Privacy Notice under Section 5 of The DPDPA, 2023

This Privacy Notice has been prepared in accordance with the Digital Personal Data Protection Act, 2023 (hereinafter referred to as "DPDPA" or "the Act") and the rules framed thereunder.

This notice is applicable to Glenmark Aquatic Foundation, operating GAF, in the Other sector.

We collect the following categories of personal data from Data Principals:

• Full Name
• Email Address
• Phone Number
• Physical Address
• Aadhaar/Government ID

The personal data is processed for the following purposes:

Service Delivery and Performance

By using our services and providing personal data, Data Principals provide explicit consent for the processing of their personal data as outlined in this notice. Consent can be withdrawn at any time by contacting our Grievance Officer.

Under the DPDPA, 2023, Data Principals have the following rights:

• Right to Access: Data Principals can request access to their personal data held by us.
• Right to Correct: Data Principals can request correction of inaccurate or incomplete personal data.
• Right to Erase: Under certain conditions, Data Principals can request erasure of their personal data.
• Right to Data Portability: Data Principals can request their personal data in a structured, commonly used, machine-readable format.
• Right to Object: Data Principals can object to processing of their personal data.

In case of any concerns or grievances regarding the processing of personal data, Data Principals can contact our Grievance Officer:

Personal data will be retained as long as it is necessary to serve the purposes for which it was collected. Once the purposes are fulfilled, the data will be securely deleted unless retention is required by law.

Personal data may be transferred to countries outside India. Such transfers are conducted in compliance with the DPDPA and applicable international data transfer agreements. Data Principals will be informed of any such transfers.

If our services are used by children (persons below 18 years of age), we process their personal data with extra care and in compliance with the DPDPA. We require parental or guardian consent for processing children's personal data. Children have the same rights as adults under the DPDPA.

We reserve the right to update this Privacy Notice from time to time to reflect changes in our data processing practices or applicable laws. Data Principals will be notified of any material changes through our website or direct communication.

GAF will use the information and documents submitted in this form to review the swimmer application, verify eligibility, communicate about admission, and manage related programme administration. This may include swimmer identity, contact, date of birth, photograph, ID proof, medical certificate, timing proof, guardian contact, centre, squad, prior training, and accommodation preference. GAF may process this data using its application, database, email, upload, and storage service providers. You may request access, correction, withdrawal, or deletion by contacting GAF.

This Privacy Notice is generated for informational purposes. It does not constitute legal advice. Organizations should consult with qualified legal professionals to ensure full compliance with the Digital Personal Data Protection Act, 2023, and all applicable regulations.

This Privacy Notice is framed in accordance with:

• Digital Personal Data Protection Act, 2023
• Digital Personal Data Protection Rules, 2025
• Guidelines issued by the Data Protection Board of India

This Privacy Notice has been reviewed and authorized for publication by the undersigned authorized officer of the organization.