Crompton Logo

Crompton Greaves Consumer Electricals Limited

Privacy Notice (External)

Effective Date: 8th July 2025
Last Updated: 8th July 2025

Crompton Greaves Consumer Electricals Limited ("CGCEL," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, share, and protect your personal data when you use our website, mobile application, and other online services (collectively, the "Services"). This Privacy Notice is in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and other applicable data protection laws.

1. Scope and Applicability

This Privacy Notice applies to individuals who interact with our Services, including visitors, users, and customers ("you" or "your"), including those using CGCEL’s Internet of Things (IoT) enabled devices. It is intended for individuals residing in India and is aligned with applicable Indian data protection laws.

This Privacy Notice does not apply to our employees, interns, or contractors, whose personal data is governed under a separate Employee Privacy Notice. It also does not apply to third-party websites, applications, or services that may be linked from our platform. We encourage you to review the privacy policies of such third parties to understand how they handle your information.

If you use CGCEL’s IoT devices, this Privacy Notice also applies to any personal data collected through such devices, including but not limited to device identifiers, usage logs, location information, and environmental or sensor data.

In situations where a specific privacy notice is not presented at the point of data collection, the most recent version of the Privacy Notice available on our official website shall apply and will govern the collection, use, and processing of your personal data. We encourage users to review the Privacy Notice on our website regularly to stay informed about how we protect and use your data.

2. Which categories of personal data do we collect and how do we process such personal data?

The Personal Data relating to you which we may collect, use, transfer, disclose or otherwise process, includes:

# Category of Personal Data Specific Data Fields Requirement Purpose of Processing Goods or Services Enabled
1 Identity and Contact Information
  • Name
  • Phone number
  • Email
  • Postal address
  • Date of birth
Mandatory for service provision
  • Account creation
  • Communication
  • Identity verification
Access to CGCEL services, account management, and personalized support
2 Transaction and Payment Data
  • Payment method details
  • Transaction history (processed via secure third-party payment gateways)
Mandatory for purchases
  • Order processing
  • Fraud prevention
  • Financial reporting
Product purchase, billing, and order fulfilment
3 Device and Technical Data
  • IP address
  • Browser type
  • Device identifiers
  • Log files
Automatically collected
  • Website
  • functionality
  • Security
  • Analytics
Ensuring secure platform usage and service optimization
4 Usage Data
  • Interaction with our website/app
  • Preferences
  • Feedback
Optional, user-provided
  • Service improvement
  • Personalization
  • Analytics
Enhanced user experience and tailored content
5 Marketing Preferences
  • Subscription status
  • Marketing opt-ins
Optional, based on consent
  • Sending promotional content (only with explicit consent)
Providing offers, updates, and promotional content
6 Location Data (if applicable)
  • Approximate location (based on IP or GPS, if enabled)
Optional, user-controlled
  • Localization of services
  • Fraud detection
Regional service customization and fraud monitoring
7 Cookies and Tracking Data
  • Session cookies
  • Persistent cookies
  • Tracking pixels
  • Analytics data
Optional, based on preferences
  • Site performance
  • User experience enhancement
  • Marketing optimization
Personalized browsing experience and marketing analytics

IoT Device specific

# Category of Personal Data Specific Data Fields Requirement Purpose of Processing Goods or Services Enabled
1 Device Information
  • Device ID
  • Model
  • Software version
  • IP address
Mandatory for device functionality
  • Ensuring functionality
  • Troubleshooting and updates
Device management, software updates, and support
2 Usage Data
  • Interaction logs
  • Feature usage
  • Error reports
Automatically collected
  • Performance optimization and analytics
Enhancing device performance and resolving technical issues
3 Location Data (if applicable)
  • Approximate device location (with user permission)
Optional, user-controlled
  • Personalization and security enhancements
Geolocation-based features and enhanced security measures
4 Children’s Data (if applicable)
  • Name
  • Age
  • Linked device details
  • Parental contact
Mandatory for child users, with parental consent
  • User registration and access to services
  • Feature usage
  • Error reports
Child-friendly features, parental controls, and compliant service access

3. Which legal basis do we use your personal data?

Your Personal data is collected and processed by CGCEL based on the following legal grounds depending upon the nature of Personal Data and the purposes for which it is processed:

Consent:

By using our website, mobile application, or engaging with our services, you provide your free, specific, informed, and unambiguous consent for the collection, use, and processing of your Personal Data as outlined in this Privacy Notice.

Where processing is based on consent, you have the right to withdraw consent at any time through the mechanisms provided in this Notice. However, withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal. For certain data processing activities (such as processing of children’s data, where applicable), parents’ consent will be obtained separately at the point of data collection if any data of children be collected, in compliance with the Digital Personal Data Protection Act, 2023.

If we process your Personal Data based on other lawful grounds, like that of legitimate interest, legal obligations, or statutory requirements, such processing shall continue as permitted under the applicable law.

4. Disclosure of personal data

CGCEL does not sell or rent your Personal Data. However, we may share your data with trusted third parties in the following circumstances:

I. Service Providers & Business Partners

We may share your Personal Data with third-party vendors, contractors, or service providers who assist us in delivering our services, such as:

a. Payment processing and transaction services

b. Customer support and communication platforms

c. IT infrastructure, analytics, and security providers

d. Marketing and advertising partners (where applicable)

e. Cloud storage and data hosting providers

f. IoT platform service providers who enable device connectivity, diagnostics, and software updates

II. Legal & Regulatory Compliance

We may disclose your Personal Data if required to:

a. Comply with applicable laws, regulations, or legal processes (including government and law enforcement requests)

b. Respond to court orders, notices, or regulatory authorities

c. Protect our legal rights, privacy, safety, or property (including fraud prevention and cybersecurity measures)

III. Business Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of the business transaction, subject to appropriate privacy safeguards.

IV. Fraud Prevention & Security

We may share Personal Data with government agencies, financial institutions, or fraud prevention organizations to:

a. Detect, investigate, and prevent fraud, cyber threats, or security breaches

b. Ensure compliance with anti-money laundering (AML) and other regulatory requirements

V. International Data Transfers

If we transfer your Personal Data outside India, we ensure that such transfers comply with applicable laws and are subject to adequate safeguards, such as:

a. Contractual Clauses wherever applicable with the recipient ensuring data protection

b. Government-approved mechanisms for secure international data transfers

c. Transfers to jurisdictions not explicitly restricted by the Government of India

5. Accuracy of Personal Data

a. You are responsible for ensuring that the Personal Data you provide to CGCEL is accurate, complete, and up to date.

b. CGCEL takes reasonable steps to verify and maintain the accuracy of your personal data. To ensure the information we hold is current and accurate, we may periodically request updates where necessary. However, it is your responsibility to promptly inform us of any changes to your personal data, including contact details or preferences. This collaborative effort helps us provide you with uninterrupted services and remain compliant with the Digital Personal Data Protection Act, 2023.

c. If you believe any personal data we hold is inaccurate or incomplete, you may exercise your right to request corrections as outlined in the in Contact Us section of this Privacy Notice.

6. Security Measures

a. We implement appropriate technical, organizational, and security measures to protect your Personal Data from unauthorized access, loss, misuse, disclosure, or alteration.

b. While we take reasonable steps to protect your data, no system is completely secure. In case of any data breach affecting your Personal Data, we will notify you in compliance with applicable laws.

c. In case you as a user detect or suspect any breach of your data you can inform to us by reaching out to dpo@crompton.co.in

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and personalize content. IoT devices may also use embedded tracking mechanisms to optimize functionality, detect malfunctions, and enhance security.

You can manage cookie preferences through your browser settings or our Cookie Preference Centre.

For more details, refer to our Cookie Policy.

8. Retention of Personal Data

CGCEL will retain your personal data in accordance with its Data Retention Policy and as required under applicable laws. We will only store your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required for compliance with legal, tax, regulatory, or contractual obligations.

For IoT device data, retention is determined based on device lifecycle, user settings, and compliance obligations. Users may have options to delete or reset data collected by IoT devices, subject to technical and legal limitations.

9. Data Principal Rights and Duties

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you, as a Data Principal, have the following rights concerning your Personal Data:

I. Your Rights

a. Right to Access: You have the right to request a summary of the personal data that CGCEL holds about you.

b. Right to Correction and Erasure: You may request correction, completion, or erasure of your personal data if it is inaccurate or no longer necessary for processing

c. Right to Grievance Redressal: If you believe your personal data is processed unlawfully or in violation of this Privacy Notice, you may file a grievance with CGCEL’s DPO/Grievance Officer. If unsatisfied with the resolution, you may escalate the matter to the Data Protection Board (DPB).

d. Right to Nominate: You have the right to nominate an individual who can exercise your rights under the Act in the event of your death or incapacity.

e. Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time. However, withdrawal will not affect the lawfulness of processing conducted before withdrawal.

f. Right to Be Informed: You have the right to receive clear, concise, and transparent information about how your personal data is collected and processed.

II. Your Duties

As a Data Principal, you also have certain duties under the DPDPA, 2023:

III. Method to Exercise Your Rights

As an interim measure, if you wish to exercise any of your rights under this Privacy Notice, please contact us directly at dpo@crompton.co.in. We will provide you with the appropriate Data Principal Request Form, which you can complete and submit to initiate your request.

We are currently working to streamline this process. Once available, you will be able to directly access all necessary forms online and submit your requests electronically.

In the future, to exercise your rights, you may complete the Data Principal Request Form available at To be updated once the DPB is established and submit it to our Data Protection Officer at dpo@crompton.co.in. We will handle your request in accordance with applicable laws and respond within the prescribed timeframe within sixty days.

10. Contact Us

If you have any concerns regarding the processing of your personal data, you can contact our DPO.

11. Grievance Redressal Mechanism

If you have any concerns regarding the processing of your personal data and you are not satisfied with the intial response, you can file a complaint with CGCEL’s Grievance Officer.

12. Updates to this Notice

CGCEL may update this Privacy Notice periodically to reflect changes in legal, regulatory, or operational requirements. We will notify you of any significant changes through appropriate means, such as updates on our website. The latest version of this Privacy Notice will always be available at Privacy Policy - Crompton Greaves Consumer Electricals Limited

13. Acknowledgment

a. I acknowledge that I have received, read, and understood this Privacy Notice.

b. I understand that this notice informs me of how CGCEL processes my personal data, and where required, my consent will be sought separately for certain processing activities.

c. I understand that I have the right to withdraw my consent for non-essential processing at any time by submitting a request to the Data Protection Officer at dpo@crompton.co.in