Privacy Policy

At GRM Overseas Ltd.(“GRM”, “we”, “us”, or “our”), accessible via grmrice.com and associated web properties, the privacy of our visitors and clients is of paramount priority. This Privacy Policy document outlines the types of information collected and recorded by our platform and how we manage it.

This Privacy Policy applies to our online activities and is valid for visitors to our website with regards to information shared and/or collected on GRM digital properties. This policy does not apply to offline channels or non-digital interactions except where specifically referenced.

1. Consent

By accessing or using our website, submitting inquiries, or engaging with our investor or product portals, you hereby consent to our Privacy Policy and agree to its terms and data processing practices.

2. Information We Collect

The personal information that you are requested to provide, and the purposes for which it is required, will be transparently indicated at the point of collection:

• Direct Inquiries & Contact: If you reach out to our corporate office, investor relations, or export desk via web forms or email, we may receive your full name, email address, phone number, company/organization name, country of operation, and the content of your message.
• Career Applications: When applying for openings at GRM, we receive your resume/CV, educational credentials, work experience history, and contact details.
• Investor Inquiries: When downloading statutory filings, subscribing to circulars, or submitting queries to the company secretary.

3. How We Use Your Information

We process collected data in accordance with legitimate business purposes, including:

• Providing, maintaining, and enhancing the speed and security of our web portal.
• Responding promptly to export orders, private-label manufacturing briefs, and distribution inquiries.
• Communicating corporate announcements, quarterly earnings, and statutory SEBI investor disclosures.
• Assessing career candidates for recruitment at our Delhi headquarters or Panipat milling complex.
• Preventing cyber threats, fraudulent activities, and unauthorized access to company systems.

4. Server Log Files & Technical Diagnostics

GRM follows standard industry practices for log file generation. Information logged includes Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), date/time stamps, referring/exit pages, and session telemetry. These metrics are not linked to personally identifiable records and are evaluated strictly for diagnostic integrity, performance monitoring, and regional access optimization across 65+ export nations.

5. Cookies & Tracking Technologies

Our website utilizes essential session cookies and performance telemetry to maintain user preferences and ensure smooth navigation through our product catalog and investor tables. You may choose to disable or block cookies through your browser settings at any time without forfeiting access to our public disclosures.

6. CCPA Privacy Rights (California Consumer Privacy Act)

Under the California Consumer Privacy Act (CCPA), international visitors from California are entitled to:

• Request disclosure of the specific categories and pieces of personal data collected about them.
• Request permanent deletion of any collected personal data.
• Request that GRM not sell consumer personal data. (GRM does not and will never sell personal user data to third parties).

Upon receiving a verified CCPA request, we will respond within 30 days. Contact our privacy team at info@grmrice.com.

7. GDPR Data Protection Rights (EU / UK)

For our trading partners, buyers, and visitors within the European Economic Area and United Kingdom, you hold the following statutory data rights:

• Right of Access: Request copies of your personal data records held by GRM.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request suspension of data processing activities.
• Right to Data Portability: Request transmission of your records to another entity.

8. Protection of Children's Information

Our services are directed strictly to commercial buyers, agricultural stakeholders, and adult investors. We do not knowingly collect personal identifiable information from children under 13 years of age. If you believe a child has provided personal details on our portal, please contact us immediately to facilitate immediate deletion.