Privacy Policy

1. Introduction and scope

This Privacy Policy describes how Urewa Technologies Pvt. Ltd. (“Urewa”, “we”, “our” or “us”) collects, uses, discloses, and protects personal data when you visit or interact with our website at urewa.com (the “Website”). It applies to all visitors, prospective clients, and business contacts who interact with the Website.

This policy is prepared with reference to the (Indian) Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and, to the extent applicable to visitors from the European Economic Area or the United Kingdom, the General Data Protection Regulation (EU) 2016/679 and the UK GDPR (together, “GDPR”).

2. Who we are

For the purposes of the DPDP Act, Urewa Technologies Pvt. Ltd. is the “Data Fiduciary”, and for the purposes of the GDPR, the “Data Controller”, in respect of personal data collected through the Website.

3. Personal data we collect

We collect only the personal data that is reasonably necessary for the purposes described in this policy:

We do not intentionally collect any sensitive or special categories of personal data through the Website, and we request that you do not submit such data via our forms.

4. Purposes and legal bases of processing

We do not sell personal data, and we do not use personal data collected through the Website for automated decision-making that produces legal or similarly significant effects.

5. Disclosure of personal data

We disclose personal data only to the following categories of recipients, and only to the extent necessary:

• Service providers (data processors) who host the Website, deliver email, or provide IT and communications infrastructure, under contracts that restrict their use of the data;
• Professional advisers such as auditors, accountants, and lawyers, where reasonably necessary;
• Government authorities, courts, or regulators, where disclosure is required by applicable law or legal process; and
• A successor entity in connection with a merger, acquisition, or reorganisation, subject to this policy.

6. International data transfers

Our service providers may process data on servers located outside India, including in jurisdictions not restricted under the DPDP Act. Where GDPR applies to a transfer outside the EEA or UK, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

7. Data retention

When personal data is no longer required, we delete it or anonymise it, unless retention is required by law.

8. Security

We implement reasonable technical and organisational measures appropriate to the nature of the data, including encryption in transit (HTTPS/TLS), security headers, access controls, and reputable hosting infrastructure. No transmission or storage method is completely secure; in the unlikely event of a personal data breach affecting you, we will notify you and the relevant authorities where required by law.

9. Your rights

Under the DPDP Act (India)

• Right to access a summary of your personal data and processing activities;
• Right to correction and erasure of your personal data;
• Right to grievance redressal;
• Right to nominate another individual to exercise your rights in the event of death or incapacity;
• Right to withdraw consent at any time, without affecting prior processing.

Under the GDPR (where applicable)

• Rights of access, rectification, erasure, and restriction of processing;
• Right to data portability;
• Right to object to processing based on legitimate interests;
• Right to withdraw consent at any time;
• Right to lodge a complaint with a supervisory authority in your country.

To exercise any right, contact us at info@urewa.com. We may need to verify your identity before acting on a request. We will respond within the timelines prescribed by applicable law.

10. Grievance redressal

If you have any concern regarding the processing of your personal data, please contact our Grievance Officer at info@urewa.com. We aim to acknowledge grievances promptly and resolve them within the period prescribed under applicable law. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India or, where GDPR applies, to your local supervisory authority.

11. Children’s data

The Website is directed at business audiences and is not intended for children. We do not knowingly process the personal data of children. If you believe a child has provided us personal data, please contact us and we will delete it.

12. Third-party links

The Website may link to third-party websites. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date indicates the latest revision. Material changes will be highlighted on the Website where appropriate.

14. Contact

Urewa Technologies Pvt. Ltd. — Email: info@urewa.com — Phone: +91 84 84 84 55 64