Nike Privacy Policy Help Enjoy 15% Off On The Nike App. Use: APP15Download NowT&Cs NIKE.IN and NIKE APP PRIVACY POLICY Updated 28th January, 2026 This Privacy Policy outlines Nykaa’s approach to Data Protection and Privacy to fulfil its obligations under the applicable laws and regulations in India including, but not limited to, the Digital Personal Data Protection Act of 2023 and applicable rules. This Privacy Policy describes the personal data collected or generated (processed) when you interact through Nike.in or mobile applications (for the purposes of this Policy, collectively defined as the “Platform”). By providing consent when providing Personal Information on our Platform, you expressly agree to be bound by this Privacy Policy and agree to be governed by the laws of India. If you do not consent, you may not be able to use all or some of the features on our Platform. In this Privacy Policy, the expressions ‘Personal Information’, ‘Data Principal’, ‘Data Fiduciary’, and ‘Processing’ shall have the meanings given to them in the applicable privacy laws. This policy also explains how your personal data is used, shared and protected, what choices you have relating to your personal data and how you can contact us. We are committed to treating data privacy seriously. It is important that you know exactly what we do with your Personal Information. Throughout this document, “we”, “us”, “our”, “ours”, “Nykaa” refer to Nykaa Fashion Limited Wherever we have said ‘you’ or ‘your’ or ‘Customer’, this means YOU. WHO WE ARE Nykaa Fashion Limited is a company incorporated and registered under the provisions of the Companies Act, 2013 and having its registered office at 104, Vasan Udyog Bhavan, Sun Mill Compound, Lower Parel, Mumbai 400 013. Nike India Private Limited (“Nike”) has its registered office at Ground and First Floor, Olympia Building, No.66/1, Bagmane Tech Park, CV Raman Nagar, Bangalore - 560093, Karnataka, India. Nike has appointed Nykaa to operate the Platform for the sale of Nike brand products online to consumers with delivery addresses in India. Nike will be the sole Data Fiduciary of your data when you use the Nike Training Club and Nike Run Club apps. If you wish to address any issues regarding these apps, click here to access Nike's privacy policy. ROLES WE PLAY We play the role of a Data Fiduciary when we collect and process Personal Information about you. We play the role of a Data Processor when we collect and process Personal Information on behalf of another Data Fiduciary. OUR COMMITMENT We commit to protecting your privacy and hence our Personal Information handling practices are continually reviewed to ensure compliance with the applicable privacy laws and regulations. PERSONAL INFORMATION GATHERED BY US The information we learn and gather from you, personal or otherwise, is used to register you, to permit you to use the app, undertake transactions (including to facilitate and process payments), communicate with you, convey any promotional offers, services or updates associated with this Platform, and generally maintain your accounts with us. We also use this information to customize your experience and improve the Platform. INFORMATION YOU GIVE US: We receive and store any information you provide while using the Platform or give us in any other way. You can choose not to provide certain information, but then you may not be able to use some or all features of the Platform. We use the information that you provide for such purposes as opening your account, processing your transactions, responding to your requests, and communicating with you. INFORMATION WE COLLECT ABOUT YOU: We receive and store certain types of information whenever you interact with us: This personal data includes your: Contact details including name, email, telephone number and shipping and billing address; Personal details including gender, date of birth and purchase history; Payment or credit card information; Images, photos and videos; or Personal preferences including your wish list as well as marketing and cookie preferences. When interacting with our Platform, certain data is automatically collected from your device or web browser. More information about these practices is included in the “ABOUT COOKIES AND SIMILAR TECHNOLOGIES” section of this Privacy Policy below. INFORMATION FROM OTHER SOURCES: We may receive information about you from other sources, including publicly available databases, marketing partners, and other third parties. This information helps us to understand your preferences, improve the relevance of our communications, and personalize your experience. For example, we may use this data to correct and update our records, verify information you've provided, and make your next purchase and delivery experience more efficient. CONSENT By using the Platform and/ or by providing your information, you agree and consent to us collecting, storing, processing, transferring, using and sharing of your personal information (including sensitive personal information as per applicable law) that you disclose on the Platform with third parties or service providers for the purposes set out and in accordance with this Privacy Policy. PURPOSES OF GATHERING YOUR PERSONAL INFORMATION We use your personal information to operate, provide, develop, and improve the products and services. These purposes include: Providing the features of the Platform and the services requested by the Consumer, including account registration. When you use our Platform, we will use your personal data to provide the requested product or service. For example, if you make a purchase on Nike.in, we will use the contact information you give us to communicate with you about the purchase. If you contact our consumer services, we will use information about you, such as delivery or payment information, or the product you have purchased to help you resolve a problem or question. In many cases, to use particular features within our Platform you may need to provide us with additional data or additional consent to use particular data in a certain way. For example to share content on social media, you may be required to provide your social media account credentials to sign in. When you use our Apps, we rely on your consent for processing and for certain limited purposes to fulfill our contract with you (for example, for in-App purchases). Communicating information about relevant products, services, events, and other promotional purposes. When you consent, we will send you marketing communications and news concerning products, services, events and other promotions that may be of interest to you. You can opt-out at any time after you have given your consent. To operate, improve, and maintain business, products, and services. We use the personal data you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, audits and other internal functions. We may use personal data about how you use our products and services to enhance your user experience and to help us diagnose technical and service problems and administer our Platform. When you purchase products from our Platform, we need your personal data to fulfill our contract with you. For example, we need your payment and contact details to deliver your order. To protect our or others’ rights, property or safety. We may also use personal data about how you use our Platform to prevent, detect or investigate fraud, abuse, illegal use, violations of our Terms of Use, and to comply with court orders, governmental requests or applicable law. We also rely on other legal grounds, like certain legitimate uses to process to protect our or others' rights, property or safety, to comply with a legal obligation, or to protect your vital interests. For general research and analysis purposes. We use data about how our visitors use our Platform and services to understand customer behavior or preferences. For example, we may use information about how visitors to our Platform search for and find products to better understand the best ways to organize and present product offerings in our storefront. PURPOSE OF PERSONAL INFORMATION DISCLOSURE We may share your personal data with select third parties, including Nykaa group companies, for the below purposes including but not limited to: Order processing - For instance using a third-party order management system to track and document the orders you place with us. Delivering packages - For instance using third party delivery service providers to ensure delivery of orders placed by You. Sending emails, communication and marketing assistance - To optimize our methods and channels of communication with You. Third-party targeted advertising providers that provide personalization and tailored advertising services to us. We use such services to match information that we hold with personal data in their database to create custom audiences and tailor advertising to your interests on the Internet, including social media, as permitted by applicable law. Processing payments - To enable secure and convenient modes of payment processing. Providing customer support - To collate Your queries received via different modes and ensure timely resolution. Analyzing data to continuously better our services and for prevention, detection, mitigation, and investigation of fraudulent or illegal activities related to our products and services. We have put in place appropriate contracts and personal data protection obligations on the third-parties engaged by us, and they are subject to strict contractual obligations when processing your personal data. REASONS FOR DISCLOSING YOUR PERSONAL INFORMATION TO OTHER PARTIES: We may disclose your Personal Information to others where it is lawful to do so including where we or they: Have a legal obligation to do so, e.g. to assist with detecting and preventing fraud, Have requirement in connection with regulatory reporting, litigation or asserting or defending legal rights and interests, Have a legitimate business reason for doing so, Want to send you information and promotional material regarding our products and services, Have asked you for your consent to share it, and you’ve agreed, Improve your online experience for using our product, To protect the safety of any person, or to protect our rights or the rights of those who use our products & services. We have put in place appropriate contracts and personal data protection obligations on the third-parties engaged by us, and they are subject to strict contractual obligations when processing your personal data. TO WHOM YOUR PERSONAL INFORMATION MAY BE DISCLOSED: We may disclose your Personal Information for the above purposes to other parties including: Nike entities for the purposes and under the conditions outlined above. Other group companies and any subcontractors, agents or service providers who work for us or provide services, they may have access to your personal data however may not use it for other purposes, to us or group companies (including their employees, sub-contractors, service providers, directors and officers). Law enforcement authorities, government authorities, courts, dispute resolution bodies, our regulators, auditors and any party appointed or requested by our regulators to carry out investigations or audits of our activities to defend ourselves against third-party claims, and assist in the prevention or investigation of fraud. Statutory and regulatory bodies and authorities (including the government) investigating agencies and entities or persons, to whom or before whom it is mandatory to disclose the Personal Information as per the applicable law, courts, judicial and quasi-judicial authorities and tribunals, arbitrators and arbitration tribunals. Overseas regulators. Anybody else that we’ve been instructed to share your Personal Inform…