Privacy Notice

Privacy Notice

We at Tata Consumer Products Limited (“TCP” or “We”) respect your Privacy and are committed to protecting it through our compliance with our Privacy Policy.

This Privacy Notice governs the manner in which TCP’s parent company website, www.tataconsumer.com (“Tata Consumer Products,” “we,” “us,” or “our”) collects, uses, shares, maintains and discloses Personal Data collected from users (each, a "User", “you”) of the website ("site"). 

We encourage you to read our Privacy Notice on a regular basis and whenever you intend to provide Personal Data to us. We may amend this Privacy Notice from time to time to reflect changes in our data handling practices. Please also note that subsidiaries of TCP around the world maintain their own websites, with privacy policies governed by the laws applicable to that jurisdiction. When you visit a subsidiary company website, you are encouraged as well to review that subsidiary company’s privacy policy, especially as may relate to data handling practices which may differ from TCP’s own with respect to the parent company website.

TCP’s website collects, processes, uses, storages, discloses, transfers, or otherwise makes available (“Processing”, “Process” or “Processed”) your Personal Data as legally permitted under Digital Personal Data Protection Act, 2023 and other in-scope Data Protection Regulations as may be specified within this policy itself.

The privacy practices set forth in this Privacy Notice are for this website only. If you are re-directed to other websites or provide personal data to any of those websites, please review the privacy notices posted at those websites.

Data We Collect About You and How We Collect It

i. Personal Data That You Give Us: We receive and store any data you provide through the general query, media query, contact us form, newsletter subscription, career page or such other manner specified on the website. Examples of what data you give us includes your first and last name, contact details such as your email address and phone number etc. We may also collect data which you may submit through recruitment@tataconsumer.com or our career page on the website which may include your profession, job designation, qualification and/or other related data in the form of your professional resume or in any other form that you may share with us.If you are a candidate who is a resident of a country outside India, your data will be processed in accordance with local laws of the country in which you reside.

ii. Personal Data That Is Collected Automatically: We automatically collect and store certain types of data about your use of our Services, including data about your interaction with our website and services availed through our website. Like many websites, we use "cookies" and other unique identifiers, and we obtain certain types of information when your web browser or device accesses our Services and other content served by or on behalf of us on other websites. You can always manage your cookie preferences on the website through the preference centre provided to you. Examples of what Personal Data we collect includes the internet protocol (IP) address used to connect your computer to the internet, content use history, browser and device information, browsers you used to access our Site and services, webpages viewed, time spent on webpages, links clicks, site-navigation patterns, referring website addresses and other diagnostic data from your use and interaction with our Site. Please refer to out Cookie Policy  on details around how we collect and process your personal data.

How we use your data

We may use the data that we collect or that you provide to us on this website itself, including any Personal Data:

i. When you contact us through the website (through any form, e-mail address, hyperlink or social media address posted therein).

ii. When you contact us through the website’s career page for recruitment purposes.

iii. For marketing and advertising purposes, such as to communicate with you about our products and services and those of our subsidiaries, affiliates, and parent companies that may be of interest to you.

iv. To maintain security and operability of our website (including for debugging purposes); to provide reports to prospective partners, service providers, regulators, and others; to implement and maintain security, anti-piracy, fraud prevention, and other services designed to protect you and us; to enforce this privacy policy notice, our Terms of Use, and other policies.

v. For customer service purposes, such as to respond to your queries and requests.

vi. To undertake, with your consent, marketing campaigns and any other promotional activities such as providing information about special events.

vii. Upon your opt-in, for research and analytics, such as for internal market analysis, such as identification of trends and measuring the amount of traffic to our website; to improve our website, products, and customer experience; to understand what parts of our website are most popular or to improve upon our website; to understand our customer demographics; and for other research and analytical purposes.

viii. For legal compliance: to comply with applicable legal or regulatory obligations, including to respond to a subpoena or court order; to cooperate with law enforcement or other governmental investigations; and as part of legal proceedings.

ix. For protection of us and others: where we believe it is necessary to protect us and others, including, without limitation to detect, prevent, and respond to fraud, security incidents, or other issues where we believe it is appropriate to protect us and others.

Legal Basis of Processing Personal Data

With your use of this website, we may process your Personal Data based on the following legal grounds:

i. Your Consent – When you reach out to us through the general query, media query, contact us form, newsletter subscription, manage your cookies cookie preferences or in every other case where you provide us with your clear and specific consent.

ii. Our legitimate use

  • For a specified purpose you voluntarily provide your personal data to us for which you have not indicated to us that you do not consent to the use of Personal Data; or
  • When we use your Personal Data to comply with laws specified for this website; or
  • When we improve our services, when we detect and prevent fraud and abuse in order to protect the security of our customers, ourselves, or others, and when we provide you with interest-based advertising; or
  • When we comply to any judgement, order or decree relating to claims of a contractual or civil nature under any law for the time being in force India.

Disclosure of Your Data

We may disclose Personal Data that we collect on this website, or that you otherwise provide to us on this website, as described in this privacy policy notice:

i. To contractors, service providers, and other third parties to develop or improve our products, services, and websites.

ii. To contractors, service providers, and other third parties for website management.

iii. To third party service providers as individually identified in this policy.

iv. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, or other sale or transfer of some or all of TCP's assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding in which personal data we hold is among the assets transferred.

v. As necessary to fulfill the purpose for which you provide it.

vi. Otherwise with your consent or in a manner disclosed by us when you provide the information.

We may also disclose your Personal Data:

i. To comply with any court order, law, legal process, or law enforcement, including to respond to any government or regulatory request.

ii. To enforce or apply our terms of use, terms of sale, and other agreements with you, including for billing or collection; and

iii. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of TCP, our customers, or others.

TCP employs appropriate safeguard for cross-border transfers of Personal Data, as required by applicable local law(s).

Minors Data

This website does not intend to collect Personal Data of individuals under the age of 18. We do not intentionally collect Personal Data of children. If you are the parent or guardian and believe your child has provided us with Personal Data, please contact us at the Email ID below to request deletion. Please be aware that the definition of a minor can differ depending on your location. We advise you to familiarize yourself with the laws and regulations of your region before sharing any personal data that may pertain to individuals considered minors in those jurisdictions.

Data Retention

We will retain your Personal Data (collected through online and offline methods) for as long as it is necessary for the purposes described in this Notice. We will also retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Even if we delete your Data, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.

Data Principal Rights

In this Section, we have summarized the rights that you may have under the Digital Personal Data Protection Act 2023 (“the Act”). Some of the rights are complex, and not all the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

i. Right to Access Information- You may ask us to provide suitable privacy notices containing relevant information about the collection and usage of your data. You may also ask us to provide you with a copy of your Personal Data held by us, free of charge, in an electronic format;

ii. Right to Correction and Erasure- You may ask us to correct, update and/or otherwise amend your inaccurate or incomplete Personal Data held by us. You may also ask us to delete all your Personal Data we hold;

iii. Right of Grievance Redressal – You may have grievances regarding the website, the contents thereof or the Services. You may reach out to Tata Consumer Products customer support at GDPO@tataconsumer.com. Our representative shall address any complaint or grievance that is raised by you within a period of 30 days from the date of raising of such complaint or grievance.

iv. Right to Nominate – You have the right to nominate any other individual who in the event of death or incapacity can exercise the Rights on your behalf.

You may exercise any of your rights in relation to your Personal Information by raising an Email request to us at GDPO@tataconsumer.com. Please note that we may contact you and ask you to confirm your identity to ensure that we do not disclose your Personal Data to any unauthorized person, and that we may ask you to specify your request before we perform any actions. Once we have confirmed your identity and understood exactly what you would like us to do, we will handle your request in accordance with applicable law.

If at any instance, access cannot be provided within a reasonable time frame, TCP shall provide you with a date when the information will be provided. If for some reason access is denied, shall provide an explanation as to why access has been denied.

Duties of Data Principals

In this section we have summarized the duties assigned to you under the Digital Personal Data Protection Act, 2023 (“the Act”).

  • To comply to the provisions of applicable laws while exercising rights under the Act;

  • To not to impersonate any other person while providing his or her Personal Data;

  • To ensure not to register false or frivolous grievances or complaints with the Data Protection Board of India (“the Board”).

UK GDPR and EU GDPR

If you are a European Economic Area (EEA) resident, or a resident of the United Kingdom of Great Britain and Northern Ireland (UK), then pursuant to the European General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR) respectively,  you have certain rights concerning your  personal information that we hold and process.  We have included a summary of these rights below. Some of the rights are complex, and not all the details have been included in our summaries. For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the UK GDPR at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/, and for individuals’ rights under EU GDPR see [ insert link to Guide to EU GDPR ]  ]

i. Right to Information- You may ask us to provide suitable privacy notices containing relevant information about the collection and usage of your data.

ii. Right to Access- You may ask us to provide you with a copy of your Personal Information held by us, free of charge, in an electronic format.

iii. Right to Rectification- You may ask us to correct, update and/or otherwise amend your inaccurate or incomplete Personal Information held by us.

iv. Right to Erasure- You may ask us to delete all your Personal Information we hold.

v. Right to Restriction of Processing- You may restrict the processing of your Personal Information.

vi. Right to Object to Processing - You may object to the processing of your Personal Information.

vii. Right to Object to Automated Decision Making- You may object to any automated decision made using your data.

viii. Right to Data Portability – you have the right to obtain from us any personal data that you have provided to us and copy it and / or move it to another IT environment for reuse.

You may exercise any of your rights in relation to your Personal Information by raising a Email request to us at GDPO@tataconsumer.com.Please note that we may contact you and ask you to confirm your identity to ensure that we do not disclose your Personal Information to any unauthorized person, and that we may ask you to specify your request before we perform any actions. Once we have confirmed your identity and understood exactly what you would like us to do, we will handle your request in accordance with applicable law.

If at any instance, access cannot be provided within a reasonable time frame, TCPL shall provide you with a date when the information will be provided. If for some reason access is denied, shall provide an explanation as to why access has been denied.

California Privacy Rights Act (CPRA)

In line with the California Privacy Rights Act (CPRA), users who are California residents have specific rights concerning their personal information that we gather and process. These rights include:

i. Right to Access Information: You have the right to access the personal information we hold about you. This means that you have the right to request a copy of that personal information. 

ii. Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.

iii. Right to Delete: You have the right to request the deletion of your personal information that we have collected or maintained, subject to certain exceptions.

iv. Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. We will provide a substantively separate notice to describe how you can exercise this right.

v. Right to Non-Discrimination: You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CPRA.

vi. Right to Correction: You have the right to request the correction of your personal information if it is inaccurate.

vii. Right to Opt-Out of Automated Decision Making Technologies: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you.

viii. Right to Data Portability: Upon request verified by us, you have the right to your data held by us in a format enabling your transfer or migration of that data to another entity.

ix. Right to Limit Use and Disclosure of Your Sensitive Personal Information: You have the right to limit our use of your sensitive personal information only as strictly necessary by us to deliver our goods and services to you.

x. Right to Opt-In for Minors: We are required to obtain your opt in consent to sell or share your information if you are a minor under the age of 16. If you decline such consent, we must wait at least 12 months prior to asking you again for consent.  If you are a minor under the age of 13, only your parent or guardian may provide such consent.

To exercise these rights described above, please submit a consumer request to us by contacting us at GDPO@tataconsumer.com We will respond to your request in accordance with the provisions of the CPRA and within the legally set timeframe.

Please note, the exercise of certain rights is subject to exceptions under the CPRA. For more information concerning your rights under the CPRA or how to exercise them, please contact us at GDPO@tataconsumer.com

Cross Border Data Transfer

Whenever we transfer personal data to countries outside India, we are legally obliged to ensure that the data is transferred in accordance with this Privacy Notice and as permitted by the applicable laws on Data Protection. We are legally obliged to adhere to Government of India’s decisions on restriction of transfer of Personal Data to blacklisted countries and / or to use contracts with standard safeguards and similar measures under applicable Data Protection laws for such transfers as may be notified by the Central Government.

If you are a resident in the UK or the EEA your personal information may be transferred to, processed and stored at, a destination outside the UK or the EEA. Such transfers and processing need to be done in accordance with UK GDPR or EU GDPR as applicable. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, including to the United States of America, which may provide for different data protection rules than in your country. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.

Data Security

We adopt appropriate data collection, processing and storage practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Data, username, password, transaction data and data stored on our Site
We use commercially reasonable and industry standard security technologies and safeguards to protect the Personal Data that we collect and use. We also expect our service providers to protect such Personal Data in the same manner. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust, unique password and keeping your log-in and password private. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us at GDPO@tataconsumer.com .

Opt-out

We provide all Users with the opportunity to opt-out of receiving non-essential (promotional, marketing-related) communications from us in general.

For opting out of receiving any transactional and promotional messages or notifications on your WhatsApp account, please type & send 'STOP' individually to each brand's WhatsApp for a business account or brand chatbot you may have previously subscribed to.

Changes to this Privacy Notice

We reserve the right to change this notice from time to time. The date the Privacy Notice was last revised is identified at the top. Any changes shall be effective immediately upon the posting of the revised Privacy Notice. We encourage you to periodically review this page for latest information on our privacy practices.

Complaints Or Inquiry 

If you have any questions or complaints about this Privacy Notice, the practices of this site, or your dealings with this site, please contact us at: GDPO@tataconsumer.com .
You also have the right to complain to a Data Protection Board (“The Board”) about our collection and use of Your Personal Data.