PRIVACY POLICY

Aryan Biological Corporation, operating as "MuscleGenex" ("we", "us", or "our"), is committed to protecting the privacy of individuals who visit musclegenex.com (the "Website"), purchase our whey protein concentrate or soy protein powder, or otherwise communicate with our customer service team.

This Privacy Policy explains what personal data we collect, how we use and share it, and the choices and rights available to you. This Policy is not directed to, and should not be used by, individuals under the age of 18.

We collect the following categories of personal data:

• Identity and Contact Data: Including your name, billing address, shipping address, email address, and telephone number, collected during checkout or account registration.
• Transaction and Financial Data: Being encrypted billing details necessary to process your order — your complete payment card data is transmitted directly to our PCI-compliant payment processor and is never stored on our servers.
• Technical and Analytics Data: Including your IP address, browser type, device information, time-zone setting, and browsing activity on the Website, collected automatically through cookies and similar technologies.

We process your personal data to:

• Fulfil and ship your product orders safely and on time.
• Verify transactions and prevent fraudulent activities through verified payment gateways.
• Create and manage your account credentials and respond to customer support inquiries.
• Where you have opted in, send promotional communications regarding new product arrivals, health tips, or exclusive offers.

We do not use your personal data for any purpose incompatible with those stated in this Policy without first notifying you.

We process your personal data on the following recognized legal bases:

Performance of a Contract: To fulfil your order and provide seamless e-commerce services.
Compliance with Legal Obligations: In adherence to applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
Legitimate Interests: For platform security, fraud prevention, and improving website functionality.
Consent: For marketing communications, which you may freely withdraw at any time.

The Website uses cookies and similar tracking technologies to remember the contents of your shopping cart, analyze site traffic, and optimize page performance. You may manage or disable cookies through your browser settings at any time, although doing so may limit certain interactive features of the checkout process.

We do not sell, trade, or rent your personal data to third-party marketing firms. We share personal data solely with trusted service providers who require it to operate our essential business functions, including logistics couriers, PCI-compliant payment gateways, and secure web hosting providers, each of whom is contractually bound to protect your data and strictly prohibited from using it for unauthorized purposes.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including complying with applicable legal, accounting, tax, or reporting obligations. Account data is generally retained for the duration of your account's existence and for a reasonable period thereafter, after which it is securely deleted or anonymized.

We implement industry-standard security measures, including SSL/TLS encryption, to protect your personal data from unauthorized access, alteration, loss, or disclosure during transmission. While we employ commercially reasonable safeguards, no method of electronic transmission or cloud storage is completely infallible, and we cannot warrant absolute security of data transmitted over the open internet.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you possess the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete records.
• Request the deletion or removal of your personal data.
• Withdraw previously granted consent for marketing or processing.
• Lodge a grievance regarding our data management practices.

To exercise any of these statutory rights, please contact our privacy desk using the contact information below. We respond to verified requests within the timeframes mandated by law.

In the unlikely event of a personal data breach that poses a risk to your individual rights and data safety, we will notify affected individuals and the relevant regulatory authorities without undue delay, in full accordance with applicable Indian legislation.

We may update this Privacy Policy periodically to reflect technological adjustments, operational improvements, or legal updates. The "Last Updated" date at the top of this document indicates its latest revision. Material changes will be prominently announced on our Website or sent via email when appropriate.