PRIVACY POLICY — BIG BEAR FARMS

Alternate Foods, dba Big Bear Farms — Privacy Notice

Last updated: 30 June 2026

Alternate Foods, dba Big Bear Farms ("we", "us" or "our") respects your privacy and is committed to protecting it. We act as the Data Fiduciary in respect of the personal data we collect from you. This Privacy Notice applies to your access and use of our website, located at www.bigbearfarms.in, as well as our branded pages on social media services (collectively, the "Site"), and is incorporated into and subject to our Terms of Service (the "Terms").

This Privacy Notice describes the information we gather from you, how we use, share and protect it, the legal bases on which we process it, and the rights available to you. We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and the rules thereunder, and the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). By using the Site, you consent to the practices described in this Privacy Notice.

1. Information we collect about you and how we collect it

We collect several types of information from and about users of the Site, which may include certain "Personal Data" (information that relates to an identified or identifiable individual, such as name, email address, mailing address, telephone number, date of birth, and other similar information), information that does not individually identify you, and information about your internet connection and the equipment you use to access the Site.

We collect this information:

• Directly from you — when you fill out forms or fields on the Site, register for an account, place an order, participate in surveys or reviews, or contact us (by email, phone, WhatsApp or otherwise).
• Automatically — as you navigate through the Site (see "Cookies and automatic collection" below).
• From third parties — such as our payment processors, logistics partners, analytics and advertising service providers.

Payment information: Your financial information, such as your payment method and card details, is collected, used and stored by our third-party payment processors (for example Razorpay, Easebuzz and PhonePe — each a "Payment Processor"), and its use and storage is governed by the respective Payment Processor's terms and privacy policies. We do not store your full card details on our own servers. We may from time to time receive limited transaction information from a Payment Processor to complete or verify transactions or to protect against fraud.

User content: Some features of the Site allow you to provide content such as comments or reviews. To the extent permitted by law, content you submit in connection with your use of the Site may be retained or used by us.

2. Cookies and automatic collection

When you visit the Site, we may automatically receive and record certain information from your computer, browser or mobile device, including your IP or device address or ID, browser or device type, hardware and software settings, the pages or sites you visit before or after the Site, the pages you view, your actions on the Site, and the dates and times you access it.

We use cookies (small text files) to recognise your browser, analyse page flow, customise content, measure promotional effectiveness, and promote trust and safety. You are free to decline cookies if your browser permits, although doing so may interfere with your use of certain features. We may also use Google Analytics or a similar service, the use of which may be subject to the Google Analytics Terms of Use and Google Privacy Policy. You can opt out of Google's use of cookies via Google's Ads Settings or the Google Analytics Opt-out Browser Add-on.

3. How we use your information

We use the information we collect to:

• Provide the products, services and information you request and fulfil your orders;
• Process payments, arrange delivery and provide customer support;
• Operate, maintain, personalise and improve the Site, our products and our services;
• Detect, prevent and address fraud, abuse, security and technical issues;
• Send administrative communications (such as order confirmations, dispatch and delivery updates, account notices and changes to our policies);
• With your consent where required, send marketing communications such as offers, newsletters and product updates (you can opt out at any time — see Section 5 and our Terms of Service);
• Comply with our legal and regulatory obligations.

We process Personal Data on the basis of your consent and/or for the legitimate and lawful purposes described above, as permitted under the DPDP Act and other applicable law.

4. When we disclose your information

We may disclose aggregated or de-identified information without restriction. We may disclose Personal Data:

• To our service providers and data processors (such as website hosting, data storage, payment processing, logistics and courier partners, email/SMS/WhatsApp providers, and analytics and advertising platforms) who process it on our behalf and under appropriate obligations of confidentiality and security;
• If required to do so by law, or in good faith to comply with legal obligations, respond to lawful requests by public authorities, enforce our Terms, protect against fraud or unlawful activity, or protect the rights, property or safety of Big Bear Farms, our users or others;
• To a buyer or successor in the event of a merger, acquisition, restructuring or sale of assets;
• For any other purpose disclosed to you at the time you provide the information, or with your consent.

We do not sell your Personal Data to third parties.

5. Your choices and rights

You may decline to share certain information with us, in which case we may be unable to provide some features of the Site. Once registered, you may update, correct or delete your profile information through your account preferences.

If you do not wish to receive marketing emails or messages, you can opt out at any time via the unsubscribe link in any email, by replying STOP where supported, by updating your account preferences, or by contacting us at orders@bigbearfarms.in. Opting out of marketing will not affect transactional messages essential to your orders.

Your rights as a Data Principal: Subject to applicable law (including the DPDP Act), you have the right to:

• Access a summary of the Personal Data we process about you and the processing activities undertaken;
• Correction, completion, updating and erasure of your Personal Data;
• Withdraw your consent at any time (this will not affect the lawfulness of processing carried out before withdrawal);
• Grievance redressal in respect of our processing of your Personal Data; and
• Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, please contact our Grievance Officer (Section 11). We may need to verify your identity before acting on a request, and we may decline or restrict requests as permitted by law. We will respond within the timelines required under applicable law.

6. Children's privacy

The Site is intended for users who are 18 years of age or older. In accordance with the DPDP Act, we will not process the Personal Data of a child (a person under 18 years of age) without the verifiable consent of a parent or lawful guardian, and we will not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you are under 18, please do not use the Site or provide us with information without the involvement of your parent or guardian. If we learn that we have collected a child's Personal Data without the required consent, we will take appropriate steps to delete it. Parents or guardians who believe their child has provided us information may contact us at orders@bigbearfarms.in.

7. Data retention

We retain Personal Data for as long as necessary to fulfil the purposes described in this Privacy Notice, to provide our products and services, and to comply with our legal, accounting, tax and regulatory obligations. When Personal Data is no longer required, we will delete or anonymise it, except where retention is required or permitted by law. We may retain backup, archival, fraud-prevention and analytics records for a reasonable period.

8. Data security

We use reasonable physical, managerial and technical safeguards designed to protect the integrity and security of your Personal Data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Any transmission of information to us is at your own risk. In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals as required under applicable law.

9. Transfers and visitors from outside India

The Site is controlled and operated by Alternate Foods, dba Big Bear Farms, in India. If you access the Site from outside India, you acknowledge that your information will be transferred to and processed in India. Where we transfer Personal Data outside India, we do so in accordance with applicable law. Depending on the jurisdiction in which you reside, you may have additional rights regarding your Personal Data; please contact us to exercise them.

10. Do Not Track and changes to this Notice

Because there is no industry standard for "Do Not Track" signals, the Site does not currently respond to such browser settings. We reserve the right to update this Privacy Notice at any time. We will notify you of significant changes by posting a prominent notice on the Site or by email where appropriate. Please revisit this page periodically to stay informed.

11. Grievance Officer and contact information

For any questions, requests or complaints regarding this Privacy Notice or your Personal Data, please contact our Grievance Officer:

Alternate Foods dba Big Bear Farms Attn: Grievance Officer / Privacy Johnsons Orchards, PO Raison, Dist. Kullu, Himachal Pradesh, India – 175 128 Email: orders@bigbearfarms.in Phone/WhatsApp: +91-9805177770 (Mon–Sat, 10 AM – 6 PM IST)

We aim to acknowledge requests and complaints within 48 hours and to resolve them within the timelines required under applicable law.