LEXUS DIVISION of TOYOTA KIRLOSKAR MOTOR PRIVATE LIMITED (“TKM”

or “Lexus India” or “we” or “us” or “our”) respects the privacy of our users (“user” or “you”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information

when you visit our mobile application (“Lexus LMS app” or “Application”). Please read this

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO

NOT ACCESS THE APPLICATION.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We

will alert you about any changes by updating the “Last updated” date of this Privacy

Policy. You are encouraged to periodically review this Privacy Policy to stay informed of

updates. You will be deemed to have been made aware of, will be subject to, and will be

deemed to have accepted the changes in any revised Privacy Policy by your continued use of

the Application after the date such revised Privacy Policy is posted.

This Privacy Policy does not apply to the third-party online/mobile store from which you install

the Application, which may also collect and use data about you. We are not responsible for

any of the data collected by any such third party.

Who all are covered.

All persons ("Covered Persons"), whose personal information is either collected/ received/

possessed/ stored/ dealt in/ handled by Lexus India/ who (i) visit the

site https://www.lexusindia.co.in/ (ii) any other websites (iii) mobile applications (Apps)

owned and / or operated by Lexus India on which this privacy policy is linked and (iii) the

social media accounts and/or pages that Lexus India control (Sites/Apps),and provide

information to Lexus India, are covered under this Policy.

Definition:

"Personal information (PI)" means any information that relates to a person, which, either

directly or indirectly, in combination with other information available or likely to be available

with a body corporate / person and is capable of identifying such person.

"Sensitive personal data or information (SPI) " of a person means such personal information

which consists of information relating to:

 Password

 Financial information such as Bank account or credit card or debit card or other

payment instrument details.

 Physical, physiological and mental health condition;

 Sexual orientation;

 Medical records and history;

 Biometric information;

 Any detail relating to the above category as provided to us for provisioning services /

supplying product ; and

 Any of the information received under above clauses by us for processing, stored or

processed under lawful contract or otherwise

Provided that, any information that is freely available or accessible in public domain or

furnished under the Right to Information Act, 2005 or any other law for the time being

in force shall not be regarded as sensitive personal data or information for these

purposes.

Personal Information we collect

We may collect and process different types of personal data while operating our

business, engaging personnel, and providing our services or selling our products. Such

personal data may include, without limitation:

o Personal identifiers such as your first and last name, usernames, age, marital

status, gender, job title, etc.

o Contact details including email address, telephone number(s), and postal

address.

o Recruitment-related data such as your curriculum vitae, education and

employment history, details of professional memberships and other personal

data relevant to the purpose.

o Technical data such as your IP address, browser type and version, time zone

setting and location, browser plug-in types and versions, operating system and

platform and other technology on the devices you use to access our website

o Identification and other background verification data such as your passport or

other government-issued identity documents, utility bills, social security /

Aadhaar or any other national Identification number, back account details, etc.

o Data you may provide to attend meetings, register for events, sign up for

notifications, etc. including data pertaining to special access needs and dietary

requirements.

How we collect Information?

We generally collect your personal information directly from you. This may be

achieved through your interactions with us including interactions via our

Sites/Apps, other social media applications or internet sites, telephone, social /

corporate / business sponsored events, email or writing to us.

We may also collect your personal information from a third-party source, such

as our vendors, business partners, government authorities and judicial

authorities.

Why we collect Information?

Unless otherwise provided in the Policy, we may use personal information

collected from the various ways/sources including:

 to verify your identity to register you, and create and operate your

account(s) with us;

 to provide the Services or supply the products to you;

 to process payments made for our Services or products;

 to comply with legal / contractual obligations.

 to administer and protect our business and the Services or products,

including for troubleshooting, data analysis, system testing, and

performing internal operations.

 for risk control, fraud detection, and prevention.

 to perform our obligations that arise out of the arrangement we are about

to enter or have entered with you.

 to respond to court orders, establish or exercise our legal rights, or

defend ourselves against legal claims.

 to improve customer service or products to effectively respond to your

service requests and support needs.

 to improve the functionality of our Services or products based on the

information and feedback we receive from you.

 to send notifications to manage our relationship with you including to

notify you of changes to our Services, send you information and updates

pertaining to the Services you have availed, and to receive occasional

company news and updates related to us or the Services.

 to monitor trends and personalise your experience.

 to market and advertise the Services or products to you.

 to improve our business; and

 to conduct training and AI-based skill training.

 For internal business operations including:

1. Reviews and data analysis for the website (e.g., to determine the

number, category of visitors to specific pages within the website).

2. To manage, operate, maintain, and secure our Sites/Apps, network

system, and other assets and to customize/personalise your

experience with us, which may include displaying content based

upon your preferences.

3. For the purposes of analysing the use of the Sites/Apps, enabling,

and monitoring your use of our Sites, /Apps operating our

Sites/Apps, ensuring the security of our Sites/Apps, for maintaining

back-ups of our databases.

4. To help diagnose problems with our server, and to administer our

Sites/Apps.

 to comply with our legal obligations or as otherwise permitted by law.

 to investigate potential breaches, or to protect the rights, property or

safety of Lexus, the Users of our Sites/Apps or others.

 For any other purpose necessary or incidental to our business.

 For any other purpose for which you give your consent.

In the event we use your Personal Information for other purposes, not specified above, we will

inform you about the specific purposes for processing of your personal information and, when

required, our basis for doing so at the time we collect the Personal Information from you to the

extent required by law.

For the purposes of clarity, we may also use your personal information in combination with

information we obtain from third parties about you for the same purposes described above.

Information Retention, Information Processing, and Information Storage:

Unless otherwise stated herein and as permitted or required by applicable law, We retain Your

Personal Information for as long as necessary to provide the services You have requested, or

for other essential purposes such as complying with Our legal obligations, resolving disputes,

enforcing our policies, agreements and for any other reason which may be deemed necessary.

For these purposes, your information may be retained for extended periods post your account

cancellation. However, the Information of the User will get anonymized upon cancellation of

user account except for the abovementioned purposes.

Information Sharing:

Depending on the purpose and services You opt, We may, from time to time, share Your

Personal Information to our parent company, affiliates, subsidiaries, dealers, services

providers and other business partners involved in rendering various services selected by you

with your prior consent. This information will be shared in an anonymized manner such that

they cannot attribute it to the ultimate customer and will be for a limited period of time.

1. Lexus India or TKM does not access, use, transfer or disclose Your Personal

Information and Vehicle related Data to third parties except:

2. to provide products or services You have requested;

3. when We have Your consent or permission; or under the following circumstances:

a) We provide the information to trusted entities and service providers who work on

behalf of or with Lexus India or TKM under strict confidentiality agreements.

These entities may use Your Personal Information to help Lexus India/TKM

communicate with You about offers from Lexus India/TKM and for other

legitimate business purposes. However, these companies do not have any

independent right to further share or disseminate this information. As We continue

to develop Our business, We might sell or buy subsidiaries or business units. In

such transactions, Users’ Information generally is one of the transferred business

assets but shall remain subject to the terms and conditions contained in this Policy;

b) We respond to subpoenas, law enforcement and regulatory inquiries, government

agencies, court orders, or legal process, or to establish or exercise Our legal rights

or defend against legal claims;

c) We believe it is necessary to share the information in order to investigate, prevent,

or act against any illegal activities, suspected fraud, technical issues, situations

involving potential threats to the physical safety of any person, activity we may

consider to pose a risk of being an illegal, unethical, or legally actionable or as

otherwise required by law.

d) We believe it is necessary to share the information in order to protect or enforce

Lexus India/TKM’s rights, policies, usage terms, intellectual or physical property or

for safety of Lexus India/TKM or associated parties.

e) We may share Your information in order to satisfy any applicable law, rule,

regulation, governmental requests or legal process.

f) We believe it is necessary to respond to claims that an advertisement, posting or

other content that is alleged to violate the rights of a third party.

g) We may share information about You if Lexus India/TKM is acquired by or merged

with another company.

h) We have Your explicit consent to disclose Your Personal Information (i) to other

registered Users of the Website for the purpose of facilitating the communications

and transactions, if any, amongst the Users (ii) to third parties for their marketing

and advertising purposes; (iii) to send You promotions, notifications, or other

services.

In case of any illegal, ethical or legally actionable activity, We may use IP address or other

device identifiers, to identify users, and may do so in cooperation with third parties such as

internet service providers, wireless service providers and/or law enforcement agencies,

including disclosing such information to third parties, all in Our discretion. Such disclosures

may be carried out without notice to You. However, we shall not sell, share or rent the Your

Personal Information to any third party or use any user’s email ID for sending any unsolicited

mails.

4. International Data Transfer

Lexus India/TKM may transfer certain Personal Information across geographical borders to

Lexus India/TKM’s parent, affiliates, subsidiaries, joint ventures or service providers in other

countries working on Our behalf in accordance with applicable law(s). Lexus India/TKM may

transfer Your Personal Information to any other body corporate or a person in any country that

ensures the same level of data protection, as per the applicable data protection laws and

regulations.

When You provide Us with Your information or use Our Website and/or applications, We may

collect, transfer, store, and process Your information, anonymize and use it. These transfers

are governed by equivalent data transfer agreements to protect the security and confidentiality

of Your Personal Information.

Data protection

We have implemented reasonable physical, electronic, technical, procedural and

administrative security measures and safeguards to protect Your Personal Information from

loss, misuse, unauthorized access, alteration or destruction, in compliance with the provisions

of the Information Technology Act, 2000 and Information Technology (Reasonable Security

Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 to ensure

the protection and preservation of Your privacy.

Our service providers and agents are bound to maintain the confidentiality of Your Personal

Information and may not use the information for any unauthorized purpose. Lexus

India/TKM will ensure through formally executed contracts that the service providers are

committed to the same level of data protection as per the applicable data protection laws and

regulations.

We try to limit access to Your Personal Information to only such entities who we believe

reasonably need to come into contact with that information to provide products or services to

You. However, We do not ensure or warrant the security of any information You transmit

over internet to Us and You understand that any information that You share is done at Your

own risk.

DATA RETENTION

Unless otherwise stated herein and as permitted or required by applicable law, We retain

Your Personal Information for as long as necessary to provide the services You have

requested, or for other essential purposes such as complying with Our legal obligations,

resolving disputes, enforcing our policies, agreements and for any other reason which may be

deemed necessary. For these purposes, Your information may be retained for extended

periods post your account cancellation. However, the Information of the User will get

anonymized upon cancellation of user account except for the abovementioned purposes.

Update to this Privacy Policy

TKM reserves the right to update this Policy as and when need arises, without prior notification

to its Users and the same will be made available on Lexus LMS app and the Website. However,

Our commitment to protect Your privacy will continue to remain. We urge You to visit Our

Website periodically to make sure You are aware of any changes to Our policies and practices.

Your continued use of the Website following the posting of changes to this Policy shall be

deemed Your acceptance of those changes. We shall not be liable for any damages You may

suffer as a result of any changes to this Policy.

If you have any queries about this Policy and Our handling practices.

You can contact us at:

Address: Toyota Kirloskar Motor Pvt Ltd.,

Plot No: 1, Bidadi Industrial Area,

Bidadi, Ramanagara District, Karnataka – 562109, India

E-mail ID: legal@toyota-kirloskar.co.in or contact@lexusindia.co.in