Introduction

The Privacy Policy of BARSHA describes how BARSHA, its subsidiaries, and affiliates collect, use, and share your information through your use of our websites, our mobile applications, and any other services controlled by BARSHA. Accordingly, BARSHA is the “Controller” of the information that we collect, and any personal data we collect in any form is governed by this Privacy Policy. By visiting the BARSHA website (barshabros.com), using a BARSHA mobile app, or using any BARSHA service, you agree to this Privacy Policy.

Throughout this Privacy Policy, BARSHA may be referred to as “the Company,” “We,” “Us,” or “Our.”

BARSHA is a smoke shop, and as such, must comply with specific legal regulations and requirements related to the sale of products intended for adult use. By using our website, you agree that you are 21 years of age or older and that you will not provide access to our products or services to anyone under the legal age.

How We Collect Information

We may collect Personal Information (PI) in several ways:

  1. When you purchase our products on our website
  2. When you verify your age
  3. When you sign up to receive marketing information via email or text
  4. When you follow us or interact with us on social media
  5. When you give us feedback based on a survey
  6. When you contact our Customer Service team for support
  7. When you make a warranty claim
  8. When you create an account on a BARSHA mobile app
  9. When you apply for a job with us

How We Use Information

We may use the information we collect from you in the following ways:

  1. To complete a transaction on barshabros.com
  2. To provide you with information, services, and products offered on or through barshabros.com
  3. To market our products to you (see “Marketing” below)
  4. To verify that you are of legal age to purchase our products
  5. To provide customer service on our products
  6. To fulfill a valid warranty claim
  7. To create and manage a profile you create on our site or mobile application
  8. To create insights and analysis of our products and the way you use them
  9. To respond to or follow-up on your comments, inquiries, or other requests
  10. To improve the quality of our websites and products and tailor them to your preferences
  11. To communicate with you and interact with you on social media

Sharing Information

Under no circumstances do we rent or sell your PI. We may share your PI with (1) our wholly-owned affiliates and subsidiaries, and (2) our service providers who perform services on our behalf, such as order fulfillment, marketing, customer service, and analytics. We do not authorize our service providers to use or disclose your personal information except as necessary to perform services on our behalf or comply with legal requirements.

We share Personal Information in the following ways:

On rare occasions, we may need to share PI to comply with legal subpoenas related to investigative demands from courts and law enforcement agencies. We want to be perfectly clear on this point: we will only share information with law enforcement only if law enforcement has (1) obtained a valid subpoena from a court or other governmental agency that has authority to issue a subpoena, and (2) if there is no ability for BARSHA to challenge the validity or scope of the subpoena. You have our word that we will always challenge a subpoena if we believe the subpoena is unlawfully issued.

In addition, we share aggregated anonymized information, including usage data about BARSHA products, with third parties and service providers for a variety of purposes, including quality assurance. We take steps to ensure that you cannot be identified from this information and we require third parties to keep all shared information in its anonymized form.

Any of our service providers with whom we share your PI are required to maintain the confidentiality of the information and are prohibited from using it for any other purpose. We will take all reasonable steps to make sure these service providers comply with the same privacy principles that govern our collection of your Personal Information.

Marketing

When we collect your PI for marketing purposes, we will ask for your consent, such as by email response, opt-in box, or click-through agreement acceptance, before we use or share your PI for any other purpose.

You have the right to ask us not to process your Personal Information for marketing purposes. We will inform you (before collecting your Personal Information) if we intend to use your Personal Information for marketing purposes or if we intend to disclose your Personal Information to any third party for marketing purposes.

We will give you choices about your Personal Information. Some choices are presented upfront in the form of opt-in notices or acceptance boxes for marketing to you or sharing your Personal Information with third parties. You always have the choice to opt-out if you later change your mind. One form of opt-out is clicking the Unsubscribe link in a marketing email. This will remove you from our marketing email list. Please note that these opt-in/opt-out choices do not apply to the receipt of mandatory website, service, or software communications, such as receipt of order or shipping confirmations on BARSHA website stores, which you may receive periodically as part of BARSHA performing its contract with you.

If you do not wish to receive direct marketing material from us or a third party on our behalf, in addition to following the “Unsubscribe” instructions in a marketing email, you can send us a request at barshahelp@gmail.com.

Security of Information

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

Cookies

When you visit our websites, app, or use our services, we may use “cookies” and similar technologies (e.g., beacons, log files, pixels, and Flash LSOs). This technology involves placing small files/code on your device or browser that serve several purposes, such as remembering your preferences and generally improving your experience on or with our Services.

Specifically, we may use such technology for purposes such as to:

  1. Provide us with general analytics about our Services, including demographic information in a non-identifiable form, in order to improve our Services’ performance and customize users’ experience Support security measures.
  2. Allow you to engage in our social media offerings on our Services (e.g., Facebook “Like” button)
  3. More effectively market our Services and advertise other Services that may be of interest to you
  4. Where required by law, we collect your consent for the use of such technologies.

Your Choices and Rights

When you provide us with personal data, you have rights about how we use it and why.

If you no longer wish to receive email marketing communications from us, you may opt-out of receiving marketing-related emails by using the unsubscribe method provided in our communications (e.g., by clicking on the “unsubscribe” link in the email to unsubscribe). Likewise, to the extent that applicable law requires your prior opt-in consent to receive marketing and promotional emails, we will ask for your consent and you can choose not to opt-in.

Similarly, if you no longer want to receive text messages from us, reply STOP (or as otherwise instructed) in the text message. We will always ask for your consent to send you text messages, and you can choose not to opt-in.

To exercise choices regarding cookies set through our website, you will be given an opportunity to accept or reject cookies when you visit our website.

If you have created an online account with us and would like to update the information you have provided to us, you can access your account to view and make changes or corrections to your information. Depending on applicable law, you may have the right, and we also provide you with the opportunity to be informed of whether we are processing your information and to access, correct, update, oppose, delete, block, limit, or object, upon request and free of charge, to our use of your information to the extent required by applicable law. For such inquiries, please contact us as detailed under the “Contact Us” heading below. We will try to comply with your request as soon as reasonably practicable and as required by applicable law. Please note that we may need to retain certain information for recordkeeping purposes, to complete any transactions that you began prior to your request, or for other purposes as required or permitted by applicable law. In any event, should you choose to exercise any of your rights as detailed above, we will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request.

California Privacy Rights

If you are a California resident and customer of BARSHA, you have the right to receive, once per year, free of charge, 1) the identity of any third-party company to which we have disclosed your personal information as defined by California’s “Shine the Light” law for that company’s own direct marketing purpose; and 2) a description of the categories of personal information disclosed. To request this information, please contact us at barshahelp@gmail.com, or at the address listed in the “Contact Us” section below. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are not required to respond to requests made by means other than through the provided email or mail address.

For California residents, while we never sell your information, you can still make a CCPA “Do Not Sell” request to us by emailing us at barshahelp@gmail.com.

California law also requires us to let you know that we do not respond to DNT signals.

European Privacy Rights

To request access to your personal data (commonly known as a “data subject access request”) (GDPR art.15). You may receive a copy of the personal data we hold about you and check that we are lawfully processing it at BARSHA. To request correction of the personal data that we hold about you (GDPR art.16). You may have any incomplete or inaccurate data we hold about you corrected at BARSHA. To request deletion of your personal data (GDPR art.17). You may ask us at BARSHA to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. To object to the processing of your personal data at BARSHA where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms (GDPR art.21). You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. To request restriction of processing of your personal data (GDPR art.18). You may ask us at BARSHA to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. To request the transfer of your personal data to you or to a third party (GDPR art.20). We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format at BARSHA. Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you at BARSHA. We will advise you if this is the case at the time you withdraw your consent. To object to the processing of your personal data under certain circumstances at BARSHA, in particular, if we process your personal data on the basis of a legitimate interest (GDPR Art. 6 (1)(b)) or if we use your personal data for marketing purposes. To lodge a complaint with an EU Member State of your residence, place of work, or place of the alleged infringement if you consider that our processing of your personal data at BARSHA infringes the applicable data protection laws. European Privacy Rights

To request access to your personal data (commonly known as a “data subject access request”) (GDPR art.15). You may receive a copy of the personal data we hold about you and check that we are lawfully processing it at BARSHA.

To request correction of the personal data that we hold about you (GDPR art.16). You may have any incomplete or inaccurate data we hold about you corrected at BARSHA.

To request deletion of your personal data (GDPR art.17). You may ask us at BARSHA to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.

To object to the processing of your personal data at BARSHA where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms (GDPR art.21). You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

To request restriction of processing of your personal data (GDPR art.18). You may ask us at BARSHA to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

To request the transfer of your personal data to you or to a third party (GDPR art.20). We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format at BARSHA. Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you at BARSHA. We will advise you if this is the case at the time you withdraw your consent.

To object to the processing of your personal data under certain circumstances at BARSHA, in particular, if we process your personal data on the basis of a legitimate interest (GDPR Art. 6 (1)(b)) or if we use your personal data for marketing purposes.

To lodge a complaint with an EU Member State of your residence, place of work, or place of the alleged infringement if you consider that our processing of your personal data at BARSHA infringes the applicable data protection laws.

To exercise your European Privacy Rights, you may contact us at BARSHA by following the steps below:

Email us at barshahelp@gmail.com with the subject line “European Privacy Rights Request.”

Provide sufficient information for us to verify your identity and the personal data in question. This may include your full name, email address, mailing address, and any other relevant information.

Specify the type of request you are making, such as access, correction, deletion, or another request under GDPR.

Provide any additional information that may be relevant to your request.

Please note that BARSHA may need to request further information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Please be aware that there may be certain circumstances in which we are unable to comply with your request, such as when the personal data is necessary for legal, contractual, or compliance reasons. In these instances, we will inform you of the reasons for our inability to comply with your request.

At BARSHA, we are committed to respecting and protecting your privacy rights, and we will always strive to handle your personal data responsibly and in accordance with applicable data protection laws.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

barshahelp@gmail.com or

BARSHA

Ages 21+ only