- OVERVIEW
Aditya Birla Management Corporation Private Limited (hereinafter referred to as “the Company” or “our” or “we” or “us”) respect your privacy and are committed to protecting your personal data. This Privacy Notice (“Privacy Notice”) describes how we collect, store, use, disclose and process your personal data and tells you about your privacy rights.
- Binding Nature
Our websites, applications and services (collectively the “Services”) are not intended for children, and we do not knowingly collect data relating to children as part of our Services. Under Indian laws, a child is a person under 18 years of age. By accessing or using our Services or otherwise giving us your information, you will be deemed to have the capacity to enter into a legally binding contract in accordance with applicable law in the jurisdiction from which you are accessing our Services. You will consequently be deemed to have read, understood and agreed to the practices and procedures outlined in this Privacy Notice.
- Changes To The Privacy Notice
We review and update this Privacy Notice from time to time. When we do, we will note the date of the version on the Privacy Notice and post it on this website. You can tell when we last updated this Privacy Notice by checking the “Last Updated” date at the top of this Privacy Notice. You also may obtain historical versions of this Privacy Notice by contacting us.
- Third-Party Links
Our website and mobile application may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. This Privacy Notice does not apply to information that is collected by any third-party website or service that you may access through our Services.
- THE DATA WE COLLECT ABOUT YOU
Personal data, or personal information, means any information about an individual from which that individual can be identified. It does not include data where the identity has been removed (anonymous data). The Company may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, marital status, title and gender of yourself and your family members that you choose to register for our Services;
- Contact Data includes residential address, email address and telephone/mobile numbers;
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website;
- Profile Data includes your username and password, Services availed by you through our mobile application, your preferences, feedback and survey responses;
- Usage Data includes information about how you use our website, applications and Services;
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
The Company also collects, uses and shares aggregated data such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature within our Services.
We do not knowingly collect any personal data of a sensitive nature such as financial data or health records. Please refrain from sharing such types of personal data with us, or through our website and mobile application.
- HOW WE COLLECT & USE YOUR PERSONAL DATA
- Grounds of Processing
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in any of the following circumstances:
- Where you have provided your consent to use such personal data.
- Where you have voluntarily provided the personal data for a specified purpose
- For fulfilling a legal obligation
- Pursuant to any other legitimate uses prescribed under the applicable data privacy law.
- Cookies
We use cookies and similar tracking technology (collectively, “cookies”) to collect and use personal information about you, including to serve interest-based advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website or application may become inaccessible or not function properly.
- DISCLOSURES OF YOUR PERSONAL DATA
We may have to share your personal data with the parties set out below for the purposes set out in the table above.
- Other institutions or companies in the Aditya Birla Group.
- Professional advisors, government/regulatory authorities and other parties as required under the applicable law.
- Third party service providers from whom we avail services for carrying out our business activities.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.
The Company requires all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions unless the applicable law permits otherwise.
- DATA SECURITY
The Company has put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They are only permitted to process your personal data on our instructions and are subject to a duty of confidentiality.
You are responsible for maintaining the security of your account credentials and other authentication involved in obtaining access to password-protected or secure areas of the Services. The Company will treat access to the Services through your account credentials as having been authorized by you. We shall bear no liability in respect of such unauthorized use of your account. Unauthorized access to password-protected or secure areas is prohibited and may lead to prosecution under the applicable laws. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. If you believe that information you provided to us is no longer secure, please notify us immediately using the contact information provided below.
- DATA RETENTION
We retain the personal data collected or otherwise processed by us, (i) for as long as necessary to fulfill the purposes for which you provided the information, (ii) for the purposes of satisfying any legal/regulatory, accounting, or reporting obligations, (iii) to resolve disputes, and (v) for such other purposes as are permitted under applicable law.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements that may require or permit retention for a longer duration.
- YOUR RIGHTS & DUTIES
- Your Legal Rights
Under the Digital Personal Data Protection Act, 2023 of India (“DPDPA”), you have the following rights with respect to your personal data, subject to certain exemptions:
- Right to Access. You may request a summary of your personal data in our records, the identities of other parties that we have shared the personal data with and any other information that may be prescribed under the applicable law.
- Right to Correct and Erase. You may request us to correct, complete, update or erase your personal data from our records.
- Right to Withdraw Consent. Where we have taken your consent to process your personal data, you have the right to withdraw such consent. However, in certain cases we may not be able to continue providing you with access to our Services or certain parts of it, if we cannot process the personal data essential for enabling the provision of such Services. We will inform you if that is the case.
- Right of Grievance Redressal. You have the right to register a grievance with respect to the processing of your personal data by us.
- Right to Nominate. You have the right to nominate any other individual to exercise your rights under the DPDPA in the event of your incapacity or death.
If you wish to exercise any of the above rights, you may contact us at +91 8657719948. You also have the right to lodge a complaint with the Data Protection Board of India if you believe we have violated any of your rights.
- Your Duty To Inform Us Of Changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. You may make the changes on the mobile application or website on your own, or where that is not possible, you may contact us at the above email address.