Privacy Policy

Privacy Policy

Last Updated on 29th June, 2026

This Website and/or Mobile Application (“Platform”) is operated by Exposome pvt. ltd.

(hereinafter referred to as “Company”, “We”, “Us”, “Our”). We offer a website providing

information about Our industrial innovative products for enabling clean air and water.

This Policy provides for the practices for the collection, possession, storage, handling and

dealing of personal identifiable information/ data and sensitive personal data of the User. This

Policy is an electronic record in terms of Information Technology Act, 2000 and rules

thereunder. We handle Your Personal Information in accordance with the Digital Personal

Data Protection Act, 2023 (as notified from time to time) and applicable rules and regulations

and any applicable provision of Information Technology (Reasonable Security Practices and

Procedures and Sensitive Personal Data or Information) Rules, 2011 which have not been

superseded by the relevant provisions of the Digital Personal Data Protection Act, 2023 as on

the relevant date (“Applicable Privacy Laws”).

The Company urges the User to read and understand this Policy and the Terms of Service

available at https://exposome.in/privacy-policy/ (“ToS”) carefully for details on the way.

1. Who does this Policy apply to?

This Policy will apply to all persons accessing Our Platform (hereinafter referred to as “User,

“You”, “Your”). This Privacy Policy applies only to this Platform and describes how and why

We collect information about Users.

2. What data do We collect?

2.1 While accessing the Platform, in order to contact Us You may provide Us with Your name,

email id, and phone number (“User Information”).

2.2 This Policy shall not apply to the User Information if the User Information does not qualify as

‘personal information’ or ‘personal data’ under the Applicable Privacy Laws (“Personal

Information”). Any such non-personal information may be used, processed, or disclosed by

Us without the restrictions set out in this Policy.

3. How and when do We collect Your data?

3.1 Data provided by the User: When You use this Platform, You may provide Us with Personal

Information. If You provide Us with third-party data, You will be held responsible for having

shared such information. You must be legally authorized to share it (i.e., authorized by a third

party to share their information, or for any other legitimate reason).

3.2 Third party sources: We may receive Your Personal Information from certain third parties

with whom We may enter into certain arrangements (“Partners”). In the event in relation to

any transfers of Personal Information from Our Partners to Us, We are an independent data

fiduciary under the Applicable Privacy Laws, the processing of such Personal Information by

Us shall be done as per this Policy. In the event We are data processor for Our Partners, such

data shall flow and shall be subject to the agreement entered into by Us and such Partners.

4. How We use Your Personal Information

We use User Information for the following purposes:

(a) To respond to the queries of the Users and supply them Our products;

(b) For the legitimate uses as per the Applicable Privacy Laws;

(c) For purposes permitted under applicable laws, including responding to enquiries,

providing requested information regarding our products and services, complying with

legal obligations, and protecting the security of the Platform.

(d) To meet Our legal obligations under the applicable laws, which are the legal basis for

the processing of Your Personal Information;

(e) Some legislations may require Us to disclose Your Personal Information to public

authorities; and

(f) To the extent permissible under Applicable Privacy Laws, We may need to process Your

Personal Information to detect, react to and prevent fraudulent and illegal behavior or

activities which could compromise the security of Our Platform.

We may approach the User for the User’s consent for any other specific purpose not listed in

this Policy.

5. Where is Your Personal Information stored?

The Personal Information that We collect in respect of the User is hosted within India and We

have cross continental data back-up for business continuity purposes.

6. Why and when We transfer/ disclose Your Personal Information?

We may transfer the User’s Personal Information within India and outside India (provided that

such country offers the same or greater level of protection for Personal Information than

India), in the following manner:

(a) Persons authorized by Us to perform any of the Personal Information related

activities described in this document: Our employees or those of Processors

including the system administrators who have delegated the management of Our IT

systems and are therefore able to access, modify, suspend or limit the processing of

Your Personal Information. Such individuals have undertaken an obligation of

confidentiality and abide by specific rules concerning the processing of Your Personal

Information. These individuals managing the system administrators have been selected,

adequately trained and their activities are tracked by systems;

(b) Law enforcement or any other authority whose provisions are binding on us: This

is the case when We have to comply with a judicial order or the law or defend ourselves

in legal proceedings.

(c) For corporate transactions: We may transfer Users’ Personal Information as part of any

sale, transfer, merger, acquisition, or other corporate transaction involving the

Company, its shares, assets, or business.

7. How do We protect Your Personal Information?

(a) We value the security of the User’s Personal Information and hence We have

implemented technical and organizational security measures as per the Applicable

Privacy Laws that are designed to help protect the User’s Personal Information from

unauthorized access, disclosure, use and modification.

(b) Where required by the applicable laws, if there is a breach of security leading to the

accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or

access to, Personal Information transmitted, stored or otherwise processed, You will

be notified along with the competent data protection authority, as required.

8. How long We keep Personal Information

8.1 We shall retain the User’s Personal Information processed for the purposes as provided under

Section 4 above only for as long as is necessary, and after such reasonable time, it is destroyed

appropriately and securely or anonymized in accordance with the applicable law.

8.2 However, the Personal Information might be stored for a longer period in case of potential

and/or actual claims and resulting liabilities and/or in the case of other mandatory legal

retention requirement and/or storage obligations.

8.3 Personal Information processed to comply with legal obligations (see Section 4(c) to 4(e)) will

be retained for the period provided by applicable laws and regulations.

9. What are Your Rights and obligations in relation to Your Personal Information?

9.1 Save and except the rights provided herein in this Policy, all rights to Personal Information

shall belong to the User. The Users shall ensure the following:

(a) To provide true and accurate details of Personal Information.

(b) To keep their information up to date.

(c) To regularly review this Policy.

9.2 You have the following rights pertaining to the Personal Information shared by You:

(a) Right to know what Personal Information We hold and to have the information

communicated to You;

(b) Right to access the copies of Your Personal Information. We may charge You a small

fee for this service;

(c) Right to request that the Personal Information held by Us be corrected, completed,

updated, rectified or deleted;

(d) Right to object to the processing of the Personal Information or to request restriction

thereof;

(e) Right to opt out of targeted advertisements;

(f) Right to withdraw Your consent to submit or process any or all Personal Information or

decline to provide any permissions on its Platform as covered above at any time;

(g) Right to nominate any other individual, who shall, in the event of Your death or

incapacity exercise Your rights;

(h) Right of grievance redressal.

9.3 Any such request to update, delete or correct the Personal Information, or to withdraw consent

regarding sharing and use of Personal Information (including opting out for targeted

advertisements) should be shared with the Grievance Officer as per Paragraph 16 below.

Notwithstanding the opt-out from targeted advertisements, You may continue to receive

transactional and service-related communications.

9.4 If You withdraw consent, object to processing, or request deletion of Personal Information,

Your access to the Platform may be limited.

9.5 Deletion requests will be reviewed on a case-by-case basis in accordance with applicable

law, and certain information may be retained for legal or compliance purposes.

10. Should children access this Platform?

Our Platform is not intended for or directed to access by children under the age of eighteen

years. We do not knowingly collect or process personal data of children below the age of

eighteen years without parental consent. If We are made aware that a child under the age of

eighteen years has provided their personal information, We will delete the information from

Our records.

11. What this Policy does not cover?

This Policy explains and covers only the processing of Personal Information We carry out as

data fiduciary in relation to Our Platform. This Policy does not cover processing carried out

by persons other than Us. In these instances, We are not responsible for any processing of

Your Personal Information that is not covered by this Policy.

12. Usage of Personal Information for other purposes

Should We need to process Your Personal Information differently or for purposes other than

those indicated herein, You will receive specific notice before such processing begins.

13. How do We update this Policy?

13.1 This Policy is current as of the last updated date set forth above.

13.2 We may periodically change this Policy to keep pace with new technologies, industry

practices, and regulatory requirements, among other reasons. While, We expect most such

changes to be minor, We request the Users periodically to review the changes.

14. How to contact Us?

Any queries or complaints with regards to use, processing or disclosure of Personal

Information provided by the User or breach of the terms of this Policy may be taken up with

the Grievance Officer. The details of the Grievance Officer are as follows:

Email: info@exposome.in

The Grievance Officer shall acknowledge and dispose of the complaint within such time

period as prescribed under the applicable laws.