Website Privacy Notice

At Godrej & Boyce Mfg. Co Ltd (hereinafter referred to as “Godrej”), we take your privacy very seriously and are committed to protect your personal data. This Privacy Notice sets out the way in which we collect, use, disclose, transfer, and store your personal data when you use our website or other digital platforms.

You are advised to carefully read the Privacy Notice before using this website.

Please note that our website and other digital platforms may contain links to third party websites / digital platforms which are provided for your convenience. We are only responsible for the privacy practices and security of our own digital platforms. We recommend that you check the privacy and security policies and procedures of each and every other website / digital platform that you visit.

1. COLLECTION AND USE OF PERSONAL DATA

A. Personal data is data that can be used to identify or contact a single person (including but not limited to name, address, e-mail address, user name, telephone number, age, date of birth, gender, education qualifications, posts and other content you submit to our sites, sensitive information such as information relating to your health life).

B. All personal data that we collect about you will be recorded, used, and protected by us in accordance with applicable data protection legislation and this Privacy Notice. We may supplement the information that you provide with other information that we obtain from our dealings with you or which we receive from other organisations, for example, our sponsors and partners. Please note, if you don’t choose to provide us with the requested personal data, we will be unable to offer you our products or services.

In broad terms, we use your personal data for the following purposes:

• To administer and provide products and services you request or have expressed an interest in
• To communicate with you in the event that any products or services you have requested are unavailable
• For fraud screening and prevention purposes
• For record keeping purposes
• To carry out market research so that we can improve the products and services we offer
• To track your activity on our digital platforms
• To create an individual profile for you so that we can understand and respect your preferences
• To personalise and improve your experience on our digital platforms
• To personalise and/ tailor any communications that we may send you , with your consent

C. When we provide you with products or services we may collect and store any personal data that you provide to us. We may, for example, keep a record of your name, address, delivery address, email address, telephone number and payment card details. We may also record details of any disability or health needs that you may have.

D. When you sign up with us for an online account, register to receive our newsletter and marketing communications from us (and/or our sponsors and partners), fill in one of our forms (whether online or offline) or otherwise expressly provide us with your personal data, we may collect and store any personal data that you provide to us and may use it to personalise and improve your experience on our digital platforms, provide products and services you request from us, and carry out profiling and market research.

E. When you interact with our digital platforms, we may also automatically collect the following information about your visit. This is primarily to help us better understand how you use our digital platforms to enable us create better content and more relevant communications:

• How you have reached our digital platform and the internet protocol (IP) address you have used
• Your browser type, versions and plug-ins, and your operating system
• Your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
• What content you like or share
• Which adverts you saw and responded to
• Which pop up or push messages you might have seen and responded to
• Your subscription status
• Information collected in any forms you complete

F. We may also infer your country of location from the IP address you have used to access our digital platforms and we may analyse which marketing activity led to your taking specific action on our digital platforms (e.g. downloading the app).

2. OFFERS AND OPPORTUNTIES FROM US AND OUR PARTNERS

A. We want you to be the first to know about new products and services, and occasional offers from our partners. We may share these offers with you only with your prior consent. You can unsubscribe from receiving these offers by emailing us. Please note, if you don’t choose to receive this information, we will be unable to keep you informed of new services, products, events or special offers that may interest you and our ability to inform you of ticketing opportunities may be affected.

3. LEGITIMATE PROCESSING OF INFORMATION:

A. We may process your personal information for legitimate interests, including providing you with services and for service improvement purposes.

B. It may be deemed necessary to process personal information for the following (but not limited to) purposes of legitimate interests by us or our third parties such as:

• To deliver services in respect to requests raised by you.
• To ensure continued relationship with our customers, partners or suppliers.
• To prevent misuse or fraudulent activities on our platforms.
• To uphold performance of contracts to which the data subject is a part of .
• In interests deemed to protect the vital interest of the data subject .
• In order to maintain compliance with legal obligations to which Godrej is a subject.

C.The company takes special consideration to ensure that the legitimate processing of information do not override the fundamental rights and freedoms of the data subjects.

4. CHILDREN

A. We understand the importance of taking extra precautions to protect the privacy and safety of children using Godrej's products and services.

B. If you are under the age of 16, you must first tell your parent or legal guardian that you wish to register on our digital platforms and get their consent. You must make sure that your parent or legal guardian knows and agrees each time before you:

• Email us, or ask us to email anything to you;
• Send any information to us;
• Enter any competition or game that requires information about you or offers a prize;
• Purchase an official membership; or
• Offer or agree to buy anything online.

5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

A. As a global business, Godrej may share your personal data with Godrej’s subsidaries, partners, service providers and other trusted third parties based outside the country in which you live so that they may process that data on our behalf as necessary, in connection with providing our products and services to you, fulfilling contractual arrangements and legal or regulatory requirements. Godrej requires that its service providers and such other third parties keep your personal data confidential and that they only use the personal data in furtherance of the specific purpose for which it was disclosed.

B. We may share your personal data with:

• Law enforcement or government authorities where they have followed due legal process to request us to disclose the information
• Third party providers of services and web analytics tool providers, if you have any queries about our third party service providers, then you may contact us. (contact details included in the later part of this notice).

6. TRANSFERRING YOUR PERSONAL DATA

A. We may transfer your personal data to servers located outside the country in which you live or to affiliates or other trusted third parties based in other countries so that they may process personal data on our behalf. By using a Godrej site or otherwise providing Godrej with personal data, you agree to us doing so in accordance with the terms of this Privacy Notice and applicable data protection laws and regulations. Godrej will ensure to a reasonable extent that anyone processing your personal data outside your country of origin is required to implement measures to protect it and is only entitled to process it in accordance with Godrej’s instructions.

7. RETENTION OF PERSONAL DATA

A. You are responsible for providing Godrej with accurate and complete personal data. Please notify us of any changes to your personal data. Godrej shall take reasonable steps to ensure that your personal data is kept accurate, complete, and current.

B. We will retain your personal data for the period necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

8. COOKIES

A. In common with many other website operators, we use standard technology called 'cookies' on our website. Cookies are small pieces of information that are stored by your browser on your computer's hard drive and they are used to record how you navigate this website on each visit.

B. We automatically collect and temporarily store the following information about your visit:

• The name of the domain you use to access the Internet;
• The date and time of your visit;
• The pages you visited; and
• The address of the web site you came from when you came to visit

C. We use this information for statistical purposes and to help us make our site more useful to visitors. Unless it is specifically stated otherwise, no additional information will be collected about you.

9. SAFEGUARDING YOUR PERSONAL DATA

A. We take all reasonable precautions to keep your personal data secure and require any third parties that handle or process your personal data for us to do the same. Access to your personal data is restricted to prevent unauthorised access, modification or misuse and is only permitted among our employees and agents on a need-to-know basis.

10. YOUR PRIVACY RIGHTS AND WHO TO CONTACT

A. We provide you with reasonable access to view and review your personal data and request correction and deletion where appropriate. In order to protect your privacy, we will take reasonable steps to verify your identity before granting access to your personal data.

B. If you have any questions, comments or concerns about how we handle your personal data, then you may contact us at gdpr@godrej.com.

C. You have the right to tell us if you:

• Don't want to be contacted in the future by us
• Would like a copy of the personal data which we hold about you
• Would like to delete your personal data in our records
• Wish to report any misuse of your personal data
• Would like to correct or update your personal data

D. To exercise any of the above listed rights you may contact us. To assist us in dealing with your request, please provide your full name, address, date of birth and email address.

E. If you have subscribed to receive marketing communications, you can unsubscribe by contacting us on the details mentioned.

11. CHANGES TO OUR PRIVACY NOTICE

A. We may change our Privacy Notice from time to time and post the updated version of the same. We encourage you to visit frequently to stay informed about how we use your personal data.

12. HANDLING PRIVACY CONCERNS

A. If you have any questions about this Privacy Notice or if you believe that your personal data is not handled in accordance with the applicable law or this notice, then you may contact us at gdpr@godrej.com.