Privacy Policy

1. Introduction

Your privacy matters to us. This Policy explains what Personal Data Nido Hub Private Limited collects when you visit our website at www.getnestology.com, how we use and protect it, and the rights available to you.

Please read this Policy carefully before using our Platform.

Throughout this document, the terms “we”, “us”, “our” & “ours” refer to Nido Hub Private Limited and the terms “you”, “your” & “yours” refer to YOU (the individual whose Personal Data we are referring to).

2. Website Data Practices

All website data practices are governed by the Information Technology Act, 2000 and the relevant rules therein.

2.1. Website Data Collection

We collect Enquiry Data (name, email, and phone number) if you voluntarily submit an expression of interest form. We also collect Technical and Behavioural Data including pages visited, scroll depth, click paths, session duration, and browser information through third-party analytics and advertising tools. For full details of cookies, local storage, and tracking technologies deployed on this website, please refer to our Cookie Policy.

2.2. Additional Website Processors

We utilise the following third-party services to facilitate specific website functions:

• i. Razorpay (India): Processes payment transactions initiated by you. Nestology does not receive, process, or store any payment instrument data. Razorpay does not share your personal information with any third party apart from financial institutions or other regulatory agencies as required. Privacy Policy
• ii. Paperform (Australia): Collects data submitted through embedded forms on the website, including name, email, and any other information you provide. Paperform acts as a data processor on Nestology's behalf, and your submitted information remains subject to this Privacy Policy and is not used by Paperform independently. Data may be transferred to and stored in Australia, the United States, or Singapore. This transfer is made on the basis of your consent in compliance with Rule 7 of the SPDI Rules, 2011. Privacy Policy
• iii. Sanity US Inc. (United States/Norway): Sanity is used for content delivery and acts as a data processor on Nestology's behalf and processes only data necessary to provide content delivery services. Sanity may log visitor IP addresses incidentally for security purposes. This transfer is made on the basis of your consent in compliance with Rule 7 of the SPDI Rules, 2011. Privacy Policy

3. Where Do We Collect Your Personal Data From?

We collect data through the following channels:

• i. Direct Interaction: When you voluntarily submit an enquiry form on the website.
• ii. Automated Collection: Technical and behavioural data collected through cookies and third party analytics tools, conditional upon your consent.

4. How Do We Use Your Personal Data?

We use your data for the following specified purposes:

• i. Enquiry Management: To respond to expressions of interest submitted through the website.
• ii. Website Analytics: To understand how visitors interact with the website and improve its content and performance, conditional on your cookie consent.
• iii. Security: To protect the website against unauthorised access and abuse.

What We Will NEVER Do: We do not sell your data. We do not use your data for behavioral advertising, or commercial profiling without your explicit consent.

5. On What Legal Grounds Do We Process Your Data?

We rely on the following legal bases under Indian law:

• i. Consent: You provide Free, Specific, Informed, and Unambiguous consent when submitting an enquiry form or interacting with our cookie consent banner.
• ii. Service Delivery: Processing is required to deliver the features of this website.
• iii. Legal Obligation: Compliance with the Information Technology Act 2000 and relevant rules and circulars thereunder.

6. What Are Your Privacy Rights?

Under the Information Technology Act, 2000 and the Rules thereunder, you have the right to:

• i. Access & Correction: Review and request correction of any personal data we hold about you.
• ii. Withdraw Consent: Stop processing of data at any time.
• iii. Right to Request Deletion: Request permanent deletion of your personal data submitted through our website.

7. Data Retention and Deletion

• i. Retention: We retain enquiry form data submitted through the website for a period of 12 months from the date of submission or until you request deletion, whichever is earlier.
• ii. Deletion: You may request deletion of your personal data at any time by contacting our Grievance Officer as detailed in the How Do You Contact Us section of this Policy.

8. Security Safeguards

We implement industry-standard security, which is designed in accordance with ISO 27001 standards, including HTTPS/TLS encryption for all data in transit, and 6-hour breach notification protocols to the Indian Computer Emergency Response Team.

9. How Do We Keep This Notice Up to Date?

We regularly review and update our Privacy Policy to ensure it is accurate and compliant with evolving Indian laws. Any material changes will be posted on this page with a revised “Last Updated” date.

10. Interpretation

In the event of any conflict or inconsistency between any provisions of this Privacy Policy, the provision that affords greater protection to your personal data and privacy shall prevail to the extent of such conflict or inconsistency. Where any provision of this Policy is capable of two or more interpretations, the interpretation that better protects your privacy rights shall be adopted.

11. Limitation of Liability

To the extent permissible under the law, we shall not be liable for any indirect, incidental, special, consequential damages, including but not limited to, damages for loss of profits, goodwill, data, information, or other intangible losses (even if we have been advised of the possibility of such damages), arising out of this Privacy Policy.

12. Governing Law, Jurisdiction and Dispute Resolution

This Privacy Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy shall be addressed first through the grievance mechanism as mentioned in How Do You Contact Us Section. If unresolved within thirty days, it shall be referred to sole arbitrator in accordance with the Arbitration and Conciliation Act, 1996, administered by the Delhi International Arbitration Centre (DIAC), with the seat of arbitration at New Delhi, India, conducted in English. The arbitrator's award shall be final and binding. Nothing in this clause affects your right to a court of competent jurisdiction under applicable law.

13. How Do You Contact Us?

For any grievances or to exercise your rights, contact our designated Grievance Officer: