PRIVACY POLICY

1. Information We May Collect

Depending on how you interact with ExosysNetworks, we may collect the following information:

Personal Information

• Full name
• Business/company name
• Designation
• Email address
• Mobile or telephone number
• City, state and business location
• Billing or delivery address
• Information submitted through website forms
• Communication and enquiry details

Business Information

For B2B customers, vendors, OEMs, distributors, suppliers and service partners, we may collect:

• Company name
• Business address
• GST and other business registration details
• Contact-person details
• Purchase requirements
• RFQs and quotation information
• Purchase orders
• Service requirements
• Project information
• Billing and payment-related information
• Vendor or partner onboarding information

Technical Information

When you access our website, certain technical information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Date and time of access
• Referral source
• Website interaction information
• Cookies and similar technologies

2. How We Collect Information

Information may be collected when you:

• Visit our website
• Complete a contact or enquiry form
• Request a quotation
• Request a callback
• Contact our sales or support team
• Purchase an IT product or service
• Request AMC, FMS or managed IT services
• Register as a vendor, supplier or service partner
• Apply for employment
• Subscribe to marketing communications
• Communicate with us through email, telephone, WhatsApp or other business communication

channels

• Participate in surveys, campaigns or events
• Enter into a business relationship with ExosysNetworks

3. How We Use Your Information

We may process information for legitimate business and operational purposes, including to:

• Respond to enquiries and requests
• Prepare and provide quotations
• Process customer orders
• Deliver products
• Schedule installation and deployment
• Provide technical support
• Deliver AMC, FMS and managed IT services
• Manage customer relationships
• Coordinate onsite field engineers
• Process warranty and replacement requests
• Manage vendors, OEMs, distributors and suppliers
• Process invoices and payments
• Maintain business and service records
• Improve our website, services and customer experience
• Send relevant service updates
• Send promotional or marketing communications where appropriate
• Detect and prevent fraud, abuse or security threats
• Protect our IT systems and infrastructure
• Comply with applicable legal, regulatory, taxation and contractual requirements

We endeavour to collect and process only information reasonably required for the relevant purpose.

4. Customer & Enterprise Project Data

As an IT infrastructure and managed-services provider, ExosysNetworks may receive information relating to customer IT environments while providing services such as:

• IT infrastructure deployment
• Network installation and configuration
• Firewall and cybersecurity implementation
• Server and storage deployment
• Cloud services
• Data centre services
• AMC and FMS support
• Remote technical support
• Onsite technical support
• CCTV and surveillance deployment
• Asset management
• Network monitoring
• IT audits
• Managed IT services

Such information will be handled according to applicable contractual obligations, confidentiality requirements, internal security practices and applicable law.

ExosysNetworks does not claim ownership of customer data merely because such data is accessed or processed while delivering contracted services.

5. Sharing of Information

We do not sell personal information as a business practice.

Information may, however, be shared when reasonably necessary with:

• Authorized ExosysNetworks employees
• Field engineers and authorized service personnel
• OEMs and technology partners
• Authorized distributors
• Product suppliers
• Logistics and delivery partners
• Cloud and hosting providers
• Payment and financial service providers
• Professional advisers
• Auditors
• Government or regulatory authorities where legally required
• Other service providers necessary to fulfil a customer request

Where appropriate, third parties receiving information are expected to process it for authorized purposes and subject to applicable contractual and legal requirements.

6. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

• Maintain website functionality
• Remember user preferences
• Understand website usage
• Analyze traffic and performance
• Improve user experience
• Measure marketing effectiveness

You may configure your browser to block or delete certain cookies. However, disabling some cookies may affect website functionality.

Where legally required, appropriate consent mechanisms may be provided for non-essential cookies.

7. Data Security

ExosysNetworks takes reasonable administrative, technical and organizational measures designed to protect information against:

• Unauthorized access
• Unauthorized disclosure
• Misuse
• Alteration
• Accidental loss
• Destruction
• Cybersecurity threats

Depending on the nature of the information and services involved, measures may include access controls, authentication, security monitoring, endpoint protection, network security, backups and internal information-security procedures.

No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.

8. Data Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected or as required for:

• Business operations
• Customer support
• Contractual obligations
• Warranty and AMC records
• Accounting and taxation
• Dispute resolution
• Fraud prevention
• Legal and regulatory requirements

When information is no longer required, we may securely delete, anonymize or otherwise dispose of it in accordance with applicable requirements.

9. Marketing Communications

With appropriate authorization or where otherwise permitted by law, we may send information relating to:

• IT products
• New technology solutions
• Special offers
• AMC and managed-services packages
• Cybersecurity solutions
• Cloud services
• Infrastructure solutions
• Company announcements
• Events and campaigns

Recipients may request to stop receiving promotional communications using the unsubscribe mechanism provided, where available, or by contacting us.

Operational communications relating to existing orders, contracts, services, support tickets or security matters may continue where necessary.

10. Your Privacy Rights

Subject to applicable law, you may have rights concerning your personal data, including the ability to:

• Request information about personal data processed by us
• Request correction of inaccurate information
• Request updating of incomplete information
• Request erasure where applicable
• Withdraw consent where processing is based on consent
• Raise a grievance concerning the processing of personal data

Requests may be subject to identity verification and applicable legal or contractual requirements.

11. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent through the mechanism provided by us or by contacting ExosysNetworks.

Withdrawal of consent will not ordinarily affect processing already lawfully undertaken before withdrawal and may affect our ability to provide services that require the relevant information.

12. Third-Party Websites

Our website may contain links to OEM websites, technology partners, social-media platforms or other third- party websites.

ExosysNetworks does not control the privacy practices or content of independent third-party websites. We recommend reviewing the privacy policy of the relevant third party before providing personal information.

13. Payment Information

Where online payment facilities are offered, payments may be processed through third-party payment gateways or financial institutions.

ExosysNetworks may receive transaction references, payment status and related records required for accounting and order processing. Sensitive payment credentials may be handled directly by the applicable payment service provider depending on the payment method used.

14. Children's Privacy

Our website, IT products and enterprise services are primarily intended for businesses, organizations and adult users.

We do not knowingly seek to collect children's personal data through ordinary business enquiry forms. Where children's data is processed in circumstances governed by applicable law, appropriate requirements will be followed.

15. Recruitment Information

If you apply for employment with ExosysNetworks, we may collect information including your:

• Name
• Contact details
• Resume/CV
• Educational qualifications
• Employment history
• Professional certifications
• Skills and experience
• Other information voluntarily submitted during recruitment

Recruitment information will be used primarily for evaluating employment opportunities, recruitment administration and related legitimate purposes.

16. Vendor, Supplier & Field Engineer Information

ExosysNetworks operates with technology vendors, suppliers, OEM partners and service professionals across India.

For onboarding, verification and service-delivery purposes, we may collect business/contact information and other documentation reasonably required for:

• Identity or business verification
• Vendor onboarding
• Service allocation
• Project coordination
• Payment processing
• Compliance
• Performance and service records

Such information will be processed for relevant business and operational purposes.

17. Compliance With Applicable Laws

ExosysNetworks intends to process personal information in accordance with applicable Indian data- protection and information-technology requirements, including applicable provisions and commencement timelines under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable laws and regulations.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically due to:

• Changes in law or regulation
• Changes in our business operations
• Introduction of new services
• Changes in technology
• Changes in website functionality
• Changes in our information-security or privacy practices

The latest version will be published on our website together with the updated effective or revision date.

We encourage users to review this Privacy Policy periodically.

19. Contact & Privacy Grievances

For questions, requests or grievances concerning this Privacy Policy or your personal information, please contact:

Please include sufficient information in your request to enable us to identify and respond to the matter.

20. Consent & Acceptance

By voluntarily submitting personal information through our website or other business channels, you acknowledge the collection and processing of such information for the purposes communicated to you, subject to applicable law.

Where consent is legally required, ExosysNetworks will seek appropriate consent before processing the relevant personal data.