10.1 EU Buyers — GDPR Rights (Regulation (EU) 2016/679)

▸ Right of Access (Art. 15): Obtain a copy of all personal data we hold about you.

▸ Right to Rectification (Art. 16): Ask us to correct inaccurate or incomplete personal data.

▸ Right to Erasure / 'Right to be Forgotten' (Art. 17): Ask us to delete your personal data where there is no overriding legal ground to retain it.

▸ Right to Restriction of Processing (Art. 18): Ask us to restrict processing of your data in certain circumstances.

▸ Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.

▸ Right to Object (Art. 21): Object to processing based on legitimate interests. You have an absolute right to object to direct marketing.

▸ Right not to be subject to Automated Decision-Making (Art. 22): TICC does not use automated decision-making.

▸ Right to Lodge a Complaint: Lodge a complaint with your national supervisory authority (e.g., CNIL — France, BfDI — Germany).

10.2 UK Buyers — UK GDPR Rights (UK GDPR + Data Protection Act 2018)

UK buyers have the same rights as EU buyers listed above. The supervisory authority for the UK is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website: ico.org.uk.

10.3 California (USA) Buyers — CCPA/CPRA Rights

▸ Right to Know: Know what personal information we collect, use, disclose, and share about you.

▸ Right to Delete: Request deletion of personal information, subject to legal exceptions.

▸ Right to Correct: Request correction of inaccurate personal information.

▸ Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioural advertising.

▸ Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary for the B2B transaction.

▸ Right to Non-Discrimination: Exercise your rights without being discriminated against in service or pricing. Authorised Agent: You may submit a CCPA request through an authorised agent with written proof of authorisation.

10.4 Canadian Buyers — PIPEDA Rights

Canada's PIPEDA and applicable provincial privacy laws grant you the right to access and correct personal information we hold about you, and to complain to the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca. We apply PIPEDA's 10 fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use/disclosure/retention, accuracy, safeguards, openness, individual access, and challenging compliance.

10.5 Australian Buyers — Privacy Act 1988 (Australian Privacy Principles)

Australian buyers are protected by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). You have the right to access personal information (APP 12) and request correction (APP 13). If unhappy with our handling of your data, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au after first giving us the opportunity to resolve the matter.

10.6 India — Digital Personal Data Protection Act 2023 (DPDPA)

As a Data Fiduciary under DPDPA 2023, TICC is obligated to: (a) process your personal data only for permitted purposes; (b) maintain reasonable security safeguards; (c) notify the Data Protection Board and affected individuals in the event of a personal data breach; (d) erase personal data when the purpose is fulfilled; and (e) establish a grievance redressal mechanism. As a Data Principal, you have the right to access, correct, or erase your data and raise grievances. Contact our Grievance Officer at hello@theinduscraftco.com with subject line 'DPDPA Grievance'.