Vigor Industries Limited — Privacy Policy

Effective Date: 1st April 2025 (revised) 1. Introduction At Vigor Industries Limited (“Vigor”, “we”, “our”, or “us”), protecting your privacy and securing your personal data is a responsibility we take with utmost seriousness. As a diversified global conglomerate operating across multiple sectors—including mining, infrastructure, technology, energy, healthcare, logistics, and research—this Privacy Policy applies to all websites, digital platforms, products, and services operated by Vigor and its subsidiaries worldwide. This Privacy Policy explains how we collect, use, disclose, and safeguard your information across all our businesses, including: Vigor Mines and Natural Resources Vigor Infrastructures Limited Vigor Infotech Limited Vigor Powers Limited Vigor Retail Services Limited Vigor Commodities Limited Vigor Medicares Limited Vigor Motors Limited Vigor Finserv Limited Vigor Petrochemicals Limited Vigor Research Laboratories Vigor Logistics Limited and others under the Vigor Industries Limited umbrella Please read this policy carefully to understand your rights and how we treat your information. 2. Information We Collect We collect information that is necessary for delivering, improving, and securing our products and services across all sectors. The types of information we collect include: 2.1 Personal Identification Information Full name, date of birth, gender Contact information: email address, phone number, postal address Identification documents: government-issued IDs, passports, driver’s licenses (for KYC, compliance, employment, or customer verification) Corporate information: company name, job title, business contact info (for B2B services) 2.2 Technical Data IP addresses Browser type and version Device information and operating system Log data including access times, pages visited, errors encountered Cookies and tracking technologies (see Section 5) 2.3 Financial and Transactional Data Payment details: credit/debit card information, bank account details Billing and invoicing information Transaction history and purchase records (including in sectors like retail, motors, commodities, finserv) 2.4 Health and Sensitive Data Health records and biometric data (limited to Vigor Medicares Limited and healthcare-related services) Genetic, medical history, and insurance information as applicable Any other data you voluntarily provide related to health or medical services 2.5 Location Data GPS data and approximate location derived from devices, apps, or services (for logistics, delivery, mining operations) 2.6 User-Generated Content Customer feedback, surveys, reviews, and support communications Data submitted via forms, applications, and customer portals 3. How We Collect Your Information We gather information through multiple channels, including but not limited to: Direct interactions: when you fill out forms, request services, or communicate with us Automated technologies: cookies, web beacons, device fingerprinting Third-party sources: partners, public databases, authorized data providers Through our subsidiaries’ operational systems and platforms From business partners and vendors for due diligence and compliance 4. Use of Your Information Your data is leveraged to: Provide, operate, and maintain our products and services across sectors Process transactions and deliver goods or services Comply with legal and regulatory requirements Personalize user experience and improve our offerings Conduct research, analysis, and develop new technologies (including AI, space research, biotech) Manage employment, recruitment, and contractor relationships Ensure security, fraud detection, and risk management Communicate marketing offers and company updates (only if you consent) Handle customer support and resolve disputes Facilitate logistics, supply chain, and inventory management Support investor relations and corporate governance compliance 5. Cookies and Tracking Technologies We use cookies, web beacons, and similar technologies to: Enhance user experience by remembering preferences Analyze website and app performance Understand user behavior and improve marketing efforts Detect fraud and ensure security You have control over cookie preferences via your browser or device settings and can opt-out where applicable. 6. Sharing and Disclosure of Information We do not sell your personal data. However, we may share your information with: Affiliated companies and subsidiaries within the Vigor group for operational integration Service providers and partners under strict confidentiality for purposes such as payment processing, IT services, logistics, and marketing Regulatory bodies and law enforcement as required by law or court orders Business transfers: in the event of mergers, acquisitions, or asset sales Authorized third parties for research, analytics, or compliance auditing (data anonymized where feasible) All third parties are bound by contractual obligations to protect your data in line with this Privacy Policy. 7. Data Security We employ industry-leading security measures including: Encryption in transit and at rest Multi-factor authentication and access controls Regular security audits and vulnerability assessments Secure data centers and cloud service providers Employee training on data protection and privacy Incident response and breach notification protocols Despite our best efforts, no method of transmission or storage is 100% secure; however, we continuously invest in robust security infrastructure. 8. Data Retention We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by sector and jurisdiction. When data is no longer needed, it is securely deleted or anonymized. 9. Your Rights and Choices Depending on your location and applicable laws (such as GDPR, CCPA), you may have rights including: Access to your personal data Correction or deletion of inaccurate or outdated data Objection to or restriction of processing Data portability Withdrawal of consent (where processing is consent-based) Opt-out of marketing communications Lodge a complaint with a data protection authority To exercise these rights, please contact our Data Protection Officer (DPO) at privacy@vigorindustries.com. 10. International Data Transfers Given our global operations, your data may be transferred and processed outside your country of residence. We ensure such transfers comply with applicable laws by implementing adequate safeguards such as Standard Contractual Clauses or Privacy Shield certifications where applicable. 11. Children’s Privacy Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without parental consent. If we learn that we have inadvertently collected such data, we will delete it promptly. 12. Updates to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in regulations, business operations, or technology. The updated version will be posted on our websites with a revised effective date. We encourage you to review the policy regularly to stay informed. 13. Contact Information For questions, concerns, or to exercise your privacy rights, please contact: Data Protection Officer Vigor Industries Limited Vigor Corporate Park Sector 21, Central Commercial District Atal Nagar, Near Mantralaya Bhavan Nava Raipur, Chhattisgarh, India Email: vigorindustrieslimited@gmail.com Phone: +91-(903)9980219 14. Additional Sector-Specific Privacy Notices Certain subsidiaries and business verticals may issue additional, sector-specific privacy notices (e.g., healthcare, fintech, research labs). These notices supplement and do not replace this overarching policy. Final Notes This policy reflects Vigor Industries Limited’s commitment to transparency, compliance, and responsible data stewardship. It’s designed to balance traditional corporate responsibility with forward-thinking innovation—building trust as we lead diverse industries into the future.