*BY USING THE APPLICATION OR THE SERVICES OF OUR COMPANY OR BY PROVIDING YOUR INFORMATION, YOU CONSENT TO BE BOUND BY THE TERMS OF THIS PRIVACY POLICY AND THE TERMS OF USE. YOU AGREE TO THE PRACTICES AND POLICIES DESCRIBED IN THIS PRIVACY POLICY AND AGREE TO THE SHARING OF YOUR INFORMATION AS DETAILED HEREIN. WE RESERVE THE RIGHT TO AMEND THE TERMS OF THIS PRIVACY POLICY AT ANY TIME, AT OUR SOLE DISCRETION. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE REFRAIN FROM USING OUR SERVICES AND DO NOT PROVIDE US WITH YOUR INFORMATION.*

This privacy policy ("Privacy Policy") explains how we (the Company) collect, use, share, and protect your personal information (referred to as "You" or "Users" in this Privacy Policy). This includes sensitive personal data or information, the purpose, means, and modes of usage of such information. We have created this Privacy Policy to demonstrate our commitment to protecting your privacy and personal information. Your use of and access to the services is subject to this Privacy Policy and our Terms of Use.

1. DEFINITIONS

- *"Affiliate"* means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority.
- *"Company"* (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to CRTS.
- *"Cookies"* are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history on that website among its many uses.
- *"Country"* refers to India.
- *"Device"* means any device that can access the Service, such as a computer, smartphone, or digital tablet.
- *"Partners"* shall mean the masons, architects, dealers, trade partners, and non-trade partners associated with the Company.
- *"Personal Data"* is any information that relates to an identified or identifiable individual.
- *"Service"* refers to the Website.
- *"Service Provider"* means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used.
- *"Usage Data"* refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- *"Website"* refers to www.crts.co.in.
- *"You"* means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

### 2. CONTEXT AND PURPOSE

This Privacy Policy is published in compliance with Section 43A of the Information Technology Act, 2000, Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 ("SPDI Rules"), and Regulation 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

### 3. COLLECTION OF PERSONAL INFORMATION

Many of the services we provide require us to authenticate and know who you are so that we can best meet your needs. When you access the services, we may ask you to voluntarily provide us with certain information that personally identifies you or could be used to personally identify you. This information collected by us while you create an account may include, but is not limited to:

- Name, address, mobile number
- Bank details
- Data regarding your usage of our services
- Other information that you voluntarily choose to provide to us, such as information shared by you through emails or calls

*"Personal Data" under the Digital Personal Data Protection Act 2023*

"Personal Data" is defined under the DPDP Act, 2023 as any data about an individual who is identifiable by or in relation to such data:

*"Sensitive Personal Data or Information"* of a person means personal information about that person relating to:

- passwords
- financial information such as bank accounts, credit and debit card details, or other payment instrument details
- information received by the body corporate under lawful contract or otherwise;
- visitor details as provided at the time of registration or thereafter; and
- call data records.

Information that is freely available in the public domain or accessible under the Right to Information Act, 2005 or any other law will not be regarded as personal information or sensitive personal data or information.

### 4. PRIVACY STATEMENTS

*4.1 CONSENT TO THE PRIVACY POLICY*
Collection, use, and disclosure of information designated as Personal Information under the Digital Personal Data Protection Act, 2023 ("DPDP Act") require express consent from the User. When our Portal is about to collect Personal Data, we shall provide You with a consent letter/pop-up. By agreeing to this consent letter/pop-up, You consent to the collection, storage, usage, disclosure, processing, and transfer of Your Personal Data provided to us for the purposes mentioned in this Policy. We request You to carefully read this pop-up Consent letter and Terms of Use of the Portal before sharing personal information with us. We shall ensure confidentiality of such personal information, and grievances, if any, related to such issues shall be resolved by the grievance officer appointed by the Company for this purpose as per the DPDP Act, 2023 ("Grievance Officer").

*4.2 INFORMATION COLLECTED FROM THE USER*
All/any information provided by you, including sensitive information, is voluntary and we reserve the right to use such information provided by or about you for the following purposes:

1. Publishing individual’s information on our website or App(s). This information is accessible only by the individual who has generated this data on his/her own or through Partners.
2. Contacting you for product and service feedback.
3. Analyzing software usage patterns for improving product design and utility.
4. Helping promote safe services.
5. Informing you about offers, products, services, updates, customizing your experience, detecting and protecting against error, fraud, and other criminal activity, enforcing our terms and conditions, etc.
6. Sending you offers, product information, events, educational information, etc., based on your previous orders and interests.

CRTS takes your right to privacy very seriously and, other than as specifically stated in this privacy policy, will only disclose your personal information in the event it is required to do so by law, rule, regulation, law enforcement agency, governmental official, legal authority, or similar requirements, or when CRTS, in its sole discretion, deems it necessary to protect its rights or the rights of others, to prevent harm to persons or property, to fight fraud and credit risk, or to enforce or apply the Terms of Use.

We also reserve the right to periodically reveal general statistical information about our users, such as the number of visitors, number and type of goods and services purchased, etc.

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to and maintained on computers located outside of Your state, province, or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

*4.6 YOUR DUTIES*
You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of account registration. If your personal information changes, you may amend the information by making necessary changes wherever possible or by contacting us through support. If you wish to make changes to the details provided by you, kindly contact us by calling the helpline number provided. We will make the requested changes in our then-active databases as soon as possible. If you provide any information that is untrue, inaccurate, out of date, or incomplete, or if we have reasonable grounds to suspect that the information provided by you is untrue, inaccurate, out of date, or incomplete, CRTS may, at its sole discretion, discontinue the provision of the services to you.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

*4.7 TERMINATION*
If you wish to cancel your account or request that we no longer use your information to provide you with services, contact us through support. We shall not retain such personal information unless required under any other law for the time being in force.

*4.8 CYBER INFORMATION and COOKIES*
The systems of the Company will automatically receive the URL when you access the website. The authors also receive the Internet Protocol (IP) address of your computer (or the proxy server a User uses to access the World Wide Web), your computer’s operating system (OS), and type of web browser being used, email patterns, as well as the name of your ISP. This information may be used to analyze overall trends to help CRTS improve its service. The linkage between your IP address and your personal information will not be shared with