Privacy Notice

A. Information about children

If you are under the age of 18, you are required to obtain the consent of your parent, guardian or person who has parental responsibility over you before providing us with your personal data (for example, your name, address, and email address).

B. What personal data does GEML collect?

The types of personal data we collect or obtain may vary according to our relationship with you and may include the following:

1. Customers / End Users / Direct Consumers / Ampere Connect (Application) User

2. Business Partners (including third parties) and Dealer / Distributors

3. Visitors to Any of Our Premises or Events

4. Applicants, Candidates and Beneficiaries

5. Certain required information is automatically collected pursuant to your visit to the Website (refer to Section E for further details).

C. Why is personal data collected?

1. Customers / End Users / Direct Consumers:

• To enable GEML and its group entities to reach out to you in relation to programmes managed by them or products or services offered by them;
• To enable us to improve products & services, as well as that of the other GEML entities;
• To process your requests (such as replying to your queries or complaints);
• To provide you with the credit service;
• To process your subsidy requests;
• To sell any products that GEML deals in;
• Regulatory Obligations, including for auditing purposes;
• To measure site / app usage, enhance content quality, ensure safety and security, and improve the overall performance of the Website / app.

2. Business Partners and Dealer / Distributors:

• Business execution;
• Organization and management of the business;
• Compliance with laws and/or contractual and/or regulatory obligations, including for auditing purposes;
• Protecting or exercising our legal, contractual and/or regulatory rights and remedies;
• Protecting our assets and interests;
• Any other purpose within the scope of the agreement signed between GEML and its Business Partners and Dealers/Distributors.

3. For Visitors to Any of Our Premises or Events:

• Providing access to our network, systems and/or services;
• Compliance with laws and/or contractual and/or regulatory obligations, including for auditing purposes (if applicable);
• Protecting or exercising our legal, contractual and/or regulatory rights and remedies.

4. Applicants, Candidates and Beneficiaries:

• To evaluate your candidature for prospective career opportunities with us;
• To enable us to provide you with the prospective benefits.

5. To measure site usage, enhance content quality, ensure safety and security, and improve the overall performance of the Website.

D. How we collect your personal data?

GEML may collect your personal data for instance:

• When you contact us through the Website or any other channels (such as forms, e-mail addresses, hyperlinks, or social media platforms like Facebook and Instagram);
• When you register with us to receive products and/or services of any of the GEML entities;
• When you complete surveys conducted by or for us;
• When you elect to receive any communications (including any newsletter, promotional offers) from us and information as may be voluntarily provided by you;
• When you contact us for any service requests, queries through a toll-free number/email provided in the product;
• When you connect with our sales officer or personnel at the dealers/distributors for credit services;
• Through the dealers for any subsidy approvals, product enquiries;
• When we have partnered with you for any business use;
• When you contact us on email or career platforms for job applications.

E. Personal Data is collected automatically pursuant to your visit to our website

We automatically collect some information about you by virtue of your visit to the Website. This information helps us to make improvements to Website content and navigation and includes your IP address and the way you use and interact with Website content, namely:

1. Our web servers or affiliates who provide analytics and performance enhancement services collect IP address, operating system details, browsing details, device details and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. GEML uses this information to measure the site usage, improve content and to ensure safety and security, as well enhance performance of the Website.
2. We may collect your personal data automatically via Cookies, in line with the cookie settings on your browser. For more detailed information, please review our Cookie Policy.
3. Cookie Consent Banner: We use a cookie consent banner on our website to inform you about our use of cookies and to obtain your consent before placing non-essential cookies on your device. This banner provides an overview of the types of cookies we use and allows you to manage your cookie preferences.

This Website may place and access certain Cookies on your computer/device and uses them to improve your experience of using the Website. "Cookies" are small files placed on your hard drive that assist us in providing our services.

We offer certain features that are only available using a "cookie". Cookies can also help us provide information that is targeted to your interests. Most cookies are "session cookies," meaning that they are automatically deleted from your hard drive at the end of a session. You are always free to decline/delete our cookies if your browser permits, although in that case you may not be able to use certain features on the Website and if the Website provides for account creation, you may be required to re-enter your password more frequently during a session.

Additionally, you may encounter "cookies" or other similar devices on certain pages of the Website that are placed by third parties. We do not control the use of cookies by third parties. We may use cookies from third-party partners such as Google Analytics for marketing and analytical purposes. You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies, but this can be changed.

F. Sharing of personal data amongst Greaves Electric Mobility Limited Entities

We may share personal data with different GEML entities to inform you of relevant and customized offers, features, services, and products. It is possible that any such entities or a combination of them could merge with or be acquired by another business entity. Should such a combination occur, you should expect that GEML would share some or all your personal data to continue to maintain and provide GEML services.

G. Transfer of personal data

To enable us to provide you with enhanced and secured services, we may enter into contract with various third parties from time to time. Such engagement may involve sharing your personal data. To the extent a third party has access to your personal data, we will ask them to treat it at least as protectively as they treat personal data they obtain from their other authorized sources and to ensure that such data is treated in accordance with the applicable laws. This obligation is also documented by us in our contracts with such third parties. We do not sell your personal data to any third party. We have various partners for storing, securing your personal data, network of marketing agencies, analytics third parties, etc. The third parties GEML has contracted with are aligned as per purposes stated in this Privacy Notice.

The personal data that we collect from you is stored in India but may be transferred to and stored at locations that may or not be in India. Where your personal data has been transferred to any subsidiary and/or to third parties located outside of India, the transfer of your personal data is carried out under organizational, contractual, and legal measures and with adequate levels of protection implemented as well as in compliance with any additional local legal requirements for the parties receiving this information to safeguard your personal data.

H. Data security

We may collect and store your personal data in electronic and/or physical form, depending on the requirement. Information may be stored at our and third-party premises within IT Systems (e.g., external cloud storages, internal or third-party management systems, e-mails, databases, hard drives), document warehouses, etc.

We endeavor to process your personal data in a safe environment by preventing any unauthorized or unlawful processing of personal data or accidental loss or destruction of, or damage to, such information. We have implemented various physical, technical, and administrative security measures to protect your personal data and our network from unauthorized access. Some of these measures include:

• Encryption — we use SHA-256 mechanism wherever necessary;
• Strict adherence to privacy and security practices;
• Periodic security assessment and reviews to upgrade our practices;
• Restriction of access of personal data to GEML employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

I. Data retention policy

We will retain your personal data only for as long as such information is necessary for the purposes it was collected for. The retention period for personal data may also be affected by the requirements of applicable laws. In all cases, information may be held for a longer period where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for legal or regulatory purpose) or, subject to law, a shorter period where the individual objects to the processing of their personal data. We shall take reasonable steps to destroy or permanently delete personal data that is no longer needed, including communicating the same to third parties engaged by GEML from time to time who process personal data on behalf of GEML.

J. Data principal rights

You, as a data principal have certain rights with respect to personal data belonging to you collected by GEML for the purposes mentioned in this Privacy Notice. The rights available to you as per the Digital Personal Data Protection Act, 2023 and/or other applicable laws are:

1. Right to access information

You have the right to request for:

• A summary of personal data which is being processed and the processing activities undertaken with respect to such personal data;
• The identities of all other Data Fiduciaries and Data Processors with whom the personal data has been shared by GEML, along with a description of the personal data so shared;
• Any other information related to the personal data and its processing, as may be prescribed.

2. Right to correction and erasure

You have the right to request for:

• Correction of inaccurate or misleading personal data;
• Completion of incomplete personal data;
• Update of personal data;
• Erasure of personal data.

3. Right to nominate

You have the right to nominate a representative in your place in case of an inability to exercise your rights under the DPDPA attributable to (i) unsoundness of mind or infirmity of body, or (ii) death.

4. Right of grievance redressal

You have the right to have readily available means of grievance redressal provided by a Data Fiduciary or Consent Manager. The Data Fiduciary or Consent Manager shall respond to any grievances within the time period prescribed from the date of its receipt for any class of Data Fiduciaries.

You may exercise the above rights by using the Data Principal Request Form. The form requires information for identifying you, details about the right you are choosing to exercise and scope of the right. It also needs you to exercise a declaration with respect to the information being filled by you in the Form is true and accurate.

If you have any further questions about the process to exercise these rights or any grievance with respect to how GEML is handling your personal data, you may contact the Responsible Privacy Personnel at privacy@greaveselectricmobility.com. If you are unsatisfied by how your request has been processed by GEML, you have the right to raise your grievance with the Data Protection Board of India, or such other body established by the Central Government under the Digital Personal Data Protection Act, 2023 and DPDP Rules 2025 thereunder.

5. Right to Withdraw Consent

You have the right to withdraw your consent for the processing of your personal data at any time. Upon withdrawal of consent, GEML will cease processing your personal data for the purpose(s) for which consent was originally provided, unless such processing is required under any applicable law.

Important Points to Note:

1. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
2. Certain services or features may become unavailable to you if they rely on the personal data for which consent has been withdrawn.
3. GEML may retain personal data where required for compliance with legal obligations or for establishment, exercise, or defense of legal claims.

You may exercise this right by submitting a request through the Data Principal Request Form or by contacting the Responsible Privacy Personnel at privacypolicy_website@greaveselectricmobility.com.

K. Notification of changes

We reserve the right to amend, modify, vary, or update this Privacy Notice, at our sole discretion from time to time, as and when the need arises. The most recently published Privacy Notice shall prevail over any of its previous versions. You are encouraged to check this Privacy Notice from time to time to stay informed of any changes.

L. Disclaimer

To protect your privacy, as stated above, we will take the best efforts and adopt the best industry standards of information practice. However, you understand that 100% security does not exist over the internet. You are responsible for protecting your personal data and you should not share your login credentials and/or leave your personal devices unattended while you are accessing the Website, etc. GEML does not guarantee, and you should not expect in the event of malware attack or negligence on your part, that your personal data will remain private.

M. Acknowledgment

By submitting personal data to us, you acknowledge that:

1. You have read and understood this Privacy Notice and agree and consent to the use, processing and transfer of personal data as set out herein; and
2. All information and representation provided by you are true and correct to the best of your knowledge, and you have not knowingly omitted any relevant information which may have an adverse effect.

N. Questions and updates

If you have any questions, please feel free to contact us at: privacy@greaveselectricmobility.com

This Privacy Notice was last updated on 05th December 2025.