Privacy Policy

PRIVACY POLICY

www.viren.com

Effective date: 1^st March 2024

1. Introduction

Welcome to www.viren.com. Protecting your privacy is of paramount importance to us. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information through www.viren.com (herein referred to as "we", "us", "our", and "Website") and the services we provide. By accessing and using our Website, you consent to the data practices described in this policy. Our procedures are designed in compliance with the United Arab Emirates' Privacy Laws, the General Data Protection Regulation (GDPR) for our European Union consumers, relevant regulations of the Gulf Cooperation Council (GCC), and other applicable international data protection laws.

2. Definitions

In the context of this policy, certain terms are used with specific meanings:

• "Personal Data" refers to any information that can be directly or indirectly used to identify an individual.
• "Processing" encompasses any operation performed on Personal Data, whether automated or not, such as collection, use, storage, or disclosure.
• "Data Subject" means the identified or identifiable person to whom the Personal Data refers.
• "Controller", "Processor", and "Supervisory Authority" have the meanings given to them in the GDPR.

3. Data Controller Information

Viren International Trading L.L.C, a company registered and operating under the laws of the United Arab Emirates, with its headquarters in Dubai, is the Data Controller responsible for your personal data collected via the Website.

4. Principles of Data Processing

Our data processing activities are governed by principles of legality, fairness, and transparency. We process personal data lawfully, adequately, and in a manner that ensures appropriate security. We collect data for specified, explicit, and legitimate purposes, ensuring it is not processed further in a way incompatible with those purposes.

5. Personal Data Collected

We may collect various types of Personal Data, including, but not limited to:

• Contact details such as name, email address, telephone number, and shipping address.
• Account information for user registration and management.
• Transaction and payment data for processing purchases.
• Interaction data from your use of www.viren.com, including preferences, feedback, and survey responses.

6. Purpose of Data Collection

Personal Data is collected to:

• Facilitate the provision of requested products and services.
• Improve our Website and tailor it to user preferences.
• Conduct analytics and market research.
• Comply with legal obligations and regulatory requirements across jurisdictions, including but not limited to, the UAE, GCC countries, and the EU under GDPR.

7. Legal Basis for Processing

Our processing of your Personal Data is justified on several legal bases, including:

• Your consent, where required, for specific processing activities.
• The necessity to perform a contract with you or to take steps at your request before entering into a contract.
• Our legitimate interests in conducting and managing our business, where such interests do not override your rights and interests.
• Compliance with our legal obligations under applicable laws.

8. Data Collection Methods

We collect Personal Data through various means, including:

• Directly from you when you provide it to us via forms, email communications, or through interaction with our Website.
• Indirectly through your activities on www.viren.com, using technologies like cookies, and through external sources like social media platforms.

9. Data Recipients and Sharing

Viren International Trading L.L.C respects your privacy and is committed to protecting your personal data. The data collected may be shared with specific third parties, including our service providers, partners, and legal authorities when required. Such sharing will be conducted in strict adherence to applicable privacy laws, including the UAE's Federal Decree-Law No. 45 of 2021, GDPR provisions for EU residents, and relevant GCC privacy regulations. We ensure that all third parties respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

10. International Data Transfers

Given our global operations, personal data we collect may be transferred to, and stored at, a destination outside the UAE, including jurisdictions that may not provide the same level of data protection as your home country. We will take all necessary steps to ensure that your data is treated securely and in accordance with this privacy policy and applicable data protection laws, including the GDPR for transfers affecting EU residents. This includes implementing the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and third-party providers, and ensuring any transfer complies with UAE and GCC data protection legislation.

11. Data Security Measures

www.viren.com takes the security of your personal data seriously. We have implemented appropriate technical and organizational measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, or disclosure. These measures take into account the state of the art, the costs of implementation, the nature of the data, and the risk of processing. Despite our efforts, no security measures are completely impenetrable, and we cannot guarantee the security of data transmitted to or stored on our site.

12. Data Retention Policy

Your personal data will be retained only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

13. Rights of Data Subjects

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include the right to access, correct, erase, object to processing, and request the restriction of processing your personal data, as well as the right to data portability. Where the processing of your personal data is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

14. Exercising Your Rights

If you wish to exercise any of the rights set out above, please contact us at info@viren.com. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made several requests.

15. Cookies and Tracking Technologies

www.viren.com uses cookies and similar tracking technologies to track the activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Detailed information on the cookies we use and the purposes for which we use them are set out in our Cookie Policy.

16. Third-Party Websites and Services

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

17. Children’s Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect data relating to children. We recognize the importance of protecting the privacy and safety of children and will take specific steps to protect their personal information in accordance with applicable laws. If we learn that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

18. Updates to the Privacy Policy

Viren International Trading L.L.C reserves the right to update and amend this Privacy Policy at any time to reflect changes in our practices, service offerings, or legal or regulatory requirements. When we make changes, we will revise the "Effective Date" at the top of this policy and post the updated policy on our website. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting the personal information we collect. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

19. Data Protection Officer (DPO)

To ensure the highest level of commitment to data privacy and protection, we have appointed a Data Protection Officer (DPO). Our DPO is responsible for overseeing our data protection strategy and its implementation to ensure compliance with GDPR requirements and other relevant data protection laws. For any inquiries regarding our privacy practices or the information we hold about you, please contact our DPO at info@viren.com.

20. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and any applicable regulator of a breach when we are legally required to do so. Our notification will contain information about what happened and what actions we are taking to ensure data security and mitigate any potential adverse effects on the data subjects.

21. Regulatory Authority

If you have any concerns about our use of your personal information, you have the right to lodge a complaint with the relevant supervisory authority. For data subjects in the UAE, this is the UAE Data Protection Authority. EU residents may direct complaints to their respective data protection supervisory authority in their country.

22. Cross-Border Data Transfer Compliance

Our compliance with cross-border data transfer regulations involves implementing safeguards such as Standard Contractual Clauses approved by the European Commission and ensuring adherence to the legal frameworks for data protection in the jurisdictions we operate. These measures are designed to ensure that your data receives an adequate level of protection whenever it is transferred outside of your jurisdiction.

23. Contact Information

For any questions, concerns, or comments about this Privacy Policy or our privacy practices, please contact us at info@viren.com. We welcome your feedback and are committed to addressing any concerns you may have regarding the privacy and security of your personal information.

24. Effective Date

This Privacy Policy is effective as of 1^st March 2024. Any changes to this policy will be communicated directly on this page, so we encourage you to review it periodically.