Privacy Policy

The Data Fiduciary responsible for the processing of your personal data is:

We collect the following personal data when you submit the contact form on our website:

• Full name
• Email address
• Phone number
• Message content

We do not collect any sensitive personal data, financial information, or biometric data through our website.

Your personal data is processed solely for the following purposes:

• Responding to your business enquiries
• Providing you with requested information about our products and services
• Communicating with you regarding your enquiry or request

We do not use your personal data for marketing, profiling, automated decision-making, or any purpose beyond responding to your enquiry.

We process your personal data based on your consent, which you provide by checking the consent checkbox on our contact form before submitting your enquiry. This is in accordance with Section 6 of the Digital Personal Data Protection Act, 2023.

You may withdraw your consent at any time (see Section 08 below). Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

Contact form submissions are retained for a period of 2 years or until the enquiry is resolved, whichever is later. After this period, your personal data will be securely deleted or anonymised.

We share your personal data with the following third-party service provider, strictly for the purpose of delivering your enquiry to us:

We do not sell, trade, or otherwise transfer your personal data to any other third party.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access — You may request a summary of the personal data we hold about you and the processing activities related to it.
• Right to Correction — You may request correction of inaccurate or incomplete personal data.
• Right to Erasure — You may request deletion of your personal data, subject to any legal obligations requiring us to retain it.
• Right to Grievance Redressal — You may raise a grievance with our Grievance Officer (see Section 10 below) or escalate to the Data Protection Board of India.
• Right to Nomination — You may nominate an individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us at info@ubanthu.com.

You may withdraw your consent at any time by writing to us at info@ubanthu.com with the subject line "Withdraw Consent". Upon receiving your request, we will cease processing your personal data and delete it within a reasonable time frame, unless retention is required by law.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted transmission — All data transmitted through our website is encrypted using HTTPS/TLS protocols.
• Access controls — Access to personal data is restricted to authorised personnel only.

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

In accordance with the DPDPA 2023, we have appointed the following Grievance Officer:

The Grievance Officer will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

Our website does not currently use cookies, web beacons, or any other tracking technologies. If this changes in the future, we will update this Privacy Policy and obtain your consent where required.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us at info@ubanthu.com and we will take steps to delete such data promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka, India.