Privacy Policy

This policy applies to the EKOHAM GROUP website (the “Site”) and to the cloud-based software, applications, dashboards and APIs we provide, including the EKOTOOL platform (together, the “Services”). It covers visitors to the Site, people who contact us and the authorised users of organisations that subscribe to our Services.

Where an organisation uses EKOTOOL under a Master SaaS Subscription Agreement, that organisation is the controller of the data it submits and we act as a processor on its behalf. In those cases, the agreement and the customer’s own privacy notices govern how that data may be used, and this policy explains our practices as the service provider.

Information you give us

• Contact and enquiry details — your name, email address, organisation and the contents of any message you send us (for example, by emailing ekohamgroup@gmail.com).
• Account information — credentials and profile details created when you or your organisation register for the Services.
• Customer Data — data, content, files and records that a subscriber or its authorised users submit, store or process through the Services.

Information collected automatically

• Technical data — IP address, browser type, device and operating system information.
• Usage and telemetry data — pages viewed, features used, timestamps and diagnostic logs that help us operate, secure and improve the Services.
• Cookies and similar technologies — as described in the section on cookies below.

We use the information described above to:

• provide, operate, maintain and support the Services;
• respond to your enquiries and communicate with you about your account or our Services;
• monitor, secure and protect the Services against fraud, abuse and unauthorised access;
• perform backups and disaster recovery;
• improve and develop our Services and understand how they are used; and
• comply with applicable law and enforce our terms and agreements.

We do not sell, rent or otherwise commercially exploit Customer Data, and we do not use Customer Data for advertising.

Our Site and Services may use cookies and similar technologies to keep you signed in, remember your preferences (such as light or dark theme) and understand how the Site is used so we can improve it.

Most browsers let you refuse or delete cookies through their settings. Disabling certain cookies may affect the availability or functionality of parts of the Services.

Subscribers retain all right, title and interest in their Customer Data. We process Customer Data only as needed to provide and support the Services, for security monitoring and for backup and disaster recovery, or as otherwise instructed by the subscriber under the applicable agreement.

Subscribers are responsible for ensuring they have all necessary rights and consents to provide Customer Data to us and for ensuring its lawful and accurate use.

We process personal data where you have given consent, where processing is necessary to provide the Services or perform a contract with you or your organisation, where we have a legitimate interest in operating and securing our Services and where required to meet a legal obligation. Where we rely on consent, you may withdraw it at any time by contacting us.

We do not sell personal data. We may share information only:

• with service providers and sub-processors (such as cloud hosting and infrastructure providers) who process data on our behalf under appropriate confidentiality and security obligations;
• where required by applicable law, regulation, legal process or a binding request from a public authority or court; and
• in connection with a merger, acquisition or reorganisation, subject to the protections of this policy.

We implement commercially reasonable administrative, technical and physical safeguards designed to protect personal data and Customer Data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security against unauthorised access, cyber-attacks or data breaches.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you become aware of any unauthorised use or breach.

We retain personal data and Customer Data for as long as needed to provide the Services and for the periods required to meet our legal, accounting and security obligations. On termination of a subscription, access to the Services ceases and the customer may export its data within thirty (30) days, after which the data may be permanently deleted.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may have the right to:

• access and obtain a summary of the personal data we hold about you;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data where it is no longer required;
• withdraw consent previously given; and
• raise a grievance regarding our handling of your personal data.

Where you are an authorised user of a subscribing organisation, please direct such requests to that organisation; we will support it in responding. To exercise your rights with us directly, contact us using the details below.

We operate from India and our Services are governed by the laws of India. Where data is processed or stored by infrastructure providers in other locations, we take steps to ensure it remains protected in line with this policy and applicable law.

Our Services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Our Site and Services may contain links to third-party websites or services that we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their policies.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the Services. Your continued use of the Services after an update constitutes acceptance of the revised policy.

If you have questions, requests or complaints about this policy or our handling of personal data, you can reach our Grievance Officer at:

• EKOHAM GROUP — Grievance Officer
• Email: ekohamgroup@gmail.com
• Address: 3-71(10), Shri Krishna Prasad Building, Santhekatte Post, 38 Kalthur Cherkadi, Udupi, Karnataka 576215, India

We will acknowledge and address grievances within the timelines required under applicable law.