical issues; or to protect our rights or property or the rights or property of those who use the Services.
  • We offer individuals the opportunity to choose (opt out) whether their personal information is: (i) to be disclosed to a third party; or (ii) to be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals. In order to opt out from disclosure of your personal information, please write to us at [email protected].
• COOKIES
  • Our Services use cookies and tracking technology depending on the features offered. Cookies are small files that are placed on your device (either temporarily or until manually deleted by you) in order to distinguish you from other users of our Services. We also use local storage to provide you with a customised experience when you browse our Website and to improve advertising. This also allows us to improve the Website and our Services. Third parties may also use such cookies and tracking technology if you interact with any content provided by them through our Website, however we endeavour to identify these cookies before they are used and allow you to accept or deny them.
  • Cookie and tracking information collected by us may be shared with third-parties which directly support our advertising/promotional activities to deliver advertisements that relate to User’s interest, and are involved in development/updating of our Website.
  • Commonly used browsers are set up to automatically accept cookies however you can modify your device’s settings to either alert you when you receive cookies or block cookies. If you disable/ block cookies, it may affect the performance and functionality of our Services and may also restrict your experience. If you use different devices to access our Services, you would be required to modify each device’s settings individually to suit your cookie preferences.
  • Please also keep in observance that Services may contain links to other websites not owned or controlled by us. Third parties may also use such cookies and tracking technology if you interact with any content provided by them through our Services. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your information. We do not control or take responsibility for the use of cookies by such third parties.
• TRANSFER OF PERSONAL DATA

  We may need to transfer or share your personal data to third parties outside of the territory of the country you reside in, especially to our affiliates and subsidiaries, for various reasons including for regulatory compliance. In such circumstances where we may need to transfer or share your personal data to third parties outside of the territory of the country you reside in (including our affiliates and subsidiaries), we will ensure that such transfers are compliant with the requirements under applicable laws. 

  • ASSIGNMENT
    • You shall not assign or transfer any right or obligation that has accrued to you under this Policy and any attempt by you to assign or transfer such rights and obligations, shall be null and void.
    • We may assign, novate, or transfer any or all rights and obligations that accrued in our favour under the Policy, at our sole discretion, to our subsidiaries, affiliated entities, or any other third party, especially in order to comply with regulatory requirements in India, and for our users, to offer them a full suite of services in globally through our subsidiaries or affiliates
  • DATA SECURITY
    • We have implemented measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
    • We use commercially reasonable security practices and procedures industry practices and procedures designed to help keep your personal information safe and secure. Although we strive to protect your personal information, we cannot guarantee the security of your data while it is being transmitted to our Service; any transmission is at your own risk. We will also ensure, on a commercially reasonable efforts basis, that any agent or third party that we employ complies with the same security standards as we do for the protection of your personal information.
    • Steps taken to ensure data security:
      • All the user information can only be accessed by authorized users;
      • Users need to authenticate themselves with a username-password combination; and
      • All data is hosted on AWS servers.
    • Unfortunately, the transmission of information via public networks such as the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee or absolutely ensure the security of your personal data transmitted through the Services. Any transmission of personal data is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Services.
  • DATA RETENTION
    • We retain your personal information as long as necessary for providing you the services and as per the lawful basis of processing and to comply with our legal obligations. In particular, when determining how long we retain personal data, we take into account how long we need it to:
      • Maintain business records for analysis and/or audit purposes;
      • Comply with record retention requirements under the law;
      • Defend or bring any existing or potential legal claims; and
      • Deal with any complaints regarding the Website/any services provided on the Website.
    • At the end of the retention period your personal data will be anonymized.
    • If you no longer want us to use your information, then you can request that we erase your personal information and close your Account. Erasure of your information will result in your subscription being terminated without any refunds. We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend an Account for fraud or safety reasons, we may retain certain information from that account to prevent that user from opening a new account in the future.
    • We make no warranties and shall not be liable regarding non-availability or non-retention of any information and/or data provided by you beyond the deletion of your account.
  • YOUR RIGHTS WITH REGARD TO PERSONAL DATA
    • You may deal with your personal data available with us in the following ways: 
      • You may correct, amend, add or update personal data from your account at any time by logging in to your account. 
      • You are free to remove or delete your content from your account at any point in time, provided, however, Hefty may retain all or some of your data as per applicable law.
      • Copies of public content may be retained indefinitely in our systems, including in cached and archived pages of our Website, or if other users have copied or saved that information.
      • You may also, at any time while availing the Services or otherwise, withdraw the consent given earlier to Hefty provided that such withdrawal request is sent in writing to [email protected]. However, please note that in the event you withdraw the consent granted to us, we shall be unable to provide you with Services.
  • COMMUNICATION

    We may periodically send you free newsletters and promotional communications. When you receive newsletters or promotional communications from us, you may “opt-out” of these emails by following the unsubscribe instructions provided in the email you receive or by contacting us at [email protected]. Despite your indicated email preferences, we may send you notices of any updates to our Privacy Policy, Terms of Use or other administrative emails.

    • GRIEVANCE OFFICER
      • If you have queries about our data protection processes and practices, or wish to request access to and/or make corrections to your personal data in our possession or under our control, or wish to withdraw your consent to our collection, use or disclosure of your personal data, please submit a written request (with supporting documents, (if any) to our Grievance Officer.
      • The name and contact details of the Grievance Officer are provided below:

        Grievance Officer: Shreevar Jhunjunwala

        Contact details: [email protected]

        • Our Grievance Officer shall endeavour to respond to you within 30 days of receiving your submission. Please note that if you withdraw your consent to any or all use or disclosure of your personal data, depending on the nature of your request, we may not be in a position to continue to provide our Services or products to you or administer any contractual relationship in place. Such withdrawal may also result in the termination of any agreement you may have with us. Our legal rights and remedies are expressly reserved in such event. We may charge you a fee for processing your request for access. Such a fee depends on the nature and complexity of your access request. Information on the processing fee will be made available to you.
        • GOVERNING LAW
          • This Privacy Policy and your use of the Website shall be governed and construed in accordance with the laws of United States of America and other applicable laws. You agree to submit to the exclusive jurisdiction of the courts in Delaware, United States of America.