Introduction

Larsen & Toubro-Vyoma ("Vyoma", "Company", "we", "our", or "us"), a part of the Larsen & Toubro Group, is committed to safeguarding the privacy and Personal Data of individuals who access, browse, or use our website.

For the purposes of this Website Privacy Policy, Vyoma acts as a Data Fiduciary (or Data Controller, where applicable) in relation to Personal Data being collected through the Website.

This Website Privacy Policy ("Policy") describes how we collect, use, process, store, disclose, and protect Personal Data obtained through your interaction with our website (https://larsentoubrovyoma.com), including all associated webpages and digital interfaces (collectively referred to as the "Website").

For the purpose of this Policy, "Personal Data" means any information relating to an identified or identifiable natural person ("Data Principal"), including but not limited to information such as name, contact details, location data, online identifiers, and any other information that can be used to identify an individual, either directly or indirectly.

This Policy is intended to provide transparency regarding the Personal Data we collect, the purposes for which it is processed, and the rights available to individuals under the applicable data protection laws.

By accessing or using our Website, or by voluntarily providing Personal Data through the Website, you acknowledge that your Personal Data will be processed in accordance with the terms of this Policy.

This Website Privacy Policy was last updated on 21st May 2026.

Applicability

This Website Privacy Policy applies to all individuals who access, browse, interact with, or otherwise use the Website of Larsen & Toubro-Vyoma, including but not limited to:

  • Visitors accessing publicly available content on the Website;
  • Users submitting information through contact forms, enquiry forms, or other communication channels; and
  • Individuals interacting with Vyoma through digital channels, including email or other communication features made available on the Website.

This Policy applies to the processing of Personal Data collected through the Website in the course of:

  • User interactions such as form submissions and communications;
  • Automated data collection through cookies, analytics tools, and similar technologies; and
  • Technical and security related monitoring of the Website.

This policy applies irrespective of the method of access, including desktop, mobile devices and other digital platforms.

Geographical Applicability

This Policy applies to the processing of Personal Data:

  • Within the territory of India, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act");
  • Outside India, where such processing relates to the offering of services to individuals or monitoring of behaviour through the Website, in accordance with the applicable global data protection laws, including the General Data Protection Regulation ("GDPR"), where applicable.

Third Party Websites and External Links

The Website may contain links to third-party websites, services, or applications that are not owned or controlled by Larsen & Toubro Vyoma.

This Policy applies solely to the Personal Data collected and processed by Vyoma through the Website. It does not apply to third-party platforms or services. Vyoma is not responsible for the privacy practices, content, or policies of such third-party websites.

Users are advised to review the privacy policies of such third-party websites before providing any Personal Data or interacting with them.

Data Fiduciary Role

This Policy applies solely to Personal Data processed by Vyoma in its capacity as a Data Fiduciary. Where Vyoma may process Personal Data on behalf of its customers in the capacity of a Data Processor (for example, in connection with data center, cloud or managed services), such processing is governed by the applicable contractual arrangements, including data processing agreements executed with such customers, and is outside the scope of this Policy.

Limitation of Applicability

This Policy does not apply to:

  • Personal Data processed in offline contexts or through channels not related to the Website;
  • Personal Data processed by Vyoma on behalf of its customers as part of its infrastructure, cloud, or managed service offerings; and
  • Processing activities governed by separate privacy notices or contractual agreements.

Personal Data We Collect & How We Collect It

Vyoma collects Personal Data in a transparent and lawful manner, depending on how you interact with our Website. The categories of Personal Data collected, along with the methods of collection, are set out below.

Personal Data Provided Directly by You

We collect Personal Data that you voluntarily provide when you interact with us through the Website, including when you submit enquiries or communicate with us.

  • First Name and Last Name;
  • Email address;
  • Phone number;
  • Organization / company name;
  • Designation or job title;
  • Location (city, country);
  • Enquiry type or subject of request;
  • Message or content of the communication; and
  • Any additional information you choose to provide in correspondence or submissions.

How we collect it:

  • Submit a "Contact Us" or "Enquiry" form; and
  • Engage with us through email or other communication channels.

Technical and Usage Data (Automatically Collected)

When you access or use the Website, certain technical information is automatically collected through your device, browser, or system. ("Technical and Usage Data")

This may include:

  • Internet Protocol (IP) address;
  • Device type (mobile, desktop, tablet);
  • Browser type and version;
  • Operating system;
  • Date and time of access;
  • Pages visited and navigation paths within the Website;
  • Session duration and time spent on pages;
  • Referring source (eg, organic search, paid campaigns, social media, direct access); and
  • Approximate geographical location (derived from IP address).

How we collect it:

  • Through cookies and similar technologies;
  • Through server logs and system generated records; and
  • Through analytics tool such as Google Analytics and performance monitoring tools.

Analytics and Tracking Data

We use analytics and performance monitoring tools to better understand how users interact with the Website and to improve its functionality and performance.

Currently, this includes:

  • Google Analytics (GA4) - used to analyse usage patterns, user journeys, and Website performance; and
  • Google Search Console - used for monitoring Website visibility and performance in search engines.

These tools may collect Technical and Usage Data as described above. Users may manage or limit such data collection through cookie settings and browser controls.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your interactions with the Website.

This may include:

  • Session related information;
  • User preferences and settings;
  • Website usage analytics; and
  • Performance and diagnostic information.

Detailed information regarding the types of cookies used, their purpose, and how you can manage your preferences is provided in our Cookie Policy.

Communication and Interaction Data

We may collect and retain records of communications when you interact with us through the Website, including:

  • Emails and correspondence;
  • Customer support queries;
  • Feedback, complaints, or requests; and
  • Records of interactions submitted via online forms.

How we collect it:

  • Through Website forms;
  • Through email communication; and
  • Through other communication channels provided on the Website.

Data Collected from Third-Party Sources

In limited cases, we may receive limited Personal Data from third-party sources, such as:

  • Business partners or service providers;
  • Publicly available professional platforms (e.g., business directories); and
  • Analytics providers.

How we collect it:

  • Through authorized third-party sharing or publicly available sources, in compliance with the applicable laws.

Security and Infrastructure Data

To maintain the security and integrity of our Website and supporting infrastructure, we may collect certain Technical and Usage Data, including:

  • Network activity logs;
  • System access and usage logs; and
  • Security monitoring and threat detection data.

How we collect it:

  • Through network monitoring systems;
  • Through security tools and logs; and
  • Through automated threat detection mechanisms.

Sensitive Personal Data

Vyoma does not intentionally collect sensitive Personal Data through the Website (such as financial information, health data, biometric data, or government-issued identification numbers), unless specifically required and permitted under the applicable law.

Users are advised not to submit sensitive Personal Data through the Website unless expressly requested.

Collection of Data of Minors

The Website is not intended for use by individuals under the age of 18 years.

Vyoma does not knowingly collect Personal Data from children without verifiable consent of a parent or legal guardian, as required under the applicable data protection laws, including the DPDP Act.

If we become aware that Personal Data of a child has been collected without such consent, we will take appropriate steps to delete such information in accordance with the applicable legal requirements.

Users are advised not to submit Personal Data of children through the Website unless such submission is explicitly required and permitted.

Purpose of Processing

Vyoma processes Personal Data collected through the Website only for specific, lawful, and legitimate purposes. Personal Data is not used for purposes that are incompatible with those described in this Policy, unless required or permitted under the applicable law.

The purposes for which Personal Data may be processed include:

Responding to Enquiries and Requests

We process Personal Data submitted through contact forms or communication channels to:

  • Respond to your queries, requests, or feedback;
  • Provide information about our services, offerings, and solutions; and
  • Communicate with you regarding your enquiries.

We also send system generated acknowledgement emails confirming the receipt of enquires. Such communications are transactional in nature and are necessary to respond to user-initiated requests. These communications do not constitute marketing communications.

Providing Website Functionality and User Experience

We process Technical and Usage Data to:

  • Enable and maintain the operation of the Website;
  • Ensure content is presented effectively across devices and platforms; and
  • Improve navigation, usability, and performance.

Website Analytics and Improvement

We process technical and usage data through analytics tools (such as Google Analytics and performance monitoring tools) to:

  • Understand how uses interact with the Website;
  • Analyse traffic patterns and user behaviour;
  • Monitor Website performance and trends; and
  • Improve Website content, structure, and overall user experience.

Security, Monitoring, and Fraud Prevention

We process personal and Technical Data to:

  • Detect, prevent, and investigate unauthorized access, misuse or potential security threats;
  • Monitor the integrity and security of the Website and underlying systems; and
  • Ensure the security and integrity of our systems and services.

Compliance with Legal and Regulatory Obligations

We may process Personal Data to:

  • Comply with the applicable laws, regulations, and regulatory requirements;
  • Respond to lawful requests from governmental or regulatory authorities; and
  • Exercise or defend legal claims.

Business Communication and Marketing

Where permitted under the applicable law subject to user preferences, we may process Personal Data to:

  • Share updates regarding our services, offerings, or industry insights; and
  • Inform you about events, offerings, or industry insights.

Users will have the option to opt out of such communications at any time.

Retargeting and Advertising (Where Applicable)

We may use analytics and advertising platforms (such as Google Ads or LinkedIn) to run retargeting or remarketing campaigns, subject to the applicable consent requirements.

This may involve tracking Website interactions to deliver relevant content or advertisements. Such processing is carried out only where permitted under the applicable law and, where required, on the basis of user consent.

Managing Business Relationships

We may process Personal Data to:

  • Maintain and manage interactions with prospective customers, partners, or stakeholders; and
  • Facilitate business engagement and relationship management.

Vyoma ensures that Personal Data is processed only for the purposes specified at the time of collection or otherwise permitted under the applicable law. Where processing is required for a new or additional purpose, we will obtain consent or provide appropriate notice, as required under the applicable data protection laws.

Legal Basis for Processing

Vyoma processes Personal Data collected through the Website in accordance with the applicable data protection laws, including but not limited to the DPDP Act and the GDPR, where applicable.

Depending on the nature of the interaction and processing activity, we rely on one or more of the following legal bases:

Consent

We process Personal Data based on your consent where you voluntarily provide such data through the Website, including:

  • Submission of contact or enquiry forms; and
  • Acceptance of cookies and tracking technologies (where applicable).

Where processing is based on consent, such consent is obtained in accordance with the applicable law and may be withdrawn by you at any time.

Legitimate Uses under the Applicable Law

We may process certain Personal Data without explicit consent where such processing is necessary for legitimate uses as permitted under the applicable law, including:

  • Ensuring the security and integrity of the Website and systems;
  • Detecting and preventing fraud, unauthorized access, or misuse;
  • Maintaining and improving Website functionality and performance; and
  • Responding to user-initiated communications or requests.

Performance of Pre-Contractual or Contractual Measures

We may process Personal Data where necessary to:

  • Respond to enquiries relating to our services;
  • Facilitate potential business engagements; and
  • Provide information requested by users prior to entering into a business relationship.

Compliance with Legal Obligations

We may process Personal Data where necessary to:

  • Comply with the applicable legal or regulatory requirements;
  • Respond to lawful requests from government or regulatory authorities; and
  • Exercise or defend legal claims.

Vyoma ensures that Personal Data is processed only on a valid legal basis and strictly for the purposes specified in this Policy. Where required under the applicable law, we will obtain your consent prior to processing Personal Data, including for certain types of cookies or marketing-related activities.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Website to enhance user experience, enable core functionality, provide embedded content, and, where applicable, analyse Website performance and deliver relevant content.

Cookies are small text files that are placed on your device when you visit a website. These technologies enable the Website to recognise your device and remember certain information about your interactions.

Types of Cookies Used

We use the following categories of cookies on our Website:

  • Functional cookies - used to remember user interactions such as form submissions and prevent repeated prompts; and
  • Media/embedded content cookies - set by third-party services (such as YouTube) to enable video playback and store user preferences.

In addition, the following cookies may be implemented in the future:

  • Analytics and performance cookies - such as Google Analytics and Google Tag Manager, used to analyse Website usage and performance; and
  • Marketing and advertising cookies - such as Meta Pixel and LinkedIn Insight Tag, used for advertising, remarketing, and campaign measurement.

Use of Cookies

  • Remember user interactions with forms and Website features;
  • Enable playback of embedded media (e.g., YouTube videos);
  • Understand how users interact with the Website (once analytics tools are implemented);
  • Deliver relevant content or advertisements (once marketing tools are implemented);
  • Maintain the security and proper functioning of the Website; and

Cookies may process limited Personal Data where necessary. Such data is used only for the purposes described in this Policy and in accordance with the applicable data protection laws.

Consent and Control

Where required under the applicable law, cookies (other than those necessary for Website functionality) will be deployed only with your consent.

Analytics and marketing cookies are not currently active and will be implemented in the future. When implemented, such cookies will be deployed only after obtaining your consent through the cookie consent mechanism available on the Website.

You may manage your cookie preferences through:

  • The cookie banner displayed on the Website; and
  • Your browser settings, which allow you to block or delete cookies.

Please note that disabling certain functional cookies may impact your experience, including access to content that requires prior form submission.

Third-Party Cookies

Some cookies used on the Website are set by third-party providers (such as Google/YouTube). These third parties may process data in accordance with their own privacy policies, and Vyoma does not control their processing practices.

Future Use of Tracking Technologies

Larsen and Toubro Vyoma may implement additional tracking technologies, including advertising or retargeting tools, to enhance Website functionality or deliver relevant content, subject to the applicable legal requirements.

Details of such technologies will be updated in this Policy and/or the Cookie Policy once implemented.

Further Information

For detailed information on the cookies used on the Website, including specific cookie names, duration, and purposes, please refer to our Cookie Policy.

Data Sharing and Disclosure

Vyoma may share Personal Data collected through the Website with third parties in a controlled and lawful manner, only to the extent necessary for the purposes described in this Policy.

We may share Personal Data with the following categories of recipients:

Group Companies and Internal Functions

Personal Data may be shared with Larsen & Toubro Limited, its group companies, and internal corporate functions (including corporate IT teams) for purposes such as Website administration, system maintenance, security monitoring, and internal business operations.

Service Providers and Vendors

We may share Personal Data with third-party service providers who support the operation of the Website and our business functions, including:

  • Analytics providers such as Google Analytics (GA4);
  • Website performance and monitoring tools such as Google Search Console;
  • Website hosting and infrastructure providers supporting the Website environment; and
  • Other technology or service providers engaged for Website functionality and support.

Such third parties are contractually obligated to process Personal Data only on our instructions and to maintain appropriate confidentiality and security measures.

Advertising and Marketing Platforms (Where Applicable)

Where applicable and subject to user consent, Personal Data may be shared with advertising and marketing platforms (such as Google Ads or LinkedIn) for the purpose of running campaigns, including retargeting or remarketing activities.

Such processing is carried out in accordance with the applicable legal requirements and only where permitted.

Legal and Regulatory Authorities

We may disclose Personal Data where required to:

  • Comply with the applicable laws, regulations, or legal processes;
  • Respond to lawful requests from government authorities; and
  • Protect our legal rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets or sale of business unit, Personal Data may be transferred as part of such transaction, subject to appropriate safeguards.

Professional Advisors

Personal Data is shared only on a need-to-know basis and subject to appropriate contractual, technical, and organizational safeguards to ensure its protection in accordance with the applicable data protection laws.

We may share Personal Data with professional advisors such as legal, financial, or audit consultants only where necessary for compliance, risk management, or business purposes.

Vyoma does not sell Personal Data collected through the Website to third parties.

Cross Border Data Transfers

Personal Data collected through the Website may be transferred to, stored, and processed in locations outside India, including in jurisdictions where Vyoma's service providers or technology partners operate.

In particular, certain analytics and technology tools used by Vyoma (such as Google Analytics and related services) may involve the transfer of limited Technical and Usage Data to servers located outside India.

Where such transfers occur, Vyoma ensures that appropriate safeguards are implemented in accordance with the applicable data protection laws. These safeguards may include:

  • Contractual arrangements with service providers;
  • Data processing agreements and confidentiality obligations; and
  • Compliance with the applicable legal frameworks governing international data transfers.

Vyoma takes reasonable steps to ensure that Personal Data transferred outside India is protected at a level consistent with the applicable data protection requirements.

Data Retention

Vyoma retains Personal Data collected through the Website only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, contractual, or reporting requirements.

The retention period for Personal Data may vary depending on:

  • The nature and category of the Personal Data;
  • The purpose for which the data was collected and processed;
  • Applicable legal or regulatory requirements; and
  • Business and operational needs.

When Personal Data is no longer required for the stated purposes, it is securely deleted, anonymized, or otherwise disposed of in accordance with the applicable laws and internal data retention policies.

Information Security

Vyoma is committed to protecting Personal Data against unauthorized access, use, disclosure, alteration, or destruction.

We implement appropriate technical, organizational, and administrative security measures designed to safeguard Personal Data and ensure its confidentiality, integrity, and availability. These measures include, but are not limited to:

  • Access controls and authentication mechanisms to restrict unauthorized access to systems and data;
  • Network security measures, monitoring systems, and infrastructure safeguards;
  • Encryption and data protection controls (where appropriate);
  • Security monitoring, logging, and threat detection mechanisms; and
  • Processes for identifying, managing, and responding to security incidents.

These safeguards are continually reviewed and updated to align with industry standards and evolving security practices.

Security Limitations

While we take responsible and appropriate measures to protect Personal Data, no method of transmission over the internet or method of electronic storage is completely secure. Users are encouraged to exercise appropriate caution when sharing information online.

Data Principal Rights

Subject to the applicable data protection laws, including but not limited to, the DPDP Act and where applicable, the GDPR, you may have certain rights in relation to your Personal Data.

These rights may include:

  • Right to Access - You may request access to the Personal Data we hold about you and obtain information regarding how it is processed.
  • Right to Correction - You may request correction of inaccurate or incomplete Personal Data
  • Right to Erasure - You may request deletion of your Personal Data, where such data is no longer necessary for the purposes for which it was collected or where processing is no longer required under the applicable law.
  • Right to Withdraw Consent - Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.
  • Right to Grievance Redressal - You have the right to raise concerns or complaints regarding the processing of your Personal Data

Where applicable under GDPR, you may also have additional rights such as restriction of processing, objection to processing, and data portability.

Exercising Your Rights

You may exercise your rights by contacting us using the details provided in the Contact Information section of this Policy.

We will respond to your request in accordance with the applicable legal requirements.

Certain rights may be subject to limitations or conditions under the applicable laws. Vyoma may retain certain information where required to comply with legal obligations or for legitimate business purposes.

Changes to This Policy

Vyoma may update or modify this Website Privacy Policy from time to time to reflect changes in the applicable laws, regulatory requirements, business practices, or Website functionality.

Any updates will be published on this page along with the revised "Last Updated" date. Where required under the applicable law, we may provide additional notice of significant changes, including through the Website or other appropriate communication channels.

We encourage users to review this Policy periodically to stay informed about how their Personal Data is processed.

Your continued use of the Website after any updates to this Policy will constitute your acknowledgment of such changes, to the extent permitted under the applicable law.

Contact Information and Grievance Redressal

For any questions, concerns, or requests regarding this Website Privacy Policy or the processing of your Personal Data, you may contact us using the details provided below:

Email: marketing.dccs@larsentoubro.com

Address: Larsen and Toubro Ltd, 4th Floor, A. M. Naik Tower, L&T Campus, Gate No. 3, Jogeshwari Vikhroli Link Road (JVLR), Powai, Mumbai - 400072

Grievance Redressal

In accordance with the requirements of the DPDP Act, Vyoma has appointed a Data Protection Officer to address concerns relating to the processing of Personal Data.

You may contact the Data Protection Officer to:

  • Exercise your rights under the applicable data protection laws
  • Submit complaints or concerns regarding the processing of your Personal Data
  • Seek clarification on any aspect of this Policy

Vyoma will review and respond to such requests or grievances within a reasonable timeframe, in accordance with the applicable legal requirements.

Data Protection Officer: Deepak Varatharajan

Email: dpo@larsentoubro.com