PRIVACY POLICY

Effective Date: September 2, 2026
Last Updated: September 2, 2026

Vismaya by Shivani LLC ("Vismaya," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use our website, purchase our products, create an account, communicate with us, subscribe to our marketing communications, interact with our advertisements, or otherwise use our services (collectively, the "Services").

Our current operations are based in the United States. This Privacy Policy applies to customers and visitors in the United States and also describes how we will address privacy requirements in the European Economic Area ("EEA"), United Kingdom ("UK"), Switzerland, Canada, and other jurisdictions if and when those laws apply to our activities. We are not currently operating a dedicated EU or UK business presence. If we begin targeting customers in those regions, we will review and update this Policy and our website settings before launch as required by applicable law.

1. DATA CONTROLLER

The entity responsible for your personal information is:

Vismaya by Shivani LLC
111 Penn Street Suite 7A&B
El Segundo, CA 90245
Privacy Officer: Shivani Mehrotra
Email: info@vismaya.com
Telephone: 1-888-VISMAYA (1-888-847-6292)

If applicable law requires Vismaya by Shivani LLC to appoint a Data Protection Officer ("DPO") or an EU/UK representative, the relevant contact information will be provided here or through our privacy-rights process.

EU Representative: To be designated and provided here if and when required under applicable law before commencing applicable European sales.

UK Representative: To be designated and provided here if and when required under applicable law before commencing applicable UK sales.

We will update this section before commencing European sales if an EU or UK representative is legally required.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with us.

Information You Provide Directly

We may collect:

• First and last name;

• Email address;

• Telephone number;

• Billing address;

• Shipping address;

• Account information;

• Login credentials;

• Order and transaction information;

• Products purchased, returned, exchanged, or considered;

• Payment-related information;

• Customer service communications;

• Information submitted through contact forms;

• Reviews, comments, photographs, testimonials, or other content you voluntarily provide;

• Marketing preferences;

• Information provided in connection with promotions, contests, surveys, or similar activities; and

• Other information you voluntarily provide.

When you purchase from us, we may collect the information necessary to process, fulfill, deliver, and support your order.

2A. CALIFORNIA NOTICE AT COLLECTION

California residents are entitled to receive notice about the categories of personal information we collect, the purposes for which we collect and use that information, whether certain information is sold or shared, applicable retention criteria, and certain rights concerning its use.

Vismaya may collect the following categories of personal information, depending on how you interact with our Services:

• Identifiers, such as name, email address, telephone number, billing address, shipping address, account information, and IP address;

• Commercial information, such as products purchased, returned, exchanged, or considered and transaction history;

• Internet or other electronic network activity, such as browsing history, pages viewed, products viewed, searches, links clicked, and interactions with our website;

• Geolocation information, such as approximate geographic location;

• Inferences, such as preferences and interests derived from your interactions with our Services; and

• Other categories of personal information described in this Privacy Policy.

We collect and use this information for purposes including processing and fulfilling orders, providing customer service, maintaining accounts, operating and improving our website, analytics, security and fraud prevention, marketing, advertising, personalization, and measuring advertising performance.

Where permitted by applicable law, certain personal information may be disclosed to service providers, advertising partners, analytics providers, social media platforms, and other third parties as described in this Privacy Policy. Certain disclosures to advertising and social media providers may constitute "sharing" for cross-context behavioral advertising under California law.

Personal information is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, or as otherwise required or permitted by law. The criteria used to determine retention periods are described in Section 31, Data Retention.

California residents may have rights to request access, correction, deletion, and portability of their personal information and may have the right to opt out of the sale or sharing of personal information and certain targeted advertising. These rights are described in Sections 24 and 25.

You may exercise applicable privacy choices through our Your Privacy Choices / Do Not Sell or Share My Personal Information mechanism or by contacting us using the information in Section 24.

3. PAYMENT INFORMATION

Payments may be processed through Shopify Payments and/or other third-party payment providers.

Payment information may be collected and processed directly by the applicable payment provider.

We do not intentionally retain complete payment card numbers where payment information is processed and stored by a third-party payment provider.

Payment providers may process information in accordance with their own privacy policies and applicable contractual arrangements.

4. INFORMATION COLLECTED AUTOMATICALLY

When you use our website, we and our service providers may automatically collect information including:

• IP address;

• Browser type and version;

• Operating system;

• Device type;

• Device identifiers;

• Approximate geographic location;

• Referring URLs;

• Pages viewed;

• Products viewed;

• Links clicked;

• Search activity;

• Browsing activity;

• Session information;

• Cookie identifiers;

• Advertising identifiers;

• Interactions with advertisements;

• Information concerning purchases or conversions; and

• Other technical or usage information.

We use this information for website operation, analytics, security, fraud prevention, personalization, advertising, marketing measurement, and service improvement.

5. INFORMATION FROM THIRD PARTIES

We may receive personal information from third parties, including:

• Shopify;

• Payment processors;

• Shipping and fulfillment providers;

• Advertising platforms;

• Analytics providers;

• Social media platforms;

• Email marketing providers;

• Customer service providers;

• Fraud prevention providers;

• Business partners;

• Publicly available sources; and

• Other service providers.

6. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes.

Order and Service Fulfillment

We use information to:

• Process orders;

• Process payments;

• Ship products;

• Provide returns and refunds;

• Maintain customer accounts;

• Provide customer support;

• Communicate about transactions; and

• Provide requested Services.

Website Operation

We use information to:

• Operate our website;

• Maintain security;

• Troubleshoot problems;

• Improve functionality;

• Personalize experiences;

• Understand website usage; and

• Develop and improve our Services.

Marketing

Subject to applicable law and your preferences, we may use information to:

• Send marketing emails;

• Send promotional communications;

• Send product announcements;

• Send abandoned cart communications;

• Provide product recommendations;

• Measure marketing performance;

• Create marketing audiences;

• Conduct remarketing;

• Provide personalized advertising; and

• Measure advertising conversions.

Analytics

We use information to understand:

• Website traffic;

• Customer behavior;

• Product interest;

• Campaign performance;

• Website performance; and

• Business trends.

Security and Fraud Prevention

We may process information to:

• Detect fraud;

• Prevent unauthorized activity;

• Secure our website;

• Authenticate accounts;

• Investigate suspicious activity; and

• Protect our customers and business.

Legal and Compliance

We may process information to:

• Comply with applicable law;

• Respond to lawful governmental requests;

• Enforce agreements;

• Establish, exercise, or defend legal claims; and

• Protect our rights, property, and safety.

7. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, web beacons, tags, scripts, SDKs, local storage, and similar technologies.

These technologies may be used for:

• Essential website functions;

• Shopping cart and checkout;

• Authentication;

• Security;

• Analytics;

• Personalization;

• Advertising;

• Remarketing;

• Conversion measurement; and

• Marketing attribution.

Essential Technologies

These technologies are necessary to operate requested website functionality.

Analytics Technologies

These technologies help us understand website usage and performance.

Advertising Technologies

These technologies may be used to:

• Create audiences;

• Measure advertising;

• Conduct remarketing;

• Personalize advertising;

• Measure conversions; and

• Optimize campaigns.

Where applicable law requires consent before nonessential cookies or similar technologies are used, we will request consent before activating them.

You may manage your cookie preferences through our cookie preference mechanism where available.

Shopify currently provides customer privacy tools, including cookie banners and consent management, but Shopify also states that manually installed third-party pixels or cookies may require additional consent configuration.

8. GOOGLE ANALYTICS

We may use Google Analytics to understand how visitors use our website.

Information may include:

• Pages visited;

• Traffic sources;

• Device information;

• Browser information;

• Approximate location;

• Interactions with our website;

• Advertising or conversion information; and

• Other usage information.

Where required by applicable law, Google Analytics will operate only after obtaining the required consent.

9. GOOGLE ADVERTISING

We may use Google Ads, Google remarketing, conversion tracking, enhanced conversions, and related advertising technologies.

These technologies may be used for:

• Advertising;

• Remarketing;

• Audience creation;

• Conversion measurement;

• Attribution;

• Campaign optimization; and

• Personalized advertising.

For customers in jurisdictions requiring consent, advertising technologies will be subject to the applicable consent mechanism.

10. META / FACEBOOK / INSTAGRAM

We may use Meta Pixel, Meta Conversions API, and related Meta advertising technologies.

These technologies may process information such as:

• Website interactions;

• Product views;

• Purchase events;

• Conversion events;

• Device information;

• Identifiers;

• Hashed contact information; and

• Other information required for advertising and measurement.

Meta may use such information for advertising measurement, audience creation, remarketing, and personalized advertising, subject to applicable law and the customer's choices.

11. SHOPIFY

Our online store is powered by Shopify.

Shopify may process personal information in connection with:

• Storefront operation;

• Checkout;

• Customer accounts;

• Order processing;

• Payment processing;

• Security;

• Fraud prevention;

• Analytics;

• Personalization;

• Marketing;

• Customer data management; and

• Other Shopify services we enable.

Depending on the particular service, Shopify may act as our processor/service provider or may process information independently as a controller/business.

Shopify's current documentation confirms that merchants remain responsible for configuring their Shopify privacy settings and ensuring their privacy disclosures accurately reflect their practices.

12. SHOPIFY NETWORK INTELLIGENCE AND ENHANCED SERVICES

If Shopify Network Intelligence or other Shopify Enhanced Services are enabled on our store, Shopify may process certain customer information independently for purposes described in Shopify's applicable terms and privacy documentation.

Where applicable, these services may involve:

• Analytics;

• Reporting;

• Personalization;

• Advertising;

• Audience creation;

• Marketing-related services; and

• Product improvement.

Where required for European customers, we will obtain the necessary consent for personalized advertising and provide mechanisms to withdraw consent.

Shopify states that customers may also exercise certain rights concerning Shopify's independent processing through Shopify's privacy portal.

Shopify Privacy Portal: https://privacy.shopify.com/

13. CROSS-DEVICE TRACKING

We may use technologies that help us understand interactions with our Services across multiple devices.

This may be used for:

• Analytics;

• Attribution;

• Advertising;

• Remarketing;

• Audience management;

• Personalization; and

• Campaign measurement.

Where required, applicable consent or opt-out mechanisms will apply.

14. MARKETING EMAILS

We may send promotional emails concerning:

• Products;

• Collections;

• Promotions;

• Sales;

• Launches;

• Events;

• Recommendations; and

• Other marketing content.

You may unsubscribe from marketing emails at any time using the unsubscribe link in the communication.

Unsubscribing from marketing communications does not necessarily stop transactional communications such as order confirmations, shipping notifications, account notifications, security communications, or customer service messages.

We comply with applicable commercial email requirements, including the CAN-SPAM Act.

15. SMS / TEXT MARKETING

If we offer SMS marketing, we will obtain any consent required by applicable law.

You may opt out by following the instructions provided in the message, including replying "STOP" where supported.

Consent to marketing SMS is not a condition of purchasing our products where prohibited by applicable law.

16. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information to categories of recipients including:

• Shopify;

• Payment processors;

• Shipping providers;

• Fulfillment providers;

• Email providers;

• SMS providers;

• Analytics providers;

• Advertising providers;

• Customer service providers;

• Fraud prevention providers;

• Hosting and technology providers;

• Professional advisers;

• Accountants;

• Lawyers;

• Insurers;

• Auditors;

• Affiliates;

• Business partners;

• Governmental authorities; and

• Other service providers.

Where required by law, we use contractual safeguards governing third-party processing.

17. ADVERTISING AND TARGETED ADVERTISING

We may disclose certain information to advertising and technology providers for:

• Advertising;

• Audience creation;

• Remarketing;

• Conversion tracking;

• Campaign measurement;

• Attribution;

• Personalization; and

• Campaign optimization.

Depending on applicable law, such disclosures may constitute "sale," "sharing," "targeted advertising," or similar regulated processing.

We provide applicable opt-out mechanisms where required.

18. SALE OR SHARING OF PERSONAL INFORMATION

We do not sell personal information in the traditional sense of selling customer lists for money.

However, certain disclosures of personal information to advertising, analytics, social media, and technology providers may constitute "sale," "sharing," targeted advertising, or a similar regulated activity under applicable privacy laws.

For example, when we use advertising technologies such as cookies, pixels, tags, APIs, or similar technologies, information about your interactions with our Services may be made available to advertising or analytics providers, including providers used for Meta and Google advertising, for purposes such as advertising, audience creation, remarketing, conversion measurement, attribution, and campaign optimization.

Where applicable law provides you with a right to opt out of sale, sharing, or targeted advertising, you may exercise that right through our Your Privacy Choices / Do Not Sell or Share My Personal Information mechanism or by contacting us.

We will process qualifying opt-out requests in accordance with applicable law.

19. GLOBAL PRIVACY CONTROL

Where required by applicable law, we recognize a qualifying Global Privacy Control ("GPC") signal as a request to opt out of applicable sale, sharing, or targeted advertising activities.

California currently recognizes user-enabled opt-out preference signals such as GPC for applicable opt-out rights.

20. UNITED STATES PRIVACY RIGHTS

Depending on your state of residence and applicable law, you may have rights including:

• Access;

• Right to know;

• Deletion;

• Correction;

• Data portability;

• Opt out of sale;

• Opt out of sharing;

• Opt out of targeted advertising;

• Opt out of certain profiling;

• Limitation of certain uses of sensitive personal information;

• Appeal of privacy decisions; and

• Nondiscrimination.

These rights vary by state and may be subject to legal exceptions.

21. CALIFORNIA PRIVACY RIGHTS

To the extent the California Consumer Privacy Act applies, California residents may have rights including:

• Right to know/access;

• Right to delete;

• Right to correct;

• Right to opt out of sale;

• Right to opt out of sharing for cross-context behavioral advertising;

• Right to limit certain uses and disclosures of sensitive personal information;

• Right to nondiscrimination; and

• Right to use an authorized agent where permitted.

California's 2026 regulations also contain requirements concerning opt-out preference signals, sensitive personal information, automated decision-making technology, and related privacy disclosures.

22. CANADIAN PRIVACY RIGHTS

If you are located in Canada, applicable Canadian privacy laws may provide you with rights concerning your personal information.

Vismaya is responsible for personal information under its control and has designated a Privacy Officer to oversee privacy matters.

Collection, Use, and Disclosure

We collect, use, and disclose personal information for purposes that are reasonable and appropriate in the circumstances, including processing and fulfilling orders, providing customer service, administering accounts, communicating with customers, preventing fraud, improving our Services, analytics, marketing where permitted, and other purposes described in this Privacy Policy.

Where consent is required, we will obtain meaningful consent before collecting, using, or disclosing personal information. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice.

We limit the collection of personal information to information reasonably necessary for the purposes identified in this Privacy Policy.

Access and Correction

You may request access to personal information we hold about you and may request correction of inaccurate or incomplete information, subject to applicable legal exceptions.

Safeguards

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable law.

Complaints and Privacy Questions

If you have a question, concern, or complaint regarding our handling of personal information, you may contact our Privacy Officer using the contact information in Section 24.

If you are not satisfied with our response, you may have the right to bring your concern to the applicable Canadian privacy regulator.

Cross-Border Processing

Because Vismaya is based in the United States, your personal information may be transferred to, stored in, or accessed from the United States or other countries where Vismaya or its service providers operate. Where required by applicable law, we will use appropriate safeguards for such transfers.

23. SENSITIVE PERSONAL INFORMATION

Certain information may qualify as sensitive personal information under applicable law.

Depending on the applicable jurisdiction, this may include:

• Certain financial information;

• Account credentials;

• Precise geolocation;

• Government identifiers;

• Certain health information;

• Racial or ethnic origin;

• Religious or philosophical beliefs; and

• Other categories defined by law.

We do not intentionally collect sensitive personal information unless reasonably necessary for a legitimate purpose or otherwise permitted by law.

Where applicable law grants a right to limit certain uses or disclosures of sensitive personal information, we will provide an appropriate mechanism.

24. PRIVACY REQUESTS

To exercise an applicable privacy right, contact:

Vismaya by Shivani LLC
Privacy Officer: Shivani Mehrotra
Email: info@vismaya.com
Telephone: 1-888-VISMAYA (1-888-847-6292)

We may take reasonable steps to verify your identity before completing certain requests.

Verification requirements will depend on the nature and sensitivity of the request.

25. PRIVACY REQUEST APPEALS

Where applicable law provides a right to appeal a decision concerning your privacy request, you may submit an appeal by contacting our Privacy Officer:

Email: info@vismaya.com
Subject: Privacy Request Appeal

We will process appeals in accordance with applicable law.

26. EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND

If you are located in the EEA, UK, or Switzerland, additional privacy rights and requirements may apply.

These may include:

• Access;

• Rectification;

• Erasure;

• Restriction of processing;

• Data portability;

• Objection;

• Withdrawal of consent;

• Rights relating to direct marketing;

• Rights relating to automated decision-making and profiling; and

• The right to lodge a complaint with a supervisory authority.

The GDPR or UK GDPR may apply to Vismaya even though Vismaya is established in the United States if our activities fall within their territorial scope, including if we offer goods or services to, or monitor the behavior of, individuals in Europe. Before actively targeting customers in the EEA or UK, we will assess the applicable requirements and update our practices and disclosures as needed.

27. GDPR LEGAL BASES FOR PROCESSING

Where the GDPR, UK GDPR, or equivalent law applies, we rely on one or more of the following legal bases.

Performance of a Contract

We process personal data when necessary to:

• Process orders;

• Process payments;

• Ship products;

• Administer accounts;

• Process returns; and

• Provide customer service.

Consent

We rely on consent where legally required, including for certain:

• Cookies;

• Analytics;

• Personalized advertising;

• Marketing communications; and

• Other processing activities requiring consent.

You may withdraw consent at any time.

Legitimate Interests

We may process personal data where necessary for legitimate interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

• Fraud prevention;

• Website security;

• Service improvement;

• Business administration;

• Analytics;

• Customer service;

• Direct marketing where legally permitted;

• Advertising measurement; and

• Protection of legal rights.

Legal Obligation

We may process personal data where necessary to comply with legal obligations.

Vital Interests

Where applicable, we may process personal data where necessary to protect vital interests.

28. MARKETING CONSENT IN EUROPE

If we offer our Services to customers in the EEA, UK, or Switzerland, we will obtain consent where required before sending electronic direct marketing or activating nonessential cookies or similar technologies. You may withdraw marketing consent at any time and may object to direct marketing where applicable law provides that right.

29. EUROPEAN COOKIE CONSENT

If we serve visitors in the EEA, UK, Switzerland, or another jurisdiction requiring prior consent, nonessential cookies, pixels, analytics, and advertising technologies will not be activated until the required consent has been obtained. Visitors may change their preferences or withdraw consent through the cookie preference mechanism we make available. Before launching in these markets, we will verify that Shopify settings, the cookie banner, and any third-party pixels are configured to reflect our actual practices and applicable consent requirements.

30. INTERNATIONAL DATA TRANSFERS

Vismaya is based in the United States.

Personal information may be transferred to, stored in, or accessed from the United States and other countries where Vismaya or its service providers operate.

Where applicable law restricts international transfers, we will use legally recognized safeguards, which may include:

• Adequacy decisions;

• Standard Contractual Clauses;

• UK-approved transfer mechanisms;

• Contractual safeguards;

• Other lawful transfer mechanisms; or

• Applicable statutory exceptions.

The GDPR does not prohibit processing data in the United States, but international transfers must comply with applicable transfer requirements. Shopify confirms this position in its current GDPR guidance.

31. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing our Services, maintaining business and transaction records, preventing fraud, resolving disputes, enforcing agreements, and complying with legal, tax, accounting, and regulatory requirements.

Different categories of personal information may be retained for different periods depending on:

• The nature and sensitivity of the information;

• The purpose for which it was collected;

• Whether your account or customer relationship remains active;

• Applicable tax, accounting, and legal requirements;

• Fraud prevention and security requirements;

• Dispute resolution and legal claims; and

• Applicable statutes of limitations.

For example, order and transaction information may be retained for the period necessary to satisfy applicable tax, accounting, legal, and business requirements, while marketing preferences may be retained until you unsubscribe or otherwise change your preferences.

When personal information is no longer reasonably required, we will delete, anonymize, or otherwise dispose of it in accordance with applicable law.

32. DATA SECURITY

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These may include:

• Access controls;

• Authentication;

• Encryption where appropriate;

• Security monitoring;

• Vendor controls;

• Physical safeguards; and

• Restrictions on access to personal information.

No system can guarantee absolute security.

33. CHILDREN'S PRIVACY

Our Services are not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

Where another jurisdiction establishes a higher age threshold or additional protections, we will comply with those requirements where applicable.

34. AUTOMATED DECISION-MAKING AND PROFILING

We may use automated technologies for:

• Fraud detection;

• Security;

• Analytics;

• Personalization;

• Advertising;

• Audience segmentation;

• Product recommendations; and

• Marketing measurement.

These activities generally do not produce legal or similarly significant effects.

Where applicable law grants rights concerning automated decision-making or profiling, you may contact us to exercise those rights.

35. THIRD-PARTY WEBSITES

Our Services may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties that operate independently from us.

We encourage you to review their privacy policies.

36. USER-GENERATED CONTENT

If you submit reviews, photographs, testimonials, comments, or other content that is intended for public display, that information may become publicly accessible.

Do not submit information that you do not want publicly disclosed.

37. LEGAL DISCLOSURES

We may disclose personal information when reasonably necessary to:

• Comply with law;

• Respond to subpoenas or court orders;

• Respond to governmental requests;

• Enforce agreements;

• Investigate fraud;

• Protect our rights;

• Protect our property;

• Protect the safety of customers or others; or

• Establish, exercise, or defend legal claims.

38. BUSINESS TRANSFERS

If Vismaya is involved in a merger, acquisition, financing, sale of assets, reorganization, bankruptcy, dissolution, or similar transaction, personal information may be transferred as part of that transaction.

Any such transfer will be handled in accordance with applicable law.

39. YOUR PRIVACY CHOICES

Depending on your jurisdiction, you may be able to exercise certain privacy choices through our website or by contacting us.

Your Privacy Choices

Where applicable, Vismaya will provide a clear and accessible mechanism that allows you to:

• Opt out of the sale or sharing of personal information;

• Opt out of targeted or interest-based advertising;

• Manage cookie and tracking preferences;

• Withdraw consent where consent is the applicable legal basis;

• Unsubscribe from marketing emails;

• Opt out of SMS marketing if SMS marketing is offered;

• Limit certain uses of sensitive personal information;

• Request access to personal information;

• Request correction;

• Request deletion;

• Request portability;

• Object to certain processing; and

• Exercise other rights provided by applicable law.

Opt-Out Preference Signals

Where required by applicable law, we will recognize qualifying opt-out preference signals, including Global Privacy Control ("GPC"), as a request to opt out of applicable sale, sharing, or targeted advertising activities.

Where applicable, the website will provide a Your Privacy Choices / Do Not Sell or Share My Personal Information link or other legally required mechanism for submitting privacy choices.

We will not discriminate against you for exercising privacy rights provided by applicable law.

40. SHOPIFY PRIVACY RIGHTS

Because our store uses Shopify, certain processing may be performed directly by Shopify.

Where Shopify acts independently as a controller/business, you may have privacy rights directly with Shopify.

Shopify provides a privacy portal through which customers can exercise certain rights concerning Shopify's own processing:

Shopify Privacy Portal: https://privacy.shopify.com/

Shopify specifically requires additional disclosure and consent mechanisms for certain Enhanced Services when stores have EEA, UK, or Swiss customers.

41. EU CONSUMER RIGHTS

This Privacy Policy concerns privacy and data protection.

If Vismaya begins selling products directly to consumers in the European Union, separate consumer protection requirements may apply to those sales, including requirements concerning:

• Pre-contract information;

• Pricing and taxes;

• Delivery;

• Returns;

• Cancellation;

• The statutory right of withdrawal;

• Refunds;

• Guarantees;

• Product safety; and

• Other applicable consumer protections.

Before launching EU sales, we will review and update our Terms & Conditions, Shipping Policy, Returns/Refund Policy, checkout, and other applicable customer-facing information to address requirements that apply to those sales.

42. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically.

When we update it, we will change the "Last Updated" date at the top.

If we make material changes requiring additional notice under applicable law, we may notify you through our website, email, or another legally appropriate method.

43. CONTACT US

For questions, privacy requests, complaints, or concerns, please contact:

Vismaya by Shivani LLC
111 Penn Street Suite 7A&B
El Segundo, CA 90245
Privacy Officer: Shivani Mehrotra
Email: info@vismaya.com
Telephone: 1-888-VISMAYA (1-888-847-6292)

Effective Date: September 2, 2026
Last Updated: September 2, 2026