DigiBPREP Solution Privacy Policy

Effective Date: 24th April 2026

Digital solution for BINA Petchem Refinery expansion Project (“DIGIBPREP”, “we”, “us”, or “our”) respects the privacy of our users (“user” or “you” or “your”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application (the “Application”).

Please read this Privacy Policy carefully.

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE APPLICATION.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Application after the date such revised Privacy Policy is posted.

1. How Your Personal Data Will Be Processed by DIGIBPREP

The protection of your Personal Data has the highest priority for us. Personal data includes any information relating to an identified or identifiable natural person (“Personal Data” or “PII”). In this Privacy Policy, we inform you about the type, scope and purpose of collecting personal data by DIGIBPREP application and how we deal with these data.

Personal Data processed by DIGIBPREP will be owned by Bharat Petroleum Corporation Limited (“BPCL”) as a Data Controller / Fiduciary. DIGIBPREP service provider (LTM), as a Data Processor, processes your Personal Data as per the instructions of BPCL. For details on processing of your personal data by DIGIBPREP as required by BPCL please refer to Privacy Policy | Official Website of BPCL, India.

The DIGIBPREP application is hosted using AWS Cloud services. All data other than PII data received from BPCL is stored in AWS storages. Personal Data is only maintained during the session and purged after that.

LTM is the data processor and [third-party PII processor] is sub-data Processor.

2. Where Is My Data Derived From and Which Data Is Processed?

We collect only the minimum information required for legitimate business and operational purposes.

2.1 Personal Information

2.2 Usage and Technical Information

2.3 Location Information (If Enabled)

3. What Is My Data Used For (Purpose of Processing)?

The BPCL DIGIBPREP App is an enterprise application designed to support digital preparedness, operational insights, training, and process digitisation across BPCL locations. The App is intended only for authorised users such as BPCL employees, contractors, and approved partners.

4. What Is the Legal Basis of Processing My Data?

Processing due to performance of contract

We have entered into a contract with BPCL for BPCL to use the DIGIBPREP application and its related services. DIGIBPREP uses business functions such as Control Tower, Project Management Information System, Digital Safety Management System, Digital Quality Inspection System to fulfil the business requests.

5. Is My Data Shared?

Your data is not shared with any person or entity beyond your organization, BPCL-approved service providers (e.g., IT service partners), project stakeholders, including EIL, PMC/EPCM consultants, and registered contractors, and DIGIBPREP application.

All data sharing is governed by BPCL’s information security and data governance policies.

6. How Long Is My Data Stored?

We store your Personal Information in accordance with applicable laws, which means that we keep your Personal Information for as long as necessary to provide you with our services, or for the term of any contract executed with us, or for as long as may be required under applicable law.

7. Security of Your Information

We use administrative, technical, and physical security measures to help protect your Personal Data and we follow measures such as masking and encryption while displaying user data. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

8. Policy for Children

We do not knowingly solicit information from or market to children under the age of 18. If you become aware of any data we have collected from children under age 18, please contact us using the contact information provided below.

9. What Rights Do I Have?

BPCL have the responsibility of ensuring that you review the accuracy of information provided by you and contact us in case of discrepancies, or in case you wish to discontinue the use of our Services. You have the following rights about your Personal Information:

Your subject rights can be exercised by visiting Privacy Policy | Official Website of BPCL, India.

10. Contact Us

If you have any questions about this Privacy Policy, please contact the Data Protection Officer / office of BPCL by visiting Privacy Policy | Official Website of BPCL, India.

In case of any queries or complaints with respect to DIGIBPREP, you may write to BPCL.BprepSupport@ltimindtree.com.