PRIVACY POLICY

Effective Date: 16/10/2026 | Last Updated: 16/10/2026

Play Blue Sports Private Limited (“Company”, “we”, “us”, or “our”) is an omnichannel, multi-brand retailer of sports products, operating through its physical retail stores, its website https://www.playblue.com (“Website”) and its ‘PlayBlue’ mobile application, including IOS and Android versions (“App”). The ‘Website’ and the ‘App’ shall collectively be referred to as the “Platform”. The Company, through the Platform, offers and sells (i) products of third-party brands (“Third-Party Products”), which are manufactured by the respective third-party Brand Owner or a third-party manufacturer engaged by or on behalf of such Brand Owner; and (ii) products sold under the Company’s own brand(s) (collectively referred to as "PlayBlue") which may be manufactured by the Company or by third-party manufacturers engaged by or on behalf of the Company (“PlayBlue Products”). The ‘Third-Party Products’ and the ‘PlayBlue Products’ are collectively referred to as "Products”. The Products may include sports equipment, apparel, footwear, accessories and other related products, as well as edible products, including protein supplements, shakes and electrolytes. The Company also provides customer support and other related services in connection with the Products (“Services”).

For the purposes of this Privacy Policy, “Manufacturer” means, in relation to any Product, (i) the relevant third-party Brand Owner and/or the third-party manufacturer engaged by or on behalf of such Brand Owner, in respect of Third-Party Products; or (ii) the Company and/or the third-party manufacturer engaged by or on behalf of the Company, in respect of PlayBlue Products, as the case may be. “Brand Owner” means, in relation to a Third-Party Product, the owner of the brand under which such Third-Party Product is marketed and sold.

This privacy policy (“Privacy Policy”) explains how we collect, use, process, store, share, and protect Your personal data. This Privacy Policy is to be read together with the Terms of Use and is published in compliance with:

• The Information Technology Act, 2000 and rules thereunder;

• The Digital Personal Data Protection Act, 2023 and rules made thereunder (“DPDP Act & Rules”); and

• Other applicable laws.

In the course of operating the Platform and offering the Products and Services therein, the Company may collect and process personal data of Users in its capacity as a Data Fiduciary, as defined under the DPDP Act & Rules. The Company determines the purpose and means of processing personal data collected through the Platform and is accordingly responsible for such processing in accordance with applicable law.

We are dedicated to preserving the confidentiality, integrity, and security of all information from our Users and make sure that every detail of our customers remains confidential. “User”, “You”, or “Your” in this Privacy Policy refers to any individual who visits or uses the Platform or interacts with the Company through the Platform, including through contact forms, newsletter subscriptions, contests, social media platforms, feedback, product ratings and reviews, promotions (where applicable) and any other such interaction through the Platform. In accordance with the DPDP Act & Rules, You shall be regarded as the Data Principal.

1. Information we Collect

We collect the following categories of personal data, depending on the capacity in which You engage with us:

• Identification and contact details including Your name, email address, phone number, address and other details submitted at the time of registration, order placement, contact forms, product ratings and reviews, or other Platform interactions;

• Information contained in enquiries, feedback, complaints, requests or other communications submitted by You through the Platform;

• Information voluntarily submitted while engaging/using any features on the Platform and/or participating in promotional activities (where applicable), contests, surveys, campaigns, registrations, or other interactive features made available through the Platform (where applicable);

• Login credentials, wishlist, saved addresses and other account preferences, where You create or access an account on the Platform (where applicable); Order and transaction details, including Products purchased, order history, transaction details and payment/billing information (processed through third-party payment gateways). The Company does not store complete debit card, credit card, UPI or banking credentials, which are processed directly by authorised third-party payment gateway providers;

• Information relating to returns, exchanges, replacements, refunds, warranty claims and complaints in respect of any Product, including photographs or videos of the Product shared by You;

• Information voluntarily provided by You regarding Your sports or fitness preferences, size and fit, dietary preferences, allergies or other information shared for the purpose of obtaining Product recommendations or customer support (where applicable);

• Communications and correspondence with the Company through email, contact forms, chat, WhatsApp or other customer support channels;

• Usage information, including pages visited, features accessed, browsing behaviours, clicks, time spent on the Platform, and other interaction with the Platform

• Technical Information, including IP address, browser type and version, device type, operating system, network information, date and time of referring URLs and similar technical identifiers;

• Information received from other sources, such as updated delivery and address information from our logistics partners, and information from the Manufacturers of Third-Party Products in connection with warranty claims, returns or after-sales support relating to Your order;

• Location information, including Your delivery address and pin code and approximate location derived from Your IP address or device settings (where You permit);

• Cookie and tracking technologies; and

• Any other information that You voluntarily provide to us or that is reasonably required for providing, operating or improving the Platform and related services.

We collect only such personal data as is necessary for the purposes described in this Privacy Policy. You may choose not to provide certain information; however, You may then not be able to use certain features of the Platform or place orders.

Cookies and similar technologies are used to remember User preferences, maintain login sessions (where applicable), analyse Platform usage, improve Platform functionality and personalise the User experience. Users may control cookie preferences through their browser settings, however, disabling cookies may affect certain features or functionality of the Platform. For more details, please refer to the Cookie Policy.

2. What do we do with your information?

We process Your personal data only for the following purposes depending on the capacity in which You engage with, us, to the extent necessary and in accordance with the applicable laws:

• Processing, fulfilling, and delivering Your orders, including sharing necessary information with the relevant Manufacturer and Brand Owner of Third-Party Products, logistics and delivery partners, and payment gateways strictly for order fulfilment;

• Providing recommendations having regard to Your sports or fitness preferences, size and fit, dietary preferences or allergies, where such information has been voluntarily provided;

• Responding to Your enquiries, requests, complaints, feedback, refund and/or cancellation requests, customer support requests or other communication in connection with the Platform;

• Handling returns, exchanges, replacements, refunds, warranty claims and complaints in respect of any Product, including coordinating with the relevant Manufacturer in respect of Third-Party Products;

• Improving the user experience and providing better product recommendations;

• Providing, operating, and improving the Platform and its features;

• Communicating with You regarding the updates, announcements, promotional communications or marketing materials, where You have provided Your consent or where otherwise permitted under applicable law;

• Personalising and improving Your experience on the Platform, including analysing usage trends and user preferences;

• Monitoring Platform performance and conducting analytics and improving functionality and security;

• Enforcement of Terms of Use and other applicable policies of the Company and under this Platform;

• Detecting, preventing and investigating fraud, unauthorised access, misuse or other unlawful activities affecting the Platform;

• Compliance with applicable laws, regulations, and legal obligations.

Where the Platform incorporates artificial intelligence or algorithmic systems that process Your personal data, such processing is used to generate probabilistic outputs designed to support human decision-making. Such outputs are not used to make legally significant or similarly consequential automated decisions about You as an individual without human oversight. Your personal data is processed on a need-to-know basis and only for the purposes to which You have consented or for which a lawful basis exists under applicable law.

3. Disclosure and Sharing of Information

The Company may share Your personal data, strictly to the extent necessary, with:

• The relevant Manufacturer and Brand Owner of Third- Party Products, solely for the purpose of order fulfilment, warranty claims, and after-sales support in respect of the specific Third- Party Products ordered by You;

• Logistics, courier, and delivery partners, for the purpose of shipping and delivering Your orders;

• Payment gateways and financial institutions, for the purpose of processing payments and refunds;

• Professional advisors, auditors, and regulatory or governmental authorities, where required under applicable law or where reasonably necessary to enforce the Terms of Use, detect or prevent fraud, or protect the rights, property or safety of the Company, its Users or others;

• Service providers engaged by the Company for hosting, analytics, customer support, or other operational purposes, who process such data on the Company’s behalf and are contractually bound to maintain its confidentiality and security;

• Any prospective buyer, successor or affiliate in connection with a merger, acquisition, restructuring or sale of all or part of the business or assets of the Company, subject to such entity continuing to protect Your personal data in accordance with this Privacy Policy.

The Company does not permit Manufacturer, Brand Owners, logistics partners, or other third parties to use Your personal data for any purpose other than that for which it was shared.

Third parties including the Brand Owners, Manufacturers of the Third-Party Products may independently collect, store, or process outside the Platform, and this Privacy Policy does not govern such independent processing. Aforementioned authorised third parties remain separately responsible for compliance with applicable data protection laws, including the DPDP Act & Rules, in respect of any data they process directly. You are encouraged to review their respective privacy policies, where applicable. Other than as set out above, You will be notified when Your personal data may be shared with any third party.

4. Third-Party websites, apps and links

The Platform may contain links to third-party websites, apps or platforms, including those operated by Brand Owners, Manufacturer, third-party logistics partners, or payment providers. We do not control and are not responsible for the privacy or security practices of such third-party websites, apps or platforms. You should review the privacy policy of any such third-party website, apps or platform, before providing any personal data to it. The inclusion of such links does not, by itself, imply endorsement by the Company of the linked website/app/platform or its operator. Third-party advertising partners may collect information about You when You interact with their content or advertisements, which shall be governed by their respective privacy policies.

5. Consent and Authorisation

By accessing the Platform and ticking the relevant consent checkbox, You expressly:

• Acknowledge that You have read and understood this Privacy Policy and the Terms of Use;

• Confirm that You voluntarily provide Your personal data; and

• Give Your free, specific, informed, unconditional, and unambiguous consent to the collection, storage, processing, use, and sharing of Your personal data by the Company, strictly for the purposes disclosed in this Privacy Policy, in accordance with applicable law, including the DPDP Act & Rules.

Consent to receive promotional or marketing communications is separate and optional and is addressed under Section 8 of this Privacy Policy. Your consent to this Privacy Policy is not conditional on Your consent to receive marketing communications.

If You do not provide consent to this Privacy Policy, You may not be able to access and use those features or services of the Platform that require the processing of your personal data, and are requested to refrain from accessing or using the Platform.

You may withdraw Your consent at any time by contacting us at the details set out in Section 12 of this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal and may be subject to legal or contractual limitations. Where Your personal data has already been processed to generate anonymised, aggregated, or de-identified outputs as part of the Platform’s analytics or risk modelling functions, withdrawal of consent will not affect those outputs as they no longer constitute personal data attributable to You.

6. User Rights and Duties

In accordance with the DPDP Act & Rules, You have the following rights as a Data Principal:

• Right to access: to obtain a summary of Your personal data being processed by the Company and the purposes for which it is being processed;

• Right to correction: to request correction or updating of inaccurate or incomplete personal data;

• Right to erasure: to request deletion of Your personal data, subject to legal retention obligations;

• Right to grievance redressal: to have Your grievances addressed by the Company’s Grievance Officer in accordance with Section 12 of this Privacy Policy, and to escalate unresolved grievances to the Data Protection Board of India;

• Right to withdraw consent: to withdraw consent for processing at any time, subject to the limitations described in Section 5 of this Privacy Policy; and

• Right of nomination: to nominate another individual to exercise Your rights under this Privacy Policy in the event of Your death or incapacity, in accordance with Section 14 of the DPDP Act.

• The Company may request reasonable proof of identity before acting on any request made by You in respect of the above rights.

By using this Platform, You agree to:

• Provide authentic and updated information, including in respect of orders, delivery address, and size, fit or dietary preferences or other information voluntarily provided by You;

• Not impersonate any other individual and/or falsely misrepresent your affiliation with any person or entity; and

• Not register any false or frivolous grievance or complaint with the Company or the Data Protection Board of India

• Keep your login credentials confidential.

7. Security of Your Personal Data

Providing security to our Users is one of the important duties of the Company. The Company is equipped with reliable security systems to protect the valuable information of our Users. We have implemented reasonable technical, administrative, and organisational safeguards, including encryption protocols (such as SSL/TLS for data in transit), restricted access controls and other appropriate security measures to protect Your personal data against unauthorised access, misuse, disclosure, or destruction. We include several layers of security systems for our Platform to prevent any kind of damage. The Company is not responsible for the privacy or security practices of any third-party websites, apps or platforms linked from the Platform, and You should review their privacy policies before providing any personal data. While the Company implements reasonable security safeguards, no method of transmission over the internet or electronic storage is completely secure and the Company cannot guarantee absolute security.

8. Advertising

Where You have separately consented, the Company may use Your personal data to send promotional or marketing communications regarding its products, services, events or campaigns, strictly in compliance with applicable laws. Such use is entirely optional and is based on a separate, independent consent that is distinct from Your consent to this Privacy Policy, and You may opt out of promotional communications at any time by contacting us or by using the unsubscribe mechanism in any marketing communication.

The Company does not sell, rent or otherwise disclose Your personal data to third parties for their independent marketing, advertising or any other purpose.

9. Emails

The Company may send You service-related communications, including responses to enquiries, account notifications, and updates relating to the Platform. Where You have provided separate consent to receive promotional communications under Section 8 of this Privacy Policy, we may also send You marketing emails. You may opt out of marketing communications at any time. Opting out of marketing communications will not affect service-related communications necessary for the operation of Your account or the Platform.

10. Data Retention

We retain Your personal data only for so long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law, whichever is longer. As a general guide:

• Data submitted by Platform Users (Excluding order/transaction records) retained for 3 years from the date of collection or last interaction with the Company

• Order, transaction, and payment records are retained for a period in accordance with applicable tax, consumer protection, and accounting requirements under the applicable laws.

Upon expiry of the applicable retention period, we will securely delete or anonymise Your personal data to the extent permissible under the applicable law. Anonymised or aggregated data that cannot reasonably be used to identify You may be retained indefinitely for analytics and platform improvement purposes and to the extent permissible under the applicable law.

11. Updates To Privacy Policy

The Company reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in legal, regulatory, operational, or business requirements.

Where any modification materially changes the manner, purpose or scope of processing of Your personal data or otherwise requires a fresh consent under applicable law, we will notify to You through the Platform, by email, or through such other means as are reasonably likely to bring the changes to Your attention.

For non-material changes, and the amendments that do not require fresh consent under applicable law, we may notify You by updating this Privacy Policy and revising the "Last Updated" date. Your continued use of the Platform following such notification constitutes Your acknowledgement of the updated Privacy Policy.

If You do not agree to any amendment that requires Your consent, or otherwise do not agree with the updated Privacy Policy, You should discontinue using the Platform and any services that require the processing of Your personal data. You may also request closure of Your account by contacting the Grievance Redressal Officer using the details provided under Section 12 of this Privacy Policy.

12. Grievance Redressal

For queries, complaints, or grievance redressal or more information, please contact:

Name: Sanjay Nair

E-mail ID: grevianceofficer@playblue.com

Phone: _________________

Address:

Floor No.: 310 FORTUNE BUSINESS HUB

Building No./Flat No.: NR SATYAMEV ELYSIYM

Name Of Premises/Building: Sola

Road/Street: Sola

City/Town/Village: Ahmedabad

District: Ahmedabad

State: Gujarat

PIN Code: 380060

Note: Grievances will be acknowledged within such period as prescribed under applicable law of receipt and resolved within 30 days, or such other period as may be prescribed by the Data Protection Board of India. If You are not satisfied with the resolution of Your grievance, You have the right to escalate Your complaint to the Data Protection Board of India in accordance with the DPDP Act & Rules.

This Platform is not directed at individuals under the age of 18 years. If You are under 18 years of age, please do not use the Platform or provide any personal data without the consent, involvement or supervision of Your parent or legal guardian. If the Company becomes aware that it has inadvertently collected personal data from a child without the required consent, it will take appropriate steps to delete such data. If You believe a child's personal data has been collected, please contact the Grievance Redressal Officer at the details set out in Section 12 of this Privacy Policy.

Check Box content is as follows:

☐ I confirm that I have read and understood the Privacy Policy and Terms of Use of the Company.

☐ I voluntarily provide my personal data and give my free, specific, informed, unconditional, and unambiguous consent to the collection, storage, processing, and sharing of my personal data by the Company strictly for the purposes set out in the Privacy Policy, in accordance with applicable law.

☐ I understand that promotional communications are optional and I may withdraw my consent at any time.

☐ I separately and optionally consent to being contacted by Play Blue Sports Private Limited via email, SMS, phone call, and WhatsApp for promotional and marketing communications relating to the Platform and the Company's offerings. I understand this consent is optional and independent of my consent to the Privacy Policy, and I may withdraw it at any time.