Privacy Policy

Indo Bio Organics Inc. (IBO)
Last Updated: October 28, 2026

Indo Bio Organics Inc. ("IBO", "we", "us", or "our") respects your privacy and is committed to protecting personal information collected through www.indobioorganics.com.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when customers visit our website, purchase products, or communicate with us. It applies to customers in Canada, including Quebec, and the United States, subject to applicable privacy laws.

1. Information We Collect

We may collect:

• Names, billing and shipping addresses, email addresses, and telephone numbers.

• Order details, purchase history, and transaction information.

• Payment-related information processed through authorized payment providers.

• Customer inquiries, correspondence, and support requests.

• IP addresses, device information, browser details, cookies, and website activity.

• Marketing preferences and consent records.

Information may be collected directly from customers, automatically through website technologies, or through authorized service providers.

2. How We Use Personal Information

We use personal information to:

• Process payments, fulfill orders, and arrange shipping.

• Provide customer support and manage returns or disputes.

• Send order confirmations and delivery updates.

• Maintain website functionality, security, and fraud prevention.

• Analyze website performance and improve customer experience.

• Conduct marketing and advertising activities where legally permitted.

• Comply with applicable legal, accounting, tax, and regulatory obligations.

We collect and use information for identified, reasonable, and lawful purposes.

3. Payment Processing

Payments are processed through authorized third-party payment providers.

IBO does not intentionally store complete payment card numbers or security codes on its own systems.

Payment providers handle transaction information according to their applicable privacy and security practices.

4. Sharing Personal Information

We may share necessary personal information with:

• Website hosting and e-commerce providers, including Shopify.

• Payment processors and fraud-prevention services.

• Shipping carriers and logistics providers.

• Customer-support and email service providers.

• Analytics and advertising providers, where enabled.

• Professional advisers, regulatory authorities, and other parties where legally required.

We may also disclose information in connection with a lawful business transaction.

We do not sell customer lists for monetary consideration. Certain advertising or analytics disclosures may qualify as a sale, sharing, or targeted advertising under applicable US privacy laws, depending on the technologies used.

We will provide applicable disclosures and privacy choices where legally required.

5. Cookies and Tracking Technologies

Our website may use cookies, pixels, and similar technologies to:

• Maintain shopping cart and checkout functionality.

• Remember website preferences.

• Measure website traffic and performance.

• Understand customer interactions.

• Support advertising and marketing activities where enabled.

Some cookies are necessary for website operation, while others support analytics, personalization, or advertising.

Where required by applicable law, we will obtain consent before activating non-essential tracking technologies.

Customers may manage available privacy preferences through website controls or browser settings.

Disabling certain cookies may affect website functionality.

6. Email Marketing

We may send promotional emails, product announcements, and special offers where customers have provided appropriate consent or where otherwise permitted by law.

Marketing communications will include an unsubscribe mechanism where required.

Customers may withdraw marketing consent at any time using the unsubscribe link or contacting IBO.

Transactional communications relating to orders, payments, shipping, and customer service may continue where necessary or legally permitted.

7. International Data Transfers

Personal information may be processed or stored by IBO and its authorized service providers in Canada, the United States, or other jurisdictions.

Information processed outside a customer's province or country may be subject to the laws of the jurisdiction where it is processed, including lawful access by government authorities.

IBO will take reasonable steps to protect personal information transferred internationally and comply with applicable cross-border privacy requirements.

8. Data Security and Retention

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information to protect personal information against unauthorized access, disclosure, loss, or misuse.

Personal information is retained only as long as reasonably necessary for order fulfillment, customer service, accounting, tax compliance, dispute resolution, and other lawful purposes.

When information is no longer required, it will be securely deleted, destroyed, or anonymized as permitted by applicable law.

9. Privacy Rights — Canadian Customers

Subject to applicable Canadian privacy laws, customers may request:

• Access to personal information held by IBO.

• Correction of inaccurate or incomplete information.

• Withdrawal of consent for certain uses or disclosures.

• Information about our privacy practices.

• Review of a privacy-related complaint.

Requests may be submitted to support@indobioorganics.com.

We may require reasonable identity verification before responding.

10. Additional Privacy Rights — Quebec Residents

For customers whose personal information is subject to Quebec's private-sector privacy legislation, including requirements introduced by Law 25, additional rights and protections may apply.

Subject to applicable conditions and exceptions, Quebec residents may request:

• Access to personal information and correction of inaccuracies.

• Withdrawal of consent where legally available.

• Deletion or cessation of certain uses or disclosures.

• Portability of eligible computerized personal information.

• Information about automated decisions involving their personal information.

• Information regarding the collection, use, and disclosure of their personal information.

Where required, IBO will obtain appropriate consent for technologies used to identify, locate, or profile individuals and provide relevant privacy controls.

IBO will comply with applicable requirements concerning privacy impact assessments and disclosures of personal information outside Quebec.

Quebec residents may contact our Privacy Officer regarding privacy requests or complaints.

11. Additional Privacy Rights — United States Residents

Residents of certain US states, including California, may have additional privacy rights where applicable state privacy legislation applies to IBO.

Depending on the jurisdiction and applicable legal requirements, these rights may include:

• Requesting access to personal information.

• Requesting correction or deletion of personal information.

• Requesting information about how personal information is used or disclosed.

• Opting out of qualifying sales, sharing, or targeted advertising.

• Requesting portability of eligible personal information.

• Appealing certain privacy request decisions where required.

• Exercising applicable privacy rights without unlawful discrimination.

Where legally required, IBO will provide mechanisms to exercise these rights, including applicable advertising opt-out controls and recognition of qualifying browser-based privacy signals.

Privacy requests may be submitted to support@indobioorganics.com.

Certain information may be retained where necessary to comply with legal obligations, complete transactions, prevent fraud, or exercise other lawful exceptions.

12. Children's Privacy

Our website is intended for individuals legally capable of entering into purchase agreements.

We do not knowingly collect personal information from children without appropriate authorization or consent where required by applicable law.

If we become aware of inappropriate collection, we will take appropriate corrective action.

13. Privacy Incidents

IBO will assess suspected privacy or security incidents and take appropriate corrective action.

Where required by applicable law, we will notify affected individuals and relevant regulatory authorities and maintain required incident records.

14. Third-Party Websites

Our website may contain links to external websites.

IBO is not responsible for the independent privacy practices of third-party websites. Customers are encouraged to review their respective privacy policies.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in business practices, technologies, or legal requirements.

Updates will be published on our website with a revised effective date.

16. Privacy Officer and Contact Information

For privacy-related questions, requests, or complaints, please contact:

Indo Bio Organics Inc.

Privacy Contact: Privacy Officer

Email: support@indobioorganics.com

Website: www.indobioorganics.com

We will review and respond to privacy requests in accordance with applicable law.