Mintop

PRIVACY NOTICE

YOU AGREE AND UNDERSTAND THAT BY ACCESSING THIS WEBSITE AND BY SHARING YOUR PERSONAL INFORMATION WITH US, YOU ACCEPT TO THE TERMS SPECIFIED UNDER THIS PRIVACY NOTICE. THIS NOTICE WILL EXPLAIN TO YOU HOW YOUR PERSONAL INFORMATION IS COLLECTED, USED, AND DISCLOSED BY US AND IT ALSO LETS YOU KNOW HOW TO ACCESS, UPDATE OR MAKE CHANGES TO YOUR PERSONAL INFORMATION. IF YOU DO NOT AGREE WITH THE PRIVACY NOTICE TERMS, PLEASE DO NOT USE THIS WEBSITE.

I. WHO IS COLLECTING?

Dr. Reddy’s Laboratories Ltd. (“Dr. Reddy’s”) is responsible for the processing of your personal information as it decides why and how it is processed, thereby acting as the “Data Controller”. It may exercise this responsibility alone or jointly with other of Dr. Reddy’s affiliates and fully owned subsidiaries, acting as “co-controller(s)”. In this Privacy Notice, “we”, “our” or “us” refers to Dr. Reddy’s and its affiliates and fully owned subsidiaries.

Notwithstanding the above, once you are directed to the third-party platform for availing any product or service, the responsibility and obligation for safe storage, use and handling of your personal information is of such third-party platform and shall be governed by the privacy notice of such third-party platform. Dr.Reddy’s disclaims all risks, claims, liabilities arising out of any breach or mishandling of your personal information by such third party platform. Dr. Reddy’s will not have access to your information at any point in time and may only receive anonymized data from the associated third parties.

II. HOW DO WE COLLECT AND PROTECT YOUR PERSONAL DATA?

We may collect your personal information in the following ways:

i.Directly and automatically from you when you show interest in knowing about our products or information on hair fall related issues.

ii.Directly or indirectly the feedback and testimonials that you may provide on our platform, or,

iii.Directly to us through our customer grievance mechanism or while reporting adverse event.

We have implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality to your personal information, based on industry standards. The purpose of these measures is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure, or access and against other unlawful forms of processing.

We value your privacy and are committed to ensuring that any personal information we receive is processed and protected in accordance with applicable data protection laws as well as with Dr. Reddy’s policies and standards. Please read this Privacy Notice carefully since it sets out what personal information that relates to you directly or indirectly, we are processing and why. It also informs you of your privacy rights and how to exercise them. We are committed to keep you fully informed about our activities involving the processing of your personal information as it relates to our business partnering activities with you.

Personal Information refers to any information that can be used to directly or indirectly identify ‘you’. In the context of the above described, the personal information may be either directly provided by you or provided by our third-party. Do note that the personal information will be collected only in a manner that is consistent with the purposes and/or the applicable data protection laws: Depending on the nature of your interaction with us, we may gather some of the following information:

Information provided by you voluntarily: All the information you voluntarily share with us explaining your experience, interest on our services as a part of our customer support mechanism and adverse event reporting.

Electronic identifiers:We may collect and use cookies or similar technologies, as well as any information about your device (mobile or laptop) that you use to access our websites or applications, such as the (IP) address used to connect your computer or device to the Internet, operating system type, your internet browser type and version, or your phone's unique device ID, advertising ID, geolocation, and other similar mobile device data. Please see our Cookie Policy atCookie Policyto learn about what cookie information our websites gather and how we process such personal information.

Minor Data: We DO NOT request or knowingly collect or process any personal information of individuals under the age of majority in India. If you have shared the personal information of anyone who will be considered a minor in India, please reach out to us with a request for deletion at customerservices@drreddys.com. We will immediately remove this personal information from our databases.

Please note that our services are not offered or intended to be offered directly to children or minors.

Please also note that where you provide personal information of other individuals such as your family members or friends, you have the duty to ensure that you have directed them to this Privacy Notice and have their consent to share such information with us.

Please note that some of the information mentioned above may also be categorized as a sensitive/classified or as special category personal information under applicable data protection laws.

IV. PURPOSE OF COLLECTING PERSONAL INFORMATION

We collect and process the aforementioned personal information for the following purposes:

(i)Facilitating customized interface to meet your requirements and intended application of this Application,

(ii)Troubleshooting and other user related services, and,

(iii)Improvements to the Applications, surveys, customer notification, statistical analysis and other analytics, for better customer experience.

V. LEGAL BASIS OF PROCESSING PERSONAL INFORMATION

We will process your personal information only if we have a legitimate business purpose and a lawful basis as per the applicable local laws for that purpose. Therefore, we will only process your personal information if:

The processing is necessary for the specified purpose for which you have voluntarily provided your personal information to us (legitimate use), and in respect of which you have not indicated to us that you do not consent to the use of your personal information.

The processing is necessary to comply with our legal or regulatory obligations.

The processing is necessary for our legitimate interests, which do not unduly affect your interests or fundamental rights and freedoms. Examples of such legitimate interests include processing activities we undertake: to offer our products and services; to meet our sustainable objectives and corporate social responsibilities; prevent misuse, fraud, unethical or criminal activities related to our products and services; and for our compliance with any judgment or decree, or order issued under any law.

When we process your personal information based on our legitimate interest, we aim to balance our needs with your privacy such as:

Contacting you regarding misuse or fraudulent behaviour on our website.

Planning and improving our products, services and overall business,

Managing and improving our IT systems, networks and infrastructure.

Protecting our rights and safety, as well as that of our affiliates and subsidiaries.

Fulfilling other business purposes, such as compliance and audit monitoring, inspections fraud prevention,

Improving our website content and compiling aggregate usage statistics for internal purposes and market research.

Complying with applicable laws, regulatory directions, or court orders.

VI. SHARING OF PERSONAL INFORMATION

Please note that we share your personal information with those, on a need-to-know basis, in a manner that ensures their protection, or to the extent it is necessary to comply with applicable regulations. Any personal information collected may be shared with or accessed by:

Our Subsidiaries and/or affiliates located in the country of origin or in other countries (if required) for maintaining our databases or to efficiently deliver our services.

Our Service providers that we may have engaged to help us maintain the website and any associated services, such as adverse event reporting.

Our IT systems providers, cloud service providers, database providers and consultants.

Third-party analytics tools such as google analytics for enabling the functionality of the website and providing you with better experience.

Any law enforcement agency, regulator, or court, if required to comply with the applicable law(s).

Please note that we do not sell your personal information collected through this website with any third parties.

VII. STORAGE/RETENTION OF PERSONAL INFORMATION

We will only retain your personal information for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements or until we have received a request from you to delete such information.

VIII. YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM

Whenever we process Personal information, we take reasonable steps to keep your personal information accurate and up to date for the purposes for which they were collected. We will provide you with the ability to exercise the following rights under the conditions and within the limits set forth in the applicable local laws:

The right to be informed about what personal information we have about you and how we process it,

The right to access and obtain a copy of your personal information as processed by us,

The right to correct or update your personal information if you believe that any information relating to you is incorrect, obsolete, or incomplete,

The right to request the erasure of your personal information,

The right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal

The right to object, in whole or in part, to the processing of your personal information.

The right to request its portability, i.e., that the personal information you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations,

The right to object to automated decision-making, including profiling, i.e., you can request a human intervention in any automated decision-making process related to processing of your data and where such processing is not based on your consent, authorized by law or necessary for the performance of a contract. However, we don’t currently make decisions solely using automated processes.

The right to grievance redressal for any grievances you may have regarding your personal information and the way it is processed.

The right to nominate another individual to exercise your privacy rights on your behalf in case of your death or inability to do so.

In the event you want to exercise the above rights or have any questions related to processing of your personal information, you may send an email to our Data Privacy Officer at dataprivacy@drreddys.com. In case you are not satisfied with how we process your personal information, you can address your concern to our Data Privacy Officer using the email Id, and your concern will be investigated further.

If you still do not receive a resolution for your grievance, you also have the right to file a complaint with the competent data protection authorities, in addition to your rights above.

IX. MODIFICATION:

We may change or update this Privacy Notice from time to time, which will be indicated by the ‘Last Update date’ mentioned above. Please keep checking this notice occasionally so that you are aware of any changes. If you have any additional questions, please reach out to us at customerservices@drreddys.com.

X. GOVERNING LAW AND JURISDICTION

This Notice is governed by and construed in accordance with the laws of India. You agree that any claim or dispute relating to this Notice shall be brought before the courts of Hyderabad, Telangana, India.