Privacy Policy

InstaBuild360 contact illustration

InstaBuild360 – Global Privacy Notice

(Powered by Stridely Solutions)

InstaBuild360, a digital platform powered, owned, and operated by Stridely Solutions (hereinafter referred to as “InstaBuild360,” “Stridely,” “the Company,” “we,” “us,” or “our”), is committed to clients’ privacy and security and to taking steps designed to secure your personal and financial information. We believe your private details should be kept just that, and when you share personal information with us, we will make all reasonable endeavours to keep your details secure and private. We are committed to ensuring that your personal information is protected.

This Privacy Notice describes how personal data is collected, used, processed, and shared through the InstaBuild360 platform, in a readable and transparent manner. It also explains the rights you may exercise in relation to your personal data and how you can contact us to understand and exercise those rights.

For residents of jurisdictions that require specific disclosures and may offer additional privacy rights, more information about the data we collect is available in our Supplemental Disclosures.

1. Scope and Updates to this Privacy Notice

This Privacy Notice applies to personal data processed through the InstaBuild360 platform, which is powered and operated by Stridely Solutions India Private Limited, and the Stridely Group of Companies (collectively, “Stridely,” “we,” “us,” or “our”), including personal data collected via our websites, applications, mobile applications, and other online or offline offerings (the “Services”).

For the purposes of applicable data protection laws, Stridely Solutions acts as the data controller for personal data processed through InstaBuild360.

Depending on the purpose of processing and your relationship with InstaBuild360, we may provide additional customized privacy statements.

We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes, we will notify you as required by applicable law. Continued use of the Services after the effective date constitutes acceptance of the updated Privacy Notice.

Interpretation

References in this Privacy Notice to “Services,” “products,” or “platform” mean the InstaBuild360 platform and related services powered by Stridely Solutions, unless otherwise stated.

2. Personal Data We Collect

The categories of personal data we collect depend on how you interact with us through the Services and the requirements of applicable law. We collect personal data that you provide to us, information we obtain automatically when you use our products and Services, and information from other sources, as described below. If we are required by applicable law or by the terms of a contract to collect your personal data and you fail to provide the necessary information to us, we may not be able to provide you with Services you requested or otherwise perform under our contract with you.

A. Personal Data You Provide to Us Directly

We may collect personal data you provide to us.

i. When you contact us:

When you contact us, we will collect information you provide us, such as your name, address, email address, telephone number, country of residence, and place of work when you:

  • raise any query or complaint with us; and
  • request any advice or assistance or technical support from us;
  • register for news and updates about our products and services;
  • provide feedback;
  • engage in a chat session online;

ii. If you place an order or request services from us:

If you or your employer engage us to provide services, we will collect information about you through our routine business interactions. The information we collect will include your name, employer, job details, contact details, payment information, shipping and billing information, order or service history, username, email, address, industry, login credentials, and address. Any payments made via our Services are processed by third-party payment processors. We do not directly collect or store any payment card information entered through our Services, but we may receive information associated with your payment card information (e.g., your billing details).

iii. If you elect to participate in surveys we may offer from time to time.

We may contact you to participate in surveys. If you decide to participate, we may collect personal data from you in connection with the survey.

iv. If you elect to use chat and other interactive features:

We and others who use our Services may collect personal data that you submit or make available through interactive features such as messaging and chat features, or commenting functionalities, forums, blogs, and social media pages. Any data you provide using the public sharing features of the Services will be considered “public,” unless otherwise required by applicable law, and is not subject to the privacy protections referenced herein.

v. Business development and strategic partnerships:

We may collect personal data from individuals and third parties to assess and pursue potential business opportunities.

vi. In-person or offline interactions:

We may collect information about you if you visit our offices, attend a conference, trade show, or other event that we hold or where we are represented in person. We may collect personal data about you based on the nature of our interaction, such as your name, company name, industry, address, phone number, LinkedIn profiles/URLs (or similar professional data set), audio-visual information (e.g., photographs, images captured, video recordings (if enabled)), and email address. If you visit us in person, we may verify your identity by checking government-issued identification before creating a visitor badge to enable us to ensure your time on our premises is secure.

B. Personal Data We Collect Automatically

We may collect personal data automatically when you use our Services.

i. Automatic Collection of Personal Data

We may collect certain information automatically when you use our Services, such as your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, location information (including approximate location derived from IP address), and Internet service provider. We may also automatically collect information regarding your use of our Services, such as pages that you visit before, during, and after using our Services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services. If you visit us at one of our office locations or other events, your image may be captured by on-site CCTV and we may collect and process certain information about your device such as your MAC address, IMEI number, and IP address if you connect to our guest Wi-Fi services.

ii. Cookie Policy (and Other Technologies)

We, as well as third parties that collect analytics, provide content, advertising, or deliver other functionality on our Services, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect information through your use of our Services.

a. Categories of Technologies

Our uses of these Technologies fall into the following general categories:

  • Strictly Necessary: This includes Technologies that allow you access to our Services, applications, and tools that are required to identify irregular website behavior, prevent fraudulent activity, improve security, or allow you to make use of functionalities we make available through our Services.
  • Performance-Related: We may use Technologies to assess the performance of our Services, including as part of our analytics practices to help us understand how individuals use our Services. We share information about the privacy practices of some of the performance-related Technologies we use.
  • Functionality-Related: We may use Technologies that allow us to offer you enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services or keeping track of your specified preferences, interests, or past items viewed.
  • Targeting-Related: We may use first-party or third-party Technologies, including cross-device tracking, to deliver content, including ads relevant to your interests, on our Services or on third-party digital properties. We provide information about the privacy practices of some of the targeting-related Technologies we use.
  • Social Media Platforms: Our Services may contain social media buttons, such as Facebook, LinkedIn, X, Instagram, and Medium, which might include widgets such as the “share this” button or other interactive mini programs. These features may collect personal data such as your IP address, the page you are visiting on our Services, and may set a cookie to enable the feature to function properly. Your interactions with these platforms are governed by the privacy policies and terms of the companies providing them.

C. Information We Collect from Third-Party Services and Other Sources

We may obtain personal data about you from other sources, including through third-party services and organizations. For example, if you access our Services through a social networking site, we may collect personal data about you from that third-party application that you have made available via your privacy settings. In addition, if you visit one of our offices or attend an event that your employer or other authorized agent pre-registers you to attend, we may receive information about your upcoming visit, such as your name and who you will be visiting.

D. Consequences of Not Providing Personal Data Information

If you choose not to provide your personal data or request to uphold a data subject right in accordance with applicable law that results in the deletion, transfer, or other cessation of processing, we may not be able to fulfill the relevant purpose of processing, including provision of any Services to you, if app

3. How We Use Information

We use your information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below.

More information about the legal basis for each of these purposes under applicable data protection laws is set forth in our Supplemental Disclosures.

A. Legal Basis for Processing Personal Data

Our legal basis for processing your personal data is as follows:

  1. Legitimate Interests. The processing is necessary for our legitimate interests (or those of a third party) and that your interests and fundamental rights do not override those interests. Such legitimate interests include conducting and developing our business, and meeting and anticipating the requirements of our current and prospective customers;
  2. Consent. Where we process personal data based on consent, your consent is revocable at any time, e.g., when registering and inviting you for events organized by us, or for sharing our marketing-related communications with you;
  3. Legal or Regulatory Obligations. The processing is necessary for us to comply with a legal or regulatory obligation;
  4. Contractual. The processing is necessary for us to perform our obligations under an agreement we have entered into with you or in order to take steps at your request prior to entering into such an agreement.

B. Provide Our Services

We use your information to fulfill our contract with you and provide you with our products and Services, such as:

  1. Managing your information and accounts;
  2. Providing access to certain areas, functionalities, and features of our products and Services;
  3. Processing and fulfilling your order and notifying you of your order status;
  4. Answering requests for customer or technical support;
  5. Communicating with you about your inquiries, account, activities on our Services, and policy changes;
  6. Sending you periodic updates about Stridely products and services;
  7. Processing your financial information and other payment methods for products or Services purchased; and
  8. Allowing you to register for events.

C. Administrative Purposes

We use your information for various administrative purposes, such as:

  1. To manage your secure access to Stridely offices or other in-person events that we sponsor or otherwise control, including to uphold health and safety standards in the event of a medical or legal emergency during your visit;
  2. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
  3. Measuring interest and engagement in our products and services;
  4. Improving, upgrading, or enhancing our products and services;
  5. Developing new products and services;
  6. Ensuring internal quality control and safety;
  7. Maintaining internal records;
  8. Authenticating and verifying individual identities, including requests to exercise your rights under this Privacy Notice;
  9. Debugging to identify and repair errors with our products or services;
  10. Auditing relating to interactions, transactions, and other compliance activities;
  11. Sharing personal data with third parties as needed to provide the products and services;
  12. Pursuing our legitimate interests such as performing research and development activities, network and information security activities, and engaging in fraud prevention;
  13. Obtaining advice from professional advisors, where necessary;
  14. Enforcing our agreements and policies; and
  15. Carrying out activities that are required to comply with our legal obligations and to enforce and protect our rights.

We may use your information for other legitimate business purposes as permitted by law.

D. Marketing

We may use your personal data to keep you up to date with details of products and services offered by Stridely. We may provide you with these materials as permitted by applicable law, including with your consent if required by law. Some of the ways we may market to you include email campaigns, text messages, custom audiences advertising, and “interest-based” or “personalized advertising,” including through cross-device tracking. You can unsubscribe from receiving these communications by clicking the “Unsubscribe” link in any email that we send to you.

E. With Your Consent

We may use personal data for other purposes that are clearly disclosed to you at the time you provide personal data or with your consent.

F. De-Identified and Aggregated Information

We may use personal data to create de-identified and/or aggregated information, such as demographic information, information about the device from which you access our Services, or other analyses we create. We use this de-identified or aggregated data for the purposes outlined in this Privacy Notice and afford it appropriate protections as required by applicable data protection and other laws. We may also collect, use, and share “aggregated data” such as statistical or demographic data for any purpose. If we can combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used in accordance with this Privacy Notice.

G. Other Purposes

We also use your personal data for other purposes as requested by you or as permitted by applicable law.

4. How We Disclose Information

We disclose your personal data for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a business transaction such as a merger, sale, or asset transfer, as described below. We may also disclose your information to third parties as appropriate and permitted by law. We require all parties to whom we disclose personal data to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers that process your personal data on our behalf to use your personal data for their own marketing or any other purposes, and we only permit them to process your personal data for specified purposes and in accordance with our instructions.

A. To Provide Our Services

The categories of parties with whom we may share your personal data are described below.

  1. Service Providers. We may share your personal data with our service providers and vendors that assist us with the provision of our Services. This includes service providers and vendors that provide us with IT support, hosting, payment processing, customer service, customer relationship management system providers, including, but not limited to, Google Analytics, and related services.
  2. Business Partners. We may share your personal data with business partners to provide you with a Product or Service you have requested. We may also share your personal data with business partners with whom we jointly offer products or Services.
  3. Affiliates and Distributors. We may share your personal data with the Stridely group of companies and distributors, for example, for our administrative purposes, IT management, or for them to provide services to you or support and supplement the Services we provide.
  4. Other Parties with Whom You Share or Interact. As described above in “Personal Data We Collect,” our Services may allow you to share personal data or interact with other users and parties (including individuals and parties who do not use our Services and the general public).
  5. Advertising Partners. Through our Services, we may share your personal data with third-party advertising partners. Third-party advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising,” “cross-context behavioural advertising,” or “personalized advertising.” To the extent that our Services deploy advertising Technologies, we will honor applicable privacy rights you may have to manage our use of those Technologies when you are using our Services.
  6. Professional Advisors. We may share your personal data with lawyers, accountants, auditors, and financial advisors.
  7. Regulatory Authorities. We may share your personal data with regulatory authorities, including tax authorities; and
  8. Law Enforcement. We may share your personal data with law enforcement agencies, courts, and other tribunals where we are under a legal obligation to disclose your information, or we are permitted to do so to protect or defend our rights.

B. Compliance with Legal and Regulatory Requirements

We may use, access, preserve, and disclose any personal data we store associated with you to external parties if we, in good faith, believe doing so is required or as appropriate to: comply with applicable laws, lawful requests, and legal processes, such as to respond to court orders, subpoenas, requests from government authorities, or national security requests; protect your, our, or others’ rights, privacy, property, or safety; audit our internal processes for compliance with legal and contractual requirements; enforce our policies or contracts; enforce the terms and conditions that govern services that we provide; prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

C. In the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

D. Other Business Purposes

We may use your information for additional purposes if that purpose is compatible with the original purpose for which it was collected, is disclosed to you before we collect the information, if we obtain your consent, or where required or permitted by law.

5. Use of CCTV

As permitted by, and in accordance with, applicable law, our locations use CCTV to protect the safety of our employees and other persons and property. Our CCTV practices are based on an assessment of the data protection interests of individuals and their expectations of privacy in particular areas, as weighted carefully against the harms the use of video surveillance is intended to deter.

6. Your Privacy Choices

The privacy choices you may have about your personal data are determined by applicable law and are described below.

A. Email Communications

If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and our services, and you will not be able to opt out of those communications (e.g., communications regarding our services; or updates to our Terms or this Privacy Notice).

B. Phone Calls

If you receive an unwanted phone call from us, you may opt out of receiving future phone calls from us by following the instructions which may be available on the call or by otherwise contacting us as set forth in “Contact Us” below.

C. Live Chat

If you use our services and initiate a chat feature, chats are user-initiated and session-based, and you may discontinue any chat session you initiate at any time.

D. Technologies

You can control our use of certain technologies in the following ways:

  1. Cookie Controls: You may decline all non-essential technologies that apply to your use of our services by rejecting all cookies in the banner presented to you when you first visit our services. Please note that if you reject all technologies, not all of our services may function properly.
  2. Browser Controls: You may also stop or restrict the placement of certain technologies in your browser or remove them by adjusting your preferences as your browser permits. These tools are generally available in the help section of browsers. You can also use the quick links, based on the browser type that you are using: Internet Explorer, Google Chrome, Firefox, and Safari.
  3. Device Controls: You may opt out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others. Please note that cookie-based opt-outs may not stop all mobile tracking, such as tracking done on mobile applications.

7. YOUR PRIVACY RIGHTS

The privacy rights you may have about your personal data are determined by applicable law and described below. If you would like to exercise any of these rights, please contact us via the contact information set forth in the “Contact Us” section or as otherwise instructed in the “Supplemental Disclosure” section below. We will process such requests in accordance with applicable laws and will not discriminate or retaliate against you for the exercise of any of these rights. Note that to protect your privacy, we will take steps to reasonably verify your identity before fulfilling your request. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative of that person.

i. Access to and Portability of Your Personal Data

Personal data, including: (i) confirming whether we are processing your personal data; (ii) obtaining access to or a copy of your personal data; and (iii) receiving an electronic copy of personal data that you have provided to us, or asking us to send that information to another company in a structured, commonly used, and machine-readable format (also known as the “right of data portability”).

ii. Request Correction of Your Personal Data

Request correction of your personal data where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal data.

iii. Request Deletion of Your Personal Data

Request deletion of your personal data.

iv. Request Restriction of or Object to Our Processing of Your Personal Data

Request restriction of or object to our processing of your personal data where the processing of your personal data is based on our legitimate interest or for direct marketing purposes, including (i) the right to opt-out of the sharing of personal data; (ii) object to or restrict our use of your sensitive personal data, including the right to opt-out of the sharing of sensitive personal data; and (iii) opt out of the processing of your personal data for purposes of (a) targeted advertising; and (b) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

v. Withdraw Your Consent

Withdraw your consent to our processing of your personal data. Please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.

vi. Appeal

You may have the right to appeal our decision or response to your request. To exercise your right to appeal, you can submit an appeal request using the same method used to submit your original request, including by contacting us at any time as set forth below.

Lodge a Complaint While we are always willing and eager to listen and respond to your concerns about this Privacy Notice or our data practices, at any time you have the right to lodge a complaint with the data protection authority or other regulatory body in charge of enforcing data protection laws in your jurisdiction.

8. INFORMATION SECURITY

We exercise care in protecting your personal data and treating it in accordance with this Privacy Notice. This includes, among other things, using industry-standard techniques such as firewalls, encryption, and website monitoring. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of personal data.

Users are encouraged to take precautions to protect their personal data, such as creating strong and unique passwords, regularly updating their account information, and avoiding sharing sensitive information in public forums.

9. INTERNATIONAL DATA TRANSFERS

All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, India or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws. For more information about the safeguards we use for certain international transfers of personal data, please see our Supplemental Disclosures below or contact us.

10. DATA RETENTION

We store the personal data we collect as described in this Privacy Notice for as long as you use our products or services, or as necessary to fulfill the purpose(s) for which it was collected, provide our products or services, resolve disputes, establish or defend legal claims, conduct audits, pursue legitimate business purposes, enforce our agreements, satisfy any accounting or reporting requirements, for business continuity purposes, for fraud prevention, and comply with applicable laws, or based upon other criteria, including, but not limited to, the sensitivity and volume of such data. Additionally, we endeavor to retain all such personal data in accordance with legal requirements.

The period for which we will retain personal data will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation. For example, if your personal data has been provided to us in connection with the ordering of a product or service, we will retain it for as long as is necessary to provide that product or service, and for as long as any legal action could be brought in relation to it.

11.Children’s Information

The services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has uploaded personal data to our services without your consent, you may contact us below. If we become aware that a child has provided us with personal data in violation of applicable law, we will delete any personal data we have collected, unless we have a legal obligation to keep it, and terminate the child’s account.

12. Third-Party Websites/Applications

The Services may contain links to other websites/applications, and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal data to third-party websites or applications is at your own risk.

13. Contact Us

If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact our DPO at:

Data Privacy Office

Stridely Solutions India Private Limited

306, Stridely House, GTPL Lane, Sindhu Bhavan Road, Bodakdev Road, Ahmedabad-380054

Email: info@stridelysolutions.com

14. Supplemental Disclosures

A. Notice at Collection and Supplemental Notice for Certain U.S. States

This Notice at Collection and Supplemental Notice is for residents of states that have adopted comprehensive privacy legislation and others that may come into effect from time to time and are applicable to the Stridely Group of Companies (collectively, “Applicable State Laws”).

  1. Personal Data We Collect. As more fully described in the section titled “Personal Data We Collect,” the sources from which we collect personal data include directly from you when you interact with us, automatically from you when you use our sites and Services, and from other parties.
  2. Personal Data We Disclose. Depending on how you use our Services, the information we may have collected about you, as well as the categories of parties with whom we have disclosed this information, are described in the table below.
Category of Personal Data Collected by usCategory of Third Parties to which Personal Data is Disclosed for a Business PurposeCategories of Third Parties with Whom Personal Data may be Shared for Advertising Purposes

Identifiers

Name, alias, postal address, unique personal identifier, device data, online identifier, Internet Protocol address, email address, account name, registration data, education, employment, employment history, or other similar identifiers.

·       Service providers

·       Business partners

·       Affiliates

·       Other users or third parties you share or interact with

Government entities

Advertising networks

Internet service providers

Data analytics providers

Operating systems and platforms

Social networks

None

Identifiers

Name, alias, postal address, device data, online identifier, Internet Protocol address, email address.

·       Advertising networks

·       Data analytics providers

·       Social networks

·       Advertising and social network providers

·       Data analytics providers

Personal data categories

A name, signature, address, telephone number, insurance policy number, financial account numbers or payment data, professional or employment data. Personal data does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records. Note: Some personal data included in this category may overlap with other categories.

·       Service providers

·       Business partners

·       Affiliates

·       Other users or third parties you share or interact with

·       Government entities

·       Advertising networks

·       Internet service providers

·       Data analytics providers

·       Operating systems and platforms

·       Social networks

None

Personal data categories

A name, address, telephone number

·       Advertising networks

·       Data analytics providers

·       Advertising and social network providers

·       Data analytics providers

Personal data categories

Insurance policy number

·       Service providers

·       Business partners

·       Affiliates

·       Government entities

None

Commercial information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

·       Service providers

·       Business partners

·       Affiliates

None

Internet or other electronic network activity

Browsing history, search history, device data, information on a consumer’s interaction with an internet website, application, or advertisement.

·       Service providers

·       Business partners

·       Affiliates

·       Advertising networks

·       Data analytics providers

·       Advertising and social network providers

·       Data analytics providers

Sensory data

Audio, electronic, visual, thermal, olfactory, or similar information.

·       Service providers

·       Business partners

·       Affiliates

 

iii. Our Use of Personal Data

We may use or disclose the personal data we collect for the purposes outlined in “How We Use Information” above. Where required under applicable law, we will not collect additional categories of personal data or use the personal data we have collected for materially different, unrelated, or incompatible purposes without first providing you notice.

iv. Sales/Sharing of Personal Data

For purposes of certain laws, we do not “sell” personal data, nor do we have actual knowledge of any sale of personal data as the term “sell” is commonly understood. We may share information for the purpose of analyzing traffic on our Services as described above. You may limit such sharing by managing your cookie preferences in our cookie banner where available, or by Contacting Us.

v. Retention of Personal Data

We store the personal data we collect as described in the Data Retention section of our Privacy Notice.

vi. Privacy Rights

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request to exercise any of your privacy rights outlined in the Your Privacy Rights section of the Privacy Notice related to your personal data. You may also make a verifiable consumer request on behalf of your minor child. To authorize an agent, provide written authorization signed by you and your designated agent and Contact Us for additional instructions.

B. Supplemental Notice for Europe and the United Kingdom

The table below contains a list of the legal bases on which we rely when processing personal data that is subject to applicable data protection laws in Europe, including the European Union General Data Protection Regulation (the “EU GDPR”) and the EU GDPR as it forms part of retained EU law in the United Kingdom, (the “UK GDPR”). Please also note that if your personal data is subject to the EU GDPR or UK GDPR, you may receive a copy of the safeguards we use to protect your personal data when it is transferred internationally on request.

Processing PurposeDataApplicable Legal Bases
Providing our ServicesInformation you share with us including information about your identity.Performance of a contract with you; necessary for our legitimate interests (managing our relationship with you; to keep our records updated and resolve customer issues; to improve, personalize and develop the Services we offer you, to communicate with you about your use of our Services), and with your consent.
Administrative and Regulatory PurposesInformation you share with us including identity, contact, communications, profile, information collected automatically through the Services.Performance of a contract with you; Necessary to comply with a legal or regulatory obligation (including the defense of claims); Necessary for our legitimate interests (to operate our business, provide administrative and IT services, network security, to prevent fraud and in the context of a business reorganization; to maintain current business records, study how customers use our products/services, resolve customer issues, improve the Corporate Sites, support personalized features, to detect and resolve technical problems and to develop our business), and with your consent.
Marketing PurposesInformation you share with us including identity, contact, information collected automatically through the Corporate Sites and communications dataNecessary for our legitimate interests (to study how customers use our products/services, to develop them and to develop and grow our business); Consent if required by law (e.g., for use of non-essential cookies)

If you are a resident of the European Economic Area / UK and you wish to exercise your data subject rights, please refer to the “Contact Us” section of this Notice. You can learn more about your rights in the “Your Privacy Rights” section.

C. Supplemental Notice for India

When processing your personal data in India, we adhere to the Data Privacy Principles and Regulations outlined in the Digital Personal Data Protection Act (DPDPA). If you are a Data Principal (resident or citizen) in India, please note that these additional provisions apply to you, alongside Stridely Global Privacy Notice.

In addition to the rights set forth in the “Your Privacy Rights” section of this Privacy Notice, you have the following rights:

  1. Right to nominate Users: Users have the right to nominate any other individual who shall exercise their rights in the event of death or incapacity.
  2. Right of Grievance Redressal: Users will be provided with a structured mechanism for addressing grievances, managed either by the Privacy Officer or the Consent Manager.

If you wish to exercise your data subject rights, please refer to the “Contact Us” section of this Notice. You can learn more about your rights in the “Your Privacy Rights” section.

D. Supplemental Notice for Canada

For the purpose of processing your personal data in Canada (applicable to data subjects residing in Canada), we will follow the Data Privacy Principles and regulations of the Personal Data Protection and Electronic Documents Act, 2000 (commonly known as PIPEDA). Please note that the following provisions will apply to you if you are a Data Subject (resident or citizen) in Canada, in addition to Stridely Global Privacy Notice. Under PIPEDA, there is no distinction between domestic and international transfers of data. Stridely, as the transferring organization, will remain accountable for the protection of that personal data and ensuring compliance with the applicable legislation, using contractual or other means to provide a comparable level of protection while the information is being processed by the third party.

If you wish to exercise your data subject rights, please refer to the “Contact Us” section of this Notice. You can learn more about your rights in the “Your Privacy Rights” section.

E. Supplemental Notice for Singapore

For the purpose of processing your personal data in Singapore, we will follow the Data Privacy Principles and Regulations of the Personal Data Protection Act, 2012 (commonly known as “PDPA”) and the Personal Data Protection Amendment Act, 2020 (the “Amendment Act”). Please note that the following provisions will apply to you if you are a Data Subject (resident or citizen) in Singapore.

As a Data Subject located in Singapore, you are entitled to the following rights:

  1. The right to be informed about the purpose for which we intend to collect, use, or disclose your personal data.
  2. The right to access the personal data that we collect about you.
  3. The right to be notified about a data breach that is likely to cause you significant harm.
  4. The right to withdraw consent from the collection, use, and disclosure of your personal data.
  5. The right to request correction of your inaccurate data.
  6. The right to have your personal data which is no longer required being ceased from our retention.

If you wish to exercise your data subject rights, please refer to the “Contact Us” section of this Notice. You can learn more about your rights in the “Your Privacy Rights” section.

F. Supplemental Notice for Mexico

For the purpose of processing your personal data in Mexico, we will follow the Federal Law on the Protection of Personal Data Held by Private Parties (as amended) and its regulations (the “Personal Data Protection Law”). Please note that the following provisions will apply to you if you are a Data Subject (resident or citizen) in Mexico, in addition to Stridely Global Privacy Notice.

Controller and Address

Controller: Stridely Solutions India Private Limited

Address: 306, Stridely House, GTPL Lane, Sindhu Bhavan Road, Bodakdev Road, Ahmedabad- 380054

Data Sharing and Transfer

Under the Personal Data Protection Law, there is no distinction between domestic and international transfers of personal data. By accepting this Privacy Notice, you authorize Stridely to share or transfer your personal data with the recipients and for the purposes described in this Global Privacy Notice. Please note that certain transfers may take place without your consent, which are provided in Article 36 of the Personal Data Protection Law.

How to Exercise Your Data Subject Rights

Any request to exercise any of the data subject rights granted under the Personal Data Protection Law must include and specify the following information and documentation:

  1. Your full name, mailing address, and email address for correspondence regarding your request;
  2. A complete and legible copy of a valid government-issued identification;
  3. If the request is submitted on behalf of the Data Subject, a complete and legible copy of:
    1. the document evidencing such representation authority, and
    2. the representative’s valid government-issued identification;
  4. A clear indication of the data subject right(s) you intend to exercise through the request;
  5. A description of the personal data concerned by your request, or, in the case of a request for access, the preferred method for receiving the requested information;
  6. For requests to correct or update your personal data, please specify the changes to be made and attach any supporting documentation;
  7. For deletion requests, please explain the reasons for your request; and
  8. For objections to processing, please describe the reasons for your objection, the specific purposes for which you wish to object, and the potential harm that may result from continued processing of your personal data.

If you wish to exercise your data subject rights, please refer to the “CONTACT US” section of this Notice.

Response Time and Handling of Data Subject Requests

We will respond to your request at the email address provided within twenty (20) business days from the date we receive it. If your request is approved, the relevant changes will be implemented within fifteen (15) business days. In justified cases, we may extend these periods once for an equal additional period, and we will inform you of such extension by email.

If your request relates to access to your personal data, our response will specify the means by which such access will be provided.

We may refuse to act on a request where permitted by the Personal Data Protection Law. If we deny your request, we will inform you of the reasons for our decision. In some cases, your request may be partially granted, meaning that certain rights (such as access, correction, or deletion) may still be exercised.

Withdrawal of Consent

If you wish to withdraw your consent for the processing of your personal data, please note that we may not always be able to fulfill your request or immediately cease processing. Certain legal or contractual obligations may require us to continue processing your data for specific purposes.

Withdrawal of consent may affect our ability to provide you with certain services or to maintain our contractual relationship. Where this occurs, we will notify you accordingly.

Fees and Reimbursement of Costs

The exercise of your data subject rights is free of charge. However, if you submit a repetitive request within a period of less than twelve (12) months, we may charge a fee equivalent to three (3) times the value of the Unit of Measure and Update (UMA) in effect at that time, plus applicable value-added tax (VAT), unless material changes have been made to this Global Privacy Notice that justify a new request.

You will also be responsible for the cost of reproducing, copying, or shipping documents, and, where applicable, for certification costs.

Supervisory Authority and Complaints

If you believe that your personal data has been processed in violation of the Personal Data Protection Law or that your rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority.

In Mexico, this is the Directorate-General for Personal Data in the Private Sector, part of the Personal Data Protection Unit of the Secretariat for Anti-Corruption and Good Governance.