Effective Date: 28 September 2026

We, Dairy Classic Ice Creams Private Limited., (“Company” “Dairy Day”, “we”, “us”, “our”) value and respects privacy of our customers, employees, vendors, service provider user of websites and others connected / associated with us for any business association (“you”, “your”). This Privacy Policy explains how we collect, use, share, transfer, secure, and retain digital / physical personal data of our customers, employees, vendors and individuals who visit thru Dairy Day website “www.dairyday.com” and related web pages we own and control (together, the “Website”) or any other digital or physical channels, including our marketing campaigns, communications, and or business interactions, and describes the rights of those individuals and how they may contact us.

For the purposes described in this Privacy Policy, Dairy Day will generally act as the Data Fiduciary or controller of the personal data processed in connection with the relevant interaction, service, program, or business activity / necessities.

The scope of this Privacy Policy is limited to products, services, communications, and related business activities offered within the territory of India and applies to users who request such products and services within India.

1) The Personal Data Collection: -

This Policy covers personal data we process through our website (for example: contact forms, career applications, cookie-based analytics, and customer care emails) and any other digital or physical channels, communication or business interactions through which personal data is collected. It does not cover content hosted by third parties that we link or embed.

Personal data that you provide directly to Dairy Day through the website or any other digital / physical channels

• If you contact us through website contact forms, customer care email channels, or other enquiry mechanisms, we may collect personal data such as your name, email address, mobile number, and any other information you choose to provide in your communication.
• If you are a vendor, distributor, business partner, service provider, or other third party interacting with Dairy Day, we may collect personal data such as your name, contact details, designation, organisation details, and other information that you provide to us in connection with our business relationship or transactions.
• If you submit a job application through the website, we may collect personal and professional information contained in your application, including contact details, employment history, educational qualifications, and any supporting documents you choose to provide.
• If you voluntarily submit testimonials, reviews, feedback, comments, or other content relating to your experience of our products or services, we may collect and process the personal data contained in such submissions.

Personal data automatically collected when you use the Dairy Day website:

• When you access and use the website, it might automatically collect technical and usage information through cookies and similar technologies, including IP address, browser information, device information, website activity, geolocation derived from IP and analytics-related data. Cookie data from website visitors is collected in accordance with our Cookie Policy.

Personal data collected from third party sources:

• You may engage / associate with us through social media websites or through features on Dairy Day website that integrate with social media web sites, In such case, you may allow us to access to certain information from your social media profile based upon your privacy preference settings on such platform.

2) Why we Process Personal Data (purposes)

We may collect and process your personal data for the following purposes:

• To make the Website and its content available to you;
• To operate, optimize, maintain, and develop the Website;
• To respond to enquiries, complaints, concerns, and customer support requests;
• To improve Website functionality, content, products, services, and user experience;
• To establish business relationships and conduct processing necessary to fulfil contractual obligations for individuals;
• To prevent misuse, fraud, cyber incidents, and security threats;
• To comply with laws and regulations that applicable to Dairy Day from time to time.
• To comply with legal obligation, arise / to full fill any requests from law enforcement authorities and public authorities to the required extent.
• For marketing communications, newsletters, promotions, contests, offers, events, and other activities where you have provided your consent or chosen to participate

3) Grounds of Data Processing

The applicable privacy and data protection laws provide certain justifiable grounds for collection and processing of personal data, commonly referred to as grounds of processing. We primarily rely on the following grounds of processing:

• We may process your Personal Data where you have provided your explicit consent for a specific purpose. Where consent is the legal basis for processing, you may withdraw your consent at any time in the manner specified by us, subject to applicable legal requirements.
• We may process your Personal Data when you voluntarily provide it to us and reasonably expect us to use it to respond to your requests, support our business relationship with you, provide our services, or maintain the security and proper functioning of our systems and services.
• We may process your Personal Data where such processing is necessary to fulfil an obligation under any law for the time being in force in India requiring us to disclose information to the State or any of its instrumentalities.
• We may process your Personal Data where such processing is necessary to comply with a judgment, decree, order, direction, or other lawful requirement issued by a court, tribunal, statutory authority, law enforcement agency, or public authority under applicable law.

4) Children’s Privacy

• Our website is intended for a general audience. We do not knowingly collect personal data of children under 18 without verifiable parental / guardian consent. We do not track, profile, or run targeted advertising directed at children. If we learn we processed a child’s data without the required consent, we will take all reasonable measures to delete such information from our storage systems and cease processing such information. If you become aware of any personal data we have collected from children, please email us at securityalerts@dairyday.com

5) Sharing your data

We do not sell your personal data. We share it only with:

• Service providers (data processors) that help us run the website (e.g., hosting, email, analytics), under contracts requiring them to implement reasonable security safeguards, process personal data in compliance with applicable laws, maintain confidentiality, and assist with data principal rights requests and deletion obligation.
• Affiliates / group entities (if any) for internal operations consistent with this Notice, for the purposes such as business administration, customer relationship management, responding to inquiries, internal reporting, compliance management, and other legitimate business activities.
• Public Authorities or officials, when such disclosure is required by law, to comply with any applicable law, regulation, subpoena, legal process and protect our legal rights, prevent harm, or respond to lawful requests.
• Digital content providers through social media plug-ins are available on our website. Providers such as Facebook, YouTube, LinkedIn, X, and Instagram may collect information directly from you when you interact with their services, and such processing will be governed by their respective Privacy Notice and policies. Please note that the Dairy Day is not responsible for the Privacy Notices / policies, practices, or the contents of such third-party websites.

We maintain a list or categories of key processors and will update it when material changes occur.

6) International transfers

• We process and store your personal data within India. If we transfer your personal data outside India in the future, we will do so in accordance with applicable laws and ensure appropriate measures of data protection / safeguards are in place.

7) Your rights and its exercise

We respect your right to access and control your personal data. We will respond to requests to exercise your rights in accordance with applicable law.

You may have the following rights:

Right to Access Information About Your Personal Data

If you want to access personal data collected and processed by Dairy Day, you may request:

• A summary of the personal data processed by DAIRY DAY;
• A summary of the processing activities undertaken in relation to your personal data;
• The identities of persons or entities with whom your personal data has been shared, where required under applicable law;
• A description of the personal data shared;
• Other information relating to your personal data and its processing, as provided under applicable law.

Right to Request Correction

If your personal data is inaccurate, incomplete, misleading, or out of date, you may request that it be corrected, completed, or updated, as applicable.

You should inform Dairy Day if your personal data changes during the period for which we retain it.

Right to Request Erasure

You may request erasure of personal data that is no longer necessary for the purpose for which it was processed, unless its retention is required under applicable law.

Right to Grievance Redressal

You may raise a grievance regarding any act or omission by Dairy Day in relation to:

• The processing of your personal data;
• Dairy Day’s obligations under applicable data protection law;
• The exercise of your privacy rights.

Right to Nominate

In the event of your death or incapacity, you may nominate another individual to exercise your rights in accordance with applicable law.

Right to Withdraw Consent

Processing of personal data is based on your consent; you may withdraw or revoke your consent at any time through the mechanism made available by Dairy Day. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal. The consequences of withdrawal will apply to future processing based on that consent.

You may exercise the abovementioned rights by contacting us at securityalerts@dairyday.com. Before we respond to your requests, we will require that you verify your identity, or the identity of any individual for whom you are requesting information.

Please note that the above rights may be limited in the following situations:

• Where fulfilling your request would adversely affect other individuals, company trade secrets or intellectual property;
• Where there are overriding public interest reasons; or
• Where we are required by law to retain your personal data.

8) Security Measures

We value your trust in providing us your personal information, thus we striving to use and implement reasonably acceptable technical means and measure to protect and safeguard, including encryption at rest / in transit, access controls / MFA for admin access, logging and monitoring, vulnerability management, and incident response to protect your information against unauthorized access, alteration, disclosure, misuse or destruction to the best possible extent. We shall use it for the purpose it is collected and restrict its access to the needy. Also, we inform you to aware that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, hence we cannot guarantee its absolute security.

If you have any questions about our information security practices, please contact us using the details provided in the “Contact Us” section hereinbelow.

9) Retention and Deletion

We retain personal data only for as long as necessary for the purposes stated in this Policy or to comply with requirement of law, regulatory authorities after which we erase or irreversibly anonymise it.

Personal data may be retained for longer where:

• Statutory or regulatory retention requirements apply;
• The information is required for an ongoing service or contractual relationship;
• A complaint, dispute, investigation, or legal claim is pending;
• Potential legal claims are not yet time-barred;
• Retention is required for the establishment, exercise, or defence of legal claims.

Upon completion of the applicable retention period, personal data will be deleted, anonymized, or otherwise disposed of in accordance with applicable legal requirements and Dairy Day’s retention practices.

10) Changes to this Policy

We may amend this Privacy Policy from time to time confirming the “Effective date” of such change or as the per law requires. Thus, we advise you to visit this notice periodically to learn about the changes.

The website provides a link to this Privacy Policy. Your use of our website, or your communications, relationship, and association with us will be governed by and subject to the latest version of our Privacy Policy as amended by us from time to time.

11) Contact Us

If you have any concerns or grievances regarding this Privacy Policy or your data privacy, please contact us at securityalerts@dairyday.com

Our Data Protection Office will address your concerns within a reasonable timeframe.