Cookie Policy

This Cookie Policy is issued by Bharat Atom Renewable Resources Energy Limited (“BARREL”, “we”, “us”), CIN U35100PN2024PLC230800, registered office RH 11, Mayfair Eleganza - II, NIBM Road, Kondhwa Kh., Pune 411048, Maharashtra, India. It explains which cookies, browser storage and server-side records we use on all websites and portals on the barrel.energy domain and its sub-domains, why we use them, and how you can control them.

It forms part of, and should be read with, our Privacy Policy, which explains how we handle personal data generally and what rights you have under the Digital Personal Data Protection Act 2023 (the “DPDP Act”). Our Terms of Use also apply to your use of the websites.

Cookie

A small text file that a website asks your browser to store and send back with later requests to the same website.

Session cookie

A cookie that keeps you signed in. In this policy it means barrel_session.

Local storage

A storage area in your browser that a website can read and write through scripts on its own pages. Unlike a cookie, it is not sent to the server with each request.

Server logs

Records our web server makes of each request it receives.

Strictly necessary

Needed to provide a service you have asked for, such as staying signed in, and without which that service cannot work.

First-party / third-party

Set by the website you are visiting (first-party) or by another website whose content is embedded in the page (third-party).

Portals

Websites on *.barrel.energy that require sign-in, including BARREL Shop, BARREL OS, BARREL PIP, the Project Manager, the Power Trading Exchange and Power Asset Exchange, and staff consoles.

Cookies are stored by your browser and sent back to the website that set them. They can last for the browser session or until a set expiry date. Many websites use them to remember sign-in, preferences and, often, to track visitors for advertising. We use only one cookie, and only for sign-in.

Local storage works in a similar way but stays in your browser: our server does not receive it automatically. We use it only to remember your choice of language.

Server logs are not stored on your device at all. Every web server records basic details of each request it answers — this is how the internet works. We use these records, rather than cookies or tracking scripts, to understand how our websites are used.

Portals may also keep short-lived values in your browser’s memory or session storage while a page is open (for example, the step you are on in a form). These disappear when you close the tab and are not used to track you.

To know how many people visit our websites and which pages they read, we use our own server records, not cookies, tracking pixels or third-party analytics scripts.

We use this information only to:

• keep the websites and portals secure, and detect and investigate attacks, fraud and misuse;
• plan capacity and fix faults;
• improve our content and services;
• produce aggregate statistics, such as how many visitors a page received or which websites referred them.

We do not use server logs to identify individual visitors for marketing, and we do not combine them with other data to build profiles. The legal basis and your rights for this processing are explained in the Privacy Policy.

BARREL does not:

• show third-party advertising or use advertising networks;
• use advertising cookies, retargeting, tracking pixels or social-media tracking plugins;
• track you across other websites or apps;
• sell, rent or share cookie or log data with anyone for advertising;
• profile visitors for advertising.

Signing in, sending RFQs and placing orders on BARREL Shop, using the Power Trading Exchange and Power Asset Exchange (including NDAs and data rooms), and using BARREL OS, BARREL PIP and the Project Manager all require you to stay signed in. That is only possible with the session cookie barrel_session.

Because this cookie is strictly necessary to provide a service you have asked for, we do not ask for separate consent to set it. We set it only after you sign in, and it is removed when you sign out or when it expires.

Some pages may show content provided by other companies, such as an embedded map or video, and a language translation service may be offered. When your browser loads that content, the third party may receive your IP address and browser details and may set its own cookies, under its own privacy and cookie policies. We do not control those cookies and do not receive data from them.

Where practical, we load such content only when you choose to view it, or link to it instead of embedding it. Links to other websites (for example a regulator’s portal or, when launched, a payment or wallet provider) take you to websites governed by their own policies.

You can see, block and delete cookies and local storage in your browser settings — usually under “Privacy”, “Cookies” or “Site data”. Each major browser (Chrome, Edge, Firefox, Safari and mobile browsers) has help pages explaining how. You can also use a private or incognito window, which clears cookies and storage when it is closed.

Blocking cookies does not stop our server from recording the basic request details described in How we measure visitors without cookies, because every web server needs them to answer a request.

Some browsers send a “Do Not Track” or “Global Privacy Control” signal. Because we do not track visitors across websites, do not use advertising cookies and do not sell personal data, our websites already behave as these signals ask. We respect these signals to the extent applicable: if we ever introduce optional cookies, a browser sending either signal will be treated as having declined them.

If we ever wish to use a cookie or similar technology that is not strictly necessary — for example, optional analytics or preference cookies — we will first update this policy and then use it only after you give prior consent through a clear banner, with an equal choice to decline. You will be able to change your choice at any time. Declining will not affect your access to the website.

We may also update this policy when our services or the law change. The version and effective date show the current version. Version 1.0, effective 10 November 2026.

This policy is governed by the laws of India, including the Information Technology Act 2000 and the DPDP Act and rules made under them, to the extent in force. Subject to your rights before the Data Protection Board of India and consumer commissions, the courts at Pune, Maharashtra have exclusive jurisdiction.

Questions about this policy: contact@barrel.energy, +91 90755 77366, RH 11, Mayfair Eleganza - II, NIBM Road, Kondhwa Kh., Pune 411048, Maharashtra, India.

Grievance Officer: the person designated by BARREL from time to time, reachable at contact@barrel.energy (subject line 'Grievance') and +91 90755 77366, RH 11, Mayfair Eleganza - II, NIBM Road, Kondhwa Kh., Pune 411048, Maharashtra, India. Complaints are acknowledged within 24 hours and resolved within 15 days, or within any shorter time the law sets.