Usage of Information Collected by Us

We use the information collected in the following ways:

• To provide the services and products, including registering you for our services, verifying your identity and authority to use our services, and otherwise enabling you to use our Platform, our services and purchase products.

• To manage your account.

• To provide you with customer support and respond to your queries.

• For internal record-keeping purposes.

• To conduct research and analysis about your use of our products and services in order to provide better services.

• To periodically send promotional messages and emails regarding our services, products offered by us, special offers or other information about Zigly that we think you may find interesting.

• To communicate with you by email or phone about services, and to deliver the products, services or information you have requested.

With Whom we Share your Information

Except where you are expressly informed on the Website and/or App, or as described hereunder, we do not sell, rent, share, trade or give away any of your personal information.

• With our service providers and partners: We may use third party service providers to provide website and application development, hosting, maintenance, backup, storage, payment processing, analysis and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your information. All of our service providers and partners agree to strict confidentiality obligations.

• With law enforcement agencies: We will disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and the interests and protection of other members, and/or to comply with a judicial proceeding, court order, or legal process served on us.

• Within Cosmo First Limited and the Cosmo First Group: As set out in the section below.

Zigly and the Cosmo First Group

a) Who we are

Zigly is a business division of Cosmo First Limited (formerly Cosmo Films Limited), a company incorporated in India with its registered office at 1st Floor, Uppal's Plaza, M-6, Jasola District Centre, New Delhi - 110025. For the purposes of the Digital Personal Data Protection Act, 2023, Cosmo First Limited is the Data Fiduciary in respect of personal data collected through the Platform and at Zigly Experience Centres.

b) Use within Cosmo First Limited

As Zigly is a division of Cosmo First Limited and not a separate legal entity, your personal data is held by Cosmo First Limited. It may be accessed and used by other divisions, departments and authorised personnel of Cosmo First Limited for the purposes set out in this Privacy Policy, including service delivery, customer support, analytics and internal record-keeping, on a need-to-know basis and subject to the same safeguards described in this Privacy Policy.

c) Use by Cosmo First Group entities for offers and marketing

By accepting this Privacy Policy, you acknowledge and agree that Zigly Pet Care and Cosmo First Limited reserve the right to use your contact details and limited transaction information, and to share the same with Cosmo First Limited's subsidiaries, affiliates and group companies (together, the "Cosmo First Group"), so that they may inform you about their products, services, offers and loyalty benefits. Such use and sharing is subject to the following:

i. Such use and sharing is limited to the purposes set out in this Privacy Policy. Your personal data is not sold, rented or traded to any person outside the Cosmo First Group for marketing purposes.

ii. Only the data necessary for this purpose is used or shared. Payment credentials, card details and bank account information are never used or shared for marketing purposes.

iii. Each recipient entity within the Cosmo First Group is bound by written obligations of confidentiality, purpose limitation and security equivalent to those set out in this Privacy Policy.

iv. All commercial communications are sent in accordance with the Telecom Commercial Communications Customer Preference Regulations and applicable do-not-disturb registrations.

v. You may object to this use, and withdraw your consent, at any time, as set out below.

d) Withdrawing your consent

You may withdraw your consent to the use of your personal data for offers and marketing by the Cosmo First Group at any time, free of charge, by writing to grievance@zigly.com from, or quoting, your registered email address or mobile number and stating that you wish to withdraw this consent. This is the designated channel for withdrawal of this consent.

Requests received at grievance@zigly.com are acknowledged and given effect within a reasonable period, and in any event within the timelines prescribed under applicable law. Withdrawal of consent for marketing does not affect your account, your ability to purchase products, or your ability to avail services at Zigly Experience Centres, and does not affect the lawfulness of processing carried out before the withdrawal.

e) Service communications

Even after you withdraw marketing consent, Cosmo First Limited will continue to send you transactional and service communications necessary to fulfil your orders and appointments, including order confirmations, delivery updates, appointment reminders, invoices, product recalls and safety notices. These are not marketing communications and cannot be opted out of while you hold an active account.

Access or Control your Information

You have been provided with tools to manage your information. You have the right to access, rectify and update the information that you provided to us by visiting our Website or App. You have the following rights:

• Reviewing your information: You have the right to review and edit your personal information on our Platform.

• Correction and erasure: If you believe that the information we hold about you is inaccurate, or that we are no longer entitled to use it, and you want it corrected or deleted or wish to object to its processing, please write to grievance@zigly.com. Please note that we may need to retain certain information for record-keeping purposes, to complete transactions, or to comply with our legal obligations and applicable laws.

• Withdrawal of consent: You have the right to withdraw your consent to the processing of your personal information at any time by writing to grievance@zigly.com. Withdrawing consent for marketing purposes affects only marketing communications and is dealt with in the section Zigly and the Cosmo First Group. Withdrawing consent for all processing means the deletion of your profile, after which we will not be able to provide further services to you.

• Nominating another person: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, by writing to grievance@zigly.com.

• Grievance redressal: You have the right to a readily available means of grievance redressal in respect of any act or omission regarding your personal data. The contact details of our Grievance Officer are set out at the end of this Privacy Policy.

Steps taken by us to Secure your Information

We follow generally accepted industry standards to protect the personal information submitted to us. All your information, not only sensitive information, is restricted within our offices. Only employees who need the information to perform a specific job are granted access to personally identifiable information. If you have any questions about security on our Website and App, please email us at the email address mentioned below.

While we implement safeguards designed to protect your information, no security system is impenetrable, and due to the inherent nature of the internet we cannot guarantee that data, during transmission through the internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others. When our registration or order process asks you to enter sensitive information such as a credit card number, that information is encrypted and is protected by the payment service provider.

Information kept by us

We keep your personal information only as long as you use our service and as permitted or required by applicable law. In practice, we delete or anonymise your information upon deletion of your account, unless it is required to comply with legal obligations, to prevent fraud, to take actions we deem necessary to protect the integrity of our Website and App or our users, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our services. We retain information in order to provide better services, and we use that information to analyse the use of our services, not to analyse personal characteristics about you.

Cookies and other Tracking Technology

• We and our authorised partners may use cookies and other information gathering technologies for a variety of purposes. These technologies may provide us with personal information, information about the devices and networks you use to access our Website and App, and other information regarding your interactions with our Website and App.

• We partner with third parties either to display advertising on our Website and App or to manage our advertising on other sites. Our third-party partners may also use technologies such as cookies to gather information about your activities on our Website and App and on other sites, in order to suggest advertisements based on your browsing activities and interests.

• Web beacons, tags and scripts may be used on our Website and App, or in email or other electronic communications we send to you. These assist us in delivering cookies, counting visits to our Website and App, understanding usage and campaign effectiveness, and determining whether an email has been opened and acted upon. We may receive reports based on the use of these technologies by our third-party service providers on an individual and aggregated basis.

• You are free to decline our cookies if your browser permits, although in that case you may not be able to use certain features on the Platform and you may be required to re-enter your password more frequently.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Any revised Privacy Policy will be posted on the Platform with an updated effective date, and will take effect from the date of posting. Where a change materially affects how we use your personal data, or introduces a new purpose for which your consent is required, we will notify you by email, SMS or an in-app notice and, where required, seek fresh consent. Your continued use of the Platform after a revised Privacy Policy is posted constitutes your acceptance of the changes, except where fresh consent is required.

Your Consent

By using the Platform, creating an account, placing an order, or availing our services, you consent to the collection and processing of your personal data for the purposes set out in this Privacy Policy. This includes the use of your data for offers and marketing by Zigly and the Cosmo First Group, as described in the section Zigly and the Cosmo First Group above.

Your consent is given freely, is specific to the purposes notified to you, and may be withdrawn at any time by writing to grievance@zigly.com, which is the designated channel for withdrawal. On withdrawal we will cease the relevant processing within a reasonable period, except where we are required or permitted by law to retain or continue processing the data. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children's Privacy

The Platform is intended for use by individuals who are 18 years of age or older, and we do not knowingly collect personal data from children. Where we process the personal data of a child, we will do so only after obtaining verifiable consent from a parent or lawful guardian, as required under the Digital Personal Data Protection Act, 2023 and the rules made thereunder.

We do not undertake tracking or behavioural monitoring of children, and we do not direct advertising at children.

If you believe that a child has provided personal data to us, please write to grievance@zigly.com. On verification, we will delete that data unless we are required by law to retain it.

Cross-Border Data Transfers

Information we collect may be stored and processed in India or in any other country where Zigly, Cosmo First Limited, or their affiliates, subsidiaries or service providers maintain facilities. By using the Platform, you consent to the transfer of your data to locations outside your country, which may have different data protection rules than your jurisdiction. We ensure that such transfers are made in compliance with applicable data protection laws, including any restrictions notified by the Central Government on transfers to specified countries, and with appropriate contractual safeguards.

Data Breach Notification

In the event of a personal data breach that may compromise your personal information, Cosmo First Limited will take prompt action to assess the risk, and will notify affected users and the Data Protection Board of India and other regulatory authorities where legally required, within the timelines prescribed. We will provide details on the nature of the breach, the data affected, and the recommended steps to mitigate harm. Our priority will be to secure your data and prevent recurrence.

Third-Party Links and Widgets

Our Platform may include links to third-party websites or services and social media widgets. Your interactions with these features are governed by the privacy policies of the companies providing them. We do not control and are not responsible for the privacy practices or content of such third-party sites. We recommend that you review their privacy policies before providing any personal information.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below. The Grievance Officer is also the point of contact for questions about the processing of your personal data, for withdrawal of consent, and for the exercise of your rights under this Privacy Policy.

• Designation: Grievance Officer

• Email ID: grievance@zigly.com

• Phone Number: +91-11 49494949

• Address: 1st Floor, Uppal's Plaza, M-6, Jasola District Centre, New Delhi - 110025, India

• Time: 09:30 AM to 06:30 PM

• Available Days: Monday to Friday, working days only, excluding public and national holidays