Data Privacy and Protection Policy

1.Objective

The purpose of this Data Privacy and Protection Policy (“Policy”) is to maintain the privacy of and protect the Personal Data(See Annexure-11 for definition) of employees, contractors, vendors, interns, associates, customers and business partners of Iipsaa holdings Pvt.ltd(“ipsaa. This Data Protection Policy is based on globally accepted, basic principles on data protection and provides one of the necessary framework conditions for cross-border data transmission.

2.Scope

All employees, contractors, consultants, temporary, and other employees at ipsaa must comply with this Policy, including all personnel affiliated with third parties who may have access to any data shared by ipsaa. The Policy applies globally to ipsaa’s processing of Personal Data, whether by electronic or manual means (i.e., in hard copy, paper, or analogue form). This Policy applies to any Personal Data that is created, collected, processed, used, shared, or destroyed by ipsaa.

2.1 Privacy and Data Protection Principles

2.2 Updates to this Policy

ipsaa may from time to time review and revise its data protection practices, policies, and procedures including this Policy. If any significant changes are made, ipsaa shall:

3.Compliance

In order to fulfil applicable laws and regulations, ipsaa reserves the right to disclose an individual’s Personal Data to law enforcement agencies, regulatory bodies and, government agencies as required by law or for statutory compliances.

Annexure-1: Personal Data

Personal Data shall mean any information that, when used alone or combined with other data, may be used to identify a living individual. This includ es, but is not limited to:
an individual’s first and last name; e-mail address;
mailing and/or residential addresses; telephone number; title;
birth date; gender; occupation;
contact information;
credit card or bank information;
biographical information (where it 1s combined with information that identifies someone);
Passwords;
nation al insurance number; social security numbers; race;
ethnic origin; sexual orientation; political opinions;
religious or philosophical beliefs; criminal records; or
legal investigations and proceedings, etc.