Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how KANHA SUTRA, operated by K-Life Enterprise, Inc. ("Company," "we," "our," or "us"), collects, uses, stores, shares, and protects your personal information when you visit our website at https://kanhasutra.com/ (the "Site"), use our services, or interact with us online or in connection with purchases of our KANHA SUTRA products.

We are committed to protecting your privacy in compliance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Washington My Health My Data Act, and all other applicable state and federal privacy laws. This Policy applies to residents of all states in which we sell our products.

By using our website, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use our website or services.

NOTICE AT COLLECTION: Personal information is collected at or before the point of data collection, including at account creation, checkout, and when you subscribe to marketing communications. This Policy constitutes our Notice at Collection as required by the CPRA.

Because our products are marketed for mood, emotional well-being, and connection, information about the products you view or purchase may be treated as consumer health data under the laws of certain states. Our handling of that information is described in our separate Consumer Health Data Privacy Policy, which is available through a dedicated link on our homepage.

Who We Are

Legal Entity: K-Life Enterprise, Inc., operating as KANHA SUTRA

Business Address: 5062 Lankershim Blvd #137, North Hollywood, CA 91601

Website: https://kanhasutra.com/

Contact Email: info@kanhasutra.com

Privacy Requests: privacy@kanhasutra.com

Contact Phone: (866) 988-7405

Information We Collect

We collect personal information necessary to operate our business, process orders, provide customer support, conduct analytics, and comply with applicable legal requirements. We may collect the following categories of personal information:

Identifiers

• Full name
• Email address
• Telephone number
• Billing and shipping address
• IP address and device identifiers

Account Information

• Username and account credentials (passwords are stored in encrypted form)
• Account preferences and settings

Commercial Information

• Products purchased or considered
• Order history and transaction records
• Subscription status, delivery frequency, and subscription history
• Payment information (processed by third-party payment processors; we do not store full payment card details)

Internet and Network Activity Data

• Browsing and search history on our website
• Cookies, web beacons, and similar tracking technologies
• Device type, browser type, and operating system
• Referring URLs and pages visited

Geolocation Data

• General location data derived from IP address, used to determine shipping eligibility and applicable taxes
• We do not collect precise geolocation data

Marketing and Communications Data

• Preferences for receiving marketing communications
• Records of communications consent and opt-in/opt-out status
• Product reviews, ratings, photographs, and other content you submit

Age Confirmation

Our Site requires you to confirm that you are at least 18 years of age. We record the fact that this confirmation was given. We do not collect or store government-issued identification documents or identification numbers for age verification purposes.

Sensitive Personal Information

We may collect the following categories of Sensitive Personal Information, as defined under the CPRA, solely to the extent necessary for the purposes described in this Policy:

• Account log-in credentials (encrypted)
• Information that may be characterized as concerning health or sex life, to the extent the products you view or purchase permit such an inference to be drawn

We do not use or disclose Sensitive Personal Information for purposes beyond those permitted by law. We do not process Sensitive Personal Information for the purpose of inferring characteristics about you, and we do not use it for targeted advertising or to build audience segments. You have the right to limit our use and disclosure of Sensitive Personal Information. See the rights section below for instructions on how to exercise this right.

How We Use Your Personal Information

We use the personal information we collect for the following purposes:

• To process, fulfill, and deliver your orders
• To confirm that you meet the minimum age requirement for our Site
• To create and administer your account and any subscription you enroll in
• To communicate with you about your order status, subscription, account, and customer support inquiries
• To send subscription renewal reminders and other notices required by law
• To send promotional communications, offers, and marketing materials, but only with your consent where required
• To publish and moderate product reviews and other content you choose to submit
• To improve our website, services, products, and user experience
• To conduct analytics and measure the effectiveness of our website and marketing campaigns
• To detect, prevent, and respond to fraud, security threats, and unauthorized access
• To comply with applicable state and federal laws, including reporting serious adverse events to the U.S. Food and Drug Administration as required by 21 U.S.C. Section 379aa-1
• To resolve disputes, enforce our Terms of Service, and protect our legal rights
• To maintain accurate business records for tax, audit, and regulatory compliance purposes

We do not use your personal information to train large language models or other artificial intelligence systems, and we do not sell or share your personal information with third parties for that purpose.

We collect and use personal information only for the purposes described in this Policy and in a manner that is reasonably necessary and proportionate to provide the products and services you request.

How We Share Your Personal Information

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising purposes without offering you the ability to opt out. If this practice ever changes, we will update this Policy and provide a clearly labeled "Do Not Sell or Share My Personal Information" link.

We may share your personal information with the following categories of third parties, solely as necessary for the purposes described in this Policy:

• Payment processors, to securely process transactions
• Shipping and delivery carriers, to fulfill your orders
• Subscription management providers, to administer recurring orders and cancellations
• Analytics service providers, to help us understand website performance
• Marketing platform providers, to deliver communications you have consented to receive
• Review hosting providers, to publish content you choose to submit
• Legal and compliance service providers, including attorneys and accountants
• Law enforcement or regulatory agencies, when required by applicable law, court order, or to protect legal rights
• The U.S. Food and Drug Administration, in connection with mandatory serious adverse event reporting
• Business successors, in connection with a merger, acquisition, or sale of assets, subject to the same privacy protections described in this Policy

We require all third-party service providers to maintain appropriate security measures and to use your personal information only as directed by us and in accordance with applicable law.

California "Shine the Light" Disclosure

Under California Civil Code Section 1798.83, California residents may request information about whether we have disclosed personal information to third parties for those parties' direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. If our practices change, we will update this disclosure accordingly.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website. Cookies are small data files stored on your device that help us improve functionality, analyze usage, and where applicable, deliver relevant content. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the website to function, including shopping cart functionality, session management, subscription management, and recording your age confirmation and privacy choices. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality such as saved preferences and personalization. Disabling these may affect your experience.
• Analytics Cookies: Allow us to understand how visitors use our website, which pages are most visited, and how to improve performance.
• Marketing Cookies: Used to measure the effectiveness of our own marketing campaigns. We do not permit third-party advertising cookies to operate on our product detail pages, cart, or checkout.

You may manage cookie preferences through your browser settings or through our cookie preference center. You may also opt out of analytics tracking through the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

We honor opt-out preference signals, including the Global Privacy Control (GPC). If a valid GPC signal is detected, we will treat it as a request to opt out of the sale or sharing of personal information. We honor these signals from all visitors, regardless of the state in which they reside, and where you are signed in to an account we apply the signal to your account and not only to that browser.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

• Transaction and order records: 7 years, for tax, regulatory, and audit compliance
• Account information: Duration of account plus 2 years following closure
• Subscription consent records: 3 years, or 1 year following termination of the subscription, whichever is longer
• Serious adverse event records: 6 years, as required by 21 U.S.C. Section 379aa-1
• Marketing consent records: Duration of consent plus 3 years
• Customer support records: 3 years from resolution
• Legal hold records: As directed by counsel and applicable law

We periodically review and delete personal information that is no longer necessary for any business or legal purpose.

Data Security

We implement commercially reasonable and industry-standard technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments, and employee training on data handling practices.

While we take reasonable precautions, no security system is impenetrable, and we cannot guarantee the absolute security of your information. In the event of a data breach affecting your personal information, we will notify affected individuals in accordance with California Civil Code Sections 1798.29 and 1798.82 and other applicable state breach notification laws. We will provide notice without unreasonable delay, and within the timeframes required by law.

Third-Party Links and Websites

Our website may contain links to third-party websites, including partner brands, retailers, and social media platforms. We are not responsible for the privacy practices, content, or security of those sites. We encourage you to review the privacy policies of any third-party site you visit. Third-party sites accessed through links on our website are not covered by this Policy.

Age Restrictions and Children's Privacy

Our website and products are intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a person under 18, we will promptly delete it. If you believe we have collected information from a minor, please contact us immediately at privacy@kanhasutra.com.

We do not sell or share the personal information of consumers we know to be under 16 years of age, and we do not process the personal information of consumers aged 13 through 17 for targeted advertising or for sale.

Your Privacy Rights (California Residents)

As a California resident, you have the following rights under the CCPA and CPRA. These rights are described in further detail in our separate CCPA/CPRA Notice.

Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, the categories of sources from which that information was collected, the business or commercial purposes for collection, and the categories of third parties with whom we have shared the information.

Right to Access

You have the right to request a copy of the specific personal information we have collected about you in the preceding 12 months.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law, such as information needed to complete a transaction, comply with a legal obligation, or detect and prevent fraud.

Right to Correct

You have the right to request correction of inaccurate personal information that we maintain about you. Upon receiving a verified request, we will use commercially reasonable efforts to correct the inaccurate information.

Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. We do not currently sell or share personal information as defined under the CPRA. If this changes, we will provide a prominent "Do Not Sell or Share My Personal Information" link on our homepage and in this Policy.

Right to Limit Use of Sensitive Personal Information

You have the right to direct us to limit our use and disclosure of your Sensitive Personal Information to only what is necessary to provide the goods and services you request or as permitted by law. To exercise this right, contact us using the methods below.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny goods or services, charge different prices, or provide a different quality of service based on your exercise of these rights.

Authorized Agents

You may designate an authorized agent to submit CCPA/CPRA requests on your behalf. To do so, you must provide us with a signed written authorization or a valid power of attorney granting the agent permission to act on your behalf. We may also require you to verify your own identity in connection with the request. Authorized agents must submit requests using the contact methods below and include proof of authorization.

Verification and Response

We will verify your identity before processing any request. For most requests, verification involves matching the information you provide against information we have on file. We will respond to verifiable requests within 45 calendar days. If we require additional time, we will notify you and may extend our response by an additional 45 days. Requests may be made through the following channels:

• Email: privacy@kanhasutra.com
• Phone: (866) 988-7405
• Web Form: https://kanhasutra.com/privacy-request
• Mail: K-Life Enterprise, Inc., 5062 Lankershim Blvd #137, North Hollywood, CA 91601

Privacy Rights of Residents of Other States

Residents of states other than California that have enacted comprehensive consumer privacy laws may have rights similar to those described above, including the right to confirm whether we process their personal data, to access and obtain a copy of that data, to correct inaccuracies, to delete personal data, and to opt out of targeted advertising, sale, and certain profiling. Residents of those states may also have the right to appeal a decision we make regarding a request.

We extend the rights described in this Policy to residents of every state in which we sell our products, regardless of whether the law of that state requires it. To exercise any of these rights, use the same contact channels listed above.

If we decline your request, you may appeal our decision by writing to privacy@kanhasutra.com with the subject line "Privacy Request Appeal." We will respond to your appeal within 45 calendar days. If we deny your appeal, you may contact the Attorney General of your state.

Residents of Washington and Nevada should also review our Consumer Health Data Privacy Policy, which describes additional rights applicable to consumer health data.

Financial Incentive Programs

We do not currently operate any loyalty, rewards, or financial incentive programs that involve the collection or use of personal information in exchange for discounts or other benefits. Our subscription program offers a discount on recurring orders, but participation does not require you to provide any personal information beyond what is necessary to fulfill those orders. If we establish a financial incentive program in the future, we will provide a separate financial incentive notice describing the material terms as required by the CCPA and CPRA.

Email, SMS, and Marketing Communications

If you opt in to receive marketing communications from us, you may opt out at any time by clicking the "Unsubscribe" link in any marketing email, replying STOP to any text message, contacting us at info@kanhasutra.com, or calling (866) 988-7405. We will honor email opt-out requests within 10 business days.

We comply with the CAN-SPAM Act. All commercial emails we send will identify us as the sender, include a physical mailing address, and include a clear and functional opt-out mechanism.

If you opt in to receive text messages, message and data rates may apply. Consent to receive marketing text messages is not a condition of purchase. We send marketing text messages only between 8:00 a.m. and 9:00 p.m. in your local time zone. Transactional messages regarding your order or subscription are not marketing messages and will continue after you opt out of marketing.

Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the updated Policy on our website with a revised "Last Updated" date. Material changes will be communicated to registered users via email or through a prominent notice on our website. Your continued use of the website following the posting of changes constitutes your acceptance of the updated Policy. We review this Policy at least once every 12 months.

Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

Email: info@kanhasutra.com

Phone: (866) 988-7405

Website: https://kanhasutra.com/

Mail: K-Life Enterprise, Inc., 5062 Lankershim Blvd #137, North Hollywood, CA 91601

Privacy Requests: privacy@kanhasutra.com

Privacy Request Web Form: https://kanhasutra.com/privacy-request

We aim to respond to all privacy-related inquiries within 30 calendar days.