INDEX

• OVERVIEW
• WHAT DATA WE COLLECT ABOUT YOU
• WHY WE COLLECT YOUR DATA
• HOW WE COLLECT YOUR DATA
• WHO DO WE DISCLOSE YOUR DATA TO
• HOW WE PROTECT YOUR DATA
• HOW LONG WE RETAIN YOUR DATA
• WHAT ARE YOUR RIGHTS & DUTIES

1. OVERVIEW

Aditya Birla Group (hereinafter referred to as “the Company” or “our” or “we” or “us”) respect your privacy and are committed to protecting your personal data. This Privacy Notice (“Privacy Notice”) describes how we collect, store, use, disclose and process your personal data and tells you about your privacy rights.

PLEASE READ THIS PRIVACY NOTICE IN DETAIL BEFORE YOU START USING THE SERVICES.

1.1 Binding Nature

Our websites, applications and services (collectively the “Services”) are not intended for children, and we do not knowingly collect data relating to children as part of our Services. Under Indian laws, a child is a person under 18 years of age. By consenting to and accepting our Privacy Notice, you will be deemed to have the capacity to enter into a legally binding contract in accordance with applicable law in the jurisdiction from which you are accessing our Services. You will consequently be deemed to have read, understood and agreed to the practices and procedures outlined in this Privacy Notice.

1.2 Changes To The Privacy Notice

We review and update this Privacy Notice from time to time. When we do, we will note the date of the version on the Privacy Notice and post it on this website. You can tell when we last updated this Privacy Notice by checking the “Last Updated” date at the top of this Privacy Notice. You also may obtain historical versions of this Privacy Notice by contacting us.

1.3 Third-Party Links

Our website and mobile application may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. This Privacy Notice does not apply to information that is collected by any third-party website or service that you may access through our Services.

2. WHAT DATA WE COLLECT ABOUT YOU

Personal data, or personal information, means any information about an individual from which that individual can be identified. It does not include data where the identity has been removed (anonymous data). The Company may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes name, username or similar identifier, title, designation, organization name
• Contact Data includes email address and telephone/mobile numbers;
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Services;
• Profile Data includes your username and password, your interests, preferences, feedback and survey responses;
• Usage Data includes information about how you use our website, applications and Services;
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

The Company also collects, uses and shares aggregated data such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature within our Services.

3. WHY WE COLLECT YOUR DATA

We process your personal data for the following purposes:

• For monitoring the security of our Services
• To send you updates related to your account, respond to your inquiries and provide you support.
• To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
• To make suggestions and recommendations to you about Services that may be of interest to you.
• To inform you of offers, discounts and other schemes made available by us or through us by other parties.
• To analyse user behaviour for understanding demographics, preferences and trends to help improve our Services and take informed business decisions.
• For fulfilling our obligations under applicable laws and regulations or as required under a judgement or order issued under any law for the time being in force.

4. HOW WE COLLECT YOUR DATA

4.1 Direct Interactions

We collect your personal data directly from you when you correspond with us, register on or visit our website, or attend an event organized by us.

4.2 Cookies

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. For more information on the cookies collected on our website, please visit our Cookie Notice.

4.3 Grounds of Processing

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in any of the following circumstances:

• Where you have provided your consent to use such personal data.
• Where you have voluntarily provided the personal data for a specified purpose
• For fulfilling a legal obligation
• Pursuant to any other legitimate uses prescribed under the applicable data privacy law.

5. WHO DO WE DISCLOSE YOUR DATA TO

We may have to share your personal data with the parties set out below for the purposes set out in the table above.

• Third party service providers from whom we avail services for carrying out our business activities.
• Professional advisors, government/regulatory authorities and other parties as required under the applicable law.
• Other entities within the Aditya Birla Group.
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

Unless otherwise prohibited under the applicable law, your personal data may be transferred to, and processed outside the country in which you reside. However, please be assured that we require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions unless the applicable law permits otherwise.

6. HOW WE PROTECT YOUR DATA

The Company has put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They are only permitted to process your personal data on our instructions and are subject to a duty of confidentiality.

You are responsible for maintaining the security of your account credentials and other authentication involved in obtaining access to password-protected or secure areas of the Services. The Company will treat access to the Services through your account credentials as having been authorized by you. We shall bear no liability in respect of such unauthorized use of your account. Unauthorized access to password-protected or secure areas is prohibited and may lead to prosecution under the applicable laws. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. If you believe that information you provided to us is no longer secure, please notify us immediately using the contact information provided below.

7. HOW LONG WE RETAIN YOUR DATA

We retain the personal data collected or otherwise processed by us, (i) for as long as necessary to fulfill the purposes for which you provided the information, (ii) for the purposes of satisfying any legal/regulatory, accounting, or reporting obligations, (iii) to resolve disputes, and (iv) for such other purposes as are permitted under applicable law.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements that may require or permit retention for a longer duration.

8. WHAT ARE YOUR RIGHTS & DUTIES

8.1 Your Legal Rights

The rights available to you with respect to your personal data may differ based on your geographic location. You may contact us for more information on the specific rights available to you. Following are some of the rights prescribed under various laws:

• Right to Access. You may request a summary of your personal data available in our records, the identities of other parties that we have shared your personal data with and any other information that may be prescribed under the applicable law.
• Right to Correct or Erase. You may request us to correct, complete, update or erase your personal data from our records.
• Right to Withdraw Consent. Where we have taken your consent to process your personal data, you have the right to withdraw such consent. However, in certain cases we may not be able to continue providing you with access to our Platform or certain parts of it, if we cannot process the personal data essential for enabling the provision of such Platform. We will inform you if that is the case.
• Right to Object. If you are a resident of the EU or the UK, you may also have the right to object to the processing of your personal data if you believe it impacts your fundamental rights and freedoms
• Right of Grievance Redressal. Under the Digital Personal Data Protection Act, 2023 of India (“DPDPA”), you have the right to register a grievance with us with respect to the processing of your personal data.
• Right to Nominate. The DPDPA also gives you the right to nominate any other individual to exercise your rights under the DPDPA in the event of your incapacity or death.

Please note that some of the above rights may be subject to certain exemptions under the applicable data protection law.

If you wish to exercise any of the above rights, you may contact us at abg.careers@adityabirla.com. You also have the right to lodge a complaint with the relevant data protection authority in your country, if you believe we have violated any of your rights.

8.2 Your Duty To Inform Us Of Changes

It is important that the personal data we hold about you is accurate and current. Whenever there is a change, you must promptly make the changes by logging into your account on the mobile application or website. We will rely on the information made available by you to us.