YARA’S PRIVACY NOTICE
Last updated: 26 June 2026
- SCOPE
Yara Fertilisers India Private Limited and its group companies (hereinafter referred to as “Yara”, ‘we’, ‘us’ or ‘our’) take the protection of your personal data seriously. We want you to feel safe in using/ availing our products and solutions. This Privacy Notice describes our processing practices, implementation of reasonable security standards, and your rights, as to the personal data that we collect, process, use, store, disclose and transfer in connection with our products and digital farming solutions. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Yara will act as a “Data Fiduciary” where it determines the purpose and means of processing your Personal Information. Please make sure to also consult the Yara Terms and Conditions which govern your use of the Solutions.
This Privacy Notice is an electronic record under the Information Technology Act, 2000 and the rules made thereunder. This Privacy Notice does not require any physical, electronic, or digital signature by Yara.
This Privacy Notice is intended to operate as a notice under the DPDP Act for the processing of Personal Information in connection with the Solutions.
Where we process your Personal Information on the basis of your consent, we will request your free, specific, informed, unconditional and unambiguous consent through a clear affirmative action. You may withdraw consent using the contact details and mechanisms described in this Privacy Notice. Withdrawal of consent will not affect processing carried out before withdrawal, but it may affect our ability to provide the Solutions or particular features where such Personal Information is necessary.
- OUR SOLUTIONS
Our Solutions aim to digitally connect various stakeholders in agricultural industry, provide varied product/services according to the needs and requirements of user, improve farming methods and activity through innovative technology and connected tools.
Our digital farming solutions (Solutions) include but not limited to:
- Websites that are owned by us or Yara-branded, and that link to this Privacy Notice.
- Online or downloadable software.
- Mobile applications.
- Hardware which may be linked to our software or mobile applications, and connected to the Internet.
- HTML-formatted email messages that link to this Privacy Notice.
- Our social media pages and applications that we administer.
- Events (such as trade shows or networking events) that relate to our Solutions.
Please read this Privacy Notice carefully prior to accessing or availing any Solutions. By accepting the Privacy Notice or clicking on the ‘Let’s go!’ or similar button at the time of your first access of the Solutions, you acknowledge this Privacy Notice and, where requested, provide your consent to Yara collecting, storing, processing and sharing information including your Personal Information (defined below) in accordance with this Privacy Notice. Certain processing may also be carried out where permitted under applicable law, including for specified lawful purposes and certain legitimate uses recognised under the DPDP Act.
1.2. YOUR PERSONAL DATA
Personal data is any information that either directly or indirectly, or in combination with other information available to us, enables us to identify you as an individual. For example, this can be your name or shipping address, but also your purchase history or job title. The categories of personal data that we collect or obtain to which this Privacy Notice applies (“Personal Information”) includes the following:
- Contact details (for example, name, postal address, email, telephone number, emergency contact details).
- Personal details (for example, demographic characteristics, including birthdate and gender).
- Transaction data (for example, transactions and agreements, order/purchase history, shipping and billing information).
- Device and software data (for example, device-ID, operating system and corresponding version, specific use data and patterns).
- Relationship data (for example, support requests, ratings, testimonials and feedback).
- Social media account data (for example, social-media account ID and posts).
- Passwords related to Yara applications/Solutions.
- Location data (for example, GPS location, IP address, and mobile device including a unique identifier number).
- Shop/store details (for example, photograph of your shop/store/premises for publishing on the Solutions)
We may ask you to provide certain additional information about yourself on a case to case basis.
Such Personal Information relates to any individual who purchases, uses or is involved with our Solutions. This includes:
- Customers who install or purchase our Solutions, including individual farmers, distributors and retailers.
- Users who employ/ use our Solutions.
- Partners who install and/or sell our Solutions.
- Third party service providers who assist in the marketing or operating of the Solutions.
- Employees and representatives of the above categories’ persons.
If you provide to us any Personal Information of another person, you must ensure that you are authorized to do so and that such person is informed about this Privacy Notice. For certain Solutions, we may, but are not obliged to, provide you with template privacy release forms to assist you in providing necessary information to such persons, for example to your contracting party as part of a rental contract management tool. Some Solutions allow you to invite a friend or contact to a Solution or feature, for example to share content with them or for collaboration purposes. Please use this functionality responsibly, and refrain from sending requests to persons who may not reasonably expect to receive and consent to them.
You can choose not to provide any Personal Information that we may request of you, but, in general, the Personal Information we request is required in order to provide you with access to and use of the Solutions, and the lack of such information may prevent us from doing so and impact the service capability and certain features of the Solutions.
- HOW WE USE YOUR PERSONAL INFORMATION
2.1. PURPOSES FOR ALL SOLUTIONS
We use your Personal Information for:
- Providing the functionality of the Solutions and customer support
- Provide the Solutions to you, such as allowing access to your account.
- Provide location-based Solutions.
- Complete and record your transactions.
- Maintain and provide shop details, transaction details, and app engagement (like shop name, type of retailer/dealer, KYC documents, location, working hours, transaction history, reward redemption history, linked distributors and linked farmers).
- Ship items and hardware you order, such as sampling kits and measurement devices.
- Provide you with knowledge on Yara products and services.
- Provide you with customer service and technical assistance (for example, installation, maintenance and breakdown assistance) and improve our customer relationship management processes.
- Send you administrative information, such as changes to our terms and policies.
- Provide training to you regarding our Products and Solutions.
- Respond to your inquiries and requests, for example when you send us questions or suggestions.
We do this pursuant to our contractual relationship with you or to comply with a legal obligation.
- Providing you with marketing materials
- Send you marketing communications and offer other materials that we believe may be of interest to you, such as to send you newsletters and personalized offerings, to inform you about the Solutions and any offers.
- Share information with other marketers to permit them to send you marketing communications, consistent with your choices.
- Enable the posting of comments and testimonies about you on our websites and other parts of our Solutions, where you have provided your consent or where otherwise permitted under applicable law.
- Providing you the access to participate in promotional activities/schemes/contests and facilitate social sharing
- Allow you to participate in promotions, schemes, contests, incentive & loyalty programs requiring your KYC documents.
- Facilitate social sharing functionality if you choose to do so.
We do this to manage our contractual relationship with you, with your consent, or where otherwise permitted under applicable law. Additional rules may apply to such promotions or social sharing. Please make sure to read and abide by those rules.
- Conducting business reporting and offering tailored services
- Analyze our customers’ use of the Solutions in order to prepare aggregated trend reports.
- Provide you with tailored advice and agronomical tips.
- Allow our customers to participate in polls and surveys, so that we can improve our service offerings.
We do this with your consent or where otherwise permitted under applicable law.
- Accomplishing our business purposes
- Business intelligence, such as compiling general market insights.
- Product improvement, to develop new products and solutions, or enhance our current products and Solutions.
- Governance and audits, for example by implementing internal audits, business analysis, controls and reporting (for example, whistleblowing procedures).
- Business transactions, including a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business (Business Transaction). For example, in case of a merger with or acquisition by another company, we may be required to disclose Personal Information to that company.
- Protect Yara assets, for example for health and safety reasons, or to manage access rights and security (to prevent fraud, cyberattacks and identity theft and protect the security and integrity of our Solutions).
- Comply with legal obligations, for example we need to retain invoices for accounting purposes, or disclose some data to comply with requests from public authorities.
We do this to manage our contractual relationship with you, comply with a legal obligation, protect our rights and the security of the Solutions, or where otherwise permitted under applicable law.
- Aggregating and/or anonymizing Personal Information
- We may aggregate and/or anonymize Personal Information so that it will no longer be considered Personal Information. We do so to generate other data for our use, which we may use and disclose for any purpose. We may do so for example after you close your account.
Our primary goal is to provide you safe, efficient, smooth and customized experiences through the Solutions. The Personal Information collected allows us to provide the Solutions that most likely meet your needs. More importantly, while doing so, we collect the Personal Information from you that we consider necessary for achieving the abovementioned purposes.
- OTHER INFORMATION
Yara also collects and uses certain data which does not reveal your specific identity and does not relate to an identified or identifiable individual (Other Information). This information therefore does not qualify as Personal Information. We still want you to be aware of our practice in relation to such information.
Examples of what may constitute Other Information include:
- Business-related data, such as Machinery and device data (for example, model, technical characteristics, location and associated tasks).
- Software and hardware data (for example, connection time and use trends).
- Information collected through cookies, pixel tags and other technologies.
- Anonymized or aggregated data.
We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Information. If we do, we will treat the combined information as Personal Information as long as it is combined.
Examples of ways in which we use Other Information include:
- To provide the Solutions.
- Generating nutrient map applications and acreage indexes.
- Improving agronomic knowledge through regional nutrient analysis.
- Research and development.
- Product and service improvement of the Solutions.
- To learn about you and your interests, and to deliver and tailor marketing materials.
- CONTACTING US
If you have any questions or any grievances about this Privacy Notice or our processing of your Personal Information, please contact our grievance officer, who can be reached at:
Mr. K.P. Shekhar
kumar.purnendu.shekhar@yara.com or 502, Global Business Square, Building no. 32, Institutional Area, Sector 44, Gurugram, Haryana; Tel: 0124 460 3170.
We will acknowledge and address grievances relating to your Personal Information in accordance with applicable law. If your grievance is not resolved through this mechanism, you may approach the Data Protection Board of India in the manner prescribed under applicable law, after exhausting this grievance redressal mechanism.
- YOUR RIGHTS
Subject to applicable law, including the DPDP Act, you may be entitled to exercise the following rights in relation to your Personal Information:
- Right to access information
- To obtain information about the Personal Information we process about you, including a summary of such Personal Information and the processing activities undertaken in relation to it, subject to applicable law.
- To obtain the identities of Data Fiduciaries and Data Processors with whom your Personal Information has been shared, along with a description of the Personal Information so shared, where required by applicable law.
- Right to correction, completion and updating
- The correction of inaccurate or misleading Personal Information, completion of incomplete Personal Information, and updating of Personal Information.
- Right to erasure
- The erasure of Personal Information that is no longer necessary for the purpose for which it was processed, or where you have withdrawn consent, unless retention is required or permitted under applicable law.
- Right of grievance redressal
- To have grievances relating to the processing of your Personal Information addressed through the grievance redressal mechanism described in this Privacy Notice.
- Right to nominate
- To nominate another individual who may exercise your rights in accordance with applicable law in the event of your death or incapacity.
- Right to opt-out of direct marketing
- To opt out of direct marketing communications by clicking on the “unsubscribe” button in the messages you receive or by contacting us using the contact details set out in this Privacy Notice.
- Right to withdraw consent
- To withdraw your consent at any time where the processing of your Personal Information is based on consent. Note that withdrawing your consent will not make the use of your data before your withdrawal unlawful. In case you do not provide your consent or later withdraw your consent, this may prevent us from providing the Solutions or certain features/ capabilities thereof. In such a scenario, Yara may delete your Personal Information or de-identify it so that it is anonymous and not attributable to you, unless retention is required or permitted under applicable law.
If you would like to exercise your rights, please contact us at the aforesaid contact details. Please note that the rights above may be subject to verification of your identity and may be restricted in line with applicable law.
- WHO WE SHARE YOUR PERSONAL INFORMATION WITH
6.1. WHICH THIRD PARTIES HAVE ACCESS TO PERSONAL INFORMATION
- Group companies of the Yara Fertilisers India Private Limited, for the purposes set out in this Privacy Notice
- For enabling them to provide the Solutions. Please note that all Personal Information shared with or made available to our group companies will be governed by the terms of this Privacy Notice.
- Optimizing our shared processes. Within a group of companies, it is sometimes necessary to use and leverage resources effectively. In this context, we support each other within our group in optimizing our shared processes.
- Other cross-affiliate initiatives, such as research and development, marketing and finding new prospects, and other related purposes.
- Third party service providers, vendors and/ or consultants to facilitate services they provide to us
- These services include (without limitation) hosting data, cloud services, processing payments (including validation), delivering shipments, email delivery, distribution, customer support and technical assistance, maintenance, undertaking audits and or data analysis, web analytics, IT performance monitoring, customer relationship management, evaluating, running and optimizing user experience or our growth campaigns, polls and surveys, assistance in our marketing and advertising initiatives, legal compliance, as well as to secure our business operations, such as identifying and resolving malfunctions, fraudulent or illegal activities.
- Public authorities where disclosure is required
- To comply with applicable law, regulation or legal process.
- To address a dispute with a third party.
- When we respond to law enforcement requests and orders.
- To provide information we believe is important.
- Partnerships and commercial relationships to accomplish our business objectives
- In connection with collaboration initiatives, for example as part of the sale and distribution process.
- In connection with a sale or Business Transaction, where disclosure or transfer of your Personal Information is reasonably required and permitted under applicable law.
- To permit them to send you marketing and other communications, consistent with your choices.
- To allow them to contact you in relation to rewards/schemes/contests, consistent with your choices.
- Third parties with whom you share Personal Information through the Solutions
- Some Solutions may enable you to grant access to or share your Personal Information with other individuals or organizations in relation to the Solutions, for example to advisors to assist you in decision-making, consultants, distributors, machinery manufacturers and social media.
- If you connect your Solution with your social media account, you will share information with your friends associated with your social media account, with other users, and with your social media account provider. By doing so, you authorize us to facilitate this sharing of information, and you understand that the use of shared information will be governed by the social media provider’s Privacy Notice.
As well as where otherwise prescribed to comply with applicable law and regulations, enforce our (and our representatives’ and group’s) rights, terms and conditions, privacy, safety or property.
Where we share or make available your Personal Information to third parties that process Personal Information on our behalf, we will do so under valid contractual arrangements requiring such third parties to keep the Personal Information confidential, use it only for the purposes for which we disclose it to them or as otherwise instructed by us, implement appropriate security safeguards, assist us with applicable compliance obligations, and maintain at minimum the same level of data protection that is adhered to by us.
6.2. WHERE WE TRANSFER YOUR PERSONAL INFORMATION
Your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers, including in countries outside India. We will transfer Personal Information outside India only in accordance with applicable law, including the DPDP Act, any restrictions notified by the Central Government, and any sector-specific localisation or transfer requirements that apply to the relevant category of data. We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Notice and applicable law.
Notwithstanding the above, any financial data (for example, bank, card and account details, and other payment related information) that may be collected by Yara in India is stored on servers, log files and any other storage system owned by Yara or by third parties in India.
6.3. THIRD PARTY SERVICES
Some Solutions may link you or enable you to obtain certain products/services from third parties. For example, it may be possible to:
- Make a payment through the Solutions.
- Get rewards associated with Yara run or managed schemes/contests from banks, third party vendors after you sharing your KYC documents to fulfil such services.
- Access manually added locations or GPS provided by others.
- Share content with/through social media.
- Procure Solutions through a third party distributor.
- Export and import information with machinery manufacturers, for example for easier field tracing.
- Grant third parties access to your Personal Information, such as advisors who assist you in decision-making.
Where you do so, your Personal Information and/ or Other Information may be collected by those third parties, and not by us. We are not responsible for the solutions, privacy, security practices and use of cookies of and by such third parties, which are subject to their Privacy Notice, rather than this Privacy Notice. We recommend that when you obtain such solutions from/through third parties, you review their Privacy Notice and terms of use as it relates to safeguarding of your information.
6.4. PUBLIC FORUM
By using the Solutions, you may choose to disclose Personal Information on message boards, blogs and other services to which you are able to post information (including our social media pages). Please note that any information you post or disclose through these services will become public, and may be available to other users and the general public. To request the removal of your Personal Information from our blog or community forum, contact us (see Section 5). In some cases, we may not be able to remove your Personal Information or some content (if, for example, it is reposted by another user).
- HOW WE SOURCE AND RETAIN YOUR PERSONAL INFORMATION
We and our services providers collect Personal Information from various sources such as:
- Through the Solutions
- We collect Personal Information through the Solutions, for example, when you subscribe to a Solution, set up a user profile or interact with our connected devices.
- Offline
- We collect Personal Information from you offline, for example when you attend our events, or contact our customer care service.
- From other sources
- We obtain data from other sources, for example
- Publically available databases (to the population at large, or to specific relevant groups such as the farming community), for example to improve land consolidation.
- Public authorities as part of enabling the Solutions.
- Commercial partners who sell or install the Solutions, when they share the Personal Information with us.
We retain your Personal Information only for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. Where you withdraw consent or the specified purpose for which Personal Information was processed is no longer served, we will erase or de-identify such Personal Information unless retention is necessary for compliance with applicable law, establishment or defence of legal claims, fraud prevention, security, accounting, audit, tax or regulatory purposes. The criteria used to determine our retention periods include:
- The length of time we have an on-going relationship with you and provide the Solutions to you (for example, for as long as you have an account with us or keep using the Solutions), or to enable you to conduct your activities and meet your retention requirements. For example, regarding customer Personal Information, we periodically reassess the need to retain your data after you cease to be a registered customer, including to allow us to answer complaints or inquiries that may still arise. However, there are also other factors that may influence that period as set out below.
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
- SENSITIVE INFORMATION
Unless we request it, we ask that you not send us, and you not disclose, any sensitive personal data or sensitive categories of information (for example, social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, medical records and history, health, biometrics or genetic characteristics, physical, physiological and mental health condition, sexual orientation, criminal background or trade union membership) on the Solutions. Where we specifically request such information, we will process it in accordance with applicable law and the relevant notice and consent mechanism.
- CHILDREN’S PERSONAL INFORMATION
The Solutions are not intended for use by children unless expressly stated for a particular Solution. Where we process the Personal Information of a child or a person with disability who has a lawful guardian, we will obtain verifiable consent from the parent or lawful guardian, as applicable, and comply with the restrictions under applicable law. We will not knowingly undertake tracking, behavioural monitoring or targeted advertising directed at children, or process children’s Personal Information in a manner likely to cause detrimental effect to a child, except where permitted by applicable law.
- SECURITY PRECAUTIONS AND MEASURES
We take information security seriously and have reasonable administrative, technical, physical and managerial measures to protect your privacy and Personal Information from theft, loss, unauthorised access, misuse, destruction, alteration and modification, in compliance with applicable laws. Our information security policies and our technical, operational and physical security measures conform to the IS/ISO/IEC 27001 standard. Unfortunately, no security system can be guaranteed to be completely secure. Accordingly, although we will do our best to protect your Personal Information, we cannot guarantee the security of your information transmitted to, on or through our Solutions, and any transmission is at your own risk. By using our Solutions or providing information to us through any means, you agree (i) that we can communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Solutions, and (ii) to take adequate physical, managerial, and technical safeguards to preserve the integrity and security of your data including your Personal Information till the time you have access to and/or use our Solutions (directly or indirectly).
When payment information is being transmitted on or through the Solutions, it will be protected by encryption technology. You expressly consent to the sharing of your information with third party service providers, including payment gateways, to process payments and manage your payment-related information. Hence, Yara cannot guarantee that transmissions of your payment-related information or Personal Information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by Yara or Yara’s third-party service providers. Yara assumes no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond its control. You play an important role in keeping your Personal Information secure and you shall not share your Personal Information or other security information for your account with anyone.
In the event of a personal data breach, we will take steps to assess, contain and remediate the breach and will notify the Data Protection Board of India and affected Data Principals in the form, manner and timeframe required under applicable law.
- COOKIES
Our Solutions may use cookies and similar technologies. This section describes our practices in that respect.
11.1. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES?
Cookies are a standard feature of websites that allow us to store small amounts of data on your computer or device about your visit to our Solutions. Cookies help us learn for example which areas of our website are useful and which areas need improvement. For this purpose, we also use technologies similar to cookies, such as pixel tags.
You can choose whether to accept the use of cookies and similar technologies in general by changing the settings on your browser, by using any cookie preference or consent tool made available through the relevant Solution, or by changing specific settings for the Solution (as set out in Section 11.3). ESSENTIAL COOKIES ARE NECESSARY FOR THE OPERATION OF THE SOLUTIONS. Where cookies or similar technologies are used for analytics, social media, advertising, profiling or targeted marketing and involve Personal Information, we will use them in accordance with applicable law and, where required, based on your consent. However, if you disable cookies and similar technologies, your experience on the Solutions may be diminished and some features may not work as intended.
11.2. WHAT COOKIES AND SIMILAR TECHNOLOGIES DO WE USE?
Below, we identify the different types of cookies and similar technologies that are used on our Solutions. To the extent that Personal Information is collected through cookies, the other Sections of the Privacy Notice apply and complement this Section 11.
- Essential Cookies. Essential cookies enable you to navigate the Solutions such as our websites and to use their services and features. Without these absolutely necessary cookies, the website for example will not perform as smoothly for you as we would like it to and we may not be able to provide the website or certain features. Such cookies include for example those to remember what you place in your shopping cart or authenticate you before signing up to your Yara account.
- Preference Cookies. Preference cookies collect information about your choices and preferences, and allow us to remember language, age, communication preference and other local settings, and customize our Solutions accordingly.
- Social Media Cookies. Social media cookies collect information about social media usage. They enable to perform market research or marketing.
- Analytics Cookies. Analytics cookies collect information about your use of our Solutions, such as our websites and enable us to improve the way they work. For example, analytics cookies show us which are the most frequently visited pages on our website, time spent and links clicked on pages or what users like and do not like, help us record any difficulties you have with the website, and show us whether our advertising is effective or not. This allows us to see the overall patterns of usage on the website, rather than the usage of a single person. We use the information to analyze website traffic, but we do not examine this information for individually identifying information.
- Advertising Cookies. Advertising cookies are set to display targeted promotions or advertisements based upon your interests on the Solutions or to manage our advertising. These cookies collect information for example about your activities our websites and other sites to provide you with targeted advertising. These cookies enable us for example to track if you are a current customer and when the last time was that you engaged with us, so that we can follow-up, or to find new customers and prospects.
- Google Analytics. Google Analytics service is provided by Google, Inc. We use Google Analytics to collect anonymized statistics in order to improve our Solutions. You can learn about Google’s practices by going to Google Analytics and privacy, and opt out of them by downloading the Google Analytics Opt-out Browser Add-on. We have taken the following measures to protect the data collected through Google Analytics:
- We have concluded a data processing agreement with Google about how Google may process the data collected through Google Analytics.
- We have configured Google Analytics settings to mask the last octet of user IP addresses.
- We have configured Google Analytics to not share data with third parties.
- We do not use other Google services in conjunction with Google Analytics.
- Pixel tags. Pixel tags (also known as web beacons and clear GIFs) are used to, among other things, track the actions of users of our websites, measure the success of our marketing campaigns, and compile statistics about usage of our websites and response rates.
Browser or Device Information. Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, and the name and version of the website you are using. We use this information to ensure that our websites and Solutions function properly.
11.3. HOW TO MANAGE COOKIES AND SIMILAR TECHNOLOGIES
You can change your settings for cookies and similar technologies as described in the documentation pertaining to each Solution. In addition, you can refuse or accept cookies from our websites at any time by activating the settings on your browser. Information about the procedure to follow in order to enable or disable cookies can be found on your Internet browser provider’s website via your help screen. Please refer to http://www.allaboutcookies.org/manage-cookies/index.html for information on commonly used browsers. Please be aware that if cookies are disabled, not all features our websites may operate as intended.
If you want to clear all cookies left behind by the websites you have visited, here are links where you can download programs that clean out tracking cookies:
- CHANGES TO OUR PRIVACY NOTICE
We may change, modify, update, add, or remove any portions of this Privacy Notice from time to time to meet our business requirements and/or comply with statutory provisions. You can see the date of the latest update at the top of this Privacy Notice. If we make material or substantive changes to one of our privacy policies, we will seek to actively bring those changes to your attention. Where required under applicable law, we will obtain your consent for such changes before relying on them for processing your Personal Information.