top of page

Privacy Policy

Big Bang Story Privacy Policy

1. Introduction

Big Bang Story ("we," "us," or "our") is committed to protecting the privacy of your personal data. This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit our website www.bigbangstory.com (the "Website") and use our services (the "Services").

2. Point of Contact for Privacy Inquiries

3. Data Controller/Processor

  • EU/UK: Big Bang Story acts as the data controller for personal data collected within the EU/UK. 

  • Other Jurisdictions:

    • India: Big Bang Story acts as the data controller under the Digital Personal Data Protection Act, 2023 (DPDPA).

    • USA: Big Bang Story adheres to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) as a business.

    • UAE: Big Bang Story complies with the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

4. Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with our website and services:

  • Identity Data: Name, email address, postal address, phone number, username, etc.

  • Contact Data: Email address, phone number, postal address.

  • Technical Data: IP address, browser type, operating system, device identifiers, cookies, usage data.

  • Usage Data: Information about how you use our Website and Services.

  • Marketing and Communications Data: Your preferences for receiving marketing communications.

5. Legal Basis for Processing

We process your personal data based on the following legal bases, depending on the specific circumstances and the jurisdiction:

  • Consent: In certain cases, we will ask for your explicit consent to process your personal data.

  • Contractual Necessity: We may need to process your personal data to fulfill our contractual obligations with you.

  • Legal Obligation: We may be required by law to process your personal data.

  • Vital Interests: We may process your personal data where necessary to protect your vital interests or the vital interests of another person.

  • Public Task: We may process your personal data where necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

  • Legitimate Interests: We may process your personal data for our legitimate interests, such as improving our services or marketing our products, provided these interests are not overridden by your rights and interests.

We will specify the applicable legal basis for processing your personal data in each case.

6. How We Use Your Personal Data

We may use your personal data for the following purposes:

  • To provide and maintain our Services.

  • To communicate with you about your use of our Services.

  • To personalize your experience on our Website and Services.

  • To send you marketing and promotional communications (with your consent where required).

  • To analyze and improve our Website and Services.

  • To comply with legal obligations.

7. Disclosure of Your Personal Data

We may disclose your personal data to third parties in the following circumstances:

  • Service Providers: We may share your personal data with third-party service providers who help us operate our Website and Services. These service providers are obligated to protect your personal data in accordance with this Privacy Policy.

  • Business Partners: We may share your personal data with business partners to offer you certain products or services.

  • Legal Authorities: We may disclose your personal data to law enforcement agencies or other government officials if required by law or if we believe such disclosure is necessary to protect the rights, property, or safety of ourselves or others.

  • Merger or Acquisition: In the event of a merger, acquisition, or other business transaction, we may transfer your personal data to the successor or acquirer.

8. International Data Transfers

EU/UK: If we transfer your personal data outside the European Economic Area (EEA) or the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data, such as:

*   Adequacy decisions by the European Commission or the UK government.

*   Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office (ICO).

*   Binding Corporate Rules (BCRs).

India: Cross-border transfers of personal data will be conducted in compliance with the Digital Personal Data Protection Act, 2023, and any applicable regulations.

USA: We may transfer personal data to the United States or other countries where our service providers are located. We will ensure that appropriate safeguards are in place to protect your personal data, such as relying on Standard Contractual Clauses or other legally recognized transfer mechanisms.

UAE: Transfers of personal data outside the UAE will be conducted in accordance with Federal Decree-Law No. 45 of 2021, which may require obtaining consent from the data subject or ensuring that the recipient country provides an adequate level of data protection.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, use, disclosure, alteration, or destruction. These measures include:   

  • Data encryption.

  • Firewalls.

  • Access controls.

  • Regular security assessments.

10. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.   

11. Your Rights

You have certain rights regarding your personal data, depending on your jurisdiction. These rights may include:

  • Right of Access: You have the right to request access to the personal data we hold about you.

  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.   

  • Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data under certain circumstances.   

  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.   

  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.   

  • Right to Object: You have the right to object to the processing of your personal data under certain circumstances.   

  • Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.   

  • Rights Related to Automated Decision-Making: You may have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.   

 

To exercise your rights, please contact us using the contact details provided in Section 2.

Specific Information for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

  • Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of the information, the purposes for collecting it, and the categories of third parties with whom we share it.   

  • Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.

  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information.   

  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.   

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on our Website.   

14. Contact Us

If you have any questions about this Privacy Policy, please contact us using the contact details provided in Section 2.

bottom of page