1. Introduction
Halal Investments India (hereafter referred to as “the Company”) is committed to protecting the privacy and security of personal information. This CPRA Compliance Policy outlines our approach to ensuring compliance with the California Privacy Rights Act (CPRA).

2. Scope
This policy applies to all personal information collected, processed, stored, or shared by the Company related to California residents.

3. Personal Information Collection
– Types of Personal Information Collected: The Company collects various types of personal information, including but not limited to identifiers, commercial information, internet activity, geolocation data, and professional or employment-related information.
– Purpose of Collection: Personal information is collected for specific business purposes, such as providing investment services, managing customer relationships, marketing, and compliance with legal obligations.

4. Data Subject Rights
– Right to Know: California residents have the right to know what personal information is being collected, used, shared, or sold.
– Right to Delete: California residents have the right to request the deletion of their personal information, subject to certain exceptions.
– Right to Correct: California residents have the right to request the correction of inaccurate personal information.
– Right to Opt-Out of Sale or Sharing: California residents have the right to opt-out of the sale or sharing of their personal information.
– Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right to limit the use and disclosure of their sensitive personal information.
– Right to Non-Discrimination: California residents have the right not to receive discriminatory treatment for exercising their privacy rights.

5. Data Collection and Use Practices
– Notice at Collection: The Company provides a notice at or before the point of collection that describes the categories of personal information to be collected and the purposes for which the information will be used.
– Retention Policy: Personal information is retained only for as long as necessary to fulfill the disclosed purposes or as required by law.

6. Data Sharing and Selling Practices
– Sharing of Personal Information: The Company may share personal information with third parties for business purposes, including service providers and business partners, in compliance with CPRA.
– Selling of Personal Information: The Company does not sell personal information. If this practice changes, the Company will update this policy and provide a mechanism for California residents to opt-out.

7. Data Security Measures
– Security Practices: The Company implements and maintains reasonable security procedures and practices appropriate to the nature of the personal information to protect it from unauthorized access, destruction, use, modification, or disclosure.

8. Exercising Data Subject Rights
– Submitting Requests: California residents can submit requests to know, delete, or correct their personal information, or to opt-out of the sale or sharing of their personal information, by contacting our Data Protection Officer at [[email protected]].
– Verification Process: The Company will verify the identity of individuals making requests to ensure the security of personal information.

9. Data Protection Officer (DPO)
The Company appoints a Data Protection Officer to oversee CPRA compliance and to act as a point of contact for data subjects and regulatory authorities.

10. Training and Awareness
The Company provides training to employees and stakeholders to ensure awareness and understanding of CPRA requirements and the importance of data protection.

11. Policy Review
This policy is reviewed regularly and updated as necessary to ensure continued compliance with CPRA.

Contact Information
For any queries or concerns regarding this CPRA Compliance Policy or the handling of personal information, please contact our Data Protection Officer at [[email protected]].