PRIVACY POLICY

Updated on June 10, 2021

Hero MotoCorp Ltd. together with its affiliates and subsidiaries (collectively referred to as the "Company" or "Hero" or "Us" and also indicated by "us", "we" or "our") is committed to protecting your privacy and personal information you give to us. We encourage you to read the Privacy Policy.

This Privacy Policy ("Policy") apply to all visitors, users and others (hereinafter referred to as "You" or the "User") who access or use the (i) Website- https://www.heromotocorp.com (ii) any other websites (iii) mobile applications (Apps) owned and / or operated by Hero on which this privacy policy is linked and (iii) the social media accounts and/or pages that Hero control (Sites/Apps).

Except as otherwise provided in this Policy, in general, you can visit/use our Sites/Apps without identifying who you are. Hero will provide you with the option to deal with Hero without identifying yourself where it is lawful and practical. However, particular sections on our Sites/Apps may require you to provide personal information in order that we may provide the products/services or information you have requested while visiting/using our Sites/Apps.

This Privacy Policy is intended to let you know what personal information we collect, why we collect (purpose) and what we do with it (use), processing/sharing and transfer of personal information and your rights relating to such personal information shared with us. By using the Sites/Apps, you agree, understand and consent to this Privacy Policy and any future amendments and additions. This Privacy Policy also describes your personal data protection rights, including a right to object to some of the processing of personal data that the Company carries out.

Personal Information means any information that may be used to identify an individual. This includes but is not limited to: first and last name, email address, mailing and residential address, telephone number, title, birth date, gender, occupation, your profession and other information needed to provide a service you have requested.

Sensitive personal data or information means personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

WHAT PERSONAL INFORMATION WE COLLECT?

A. Personal Data:

Information you give us

We may collect any Personal Information shared by you on our Sites/Apps. Depending upon the Site(s) and context, this information may include the following:

· Details of how you used our Sites/Apps

· Internet protocol address

· Device event information such as caches, system activity, hardware settings, browser type, browser language, the date and time of your visit, time spent on those pages and other statistics and referral URL.

· Cookies, web beacons and other similar technologies that may uniquely identify your browser or your Account. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Sites/Apps.

Information collected automatically

Log information

Depending upon the Sites/Apps or context, we automatically collect and store certain information that your browser sends whenever you visit our Sites/Apps in server logs ("Log Data"). This includes:

· Details of how you used our Sites/Apps

· Internet protocol address

Cookies, Web Beacons and Tracking Codes:

Cookies are small text files that a website downloads onto your computer or other internet-enabled devices (such as mobile phones and tablets) when you visit a website. The cookie will help the website recognise your device the next time you visit.

We may use both session cookies (disappear after you close your browser) and persistent cookies (remain after you close your browser and may be accessed every time you use or connect to our Sites/Apps). We may collect information like user s IP address, geographical location, browser/device type and version, operating system, referral source, device, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of user website use through "cookies".

You can block cookies by activating the setting on your browser that allow you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our site, or they may not function properly.

For more information about our use of cookies please refer to our Cookie Policy.

Social Media Widgets

Our Sites and applications may include social media features connected with social media platform such as Facebook, Twitter, Instagram, Snapchat, Google Plus, Pinterest, YouTube and others. These features may collect information about your IP address and which page you re visiting or features you re using, and may set a cookie or employ other tracking technologies. Social media features and widgets are either hosted by a third party or hosted directly on our Sites/Apps. Your interactions with those features are governed by the privacy policies of the companies that provide them.

Tracking code in website analytics, a tracking code is a snippet of script that tracks the activity of a website user by collecting data and sending it to the analytics module. The code is generated automatically, is different for each website, and can be installed on each page that needs tracking.

Careers

Our Site may include a link to our Career Section. Any Personal Information submitted through that portion of the sites, by upload or via e-mail, will be governed as per this privacy policy.

HOW WE COLLECT THE INFORMATION?

Hero will generally collect your personal information directly from you. This may be achieved through your interactions with Hero including interactions via our Sites/Apps, other social media applications or internet sites, telephone, email or writing to us.

Hero may also collect your personal information from a third-party source, such as our vendors, business partners, government authorities and judicial authorities.

WHY WE COLLECT THESE INFORMATION?

Unless otherwise provided in the Policy, we may use personal information collected from the Sites/Apps in various ways including:

· To facilitate or fulfil the information, products or services you have requested.

· To contact the User for confirming your registration on our website.

· To communicate with the User to respond to his/her queries or seeking feedback or resolving disputes on the product and services.

· For business, marketing and promotional purposes such as sending information about special promotions, programs, schemes, offers, new features, plans on products/services and marketing communications that we believe may be of interest to you.

· For the legitimate business interest, such as prevention of money laundering, fraud detection and prevention, and enhancing safety. To consider an application for career with Hero.

· To consider an application from prospective Vendors for partnering with Hero.

· To educate you about us, our products and services or to understand your interest to improvise the content and performance of our Sites/Apps.

· For maintenance of high quality and standards of products and services.

· To send you important information regarding the Sites/Apps, changes in terms and conditions, user agreements, and policies and/or other administrative information

· For internal business operations including:

1. (i)Reviews and data analysis for the website (e.g., to determine the number, category of visitors to specific pages within the website).

2. (ii)To manage, operate, maintain and secure our Sites/Apps, network system, and other assets and to customize/personalise your experience with us, which may include displaying content based upon your preferences.

3. (iii)For the purposes of analysing the use of the Sites/Apps, enabling and monitoring your use of our Sites, /Apps operating our Sites/Apps, ensuring the security of our Sites/Apps, for maintaining back-ups of our databases.

4. (iv)To help diagnose problems with our server, and to administer our Sites/Apps.

· To comply with our legal obligations or as otherwise permitted by law.

· To investigate potential breaches, or to protect the rights, property or safety of Hero, the Users of our Sites/Apps or others.

· For any other purpose necessary or incidental to our business.

· For any other purpose for which you give your consent.

In the event we use your Personal Information for other purposes, not specified above, we will inform you about the specific purposes for processing of your personal information and, when required, our basis for doing so at the time we collect the Personal Information from you to the extent required by law.

For the purposes of clarity, we may also use your personal information in combination with information we obtain from third parties about you for the same purposes described above.

In the event that you provide any personal information on any of the Sites/Apps, you consent to the transfer of such information across country borders, and to the use, processing, and disclosure of such information in global locations, including those that may have different levels of privacy protection than in your own country.

THIRD PARTY LINKS:

Our Sites/Apps may have links to the websites/Apps of other third parties and these third-party websites/Apps may collect personal information about Users for their own purpose, in such cases, our Privacy Policy does not extend to these external websites/Apps of third parties. Please be aware that if you access these links, you will be leaving our Site(s). We encourage users to read the privacy policies of those websites/apps, as we are not responsible for their content, links, or privacy procedures.

RETENTION, PROCESSING AND STORAGE OF INFORMATION:

Your personal data processed by Hero are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed in line with legal, regulatory, contractual or statutory obligations as applicable.

At the expiry of such periods, your personal data will be deleted or archived to comply with legal/contractual retention obligations or in accordance with applicable statutory limitation periods.

TO WHOM WE SHARE YOUR INFORMATION WITH?

We may share the Personal Information collected from the Sites/Apps with third parties as outlined in this section.

1. 1.Affiliates

Our parent company, subsidiaries, joint ventures, group and associate companies. These entities may use this information for the purposes outlined above.

1. 2.Business Partners

(i) Service Providers who perform services on behalf of Hero and which may need information about you in order to perform their functions including but not limited to authorised service partners, call centre operators, marketing contractors, social media website providers, data entry service providers, IT agencies operating handling or maintaining Sites/Apps, storing/processing information, overseas service providers who work for us etc.

(ii) Vendors who are business associates of Hero like suppliers, research and development vendors, professional advisors, agents, representatives etc.

1. 3.Other Partners

Any third party with whom Hero co-brand or partner with or collaborate with or with any other third parties as may be necessary for Hero s business purposes or to investigate potential data incidents or to protect the rights, property and safety of Hero and the Users of our Sites/Apps or others.

1. 4.Legal Authorities

We may share your Personal Information in response to any notice, order, investigation or demand or request or any other communication from a law enforcement agency which necessitate or mandate the sharing of such personal information, or to otherwise comply with applicable laws.

1. 5.Changes in Corporate Structure or Bankruptcy

In the event that Hero is involved in a merger, acquisition, reorganization or sale of assets, bankruptcy, your information may be transferred as part of that transaction. We also may retain a copy of such information.

We DO NOT use or disclose Information for purposes other than as mentioned in this Policy, except with the consent of User providing such Information or as required by law.

INTERNATIONAL SHARING AND / OR TRANSFERS OF YOUR PERSONAL INFORMATION

Hero is a global company and therefore uses global dealers, distributors, vendors, subcontractors and other business partners, as well as global IT systems and applications. We may require the transfer of PI/SPI to other third parties that are located outside of the Hero s country of business. We shall develop a standardized approach for protection of data moving across borders. We will adopt appropriate technical and administrative controls that apply well to cross border data flows to act as an accountability framework for information management as a whole and including natural checkpoints for each step of international transfer.

If you are citizen of European Union/European Economic Area (the "EU/EEA") the following terms apply to your Personal Information: Your Personal Information may be shared with and / or transferred to our global affiliates and to our employees, contractors and business partners who work for us and are located outside the EU/EEA for the purposes described in this Privacy Statement. If this is the case, we will take legally required steps under the General Data Protection Regulation ("GDPR") to ensure that adequate safeguards are in place to protect your Personal Information in accordance with this Privacy Statement.

ACCESS AND ACCURACY

Hero wants to maintain only accurate information about the users. You can request access to your personal information by contacting us at grievanceofficer@heromotocorp.com. Upon receipt of appropriate identification information, and where required by applicable Data Protection Laws, Hero will provide you with access to the information that it maintains about you.

YOUR RIGHTS

At Hero, we take your privacy very seriously, and we never monetize your information; we use it to enhance your experience. When it comes to your privacy rights, we want to make sure you have everything you need to make informed decisions. You have the right to:

· Right of Access - You have the right to be informed why and how we collect your personal data, how we will use this information, who we share it with, what are the security measures we take to protect this information and what your individual rights are; We will publish this information in this Privacy Notice. Hero shall provide a copy of the personal information undergoing processing. For any further copies requested, please note that Hero may charge a reasonable fee based on administrative costs.

· Right to Rectification - You have the right for inaccurate or incomplete data we hold to be updated.

· Right to Erasure - Except in very specific cases where provided by law, you have the right to request that we delete any Personal Information which we are holding about you.

· Right to Restriction of Processing - Except in very specific cases where provided by law, you have the right to restrict processing of all or some of your personal information (e.g., if we have no legal right to process it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).

· Right to Data Portability - You have the right to receive your personal information or to transmit that information to another controller in a structured, commonly used and machine-readable format.

· Right to Object to the Processing - You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. Such right can be exercised at any time where your personal data is processed for direct marketing purposes.

· Right to object being subjected to a decision based solely on automated processing, including profiling.

· You may opt-out of receiving non-essential (promotional, marketing-related) communications from us & or our Affiliates / Business Partner / Other Partners/ Third Parties. If you want to opt-out from any such communication as mentioned above then you may send an email to DPO email ID (as mentioned under Contact Us section of this policy).

At any stage, you can withdraw your consent to the retention/storage/processing of your Personal Information and Hero shall erase the Personal Information withdrawn by you unless there is a contractual obligation or legal requirement/obligation to retain/hold it or otherwise permitted by law to retain it. However, upon such withdrawal, the Company will not able to communicate with you and provide you with certain information on product and/or services which are required for fulfilment of any obligation.

Hero may be allowed by law, in particular in case of excessive or manifestly unfounded request, to charge a fee for fulfilling your request, subject to applicable conditions. The relevant contact details of Data Protection Officer are provided in this Policy.

How to Submit a Request

You may submit a request to exercise your rights by following below steps:

· Download and fill the DSR form attached below

· Submit the DSR form on the following email - grievanceofficer@heromotocorp.com

HOW WE PROTECT YOUR INFORMATION?

Our Sites/Apps have stringent security practice and measures in place to protect the personal information provided to us. Our database stores Personal Information in secure environment that are designed to safeguard it from loss, misuse, wrongful disclosure, destruction and alteration. The security measures are reviewed periodically by Hero to keep pace with business, technology and regulatory changes.

· The security and confidentiality of your Personal Data is important to us and Hero has invested significant resources to protect the safekeeping and confidentiality of your personal data. When using external service providers acting as processors, we require that they adhere to the same standards as Hero. Regardless of where your personal information is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure.

· We have physical, electronic, and procedural safeguards that comply with the applicable laws to protect personal information about you. We seek to ensure compliance with the requirements of the GDPR and the regulatory requirements to ensure the protection and preservation of your privacy.

· We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data.

CONTACT INFORMATION:

We welcome your questions, comments, and concerns about privacy. If you have any questions about the Privacy Policy or our data practices, please contact us as follows:

Grievance Officer
C/o Hero MotoCorp Limited,
The Grand Plaza, Plot No.2,
Nelson Mandela Road,
Vasant Kunj - Phase -II,
New Delhi - 110070
Phone: +91 11-46044100
Email: grievanceofficer@heromotocorp.com

The Data Protection officer shall expeditiously redress the grievances, but within reasonable time as may be provided in applicable laws.

Please note that email communications are not always secure, so please do not include credit card information or other sensitive information in any email to us.

UPDATES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy. Please refer the Updated on legend at the top of this page to see when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on our sites. Your use of the Sites following these changes means that you accept the revised Privacy Policy.