Privacy Notice

Last updated 24/09/2026
KEI Industries Limited – Privacy Notice Pursuant to the Digital Personal Data Protection Act, 2023

Our Commitment to Protecting Your Personal Data

KEI Industries Limited and its subsidiaries and affiliated entities (collectively referred to as “KEI”, “we”, “us”, “our”, or the “Company”) are committed to maintaining the highest standards of privacy and data protection. We recognize the importance of safeguarding the personal data entrusted to us and are dedicated to ensuring that such data is processed in a secure, transparent, and responsible manner.

In accordance with the provisions of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), KEI processes personal data only for lawful purposes and in a manner that is fair, transparent, and proportionate to the purposes for which such data is collected. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or any other form of unlawful processing.

This Privacy Notice applies to all personal data processed by KEI through its digital platforms, including our website www.kei-ind.com and the careers page hosted on it, our mobile and web applications such as KEI Connect and KEI Supply Beam, portals, and other online services, as well as through offline channels and physical interactions undertaken at our registered and corporate office, marketing offices, branches, depots and manufacturing units in connection with our business activities.

Scope

This Notice applies to

• Personal data collected within India.
• Personal data processed outside India for the purpose of offering goods or services to individuals in India, in digital form or in non-digital form that is subsequently digitized.

This Notice is effective from the date of publication as below which governs the processing of your personal data from that date onwards, in accordance with the Digital Personal Data Protection Act, 2023.

Purpose and Lawful Basis for Processing Personal Data

KEI collects and processes your personal data either:

• With your explicit consent, or
• Under legitimate uses permitted by Section 7 of the DPDP Act.

KEI may process personal data either directly from individuals or through their interactions with KEI’s products, services, digital platforms, systems, and authorized channel partners, distributors, retailers, electricians, contractors, vendors, consultants, and business partners. Such personal data may be processed as part of KEI’s business operations, including human resources, recruitment and employee lifecycle management for both the white-collar and blue-collar workforce, plant and factory administration, purchase and vendor onboarding, sales and marketing across the channel network, institutional and project sales, exports and imports, e-commerce lead management, company secretarial and shareholder servicing, corporate social responsibility, finance, compliance and governance functions, enterprise systems management, and the manufacture and sale of wires, cables and related products.

Personal Data collected via KEI Systems

Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), KEI acts as a Data Fiduciary where personal data is directly requested and collected through its platforms. In situations where you voluntarily choose to share personal data with third parties such as authorised business partners through our platforms or otherwise, those third parties act as independent Data Fiduciaries. They are responsible for ensuring compliance with applicable data protection laws, including obtaining valid consent from the concerned Data Principals.

In addition, not all personal data processed by us is collected directly from you. In certain cases, we may receive personal data from authorised business partners, recruitment consultants, lead-generation platforms, our Registrar and Transfer Agent, or other service providers as part of service delivery or operational requirements. We ensure that all such personal data is processed lawfully, securely, and in accordance with the DPDP Act.

The sections below provide an overview of the categories of personal data processed, the related business activities and purposes, and the applicable lawful grounds.

The following list shows the various processing purposes for personal data here at KEI:

Certain functions within KEI do not process the personal data of Data Principals within our systems. Our Corporate Social Responsibility function disburses funds to NGO and implementation partners who carry out CSR activities on KEI’s behalf, and beneficiary personal data does not flow into KEI systems. Our Logistics function coordinates transportation through brokers and, where any driver details are received, these are limited to the driver’s name and phone number held in paper-based records. Our Commercial function is responsible solely for pricing-related activities and does not process personal data.

Personal Data collected and processed by third parties

As a Data Fiduciary under the Digital Personal Data Protection Act, 2023, KEI engages authorised third parties (“Data Processors”) who process personal data strictly on our instructions. These partners are contractually obligated to maintain confidentiality, implement appropriate security controls, and process personal data only for the specific purposes defined by us.
We may share your personal data with different categories of processors to support our operations, including our human resource management system provider, recruitment consultants, identity card printing vendors, third-party record storage and warehousing providers, our enterprise resource planning and customer relationship management platform providers, the operators of the KEI Connect and KEI Supply Beam applications, our Registrar and Transfer Agent for shareholder servicing, and the NGO and implementation partners engaged for our corporate social responsibility activities. Your personal data may be shared strictly for the purposes described in this Privacy Notice.

Your Rights as a Data Principal

As a Data Principal, you have the following rights in relation to your personal data processed by KEI:

1. Right to Access Information
You may request a summary of the personal data processed by us, including the categories of data, the purpose of processing, and details of third parties with whom the data has been shared. A copy of your personal data may be provided in electronic form, subject to applicable legal requirements and exceptions under the DPDP Act.

2. Right to Correction and Erasure
You have the right to request correction of inaccurate or incomplete personal data and to request erasure of personal data that is no longer required for the purpose for which it was collected, unless retention is required under applicable law.

3. Grievance Redressal
You may raise grievances relating to the processing of your personal data or the exercise of your rights under the DPDP Act. KEI has established a grievance redressal mechanism to address such concerns in a timely manner, in accordance with applicable law.

4. Right to Nominate
You have the right to nominate an individual to exercise your rights on your behalf in the event of death or incapacity, in accordance with the DPDP Act.

We will respond to data principal rights requests in accordance with the timelines prescribed under the DPDP Act, 2023.

For security purposes, identity verification may be required before processing any request. Where a request cannot be fulfilled, a reasoned response will be provided.

For any queries or to exercise your rights, you may contact KEI’s Data Protection Officer at

Retention and Deletion

We ensure that your Personal Data is accurate, up to date, and retained only for as long as necessary to fulfil the purposes for which it is collected, including providing access to and use of the website. Personal Data may also be retained as required to comply with applicable laws, regulations, legal obligations, resolve disputes, enforce agreements, or to establish, exercise, or defend legal claims.
Retention periods may vary depending on the nature of the Personal Data and the purpose of processing, and are determined in accordance with applicable statutory requirements, including the Companies Act, 2013 and SEBI regulations for shareholder and corporate records and applicable labour, tax and commercial laws, together with organisational retention policies and limitation periods.
Once the relevant purpose has been fulfilled and the applicable retention period has expired, the Personal Data is securely deleted or anonymised in a systematic manner. Even after deletion from active systems, certain data may be retained in backup or archival systems for audit, legal, tax, or regulatory purposes, as permitted under applicable law.

Data Transfer Outside India

KEI processes Personal Data primarily within India. However, as an exporter and importer of wires, cables, raw materials and finished goods, KEI transfers and receives limited personal data outside India in the ordinary course of its international trade operations. All such transfers are undertaken strictly in accordance with the Digital Personal Data Protection Act, 2023, and applicable directions issued by the Central Government.

Cross-border transfers may occur in connection with export and import transactions with business counterparties located across approximately 45 to 50 countries, and with our overseas offices, subsidiaries, branches, joint ventures, customers, vendors, and logistics service providers, and only to the extent necessary for business purposes. The personal data involved in such transfers is typically limited to the business contact details of company representatives together with related commercial transaction information.

In all such cases, KEI implements appropriate safeguards, including:

• Compliance with restrictions and conditions notified by the Central Government for international data transfers;
• Adherence to applicable requirements prescribed by the Data Protection Board of India;
• Execution of suitable contractual, technical, and organisational safeguards; and
• Periodic review and monitoring of cross-border data protection requirements.

KEI maintains transparency in its international data processing activities and undertakes cross-border transfers only where legally permitted and operationally necessary.
For queries relating to cross-border data processing, you may contact the Data Protection Officer at [official email ID of the DPO]

Changes to this Privacy Notice

This Privacy Notice is subject to modification in response to changes in our privacy practices or upon notification from governmental authorities. In the event of any amendments, the revised notice will be published on this website. Should there be significant changes affecting the processing of your personal data, we will notify you via email or through any other available communication channels.

Link to other Websites

Our websites may feature buttons or tools that link to services provided by other companies. We encourage you to review the privacy policies of these external sites, as they may have their own privacy notices in place. Please note that we cannot be held responsible for the privacy practices of these external sites.

How to Exercise Your Rights

You may exercise these rights by contacting our Data Protection Officer through the following means:
Kindly login your request to access, correction and erasure, redressal and nomination through the principal rights page of our website
Contact our DPO: [official email ID of the DPO]
Address: KEI Industries Limited, D-90, Okhla Industrial Area, Phase-I, New Delhi – 110020, India

We will respond within 90 working days or as prescribed under the DPDP Act. You may also approach the Data Protection Board of India if you are not satisfied with our response.
Date of Publication: 24/09/2026
Disclaimer
Individuals who are 18 years of age or older and possess the legal capacity are authorized to access our website and applications.