Cookies Policy

1. Scope of the policy

1.1. This Cookie Policy (“Policy”) is issued by Ion Exchange (India) Limited (“Company”, “we”, “us” or “our”), having its registered office at Ion House, Dr. E. Moses Road, Mahalaxmi, Mumbai 400 011, Maharashtra, India.

1.2. This Policy explains how we use cookies and similar technologies on our websites, sub-domains, web portals and digital applications operated or controlled by the Company (collectively referred to as the “Website”).

This includes:

• Corporate websites.
• Customer portals.
• Supplier/vendor portals.
• Employee web applications, where applicable.
• Online forms.
• Web-based applications.
• Other websites operated by the Company.

1.3. This Policy should be read along with the Company's Master Privacy Policy and Website Terms of Use. Where cookies or similar technologies collect or process personal data, such processing will be governed by the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable laws.

2. What are cookies?

2.1. Definition: Cookies are small text or data files stored on your computer, mobile phone or other device when you visit a website. They help websites remember certain information about your visit and improve your browsing experience.

Cookies may be used to:

• Maintain website functionality.
• Remember user preferences.
• Improve website performance.
• Understand how visitors use the website.
• Provide security features.
• Analyse website traffic.
• Support website personalization, where applicable.

Cookies themselves generally do not contain information such as passwords in plain text. However, depending on their purpose and configuration, cookie identifiers may be associated with information relating to a user or device.

2.2. Types of Cookies Based on Duration:

• Session Cookies: These are temporary cookies that remain on your device only while your browser is open. They are automatically deleted when you close your browser.
• Persistent Cookies: These cookies remain on your device for a specified period or until you delete them manually. They help remember your preferences when you visit the Website again.

2.3. Types of Cookies Based on Source:

• First-Party Cookies: These cookies are placed directly by the Company's Website.
• Third-Party Cookies: These cookies are placed by trusted third-party service providers whose services are used to support the Website, such as hosting and analytics services.

3. Types of cookies we use and their purposes

We follow the principle of collecting only the information necessary for the purposes explained in this Policy. Cookies that collect personal data are used in accordance with the Digital Personal Data Protection Act, 2023.

A. Strictly necessary (essential) cookies

These cookies are required for the basic functioning and security of the Website. They help with secure connections, user login, session management, server load balancing and protection against unauthorised activities. They may also support authentication, form submission, website navigation and user session management.

These cookies are necessary for the Website to function and cannot be disabled through our cookie settings. Disabling them may affect the Website's basic functions.

These cookies generally remain active during a browser session. Security-related authentication cookies may remain active for a maximum period of 180 days.

B. Functional and preference cookies

These cookies remember your preferences and settings, such as language, regional settings, font size and accessibility preferences, to provide a more convenient browsing experience.

These cookies are optional and will be activated only after you give your consent through the Cookie Consent Banner and may remain active for a maximum period of 12 months from the date of consent.

C. Performance and analytics cookies

These cookies help us understand how visitors use our Website. They collect information such as the number of visitors, pages visited, time spent on pages, referral sources, device information and Website performance. This information helps us improve the Website, its content and overall performance.

Wherever possible, analytical information is combined, anonymised or processed using techniques such as IP masking or pseudonymisation to reduce the possibility of identifying individual users.

These cookies are optional and will be activated only after you give your consent through the Cookie Consent Banner and may remain active for a maximum period of 14 months.

D. Advertising and targeting cookies

The Company does not use third-party advertising cookies, behavioural tracking cookies, cross-website retargeting tools or commercial data-sharing services on its Website.

If the Company decides to introduce advertising or behavioural tracking cookies in the future, this Policy will be updated accordingly. Such cookies will be activated only after obtaining the required prior consent from users, in accordance with the DPDPA and other applicable laws.

4. Cookie consent and user choices

We provide users with clear information and control over the use of cookies.

4.1. Cookie Consent Banner: When you visit our Website for the first time, a Cookie Consent Banner will be displayed. Non-essential cookies, including functional and analytics cookies, will remain disabled until you provide your consent.

Simply visiting the Website, scrolling through its pages or continuing to browse will not be treated as consent.

4.2. Cookie Preferences: The Cookie Consent Banner will allow you to choose from the following options:

• Accept All: Allows all categories of cookies, including optional cookies, to be used.
• Reject All Non-Essential: Allows only strictly necessary cookies and rejects optional cookies.
• Manage Preferences: Allows you to select or reject individual categories of optional cookies.

Your choices will be recorded and applied according to your preferences.

4.3. Language Options: Users will have the option to view this Cookie Policy, consent information and cookie preference settings in English or any of the 22 languages listed in the Eighth Schedule to the Constitution of India, as required under the DPDPA.

4.4. Withdrawal or Change of Consent: You may withdraw or change your cookie preferences at any time. To do so, click on the “Cookie Settings / Manage Preferences” link available in the footer of our Website.

The process of withdrawing consent will be as simple and accessible as the process of giving consent.

4.5. Effect of Withdrawal: Once you withdraw your consent, the Company and its service providers will stop processing and using the relevant non-essential cookies within a reasonable period.

Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal.

4.6. Browser Settings: You may also manage, block or delete cookies through your browser settings. However, blocking or deleting cookies may affect the proper functioning of certain features of our Website.

4.7. Cookie Preference Management: Where a cookie preference mechanism is implemented, users should be able to modify their preferences after their initial selection. The Website shall provide an accessible mechanism such as "Cookie Settings", "Manage Cookies" or "Privacy Preferences".

The preference mechanism should clearly distinguish:

• Essential cookies.
• Optional cookies.
• Analytics cookies.
• Marketing cookies, where applicable.

5. Security measures and third-party service providers

5.1. Security Measures: We take appropriate technical and organisational measures to protect information collected through cookies, in accordance with DPDPA and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable.

These measures include:

• Secure Connections: Website communications and cookie-related data transfers are protected using HTTPS and Transport Layer Security (TLS 1.3), where supported.
• Protection Against Unauthorised Requests: Session-related cookies use appropriate SameSite settings to help prevent unauthorised cross-site requests.
• Protection of Sensitive Information: Cookies containing session or authentication information use security settings such as HttpOnly and Secure, wherever applicable, to reduce the risk of unauthorised access.

5.2. Third-Party Service Providers: Where third-party service providers are involved in processing cookie-related information, they will act only on behalf of the Company as Data Processors.

Such service providers will not be permitted to use the information for their own advertising,

5.3. Security of Cookie-Related Information:

Some cookies or cookie identifiers may be capable of being associated with personal information.

Where this occurs, the organization shall process such information in accordance with:

• Applicable data protection requirements.
• The organization's Data Protection & Privacy Policy.
• The Website Privacy Notice.
• Applicable contractual requirements.

The organization shall avoid collecting personal information through cookies unless there is a legitimate and documented purpose.

6. Rights of users

Under Digital Personal Data Protection Act, 2023 individuals whose personal data is processed through cookies or related technologies have the following rights, subject to applicable law:

1. Right to Access Information: You have the right to obtain information about the personal data being processed, including a summary of such data and details of the Data Fiduciaries and Data Processors with whom it has been shared.
2. Right to Correction and Erasure: You have the right to request correction of inaccurate or incomplete personal data and deletion of personal data that is no longer required for the purpose for which it was collected, subject to applicable legal requirements.
3. Right to Grievance Redressal: You have the right to raise concerns or complaints regarding the processing of your personal data and seek their resolution.
4. Right to Nominate: You have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, as permitted under applicable law.

Requests concerning personal information collected through cookies shall be handled according to the organization's Data Protection & Privacy Management Policy and applicable legal requirements.

7. Grievance redressal and contact details

If you have any questions, concerns or complaints regarding this Cookie Policy, the use of cookies, your consent preferences or the processing of your personal data, you may contact our designated Data Protection Officer / Grievance Officer using the details below:

Company: Ion Exchange (India) Limited

Address: Ion House, Dr. E. Moses Road, Mahalaxmi, Mumbai 400 011, Maharashtra, India.

8. Policy review and updates

8.1. Periodic Review: We may review and update this Policy from time to time to reflect changes in applicable laws, regulatory requirements, judicial decisions, technology or our Website's operations.

8.2. Changes to this Policy: If any changes introduce new categories of cookies, expand the collection or use of personal data, or introduce new third-party tracking technologies, we will update this Policy and provide users with appropriate notice displayed on the Website. Where required by law, fresh consent will be obtained before such changes are implemented.

Users are encouraged to review this Policy periodically to stay informed about how cookies are used on the Website.