1. OVERVIEW

We, at ‘Liva by Birla Cellulose’ which includes Grasim Industries Limited, Thai Rayon Public Company Limited, PT Indo Bharat Rayon, Birla Jingwei Fibres Company Limited, Domsjö Fabriker AB, AV Terrace Bay Mill Inc., and AV Group Inc., NB (hereinafter referred to as “Business” or “our” or “we” or “us”) respect your privacy and are committed to protecting your personal data. This Privacy Notice (“Privacy Notice”) describes how we collect, store, use, disclose and process your personal data, as and when you interact with us while you browse our website, use any of our applications or visit any of our facilities or stores, and tells you about your privacy rights.

PLEASE READ THIS PRIVACY NOTICE IN DETAIL BEFORE YOU START USING THE SERVICES.

2. WHAT DATA WE COLLECT ABOUT YOU

Personal data (or personal information), means any information about an individual from which that individual can be identified. It does not include data where the identity has been removed (anonymous data). The Company may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, middle name, last name, username or similar identifier, title, date of birth, gender and national ID number (such as Personal Account Number, Aadhaar, Driving License, National Identity Number, etc.);
• Contact Data includes any addresses, billing address, delivery address, email address and telephone numbers, mobile numbers, etc.;
• Transaction Data includes details about payments to and from you and other details of goods and Services you have purchased from us;Purchase order details (Buyer & Supplier, name, PO number PO date, PO product quantity, product name, Fibre Blend%, Order description). Shipment details (Buyer & Supplier, name, Invoice number, Invoice date, Invoice product quantity, product name, Fibre Blend %, Shipment description).
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Services;
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
• Usage Data includes information about how you use our website, applications and Services;
• Marketing and Communications Data includes your preferences in receiving marketing from us / our third parties and your communication preferences.

The Business also collects, uses and shares aggregated data such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature within our Services.

3. WHY WE COLLECT YOUR DATA

We process your personal data for the following purposes:

• For creating your account, authenticating access to it and monitoring the security of our Services
• To fulfil any of your requests, orders, send you updates related to your account, respond to your requests/inquiries and provide you necessary support.
• To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
• To make suggestions and recommendations to you about Services that may be of interest to you.
• To inform you of offers, discounts and other schemes made available by us or through us by other parties.
• To analyse user behaviour for understanding demographics, preferences and trends to help improve our Services and take informed business decisions.
• For fulfilling our obligations under applicable laws and regulations or as required under a judgement or order issued under any law for the time being in force.

5. WHO DO WE DISCLOSE YOUR DATA TO

We may have to share your personal data with the parties set out below for the purposes set out in the table above.

• Third party service providers from whom we avail services for carrying out our business activities.
• Professional advisors, government/regulatory authorities and other parties as required under the applicable law.
• Other entities within the Aditya Birla Group.
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

The Business requires all third parties to respect the security of your personal data and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions unless the applicable laws permit otherwise.

Unless otherwise prohibited under the applicable laws, your personal data may be transferred to, and processed outside the country in which you reside. However, please be assured that we require all third parties to respect your privacy, and undertake similar safeguards to protect your data.

6. HOW WE PROTECT YOUR DATA

The Business has put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They are only permitted to process your personal data on our instructions and are subject to a duty of confidentiality.

You are responsible for maintaining the security of your account credentials and other authentication involved in obtaining access to password-protected or secure areas of the Services. The Business will treat access to the Services through your account credentials as having been authorized by you. We shall bear no liability in respect of such unauthorized use of your account. Unauthorized access to password-protected or secure areas is prohibited and may lead to prosecution under the applicable laws. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. If you believe that information you provided to us is no longer secure, please notify us immediately using the contact information provided below.

We will use reasonable security measures to safeguard the confidentiality of Your Personal Data. Although we will put our best efforts to protect Your Personal Data, we cannot guarantee the security of your data transmitted to our websites/applications; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features which are appropriate to the type of Personal Data You have provided to try to prevent unauthorized access or inadvertent disclosure. However, you agree and acknowledge that "perfect security" does not exist on the internet.

7. HOW LONG WE RETAIN YOUR DATA

We retain the personal data collected or otherwise processed by us, (i) for as long as necessary to fulfill the purposes for which you provided the information, (ii) for the purposes of satisfying any legal/regulatory, accounting, or reporting obligations, (iii) to resolve disputes, and (iv) for such other purposes as are permitted under applicable laws.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements that may require or permit retention for a longer duration.

8. WHAT ARE YOUR RIGHTS & DUTIES