Privacy Policy

This Privacy Notice applies to all personal data We collect in connection with various products and services offered by Companies by the Marico Group, either directly or indirectly through a third party acting on our behalf. We collect personal data in compliance with the Digital Personal Data Protection Act (DPDPA), 2023 and other applicable law(s) for time being in force

We may collect personal data elements across different processes for the purposes as set out in this Privacy Notice, including but not limited to:

Personal identifiable information:Elements such as name, email address, postal address and phone number.

Demographic information and your interests:Personal data elements compromising of date of birth, gender, location (postal code), favorite products, interests, professional details, hobbies, and other lifestyle information.

Login information:This includes username and password that you create to access your account

Service history:Order history and purchase patterns

Financial information:Payment instrument details such as a credit card information and mode of payment details

Platform usage information:Personal data collected through cookies including IP address, device ID, location data, computer, and connection information such as browser type and version, time zone setting, browser plug-in types and versions, and operating system

Product usage experience:Includes your personal experience about using our products/ services, including any grievance/ complaints that you raise with us.

Collection of personal data

• Online platform :We collect personal data when you come in contact :We collect personal data when you come in contact :We collect personal data when you come in contact with one or more of Marico Group’s online platforms, for example, when you sign up for a newsletter, fill a survey, register an account, create a profile, or make a purchase
• Other channels : We may collect personal data from you offline, through following mechanisms:
  Contact customer care or reach out to us with any other inquiry;
  When you participate in any event or campaign or promotion activities
• From other Sources : We may obtain your personal data from other indirect sources that include:
  Publicly available databases and sources;
  Data companies
  Joint marketing partners;
  Third parties working on behalf of us including agencies;
  Social media account details (based on the permissions given by you) when you use to create login in our account(s) or connect to any account offered by us
• Automatically: We may use “cookies”, pixels, web beacon, applications, software and similar technologies to receive and store certain types of information about your online interaction with us. These may include session information, page response times, page interaction information, and methods used to browse away from the page. We may also collect information to help us identify your device for fraud prevention and diagnostic purposes
• Data provided to Marico Group companies: Where you have shared any information previously with any entity in the Marico Group, such entity may further share such information with other entity(ies) within the group. Some entities within the Group may collect “special categories of personal data” for specific purpose with your explicit consent. * Special Categories of Personal Data may mean and include include personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, financial data, biometric data, data concerning health, or data concerning a natural person's sex life or sexual orientation, personal data relating to offences, criminal proceedings and convictions, or personal data relating to a child or persons with disabilities
• Processing personal data of a child or person with disability with special care
  We do not intend to directly collect personal data from children below the age of (18). If we identify that we have unintentionally collected personal data from a child below the age of 18, we will remove that child's personal data from our records as soon as practical.
  Personal data collected may be used to perform age verification to enforce parent or guardian consent
• Using your personal data for identified purposes
  We may use your data in manners including but not limited to
  Order processing/ fulfilment:
  To process and ship your orders and to inform you about the status of your orders.
  To process order returns for products you purchase on our platforms.
  Order support:
  For consumer service purposes including responding to your enquiries, examples include,
  order status, product support, product question/ complaint, and general feedback.
  For product and service personalization based on your based interaction with us.
  Events, campaigns and other marketing promotions:
  To invite participation in competitions, contests, sweepstakes and communicate products promotions from Brands across the Marico Group.
  To communicate information to you and to manage your subscription to our newsletter(s) or other promotional communications.
  To reach out to you about offerings from Brands across the Marico Group.
  To improve our future offerings, including products and services.
  To track products, you buy when you click on one of our display adverts and go on to purchase something from a selection of our retail partners.
  To understand your likes and dislikes to tailor our web content, products, and offerings.
  Research & Other purposes:
  To understand your impression about our products before they are launched. oFor internal training and quality assurance purposes. -
  Consented Data from Third Parties:
  We may also use personal data you have provided to selected third-parties and consented to be shared, like your age, gender, life stage, lifestyle and wider interests to identify people who we think will have similar interests to you and who we believe will be interested in similar advertising.

Within Marico Group, we may share your personal data with our Brands for business and operational purposes and with third parties under the following circumstances.

Third Parties:

• Third Party Service Providers help us run our business processes, for examples include, order processing, payment collection, website hosting, process payments, research companies, support services, website development, etc.
• Other Third Parties include advertisers, advertising networks, advertising servers, social media networks, and analytics companies or other third-parties in connection with marketing, promotional and other offers, as well as product information.
• Third Party Service Providers are only allowed to process your personal data on our behalf for the specific purposes that they have been onboarded to perform.
• Third Party Service Providers are required to protect and securely process any personal data shared by Marico or its Brands

Business Transfers:

• As Marico Group continues to develop the business, it may sell or purchase assets, subsidiaries or business units. In such transactions, your personal data generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless you consent otherwise). If another entity acquires us, our businesses or substantially all or part of our assets, or assets related to websites, your personal data will be disclosed to such entity as part of the due diligence process and will be transferred to such entity as one of the transferred assets.

Legal purposes:

• We may disclose your personal data to comply with a legal obligation.

Regulatory requirement:

• We will share your personal data with local regulatory bodies for the purpose of investigation or compliance as and when requested.

We use technical and organizational measures to safeguard your personal data. We take every effort to protect your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure.

We have implemented appropriate security safeguards to deal with any suspected personal data or security breach.

If you suspect any misuse or loss or unauthorized access to your personal data, please let us know immediately by contacting our grievance officer (details listed below).

LINKS TO THIRD PARTY SITE/ APPS

• Our website may, from time to time, contain links to and from other websites or applications of third parties. Please note that if you follow a link to any of these websites or applications, such websites or application will apply different terms to the collection and privacy of your personal data, and we do not accept any responsibility or liability for these policies. When you leave our Site, we encourage you to read the privacy policy of every Website or application you visit.

We retain your personal data for as long as necessary to achieve our business purpose(s) specified in this privacy notice and to provide you access to and use of our website, your account(s) on our platform(s), or for other essential purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements and as long as processing and retaining your data is necessary.

Even if we delete your personal data, including on account of exercise of your right to erasure, it may be stored within our backups or on archival media for the purpose of audit, legal, tax or regulatory purposes only

The criteria used to determine our retention periods include

• The length of time we provide the services to you (for example, for as long as you have an account with us or keep using the services);
• The length of time we have an ongoing relationship with you;
• oWhether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); and
• oWhether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, government investigations or regulatory considerations).

You have various rights in relation to your personal data that we hold about you. To get in touch with us about any of your rights under the Digital Personal Data Protection (DPDP) Act 2023, please reach out to our grievance officer. Please note that we may keep a record of your communications to help us resolve any issues which you raise

You may be entitled to the following rights in relation to your personal data:

Right to access:Upon request, the following data about you shall be provided by us:

• a summary of personal data which is being processed by us and the processing activities undertaken performed for such personal data.
• details of all data processors with whom the personal data has been shared along with a detail of the personal data shared.

Right to correction and update:You may request correction of personal data where it is identified that your personal data records are inaccurate, misleading, incomplete or requires update.

Right to erasure:You may request for erasure of your personal data stored with us. Upon receipt of such a request, the personal data shall be erased from our system(s) unless retention of this data is necessary for any of the purpose(s) specified in this notice or for compliance with any law for the time being in force.

Right to grievance redressal:You may raise a grievance with us regarding the performance of our obligation in relation to your personal data or regarding the exercise of your rights pertaining to Data privacy. If your grievance is not addressed, you may further reach out to the Data Protection Board.

Right to nominate:You may exercise your right to nominate an individual who shall exercise data privacy rights on your behalf in the event of your death or incapacity. Incapacity here refers to the inability to exercise rights due to unsoundness of mind or infirmity of body.

Right to withdrawal of consent:Where we have obtained your consent to process your personal data for certain purposes, you may withdraw this consent at any time, and we will cease to carry out the activity that you previously consented to unless we consider that there is an alternative and strong compelling legal basis to justify our continued processing of your personal data for this purpose.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during the period for which we hold it.

For any query or grievance with respect to this privacy statement or to exercise your privacy rights, you can reach out to our grievance officer. Details of the Grievance officer are.

Grievance Officer Name : Mr. Mayuresh Purandare

Address : Marico Limited, 7th Floor, Grande Palladium, 175 CST Road, Kalina, Santacruz (East), Mumbai – 400 098, Maharashtra, India.

Email address : Mayuresh.purandare@marico.com

Contact telephone number : 8097524443

from: 9:30 AM to 5:30 PM from Monday to Friday except Public, National & Festival Holidayss

We may change this privacy statement from time to time. If we make any changes to this policy, we will change the "last updated date" below. You agree that your continued use of our platform after such changes have been published will constitute your acceptance of such revised policy. We will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.

Last updated date: July 15, 2024