You are advised to carefully read this Privacy Notice before using or availing any of our products and/or services.

DEFINITIONS

In this Privacy Notice, the following definitions are used:

Cookies

a small file placed on your device by our website or mobile application when you either visit or use certain features of our website or mobile application. A cookie generally allows a website to remember your actions or preference for a certain period of time.

Data

includes non-personal information, personal information and sensitive personal information about you, which either directly or indirectly in combination with other information, could allow you to be identified when you visit our stores, website and/or mobile application.

Data Protection Laws

any applicable law for the time being in force relating to the processing of Data.

Partners

select third parties (including Tata Group Entities) with whom we have contracts for the businesses described in this Privacy Notice.

Service Providers

includes entities to whom we or other Tata Group Entities will disclose your Data in order to process information for a specific purpose pursuant to written contract.

IRCPL

IRCPL, a company incorporated in India whose registered office is at Ranka Junction, No. 224 (old Sy No.80/3), 4th Floor, Vijinapura, Old Madras Road, K R Puram, Bangalore - 560016, India

Tata Group Entity

Tata Sons Private Limited, and its subsidiaries, affiliates, associate companies and joint venture companies with whom we have a contractual arrangement to, inter alia, share data for the purposes described in this Privacy Notice.

User or you

the natural person who accesses our stores, website or mobile application.

WHAT DATA DO WE COLLECT ABOUT YOU

IRCPL collects Data for various purposes set out in this Privacy Notice.

• Contact information: first and last name, email address, postal address, country, employer, phone number and other similar contact data.

• Financial information: payment instrument information, transactions, transaction history, preferences, method, mode and manner of payment, spending pattern or trends, and other similar data.

• Technical information: website, device and mobile app usage, Internet Protocol (IP) address and similar information collected via automated means, such as cookies, pixels and similar technologies.

• Transaction information: the date of the transaction, total amount, transaction history and preferences and related details.

• Product and service information: Your account membership number, registration and payment information, and program-specific information, when you request products and/or services directly from us, or participate in marketing programs.

• Personal information: Age, sex, date of birth, marital status, nationality, details of government identification documents provided, occupation, ethnicity, religion, travel history or any other personal information provided in responses to surveys or questionnaires.

• Your reviews, feedback and opinions about our products, programmes and services.

 Loyalty programme information: your loyalty membership information, account details, profile or password details and any frequent flyer or travel partner programme affiliation.

HOW WE COLLECT DATA

 We collect Data in the following ways:

• Information You Give Us:We receive and store any information you enter on our website or mobile application or give us in any other way (e.g., at outlets, stores, hotels, kiosks). Please see the section titled “Data Shared by You” for more information.

• Automatic Information We Collect:We use “cookies”, pixels and similar technologies to receive and store certain types of information whenever you interact with us. Please see the section below, titled “Data that is Collected Automatically” for more information.

• E-mail Communications:To help us make e-mails more relevant and interesting, we often receive a confirmation (if your device supports such capabilities) when you open e-mail from us or click on a link in the e-mail. You can choose not to receive marketing emails from us by clicking on the unsubscribe link in any marketing email.

• Automatic Information We Collect from Other Websites: We receive and store certain types of information when you interact with third-party websites that use our technology or with whom we have a specific agreement. Because we process this information on behalf of the applicable website operators, collection, processing, and use of such information is subject to the applicable website operators’ privacy policies and is not covered by our Privacy Notice.

• Information from Other Sources: We may obtain information from other sources. An example of this is when you authorize a third-party website (such as the website of another Tata Group Entity), to interact directly with our website or mobile application to provide or receive Data about you. In that case, we might receive such Data used by that third-party website to identify your account with that website.

• Information Previously Provided to Tata Group Entities: Where you have shared any information previously with any of the Tata Group Entities and have consented to the further sharing of such information, such information will be shared with us by the Tata Group Entities.

You can make choices about our collection and use of your Data. For example, you may want to access, edit or remove your Data on our website or mobile application. When you are asked to provide Data, you may decline.

DATA SHARED BY YOU

IRCPL may collect your Data in several ways from your use of our stores, website or mobile application. For instance:

• when you register with us to receive our products and/or services;
• when you conduct a transaction with us or attempt a transaction at our stores, on our website or mobile application;
• when you complete surveys conducted by or for us;
• when you elect to receive any communications (including promotional offers) from us;
• from the information gathered by your visit to our stores, website or mobile application;

DATA THAT IS COLLECTED AUTOMATICALLY

• We automatically collect some information when you visit our website or use our mobile application. This information helps us to make improvements to our content and navigation. The information collected automatically includes your IP address.

• Our web servers or affiliates who provide analytics and performance enhancement services collect IP addresses, operating system details, browsing details, device details and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. IRCPL uses this information to measure the site usage, improve content and to ensure safety and security, as well enhance performance of our website or mobile application.

• We may collect your Data automatically via Cookies, pixels and similar technologies in line with settings on your browser. For more information about Cookies, please see the section below, titled “Cookies”.

OUR USE OF DATA

Any or all the above Data may be required by us from time to time to provide information relating to IRCPL and to work on the experience when using our website or mobile application. Specifically, Data may be used by us for the following reasons:

• carry out our obligations arising from any contract entered into between you and us;
• provide products and/or services and communicate with you about products and/or services offered by us;
• enable Tata Group Entities and Partners to offer their products and/or services and communicate with you about such products and/or services;
• processing, disclosing, transmitting, and/or sharing the data/information with Tata Group Entities, and other third parties which have business or contractual dealings with us;
• provide you with offers (including for financial products and/or services), personalized services and recommendations and improve your experience on our website and mobile application;
• operate, evaluate and improve our business, website and mobile application;
• generate aggregated data to prepare insights to enable us to understand customer behaviour, patterns and trends with a view to learning more about your preferences or other characteristics;
• provide privileges and benefits to you, marketing and promotional campaigns based on your profile;
• in connection with loyalty programs owned and operated by us or by other Tata Group Entities;
• communicate with you (including to respond to your requests, questions, feedback, claims or

disputes) and to customize and improve our services;

• enforce the terms of use of our website and mobile application;
• protect against and prevent fraud, illegal activity, harm, financial loss and other legal or information security risks; and
• serve other purposes for which we provide specific notice at the time of collection, and as otherwise authorized or required by applicable law.

We treat these inferences as personal information (or sensitive personal information, as the case may be), where required under applicable law. Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

Where required under applicable law, we will only use your personal information with your consent; as necessary to provide you with products and/or services; to comply with a legal obligation; or when there is a legitimate interest that necessitates the use.

MINORS

Our website and mobile application do not offer products or services for use by minors. If you are under 18, you may use our website or mobile application only with the involvement of a parent or guardian.

SHARING OF DATA

We may share your Data with for

• Partners:We may make available to you services, products, or applications provided by Partners for use on or through our website or mobile application. If you choose to use such service, customer information related to those transactions may be shared with such Partner. 

• Tata Group Entities: We may make available to you products, services and /or applications of Tata Group Entities, to assist them to reach out to you in relation to their programs or campaigns and to process your queries and requests. Accordingly, we may share your Data with Tata Group Entities. We may also share your Data with the Tata Group Entities as is relevant for the purposes set out in Clause 7 above, and to facilitate the operation of our business.

• Tata Consumer Platform: Your Data may be shared with Tata Group Entities and other participating entities on the Tata Consumer Platform operated by Tata Digital Limited (“TCP”) for purposes of enrolment, offering you products, services and benefits on the TCP. Accordingly, we may share your Data with other Tata Group Entities, Partners and Service Providers.

• Service Providers: We or other Tata Group Entities may share your Data with Service Providers. Examples include storing and analyzing Data, protecting and securing our systems, providing search results and links, providing customer service, credit analysis, processing your information for profiling, user analysis and payment processing.

• When IRCPL acts as a Service Provider: We may process and share your Data with Tata Group Entities and Partners when we act as a service provider to such Tata Group Entities and Partners.

Business Transfers: As we continue to develop our business, we might sell or buy subsidiaries or business units. Your Data (including in relation to loyalty programs) may be transferred as part of such transaction.

• Third Parties: We may also share your Data with other third parties where:

1. You request or authorize us to do so;
2. We need to comply with applicable law or respond to valid legal process; or
3. We need to operate and maintain the security of our website or mobile application, including to prevent or stop an attack on our computer systems or networks.

Please note that Tata Group Entities and Partners may have privacy practices that differ from those of IRCPL. The use of your Data will be governed by their privacy statements when you provide Data on their websites.

KEEPING DATA SECURE

We will use technical and organisational measures to safeguard your Data and we store your Data on secure servers. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us by e-mail

RETENTION OF DATA

IRCPL retains Data for as long as necessary for the use of our products and/or services or to provide access to and use of our website or mobile application, or for other essential purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements and as long as processing and retaining your Data is necessary for our legitimate interests. Because these needs can vary for different data types and purposes, actual retention periods can vary significantly.

Even if we delete your Data, including on account of exercise of your right under Clause 12 below, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.

YOUR RIGHTS AND CHOICES

When we process Data about you, we do so with your consent and/or as necessary to operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests of IRCPL as described in this Privacy Notice.

We may transfer Data we collect about you to recipients in India, where we are headquartered. India may not have the same Data Protection Laws as the country in which you initially provided the information. When we transfer your Data to India, we will protect that information as described in this Privacy Notice, as disclosed to you at the time of data collection or as described in our program-specific privacy notice.

Depending on which Data Protection Laws are applicable to you, you may have the right or choice to

• opt-out of some collection or uses of your Data, including the use of cookies, pixels and similar technologies and the use of your Data for marketing purposes.
• access your Data, rectify it, restrict or object to its processing, or request its deletion or anonymization.
• change or edit information submitted to us.
• receive the Data you provided to us to transmit it to another company.
• withdraw any consent provided or alter your preferences.
• where applicable, lodge a complaint with your supervisory authority.