With the following information, we would like to give you an overview of how your personal data is processed. The specific data processed and how it is used largely depends on the services you have commissioned or agreed upon. Therefore, not all parts of this privacy notice may apply to you.

‍1. WHO IS RESPONSIBLE FOR DATA PROCESSING AND WHO CAN YOU CONTACT?
‍The entity responsible for processing your data is:

7BOTANICALS PTE. LTD.
10 Anson Road #33-10, Suite C,
International Plaza

‍2. WHAT DATA DO WE USE
‍We process personal data that we receive from you during the course of our business relationship or that we collect when you use our website. Additionally, we process personal data that we obtain lawfully from publicly accessible sources (e.g., company registers, media, the Internet) or that is legitimately transmitted to us by other companies within our network or third parties. The data processed includes, in particular, personal information (e.g., name, address, phone number, email address, date of birth, place of birth, nationality), identification data (e.g., ID data), and authentication data (e.g., signature samples). Furthermore, payment data (e.g., payment orders, incoming payments, outstanding payments), contract and order data (e.g., order numbers, order content, tax data), financial information (e.g., creditworthiness data), and documentation data (e.g., protocols, confirmations) may also be processed. Additionally, when using our website, access data without specific personal reference, such as information about the device used, the web browser used, the operating system, the IP address, or other similar operational data, is processed.

‍3. FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR DATA?
‍The processing of personal data is carried out for the purposes of providing (pre-)contractual services, responding to your inquiries or communicating with you, technical administration, optimizing and ensuring the operation of the website, investigating complaints, asserting, exercising, or defending legal claims, and fulfilling legal obligations.We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (PDPA):a) For the fulfillment of contractual obligations (Art. 6(1)(b) GDPR): Data processing is carried out to perform our contracts with you or to carry out pre-contractual measures that are taken at your request or are necessary to fulfill the order.b) Within the framework of balancing interests for the protection of legitimate interests (Art. 6(1)(f) GDPR): Where necessary, we process your data beyond the actual performance of the contract to protect the legitimate interests of us or third parties. We have a legitimate interest in optimizing and ensuring our service quality, in (direct) marketing, in commissioning collection agencies, in asserting, exercising, or defending legal claims, or in exchanging data with authorities or intermediaries.c) Based on your consent (Art. 6(1)(a) GDPR): Insofar as you have given us consent to process personal data for purposes beyond the scope of the order (e.g., photos at events, newsletter distribution), the lawfulness of this processing is based on your consent.d) Based on legal obligations (Art. 6(1)(c) GDPR) or to perform a task in the public interest (Art. 6(1)(e) GDPR): We are subject to various legal obligations, which may require the processing of personal data (e.g., identity checks, reporting, documentation, and retention obligations).

‍4. WHO RECEIVES YOUR DATA
‍Within 7BOTANICALS PTE. LTD., only those departments that require your data to fulfill our contractual and legal obligations have access to it. Additionally, service providers (such as accountants) and agents acting on our behalf may have access to the data to the extent necessary to fulfill our obligations for the purposes mentioned above. It is essential that only those employees who need access to the data have it. All employees are trained initially and periodically in the requirements of the GDPR and PDPA.

‍5. FORWARDING YOUR DATA
‍Where necessary for the fulfillment of the contract or justified by our legitimate interests, we will forward personal data to processors (service providers) we employ. The processors comply with the data protection requirements imposed by the GDPR and PDPA and are obligated to confidentiality. A written data processing agreement is concluded with the service providers employed by us.

‍6. WILL DATA BE TRANSFERRED TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION?
‍Data transfer to entities outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) will only take place if there is a legal basis for such a transfer (see Section 3). Transfer to entities in third countries is only envisaged in the following cases:a) If it is necessary in individual cases, your personal data may be transferred to an IT service provider in a third country, commissioned by us, to ensure the operation of 7BOTANICALS PTE. LTD., while maintaining the European data protection level.b) For other reasons, if we have taken appropriate measures to protect your personal data, or if the transfer is made to a location where the Commission considers there to be an adequate level of protection.c) If we are legally allowed to do so, such as if you have consented to the data transfer despite being informed of the risks, if it is necessary to fulfill a contract, or if the transfer is permitted by law (e.g., to combat money laundering, terrorist financing, and other criminal acts).

‍7. HOW LONG WILL YOUR DATA BE STORED?
‍Where necessary, we process your personal data for the duration of the entire business relationship and beyond, in accordance with the legal retention and documentation obligations mentioned above (e.g., UGB, BAO). After the purposes mentioned above have been achieved and after the expiration of the legal retention periods, your data will be deleted unless you have expressly consented to the further use of your data. Data necessary to assert, exercise, or defend legal claims before an authority may also be retained until the matter is finally resolved. Apart from that, we reserve the right to anonymize certain data after the expiration of the retention periods and thus make them unrecognizable for further statistical processing.

‍8. TECHNICAL AND ORGANIZATIONAL MEASURES
‍We have taken appropriate technical and organizational measures to protect your personal data. These measures ensure that there is no unauthorized access to or unlawful processing of the personal data provided. The technical and organizational measures include, in particular, an access authorization concept, a data backup concept, and physical and digital protective measures regarding our IT structure. We strive to continuously update our security measures in line with technological developments.

‍Newsletter and Email Marketing
‍If you have the option to subscribe to a newsletter on our website, the data you provide in the registration form will be used solely for sending the newsletter to you. Your data will also be shared with Klaviyo Inc. (Klaviyo), which supports us as a data processor in sending our newsletters.You can unsubscribe from the newsletter at any time via the unsubscribe option in the respective newsletter (link) or by sending an email to: hello@7botanicals.com. Upon revocation of your consent, the data you provided during the newsletter registration will be deleted.Where permitted, we may also send you electronic advertising. You can, of course, prevent this at any time via the unsubscribe option in the respective email (link) or by sending an email to: hello@7botanicals.com. You also have the right to object to the processing of your data for direct marketing purposes at any time. In this case, your data will no longer be processed for these purposes.

‍Cookies
‍Our website uses so-called cookies. These are small text files that are sent when visiting a website and stored on your device. We use cookies mainly to make our website user-friendly, ensure error-free and secure application, and conduct anonymized analyses of website usage. They enable the website to recognize your browser the next time you visit. Some cookies remain stored on your device until you delete them.When you visit the website for the first time, a button will appear where you can choose whether you generally agree to the use of cookies on our website and – if so – to which cookies you consent. If you no longer wish to use cookies, you can configure your browser accordingly. All common browsers allow the control of cookie settings and the adjustment of their storage duration. This allows you to generally prevent cookies from being set on your device, shorten the storage duration of cookies, or change your selection. You can also withdraw your consent at any time by deleting your browser history and reloading the website. Please note that the functionality of the website may be limited if you do not consent to the use of cookies or withdraw your consent. For more information, please visit: http://www.google.com/privacy/.The use of cookies is based on the aforementioned legal grounds (Section 3). The storage duration generally depends on the type of cookie but is limited to a maximum period of twelve months (the duration of this period starts with the initial storage).

‍Logfiles
‍Each time the website is visited and used, as well as each time a file on the server is accessed or attempted to be accessed, data about this process is stored in a log file (logfile). We cannot directly trace which user retrieved which data. We also do not attempt to obtain this information. This would only be possible in legally regulated cases and with the help of third parties (e.g., Internet Service Providers). Collected, gathered, and stored are, for example, browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of server request, and IP address. These data are processed mainly based on our legitimate interest (Art. 6(1)(f) GDPR), to detect, prevent, and investigate attacks on our website.Our website is hosted on a server located in a data center in Finland by the German hosting provider Hetzner Online GmbH. Our email server is provided directly by Microsoft Corporate (Hosted Exchange), with the corresponding server also located within the EU.

‍Hubspot
‍Our website also uses the services of the software manufacturer HubSpot, a provider from the USA with an office in Ireland (Ground Floor, Two Dockland Central, Dublin 1, Ireland). HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of online marketing (e.g., analysis of landing pages and reporting). The storage of cookies is based on your consent (Art 6(1)(a) GDPR).The data processed includes, in particular, IP address, geographic location, browser type, duration of the visit, and the pages accessed. The collected information and the content of our website are stored on the servers of our software partner HubSpot Ireland. We use HubSpot to analyze the use of our website. This allows us to continuously optimize and make our website more user-friendly. We also use the information to determine which services of our company are of interest to customers and newsletter subscribers and to contact them for advertising purposes. Furthermore, we optimize our web offering for you through the evaluation.However, we only use your IP address in a shortened version. This means that the IP address of users is shortened by HubSpot within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a HubSpot server in the USA and shortened there. You can view more information and HubSpot's privacy policy at: https://legal.hubspot.com/privacy-policy

‍Google Analytics
‍This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). As part of web analysis, cookies are used to enable analysis of the website's usage by you as a visitor. The information generated by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.To protect your data, IP anonymization is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.You can prevent the storage of cookies by adjusting your browser software settings accordingly. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, preventing the collection of your data during future visits to this website: Deactivate Google Analytics.Please note that this website uses Google Analytics with the code "anonymizeIp" to ensure the anonymized collection of IP addresses (so-called IP masking). We also use Google Analytics to evaluate data from AdWords for statistical purposes. Use of Social Plugins from Facebook and Google+ Our website uses so-called social plugins ("plugins") from the social networks Facebook and Google+. These services are provided by the companies Facebook Inc. and Google Inc. ("providers"). Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Google+ is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). An overview of the plugins and their appearance can be found here: http://developers.facebook.com/plugins or https://developers.google.com/+/plugins

‍When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Google or Facebook. The content of the plugin is transmitted directly from the respective provider to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective social network or are not logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there.If you are logged into one of the social networks, the providers can directly associate your visit to our website with your profile on Facebook or Google+. If you interact with the plugins, such as by clicking the "Like" or "+1" button, this information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed to your contacts.The purpose and scope of data collection and further processing and use of the data by the providers, as well as your rights and settings options for protecting your privacy, can be found in the providers' privacy policies.Facebook Privacy Policy: http://www.facebook.com/policy.php

‍Google Privacy Policy: http://www.google.com/intl/en/+/policy/+1button.htmlIf you do not want Google or Facebook to directly associate the data collected via our website with your profile on the respective social network, you must log out of the corresponding network before visiting our website.You can also completely prevent the loading of plugins with add-ons for your browser, such as the "Facebook Blocker" (http://webgraph.com/resources/facebookblocker/).

‍Google Remarketing
‍Our website also uses the functions of Google Analytics Remarketing in connection with the cross-device functions of Google Ads and Google DoubleClick. Data processing for the European Economic Area and Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.This function allows the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that were adapted to you based on your previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).If you have given your consent, Google will link your web and app browsing history with your Google Account for this purpose. This allows the same personalized advertising messages to be displayed on any device you sign in to with your Google Account.To support this function, Google Analytics collects google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.You can permanently opt-out of cross-device remarketing/targeting by disabling personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.
Further information and Google's privacy policy can be found at: https://policies.google.com/technologies/ads?hl=en.

‍Web Fonts
‍The website also uses so-called web fonts, provided by Adobe Typekit, and so-called Google Fonts, provided by Google, for the uniform display of fonts. When you access a page, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly. To do this, the browser you use must connect to the servers of Adobe Typekit and Google. Through this, Adobe Typekit and Google become aware that our website has been accessed via your IP address. The use of web fonts and Google Fonts is in the interest of a uniform and appealing presentation of the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts and/or Google Fonts, a standard font from your device will be used.

‍Facebook Pixel
‍With your consent, we use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"), within our website. This allows us to track the actions of users after they have been redirected to our website by clicking on a Facebook ad. This helps us evaluate the effectiveness of Facebook ads for statistical and market research purposes. By using this pixel, we can optimize our advertising efforts. All data collected in this way is anonymous for us as the operator of the website. If you accept the cookie, you agree that Facebook stores and processes your data. Facebook may then use this data for its own advertising purposes.

‍Integration of Services and Content from Third Parties
‍It is possible that content from third parties, such as videos from YouTube, map material from Google Maps, RSS feeds, or graphics from other websites, may be integrated into this online offering. This always requires that the providers of this content (hereinafter referred to as "third-party providers") are aware of the user's IP address. Without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore necessary to display this content. We make every effort to use only content whose respective providers use the IP address solely for delivering the content. However, we have no influence on whether the third-party providers store the IP address, for example, for statistical purposes. If we become aware of this, we will inform the users accordingly.

‍9. DATA PROTECTION RIGHTS
‍As a data subject, you are entitled to the following rights under the applicable legal requirements:a) The right to be informed whether and what personal data is being processed, as well as the identity of third parties to whom the personal data has been transferred;b) The right to receive copies of the stored personal data;c) The right to request the rectification, supplementation, or deletion of personal data;d) The right to restrict the processing of personal data;e) The right to data portability;f) The right to object to processing, provided that the processing is based on our or third parties' legitimate interests. In certain circumstances, we may continue to process the data despite your objection;g) The right to withdraw any consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, please contact us (see Section 2). You also have the right to lodge a complaint with the relevant supervisory authority.

‍10. CHANGES TO THIS PRIVACY POLICY
‍We may make changes to our privacy policy. In such cases, we will inform you by announcing the update of the privacy policy or by publishing the updated version on our website or notifying you in another appropriate manner.