PRIVACY POLICY

Bizubu Ventures LLP | www.kohis.in

Last Updated: [01/07/2026]

Bizubu Ventures LLP (“Company”, “we”, “us” or “our”), a limited liability partnership incorporated under the Limited Liability Partnership Act, 2008, which owns and operates the brand “Kohi’s” and the website located at www.kohis.in (the “Website”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, store, retain and protect personal data when you access or use the Website or otherwise interact or correspond with us, and describes your rights in relation to your personal data and how you may exercise them.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made thereunder, including the Digital Personal Data Protection Rules, 2025 (together, the “DPDP Law”), the Information Technology Act, 2000 and the rules made thereunder, and, to the extent applicable to visitors located in the European Union or the United Kingdom, the EU/UK General Data Protection Regulation (“GDPR”).

This Policy should be read together with our Terms of Use and our Cookie Policy. By accessing or using the Website, or by providing us with your personal data, you acknowledge that you have read and understood this Policy.

1. WHO WE ARE

1.1 Identity. The entity responsible for your personal data is Bizubu Ventures LLP, having its registered office at [Registered Office Address] and bearing LLPIN [LLPIN]. For the purposes of the DPDP Law we act as the “Data Fiduciary”, and for the purposes of the GDPR (where applicable) we act as the “Data Controller”, in respect of the personal data described in this Policy.

1.2 Contact. You may contact us in relation to this Policy or your personal data by email at contact@bizubuventures.in or by telephone at +91 9354885007. Details of our grievance contact are set out in Clause 13.

2. SCOPE OF THIS POLICY

2.1 This Policy applies to personal data that we collect through the Website and through enquiries, communications and correspondence connected with the Website.

2.2 This Policy does not apply to: (a) personal data exchanged or processed in the course of a commercial or contractual relationship with a Buyer, which is governed by the applicable separate written contract between the Company and the Buyer; or (b) third-party websites or services that may be linked from the Website, which are governed by their own privacy policies.

3. DEFINITIONS

3.1 In this Policy:

(a) “Personal Data” means any data about an individual who is identifiable by or in relation to such data;

(b) “Processing” means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, sharing, erasure or destruction;

(c) “Data Principal” / “Data Subject” means the individual to whom the Personal Data relates;

(d) “Data Fiduciary” / “Data Controller” means the person who determines the purpose and means of Processing of Personal Data (here, the Company);

(e) “Data Processor” means any person who Processes Personal Data on behalf of the Company; and

(f) “Consent Manager” means a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review and withdraw consent through an accessible platform, in accordance with the DPDP Law.

4. PERSONAL DATA WE COLLECT

4.1 Data you provide to us. When you contact us or submit an enquiry through the Website (whether via an enquiry or contact form, email, telephone or other correspondence), we may collect: your name; email address; telephone number; company or business name and designation; country or location; and the content of your enquiry or communication, including any information you choose to provide about your product interest, indicative quantities or business requirements.

4.2 Data we collect automatically. When you visit the Website, we (and our service providers) may automatically collect certain technical and usage data, including your Internet Protocol (IP) address, browser type and version, device and operating system information, language and device settings, referring and exit pages, the pages and content you view, the date and time of your visit, and other diagnostic or log data. We may also derive your approximate location from your IP address.

4.3 Cookies and similar technologies. The Website uses cookies and similar technologies. The categories of cookies we use, the purposes for which they are used, and the means by which you can manage or disable them, are set out in our separate Cookie Policy, which is available on the Website and forms part of this Policy. Please refer to the Cookie Policy for detailed information.

4.4 Sensitive personal data. We do not intend to, and request that you do not, submit any sensitive or special-category personal data (such as financial account details, health information, or similar) through the Website’s enquiry channels. Any commercial or financial information required for a transaction will be dealt with under the applicable separate contract, and not through the Website.

5. HOW AND WHY WE USE YOUR PERSONAL DATA

5.1 We Process your Personal Data for the following purposes and, where the GDPR applies, on the legal basis indicated:

(a) to receive, respond to and manage your enquiries, communications and requests — on the basis of your consent, and/or in order to take steps at your request prior to entering into a contract;

(b) to provide you with information about our Products, our business and our range — on the basis of your consent and/or our legitimate interests;

(c) to facilitate and progress business or trade discussions and, where applicable, to negotiate and enter into a separate contract with you or your organisation — on the basis of steps taken prior to, and for the performance of, a contract, and/or our legitimate interests;

(d) to operate, maintain, secure, administer and improve the Website and to ensure its proper functioning — on the basis of our legitimate interests;

(e) to understand how the Website is used, including through analytics — on the basis of your consent (where collected through cookies) and/or our legitimate interests;

(f) to send you business or marketing communications where you have requested them or where otherwise permitted by law — on the basis of your consent, which you may withdraw at any time; and

(g) to comply with applicable law and legal obligations, to establish, exercise or defend legal claims, and to protect our rights, property and safety and those of others — on the basis of compliance with a legal obligation and/or our legitimate interests.

5.2 Under the DPDP Law, we Process your Personal Data either on the basis of your consent or for a “legitimate use” permitted under the DPDP Law. Where we rely on consent, Clause 6 applies.

6. CONSENT AND ITS WITHDRAWAL

6.1 Where our Processing is based on consent, we will obtain your consent through a clear affirmative action, and such consent will be free, specific, informed, unconditional and unambiguous, and limited to the Personal Data necessary for the specified purpose.

6.2 You have the right to withdraw your consent at any time. Withdrawing consent is as easy as giving it. The withdrawal of consent will not affect the lawfulness of Processing carried out on the basis of consent before its withdrawal.

6.3 You may withdraw your consent, or manage your consent, by contacting our grievance contact (Clause 13) or, where available, through a registered Consent Manager. Please note that if you withdraw your consent, we may be unable to respond to your enquiry or provide you with certain information or communications.

7. DISCLOSURE AND SHARING OF PERSONAL DATA

7.1 We do not sell your Personal Data. We may disclose or share your Personal Data with the following categories of recipients, only to the extent necessary and in accordance with applicable law:

(a) service providers and Data Processors who perform services on our behalf, such as website hosting, information technology, email, communications, form-management and analytics providers, who are bound to Process Personal Data only on our instructions and to maintain its confidentiality and security;

(b) professional advisers, such as legal, accounting and audit advisers, where necessary;

(c) courts, regulators, government or law-enforcement authorities, where required or permitted by applicable law, or to establish, exercise or defend legal rights;

(d) a successor entity or acquirer in connection with any merger, acquisition, reorganisation, sale of assets or similar transaction; and

(e) any other person with your consent or at your direction.

8. CROSS-BORDER TRANSFERS OF PERSONAL DATA

8.1 We are based in India, and your Personal Data will generally be Processed and stored in India.

8.2 Under the DPDP Law, Personal Data may be transferred outside India, except to such countries or territories as may be restricted by the Central Government by notification. Where any such restriction applies, we will comply with it.

8.3 For visitors located in the European Union or the United Kingdom: where we transfer your Personal Data outside the EEA or the UK to a country not recognised as providing an adequate level of protection, we will implement appropriate safeguards, such as Standard Contractual Clauses, to protect your Personal Data.

9. DATA RETENTION

9.1 We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including to respond to and manage your enquiry and any resulting correspondence, or for such longer period as may be required to comply with applicable law or to establish, exercise or defend legal claims.

9.2 In accordance with the DPDP Law, we will erase your Personal Data when the purpose for which it was collected is no longer being served and its retention is no longer necessary for any legal purpose, unless you have withdrawn your consent earlier. As a general matter, we intend to retain enquiry-related Personal Data for a period of [retention period, e.g., 24 months] following the conclusion of our correspondence, unless a longer period is required.

10. DATA SECURITY

10.1 We implement reasonable security safeguards, and appropriate technical and organisational measures, designed to protect your Personal Data against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction. These measures may include access controls, secured hosting, and protection of data in transit where appropriate.

10.2 While we take reasonable steps to protect your Personal Data, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10.3 In the event of a personal data breach, we will take appropriate steps and, where required, notify the Data Protection Board of India and affected Data Principals in accordance with the DPDP Law and, where applicable to visitors in the EU or UK, the relevant supervisory authority and affected data subjects in accordance with the GDPR.

11. YOUR RIGHTS

11.1 Subject to and in accordance with applicable law, you have the following rights in relation to your Personal Data under the DPDP Law:

(a) the right to obtain a summary of the Personal Data we Process about you and the Processing activities undertaken, and the identities of other Data Fiduciaries and Processors with whom your Personal Data has been shared;

(b) the right to correction, completion, updating and erasure of your Personal Data;

(d) the right to nominate another individual to exercise your rights in the event of your death or incapacity.

11.2 Where the GDPR applies to you, you may additionally have the rights of access, rectification, erasure (“right to be forgotten”), restriction of Processing, data portability, and objection to Processing, as well as rights in relation to automated decision-making, in each case subject to the conditions and exceptions under the GDPR.

11.3 You also have the right to withdraw your consent as described in Clause 6. To exercise any of your rights, please contact us as set out in Clause 13. We will respond to your request within the timelines prescribed under applicable law.

12. CHILDREN’S DATA

12.1 The Website is intended for use by business users and adults, and is not directed at children (persons under the age of eighteen (18) years). We do not knowingly collect the Personal Data of children through the Website without verifiable consent from a parent or lawful guardian as required under the DPDP Law.

12.2 We do not undertake any tracking, behavioural monitoring or targeted advertising directed at children. If we become aware that we have inadvertently collected the Personal Data of a child without the required consent, we will take steps to delete such data.

13. GRIEVANCE REDRESSAL AND HOW TO CONTACT US

13.1 If you have any question, request or grievance in relation to this Policy or the Processing of your Personal Data, or if you wish to exercise any of your rights, you may contact our grievance contact at:

[Name / Designation of Grievance Officer / Data Protection Contact]

Bizubu Ventures LLP

[Registered Office Address]

Email: contact@bizubuventures.in

Telephone: +91 9354885007

13.2 We will acknowledge and endeavour to resolve your grievance within the period prescribed under applicable law. If you are not satisfied with our response, you have the right to make a complaint to the Data Protection Board of India under the DPDP Law and, where the GDPR applies to you, to lodge a complaint with your relevant data protection supervisory authority.

13.3 This Policy is published in English. If you require access to this Policy in any language specified in the Eighth Schedule to the Constitution of India, you may request the same by contacting us at the details above.

14. THIRD-PARTY LINKS

14.1 The Website may contain links to third-party websites or resources. We are not responsible for the privacy practices or the content of such third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

15. CHANGES TO THIS POLICY

15.1 We may update or revise this Policy from time to time. Any changes will be effective upon the posting of the revised Policy on the Website with an updated “Last Updated” date. We encourage you to review this Policy periodically. Your continued use of the Website after any revision constitutes your acknowledgement of the revised Policy.