The Indian Hotels Company Limited (“IHCL”’) — Global Privacy Policy

At IHCL, its affiliates and subsidiaries (hereinafter collectively referred to as “IHCL’, “we” or “us” or “our”), we endeavor to provide our guests outstanding services and
experiences in our hotels and luxury residences around the world. We value your business and your faith in us in delivering you a superior level of service.

We recognize that privacy is important to our guests, and hence our Global Privacy Policy explains our practices regarding personal information we collect when you visit
or use our hotels, restaurants, bars, spas, salons, etc. and our website, mobile applications, or other online products and services or when you fill up a form and become
member of our loyalty programs. We shall protect your personal data, to keep it secure as per applicable privacy and data protection laws.

It also describes the purposes for which we collect that personal information, the other parties with whom we may share it and the measures we take to protect the
security of your data. It also tells you about your rights and choices with respect to your personal information, and how you can contact us about our privacy practices.

You are advised to carefully read this Privacy Notice before using or availing any of our products and/or services.

1. DEFINITIONS

In this Privacy Notice, the following definitions are used:

Data

personal information, including sensitive personal information and special category personal data (as defined under Data Protection Laws) about you, which we collect,
receive or otherwise process in connection with your use of our stores, website and/or mobile application.

Cookies

a small file placed on your device by our website or mobile application when you either visit or use certain features of our website or mobile application. A cookie generally

allows a website or mobile application to remember your actions or preference for a certain period of time.

Data Protection Laws
any applicable law for the time being in force relating to the processing of Data.

Partners
select third parties (including Tata Group Entities) with whom we have contracts for the businesses described in this Privacy Notice.

Service Providers
includes entities which provide services to IHCL and to whom we may disclose your Data for a specific purpose pursuant to a written contract.

The Indian Hotels Company Limited (“IHCL”), , a company incorporated in India whose registered office is at Mandlik House, Mandlik road, Colaba, Mumbai — 400 001

Tata Group Entity
Tata Sons Private Limited, and its subsidiaries, affiliates, associate companies and joint venture companies.

User or you
the natural person who accesses our services , websites or mobile application.

2. WHAT DATA DO WE COLLECT ABOUT YOU

IHCL collects Data for various purposes set out in this Privacy Notice.
This Data includes, without limitation, the following categories:
(a) Contact information: first and last name, email address, postal address, country, phone number and other similar contact data.

(b) Financial information: payment instrument information, transactions, transaction history, preferences, method, mode and manner of payment, spending pattern
or trends, and other similar data.

Technical information: website, device and mobile app usage, Internet Protocol (IP) address and similar information collected via automated means, such as cookies, pixels
and similar technologies. This may include the information mandated by the law enforcement agencies.

(c) Product and service information: Your account membership number, registration information, and program-specific information, when you request products
and/or services directly from us or participate in marketing programs.

(d) Your reviews, feedback and opinions about our products, programmes and services.

(e) Loyalty programme information: your loyalty membership information, account details, profile or password details and any frequent flyer or travel partner
programme affiliation.

(f) Transaction information: date of the transaction, transaction amount, transaction history and related details;

(g) Other information (which may include special category personal data): Age, sex, date of birth, marital status, nationality, details of government identification
documents provided, occupation, ethnicity, religion, travel history or any other personal information provided in responses to surveys or questionnaires.

3. HOW WE COLLECT DATA

We collect Data in the following ways:

Information You Give Us: We receive and store any information you enter on our website or mobile application or give us in any other way (e.g., at our outlets, stores,
hotels, kiosks). Please see the section below, titled “Data Shared by You” for more information.

Automatic Information We Collect: We use “cookies”, pixels and similar technologies to receive and store certain types of information whenever you interact with us.
Please see the section below, titled “Data That is Collected Automatically” for more information.

E-mail Communications: We often receive a confirmation (if your device supports such capabilities) when you open e-mail from us or click ona link in the e-mail. You
can choose not to receive marketing emails from us by clicking on the unsubscribe link in any marketing email.

Automatic Information We Collect from Other Websites: We receive and store certain types of information when you interact with third-party websites that use our
technology or with whom we have a specific agreement.

Information from Other Sources: We may obtain information from other sources. An example of this is when you authorize a third-party website (such as the website
of another Tata Group Entity) to interact directly with our website or mobile application to provide or receive information about you. In that case, we may receive
information to identify your account with that website.

Information Previously Provided to Tata Group Entities: Where you have shared any information previously with any of the Tata Group Entities and such Tata Group
Entity is permitted to further share such information, it will share such information with us. If such information is sensitive personal information or special category

personal data, the Tata Group Entity will only share such information with us with your consent.

You can make choices about our collection and use of your Data. For example, you may want to access, edit or remove your Data on our website or mobile application.
When you are asked to provide Data, you may decline. For more information, please see the section below, titled “Your Rights and Choices”.

4. DATA SHARED BY YOU

IHCL may collect your Data in several ways from your use of our stores, website or mobile application. For instance:

(a) when you register with us to receive our products and/or services;

(b) when you conduct a transaction with us or attempt a transaction at our stores, on our website or mobile application;
(c) when you complete surveys conducted by or for us;

(d) when you elect to receive any communications (including promotional offers) from us;

(e) from the information gathered by your visit to our stores, website or mobile application;

(d) process, disclose, transmit, and/or share the Data with Tata Group Entities, and other third parties which have business or contractual dealings with us;