Tata Steel Colors Private Limited (Formerly known as Tata BlueScope Steel Private Limited hereinafter collectively referred to as “We” or “Us” or “Company” or “TS CPL,” has curated this Privacy Notice to demonstrate our privacy commitment to our users. This Privacy Notice (together with our Website Terms and Conditions and any other documents referred to in it) sets out the basis on which we collect, use, share, and safeguard your Personal Data when you use our services, offers, interact with us via our websites, portals, or offline (collectively the “Services”). By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice.

Our privacy practices may vary depending on applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA). To ensure compliance with local laws, this Privacy Notice is tailored to the Indian legal framework.

1. Personal and Sensitive Personal Data
Personal Data (“Data”) refers to any information that (alone or when used in combination with other information) relates to an identified or identifiable individual. Sensitive Personal Data includes a specific subset of Personal Data that requires greater protection due to its sensitive nature (e.g., financial data, identification numbers). We typically do not process Sensitive Personal Data unless required by law or business operations.

2. Categories of Personal Data
We collect the following types of Personal Data to provide and improve our services:
– Contact Information: Name, email address, phone number, and postal address.
– Professional Information: Job title, department, company details.
– Transactional Information: Purchase orders, invoice data, and service history.
– Usage Information: Device information, IP address, browser type, cookies, and site usage), patterns.
– Communication Data: Queries, grievances, and correspondence shared with us.
– Identification Information: PAN, GSTIN, Aadhar (if voluntarily shared and permitted).
– Site Access Data: CCTV footage and visitor logs for our premises.
We do not actively collect health -related, biometric, or social media data.

3. Sources of Personal Data
We collect Personal Data from the following sources:
– Direct interactions with users, customers, vendors or partners.
– Online interactions through our websites and portals.
– Third-party service providers engaged by us.- Events, trade shows, and direct submissions.
– Publicly available sources.

4. Purpose for Collecting Personal Data

5. Lawful Basis of Processing
We process your Personal Data on the following grounds:
– Consent : Where required under applicable law.
– Legal Obligation : To comply with statutory or regulatory requirements.
– Contractual Necessity : To perform obligations under a contract.
– Legitimate Interest : For operational efficiency and business continuity.

6. Disclosure of your Personal Data and Categories of Third Parties
We may disclose your Personal Data to:
– Service providers such as IT vendors, logistics partners, and consultants.
– Legal, regulatory, or governmental authorities, as required.
– Tata Group entities for internal business purposes.
– Auditors or legal counsel for compliance and dispute resolution.
All third parties are bound by confidentiality and data protection obligations consistent with applicable laws.

7. Cross Border Transfer
We do not routinely transfer Personal Data outside India. If cross -border transfer becomes necessary, such transfer will be made in accordance with applicable law and through appropriate legal mechanisms.

8. Data Storage & Retention
We store Personal Data securely using appropriate technical and organizational measures. Personal Data is retained only for as long as necessary to:
– Fulfill the purposes for which it was collected.
– Comply with legal or regulatory obligations.
– Resolve disputes or enforce agreements.
Post-retention, data is either deleted or anonymized securely.

9. Data Principals Rights
As per applicable Indian data protection laws, including the DPDPA, you have the following rights:
– Right to Access: To know what data we hold about you.
– Right to Correction: To update inaccurate or incomplete data.
– Right to Erasure: To request deletion of your data.
– Right to Withdraw Consent: Where processing is based on consent.
– Right to Grievance Redressal: To address their concern w.r.t. their data being handled .
– Right to Nominate: To nominate any other individual in case of death or incapacity.
Requests to exercise these rights can be made as outlined in Section 10.

10. How to Exercise your Rights
You may submit a request by contacting us at the email provided below. Please include your name, contact details, and specify the right you wish to exercise. We may verify your identity before processing the request.

11. Minor’s Personal Data
TSCPL does not intentionally collect Personal Data from individuals below the age of 18. If you are a minor, use of our services must be under the supervision of a guardian. Requests for deletion of such data can be made as per Section 10.

12. Data Security Measures
We implement reasonable and appropriate security measures to protect Personal Data, including:
– Access control and authentication protocols.
– Encryption and secure data storage.
– Regular audits and staff awareness.
– Secure disposal of records and electronic data.

13. Automatic Data Collection
We use cookies and similar tracking technologies to analyze user interaction on our websites and enhance user experience. You may control cookie preferences through your browser settings.

14. Contact Us
To exercise your privacy rights or for queries related to this Privacy Notice, please contact:
Email: dpo@tatasteelcolors.com
Postal Address: Tata Steel Colors Pvt. Ltd., Floor no. 9 & 10, Kalpataru Infinia, Wakdewadi, Final Plot no. 21, Sub Plot no. 3 at CTS No. 15/1 Surveys no. 162/2/2, 17/2/2 & 18/1/2, Village Bhamurda, Shivajinagar, Khadki Pune – 411003.

15. Changes to Privacy Notice
We may revise this Privacy Notice to reflect changes in law or our business practices. Updated versions will be published on our website with a revised effective date.