Effective Date: 1 ^st day of January 2026
Last Updated: 1 ^st day of January 2026

Butterfly Gandhimathi Appliances Limited (“Butterfly,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, share, and protect your personal data when you use our website, mobile application, and other online services (collectively, the “Services”). This Privacy Notice is in compliance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and other applicable data protection laws.

1. Scope and Applicability

This Privacy Notice applies to individuals who interact with our Services, including visitors, users, and customers (“you” or “your”), including those using Butterfly’s Internet of Things (IoT) enabled devices. It is intended for individuals residing in India and is aligned with applicable Indian data protection laws.

This Privacy Notice does not apply to our employees, interns, or contractors, who interact with us in their professional capacity and whose personal data is governed under a separate Employee Privacy Notice. It also does not apply to third-party websites, applications, or services that may be linked from our platform. We encourage you to review the privacy policies of such third parties to understand how they handle your information.

If you use Butterfly’s IoT devices, this Privacy Notice also applies to any personal data collected through such devices, including but not limited to device identifiers, usage logs, location information, and environmental or sensor data.

In situations where a specific privacy notice is not presented at the point of data collection, the most recent version of the Privacy Notice available on our official website shall apply and will govern the collection, use, and processing of your personal data. We encourage users to review the Privacy Notice on our website regularly to stay informed about how we protect and use your data.

2. Which categories of personal data do we collect and how do we process such personal data?

The Personal Data relating to you which we may collect, use, transfer, disclose or otherwise process, includes:

#	Category of Personal Data	Specific Data Fields	Requirement	Purpose of Processing	Goods or Services Enabled
1	Identity and Contact Information	Name Phone number Email Postal address Date of birth	Mandatory for service provision	Account creation Communication Identity verification	Access to Butterfly services, account management, and personalized support
2	Transaction and Payment Data	Payment method details Transaction history (processed via secure third- party payment gateways)	Mandatory for purchases	Order processing Fraud prevention Financial reporting	Product purchase, billing, and order fulfilment
3	Device and Technical Data	IP address Browser type Device identifiers Log files	Automatically collected	Website functionality Security Analytics	Ensuring secure platform usage and service optimization
4	Usage Data	Interaction with our website/app Preferences Feedback	Optional, user-provided	Service improvement Personalization Analytics	Enhanced user experience and tailored content
5	Marketing Preferences	Subscription status Marketing opt-ins	Optional, based on consent	Sending promotional content (only with explicit consent)	Providing offers, updates, and promotional content
6	Location Data (if applicable)	Approximate location (based on IP or GPS, if enabled)	Optional, user-controlled	Localization of services Fraud detection	Regional service customization and fraud monitoring
7	Cookies and Tracking Data	Session cookies Persistent cookies Tracking pixels Analytics data	Optional, based on preferences	Site performance User experience enhancement Marketing optimization	Personalized browsing experience and marketing analytics

IoT Device specific

#	Category of Personal Data	Specific Data Fields	Requirement	Purpose of Processing	Goods or Services Enabled
1	Device Information	Device ID Model Software version IP address	Mandatory for device functionality	Ensuring functionality Troubleshooting and updates	Device management, software updates, and support
2	Usage Data	Interaction logs Feature usage Error reports	Automatically collected	Performance optimization and analytics	Enhancing device performance and resolving technical issues
3	Location Data (if applicable)	Approximate device location (with user permission)	Optional, user-controlled	Personalization and security enhancements	Geolocation- based features and enhanced security measures
4	Children’s Data (if applicable)	Name Age Linked device details Parental contact	Mandatory for child users, with parental consent	User registration and access to services	Child-friendly features, parental controls, and compliant service access

These lists include examples and are not exhaustive.

3. Which legal basis do we use your personal data?

Your Personal data is collected and processed by Butterfly based on the following legal grounds depending upon the nature of Personal Data and the purposes for which it is processed:

Consent:

By using our website, mobile application, or engaging with our services, you provide your free, specific, informed, and unambiguous consent for the collection, use, and processing of your Personal Data as outlined in this Privacy Notice.

Where processing is based on consent, you have the right to withdraw consent at any time through the mechanisms provided in this Notice. However, withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal. For certain data processing activities (such as processing of children’s data, where applicable), parents’ consent will be obtained separately at the point of data collection if any data of children be collected, in compliance with the Digital Personal Data Protection Act, 2023.

If we process your Personal Data based on other lawful grounds, like that of legitimate interest, legal obligations, or statutory requirements, such processing shall continue as permitted under the applicable law.

4. Disclosure of personal data

Butterfly does not sell or rent your Personal Data. However, we may share your data with trustedthird parties in the following circumstances:

1. 1. Service Providers & Business Partners

                 We may share your Personal Data with third-party vendors, contractors, or service providers who assist us in delivering our services, such as:

1. 1. 1. Payment processing and transaction services

      2. Customer support and communication platforms

      3. IT infrastructure, analytics, and security providers

      4. Marketing and advertising partners (where applicable)

      5. Cloud storage and data hosting providers

      6. IoT platform service providers who enable device connectivity, diagnostics, and software updates

   2. Legal & Regulatory Compliance

   We may disclose your Personal Data if required to:

   1. 1. Comply with applicable laws, regulations, or legal processes (including government and law enforcement requests)

      2. Respond to court orders, notices, or regulatory authorities

      3. Protect our legal rights, privacy, safety, or property (including fraud prevention and cybersecurity measures)

1. 3. Business Transactions

              In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of the business transaction, subject to appropriate privacy safeguards.

1. 4. Fraud Prevention & Security

              We may share Personal Data with government agencies, financial institutions, or fraud prevention organizations to:

1. 1. 1. Detect, investigate, and prevent fraud, cyber threats, or security breaches

      2. Ensure compliance with anti-money laundering (AML) and other regulatory requirements

1. 5. International Data Transfers

               If we transfer your Personal Data outside India, we ensure that such transfers comply with applicable laws and are subject to adequate safeguards, such as:

1. 1. 1. Contractual Clauses wherever applicable with the recipient ensuring data protection

      2. Government-approved mechanisms for secure international data transfers

      3. Transfers to jurisdictions not explicitly restricted by the Government of India

5. Accuracy of Personal Data

   1. You are responsible for ensuring that the Personal Data you provide to Butterfly is accurate, complete, and up to date.

   2. Butterfly takes reasonable steps to verify and maintain the accuracy of your personal data. To ensure the information we hold is current and accurate, we may periodically request updates where necessary. However, it is your responsibility to promptly inform us of any changes to your personal data, including contact details or preferences. This collaborative effort helps us provide you with uninterrupted services and remain compliant with the Digital Personal Data Protection Act, 2023.

   3. If you believe any personal data, we hold is inaccurate or incomplete, you may exercise your right to request corrections as outlined in the in Contact Us section of this Privacy Notice.

6. Security measures

   1. We implement appropriate technical, organizational, and security measures to protect your Personal Data from unauthorized access, loss, misuse, disclosure, or alteration.

   2. While we take reasonable steps to protect your data, no system is completely secure. In case of any data breach affecting your Personal Data, we will notify you in compliance with applicable laws.

   3. In case you as a user detect or suspect any breach of your data you can inform to us by reaching out to dpo@crompton.co.in

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyse website traffic, and personalize content. IoT devices may also use embedded tracking mechanisms to optimize functionality, detect malfunctions, and enhance security.

You can manage cookie preferences through your browser settings or our Cookie Preference Centre.
For more details, refer to our Cookie Policy.

8. Retention of Personal Data

Butterfly will retain your personal data in accordance with its Data Retention Policy and as required under applicable laws. We will only store your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required for compliance with legal, tax, regulatory, or contractual obligations.

For IoT device data, retention is determined based on device lifecycle, user settings, and compliance obligations. Users may have options to delete or reset data collected by IoT devices, subject to technical and legal limitations.

9. Data Principal Rights and Duties

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you, as a Data Principal, have the following rights concerning your Personal Data:

1. Your Rights

   1. Right to Access: You have the right to request a summary of the personal data that Butterfly holds about you.

   2. Right to Correction and Erasure: You may request correction, completion, or erasure of your personal data if it is inaccurate or no longer necessary for processing.

   3. Right to Grievance Redressal: If you believe your personal data is processed unlawfully or in violation of this Privacy Notice, you may file a grievance with Butterfly’s DPO/Grievance Officer, and we shall aim to resolve your grievance within a period of ninety (90) days . If unsatisfied with the resolution, you may escalate the matter to the Data Protection Board (DPB).

   4. Right to Nominate: You have the right to nominate an individual who can exercise your rights under the Act in the event of your death or incapacity.

   5. Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time. However, withdrawal will not affect the lawfulness of processing conducted before withdrawal.

   6. Right to Be Informed: You have the right to receive clear, concise, and transparent information about how your personal data is collected and processed.

2. Your Duties

   As a Data Principal, you also have certain duties under the DPDPA, 2023:

   • Provide accurate information: Ensure that any personal data you provide to Butterfly is accurate and up to date.

   • Refrain from filing false or frivolous complaints: Misuse of rights under this Act may attract penalties as per applicable law.

   • Comply with lawful processing: You must not attempt to access or modify personal data that you are not authorized to process.

3. Method to Exercise Your Rights

As an interim measure, if you wish to exercise any of your rights under this Privacy Notice, please contact us directly at dpo@crompton.co.in We will provide you with the appropriate Data Principal Request Form, which you can complete and submit to initiate your request.

We are currently working to streamline this process. Once available, you will be able to directly access all necessary forms online and submit your requests electronically.

In the future, to exercise your rights, you may complete the Data Principal Request Form available at to be updated once the DPB is established and submit it to our Data Protection Officer at  dpo@crompton.co.in . We will handle your request in accordance with applicable laws and respond within the prescribed timeframe within sixty days.

10. Contact Us

If you have any concerns regarding the processing of your personal data, you can contact our DPO.

• Contact Details of Data Protection Officer (DPO):

  Name: Yogesh Kulkarni

  Email: dpo@crompton.co.in

  Address: Butterfly Gandhimathi Appliances Limited
  No. 34, (2nd Floor), Rajiv Gandhi Salai,
  Egattur Village, Chennai – 600130,
  Tamil Nadu, India

11. Grievance Redressal Mechanism

    If you have any concerns regarding the processing of your personal data and you are not satisfied with the initial response, you can file a complaint with Butterfly’s Grievance Officer.

    • Contact Details of Grievance Officer:

      Name: Dipalok Choudhary

      Email: Privacy.grievance@crompton.co.in

      Address: Butterfly Gandhimathi Appliances Limited
      No. 34, (2nd Floor), Rajiv Gandhi Salai,
      Egattur Village, Chennai – 600130,
      Tamil Nadu, India

    • Escalation to the Data Protection Board (DPB)

    If you are not satisfied with the resolution provided by the Grievance Officer, you have the right to escalate the matter to the Data Protection Board (DPB) of India, which is the regulatory authority established under the DPDPA, 2023 for handling data protection disputes and violations.

    For more details on the DPB and how to escalate your complaint, please refer to the official government portal <insert DPB link> (To be Updated post DPB is established)

12. Updates to this Notice

Butterfly may update this Privacy Notice periodically to reflect changes in legal, regulatory, or operational requirements. We will notify you of any significant changes through appropriate means, such as updates on our website. The latest version of this Privacy Notice will always be available at

13. Acknowledgment

    1. You acknowledge that you have received, read, and understood this Privacy Notice.

    2. You understand that this notice informs you of how Butterfly processes my personal data, and where required, my consent will be sought separately for certain processing activities.

    3. You understand that you have the right to withdraw your consent for non-essential processing at any time by submitting a request to the Data Protection Officer at dpo@crompton.co.in