PRIVACY POLICY

This Privacy Policy (“Privacy Policy”) explains how GT Setu Connections Pv Ltd (“Company”, “we”, “our”, or “us”) collects, uses, stores, discloses, and protects information when companies, their authorised representatives, and visitors (collectively, “User/s”, “you”, or “your”) access or use our website, platform, applications, tools, including any content, functionality, and related services (collectively, the “Platform”).

The Company operates a business-to-business (B2B) matchmaking and collaboration platform that enables companies across various jurisdictions to discover, evaluate, and connect with other companies for potential domestic and cross-border collaborations. We are committed to respecting your privacy and safeguarding the information entrusted to us.

This Privacy Policy applies globally and is intended to comply with applicable data protection and privacy laws, including but not limited to the laws of India and other jurisdictions where our Users are located. In particular, and without limitation, this privacy policy is designed to give effect to the requirements of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and to the extent that the Company processes the personal data of individuals located in European Economic Area (EEA), the General Data Protection Regulation (GDPR). Where required, we implement additional safeguards to ensure that personal and business-related information is processed lawfully, fairly, and transparently.

Please read this Privacy Policy carefully to understand the Company’s policies and practices regarding your information and how the Company will treat it. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of information in accordance with its terms. If you do not agree with this Privacy Policy, you should refrain from accessing or using the Platform. This Privacy Policy may change from time to time. Your continued use of this Platform after the Company make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

1. SCOPE AND APPLICABILITY

If you access, browse, register on, or otherwise use the Platform whether as a visitor, a registered company, or an authorised representative of a company (collectively, “Users”) the Company may collect and process certain information relating to you in connection with such use.
If you access, browse, register on, or otherwise use the Platform whether as a visitor, registered company, authorised representative, Expert, Facilitator, Ecosystem head, or in any other authorised capacity (collectively, “Users”), the Company may collect and process certain information relating to you in connection with such use.
For the purposes of this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable natural person. “Processing” in relation to Personal Data means any operation or set of operations performed on Personal Data, whether wholly or partly automated, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, use, sharing, disclosure, restriction, erasure, or destruction.
This Privacy Policy applies only to information that the Company collects and processes through electronic or digital means, based on consent or any other lawful basis, in connection with the Company’s website, web-based platform, applications, email, text, and other electronic messages between you and this Platform, at the time of you signing-up to create your account on the Platform, including but not limited to any information collected for the provision of the Services (as such term has been defined in the Company’s Terms and Conditions).
This Privacy Policy does not apply to information collected by third-party websites, platforms, services, or applications that may be linked to or accessible from the Platform. The Company is not responsible for the privacy practices or content of such third parties, and Users are encouraged to review their privacy policies before providing any information.
This Privacy Policy applies to Users globally, subject to applicable mandatory data protection and privacy laws in their respective jurisdictions.

2. INFORMATION WE COLLECT & PROCESS

In connection with the operation of the Platform and the services offered, the Company may collect and process information relating to Companies, their authorised representatives, Experts, Facilitators, Ecosystem heads, visitors, and other authorised Users of the Platform, including the following categories of information:

2.1 Information Provided by Companies and Authorised Representatives

Company name, legal structure, registration details, and registered address;
Business identifiers and verification details, including Udyam Registration, Corporate Identification Number (CIN), Goods and Services Tax (GST) details, and other similar identifiers;
Industry classification, business description, and operational details;
Contact details of authorised representatives, including names, phone numbers, and email addresses;
Details of products and services offered by the company, including descriptions and images;
Company profiles, images, brochures, websites, and other business-related information voluntarily submitted on the Platform.

2.1A Information Provided by Experts, Facilitators and Ecosystem Heads

The Company may collect and process the following information from Users registering or participating on the Platform as Experts, Facilitators, or Ecosystem heads, as applicable:

i. Information Provided by Experts

Full name, professional designation, qualifications, certifications, licences and professional memberships;
Professional data, areas of expertise, industry sectors served, years of experience, and work history;
Organisation or employer details, professional affiliations, and jurisdiction(s) of practice;
Curriculum vitae (CV), profile photograph, portfolio, publications, case studies, references, or other supporting credentials voluntarily submitted;
Contact details including email address, telephone number, and business address;
Availability, languages spoken, consultation preferences, and other professional profile information made available on the Platform.

ii. Information Provided by Facilitators

Name, organisation (if any), designation, and contact details;
Platform access credentials, role-based permissions, activity logs, audit records, and authentication information necessary to administer or facilitate Platform operations;
Information relating to facilitation activities, communications, assignments, performance metrics, and interactions carried out through the Platform.

iii. Information Provided by Ecosystem Heads

Name of the organisation, association, chamber, council, trade body, network, institution, cluster, or business community represented;
Name, designation, and contact details of authorised representatives;
Details relating to the geography, sector, industry, trade corridor, business network, membership base, or ecosystem represented;
Organisation profile, website, promotional material, logos, brochures, and other information voluntarily submitted for publication on the Platform;
Information relating to onboarding, verification, ecosystem management activities, referrals, introductions, and collaborations facilitated through the Platform.

2.2 Verification and Compliance Information

Information required for verifying the authenticity and status of a company, including incorporation details, director details, authorised and paid-up capital, statutory filings, and other publicly available or lawfully obtained corporate records;
Verification outcomes and platform-generated identifiers, including reference numbers and verification status indicators.

2.3 Interaction, Communication, and Collaboration Data

Information relating to expressions of interest, acceptances, and connections between companies;
Communications exchanged through the Platform, including messages, notices, and system-generated communications;
Documents and information shared between companies on the Platform, including technical, commercial, financial, and legal documents, subject to access controls and permissions set by the Users;
Records, logs, and timestamps relating to document exchange, communications, and collaboration activities.

2.4 Transactional and Payment Information

Information necessary to process payments for paid services, connections, or closure reports, including transaction identifiers and payment status (excluding full payment instrument details where processed by third-party payment service providers).

2.5 Technical and Usage Information

Information automatically collected when Users access or use the Platform, such as IP address, device and browser information, log files, access times, and usage patterns;
Platform activity data for security, audit, analytics, and service improvement purposes.

The Company processes such information only to the extent necessary for providing the Platform, enabling company discovery and collaboration, ensuring verification and security, complying with legal obligations, and improving its services.

3. PURPOSE OF PROCESSING

The Company processes the information collected through the Platform for the following purposes:

to present this Platform and its contents to you;
to enable company discovery, profiling, and matchmaking based on business interests, sectors, and geography;
to provide you with information, products, or services that you request from the Company;
to verify company details and establish the authenticity and status of registered companies;
to facilitate expressions of interest, connections, and communications between companies on the Platform;
to provide secure infrastructure for document sharing, collaboration, and controlled information exchange;
to process payments for paid services, connections, and closure-related reports;
to maintain records, logs, and audit trails relating to Platform activity, communications, and document exchanges;
to ensure Platform security, prevent misuse, fraud, or unauthorised access, and enforce the Company’s terms and policies;
to comply with applicable legal, regulatory, and contractual obligations;
to improve, maintain, and develop the Platform, including analytics, troubleshooting, and service enhancement; and
to create, verify, maintain, display, and manage profiles of Experts, Facilitators, and Ecosystem heads, and to facilitate discovery, engagement, collaboration, administration, and communication between such Users and companies through the Platform.

The Company processes information only to the extent necessary for the above purposes and in accordance with applicable data protection and privacy laws. We may use automated tools, including artificial intelligence (“AI”) and machine learning technologies, to process and analyse information provided by Users for the limited purpose of improving the functionality, efficiency, and performance of the Platform. Such use may include, without limitation:

Enhancing search relevance and filtering;
Improving categorisation and tagging of company profiles;
Standardising or organising service descriptions;
Detecting duplicate, incomplete, or inconsistent information; and
Improving overall discoverability and User experience.

4. LEGAL BASIS FOR PROCESSING

The Company processes information in accordance with applicable data protection and privacy laws across jurisdictions and relies on one or more lawful bases, as permitted under such laws, depending on the nature of the information and the purpose for which it is processed. The lawful bases relied upon by the Company include the following:

Consent: Where Users voluntarily provide information through the Platform or expressly consent to the processing of information for specific purposes, including registration, profile creation, verification, communications, document exchange, and receipt of platform-related notifications. As per the provisions of DPDP Act and GDPR, such consent shall be free, specific, informed, unconditional and unambiguous and shall be sought through a clear affirmative action. Where consent is the lawful basis, Users may withdraw such consent in accordance with this Privacy Policy, subject to legal and contractual limitations.
Performance of Contract: Where processing is necessary for the performance of a contract or to take steps at the request of the User prior to entering into a contract. This includes enabling access to the Platform, creating and managing company profiles, verifying company information, facilitating expressions of interest, enabling connections between companies, providing paid services, and generating reports or records associated with Platform usage.
Legitimate Interests: Where processing is necessary for the legitimate business interests of the Company, including maintaining and operating the Platform, ensuring Platform security and integrity, preventing fraud, misuse, or unauthorised access, maintaining audit logs and records, improving Platform functionality, conducting analytics, and enforcing the Company’s terms, policies, and agreements. Such processing is undertaken only where these interests are not overridden by the rights and freedoms of Users.
Compliance with Legal Obligations: Where processing is necessary to comply with applicable laws, regulations, regulatory requirements, court orders, governmental requests, or other legal processes, including record-keeping, disclosures to authorities, and compliance-related audits.
Protection of Rights and Interests: Where processing is necessary to establish, exercise, or defend legal claims, resolve disputes, investigate potential violations, or protect the rights, property, or safety of the Company, its Users, or third parties.

The Company ensures that information is processed only to the extent necessary for the applicable lawful basis and implements appropriate safeguards in accordance with applicable data protection and privacy laws.

5. DISCLOSURE AND SHARING OF INFORMATION

The Company may disclose or share information collected through the Platform strictly in accordance with this Privacy Policy, Terms and Conditions and only to the extent necessary for the operation of the Platform and the provision of its Services. Information may be disclosed or shared in the following circumstances:

Between Companies on the Platform: Where two or more companies express mutual interest and complete the applicable requirements, the Company may disclose relevant company and contact details to the concerned parties to enable collaboration. Certain information and documents may be disclosed only after completion of payment obligations and, where applicable, execution of a non-disclosure agreement (NDA) through the Platform.
Profiles and Information of Experts, Facilitators and Ecosystem Heads: The Company may display or disclose profile information of Experts, Facilitators, and Ecosystem heads, including their names, professional credentials, organisational affiliations, areas of expertise, sectors served, and other profile information voluntarily submitted for the purpose of enabling discovery, engagement, networking, and collaboration through the Platform. The extent of such disclosure shall be subject to the privacy settings, Platform functionality, and applicable laws.
Document Exchange and Controlled Access: Information and documents shared by Users through the Platform for technical, commercial, financial, or legal evaluation are disclosed only to the intended recipient companies, subject to access controls, permissions, and restrictions selected by the Users. The Company maintains records and logs of such exchanges for operational and audit purposes.
Service Providers and Partners: The Company may share information with third-party service providers, consultants, or partners who support the operation of the Platform, including verification services, payment processing, cloud hosting, data storage, analytics, communication tools, and customer support. Such parties are engaged under contractual obligations to use the information solely for the specified purposes and to maintain appropriate confidentiality and security standards.
Legal and Regulatory Disclosures: The Company may disclose information where required to comply with applicable laws, regulations, court orders, governmental or regulatory requests, or to respond to lawful inquiries by competent authorities.
Protection of Rights and Interests: Information may be disclosed where necessary to investigate, prevent, or address suspected or actual violations, fraud, security issues, or to protect the rights, property, or safety of the Company, Users, or third parties.

The Company does not sell personal information to third parties. Any disclosure or sharing of information is limited to what is reasonably necessary for the relevant purpose and is carried out in accordance with applicable data protection and privacy laws.

6. CROSS-BORDER DATA TRANSFERS

Given the global nature of the Platform, information collected and processed by the Company may be transferred to, stored in, or accessed from jurisdictions outside the country in which a User is located. Such cross-border transfers may occur to enable company discovery, verification, collaboration, document exchange, Platform hosting, analytics, and support services.

Where information is transferred across borders, the Company takes reasonable steps to ensure that such transfers are carried out in accordance with applicable data protection and privacy laws and that appropriate safeguards are implemented to protect the information. These safeguards may include contractual arrangements, data protection agreements, and other lawful mechanisms recognised under applicable laws.

By accessing or using the Platform and providing information, Users acknowledge and consent to the transfer of information across borders as necessary for the purposes set out in this Privacy Policy, subject to applicable legal requirements.

7. DATA RETENTION

The Company retains information collected and processed through the Platform only for as long as necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Policy, unless a longer retention period is required or permitted under applicable laws. In general, the Company retains the following information:

Information relating to registered companies, profiles, verification status, and Platform activity is retained for the duration of the company’s use of the Platform;
Information and documents exchanged between companies in connection with expressions of interest, collaborations, and evaluations are retained for the duration of the active collaboration period, including the standard collaboration window made available on the Platform;
Logs, audit trails, records of communications, document exchanges, and transaction-related records may be retained for a reasonable period thereafter for compliance, dispute resolution, security, and audit purposes;
Final reports or closure-related records generated at the conclusion of a collaboration may be retained in accordance with contractual obligations and applicable legal requirements.

Upon account closure, withdrawal of consent, or termination of services, the Company will retain such personal data, associated traffic data and other logs of the processing for a minimum period of one (1) year from the date of such processing and will delete or anonymise information in its possession thereafter, unless retention is required to comply with legal obligations, resolve disputes, enforce agreements, or protect the rights and interests of the Company or its Users.

8. USER RIGHTS

Subject to applicable data protection and privacy laws, Users have certain rights in relation to the information processed by the Company through the Platform. These rights may vary depending on the User’s jurisdiction and the nature of the information involved. Users may have the right to:

request access to information processed about them;
request correction or updating of inaccurate or incomplete information;
request deletion or erasure of information, subject to legal, contractual, and operational limitations;
object to or request restriction of certain processing activities, where permitted by applicable law;
withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out prior to such withdrawal;
where applicable under DPDP Act, nominate another individual to exercise their rights under this privacy policy in the event of their death or incapacity;
where applicable under the GDPR, receive the personal data they have provided to the Company in a structured, commonly used and machine-readable format and to transmit such data to another controller (right to data portability).

The Company may require reasonable verification of a User’s identity and authority before responding to a request. Requests will be addressed within the timeframes prescribed under applicable laws.

Certain rights may be limited where processing is necessary to comply with legal obligations, perform contractual obligations, maintain security and audit records, or protect the rights and interests of the Company or other Users.

In addition to raising a grievance with the Company under clause 16, Users may lodge a complaint with the Data Protection Board of India (in relation to matters governed by the DPDP Act) or with the competent authority in their jurisdiction (in relation to matters governed by GDPR).

9. WITHDRAWAL OF CONSENT AND ACCOUNT CLOSURE

Where the processing of information is based on consent, Users may withdraw such consent at any time by following the mechanisms made available on the Platform or by contacting the Company in accordance with this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

Users may request closure of their account or discontinuation of services through the Platform or by submitting a request to the Company. Upon account closure, access to the Platform and its features may be restricted or terminated.

Withdrawal of consent or account closure may result in the inability of the Company to provide certain services, including access to company discovery, matchmaking, communications, document exchange, and collaboration features.

Notwithstanding withdrawal of consent or account closure, the Company may retain certain information where such retention is necessary to comply with legal or regulatory obligations, enforce contractual rights, resolve disputes, maintain security and audit records, or protect the rights and interests of the Company or other Users, in accordance with this Privacy Policy.

10. MINORS

The Platform is intended solely for use by companies and their authorised representatives acting in a professional or commercial capacity. Our Platform is not directed to, and we do not intend to, nor do we knowingly collect or solicit, personal information online from individuals under the age of 18 (“Minors”).

By accessing or using the Platform, Users represent and warrant that they are at least 18 years of age and have the legal capacity and authority to use the Platform on behalf of the relevant company.

In accordance with the DPDP Act, the Company does not undertake tracking or behavioural monitoring of children, does not direct targeted advertising of children, and does not process personal data likely to cause any detrimental effect on the wellbeing of a child.

If the Company becomes aware that personal information of a Minor has been collected inadvertently, the Company will take reasonable steps to delete such information in accordance with applicable laws.

11. SECURITY MEASURES

The Company implements reasonable and appropriate technical and organisational measures to protect information processed through the Platform against unauthorised access, disclosure, alteration, loss, or destruction.

Such measures may include access controls, authentication mechanisms, encryption where appropriate, secure hosting environments, internal policies and procedures, and restricted access to information on a need-to-know basis. The Company also maintains logs and audit trails to monitor platform activity and document exchanges.

While the Company takes reasonable steps to safeguard information, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, the Company does not guarantee absolute security and Users acknowledge and accept this inherent risk.

12. DATA BREACH

In the event of a personal data breach, the Company shall, in accordance with Section 8(6) of the DPDP Act, intimate the Data Protection Board of India and affected Data Principals without delay, regardless of the severity of the breach.

Where the Company acts as a controller in relation to any personal data breach, the Company shall, in accordance with the provisions of GDPR, notify the competent supervisory authority without any undue delay and, where feasible, within seventy-two (72) hours of becoming aware of it, and shall communicate such breach to the affected party without any undue delay where such breach is likely to result in a high risk to their rights and freedom.

The Company maintains internal procedures to detect, investigate and respond to personal data breaches, including measures to contain and remediate the breach and to prevent recurrence.

13. COOKIES & TECHNICAL TRACKING

The Platform may use cookies and similar technologies to support functionality, enhance user experience, maintain security, and analyse platform usage. Cookies are small data files placed on a User’s device that enable the Platform to recognise returning Users and remember certain preferences.

The Company may collect technical and usage information such as IP address, browser type, device information, access times, pages viewed, and interactions with the Platform. Such information is used for platform administration, security monitoring, analytics, troubleshooting, and service improvement.

Users may manage or disable cookies through their browser or device settings. Please note that disabling certain cookies may affect the availability or functionality of the Platform.

The Company does not use cookies or technical tracking technologies to collect sensitive personal information without consent, where such consent is required under applicable laws.

14. THIRD-PARTY LINKS & INTEGRATION

The Platform may contain links to third-party websites, platforms, services, or resources, or may integrate with third-party tools or services for functionality such as verification, payments, analytics, or communication.

The Company does not control and is not responsible for the privacy practices, content, or security of such third-party websites, platforms, or services. Any information shared by Users with third parties is governed by the privacy policies and terms of such third parties.

Users are encouraged to review the privacy policies of any third-party websites or services before accessing them or providing any information. The inclusion of a link or integration does not imply endorsement by the Company.

15. CHANGES TO THIS PRIVACY POLICY

The Company may update or modify this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or the operation of the Platform.

Any updates to this Privacy Policy will be effective upon posting the revised version on the Platform, unless otherwise stated. The date of the latest update may be indicated at the beginning or end of this Privacy Policy.

Users are encouraged to review this Privacy Policy periodically to remain informed about how information is collected, used, and protected. Continued access to or use of the Platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

16. GRIEVANCE REDRESSAL & CONTACT INFORMATION

If Users have any questions, concerns, requests, or grievances regarding this Privacy Policy or the processing of information through the Platform, they may contact the Company using the details set out below:

Company Name	GT Setu Connections Pvt Ltd
Registered Address	1011/19, Indira, Mitranagar Colony, Deep Bungalow Chowk, Pune 411016
Contact Email	info@gtsetu.com
Contact Number	+91 9175600107

Users may also be able to exercise certain rights, submit requests, or raise grievances directly through their account by accessing the relevant link made available on the Platform after logging in. The Company will make reasonable efforts to acknowledge and address grievances or requests in a timely manner and in accordance with applicable data protection and privacy laws. Where required under applicable law, the Company shall designate a grievance or data protection contact and update the relevant contact details on the Platform.

This Privacy Policy shall be read in conjunction with the Company’s Terms and Conditions and other applicable policies, and together they govern the use of the Platform.

If any provision of this Privacy Policy is held to be invalid, unlawful, or unenforceable under applicable law, such provision shall be severed to the extent necessary, and the remaining provisions shall continue to remain in full force and effect. The failure of the Company to enforce any provision of this Privacy Policy shall not be deemed a waiver of such provision or any other provision.

This Privacy Policy applies for the duration of a User’s interaction with the Platform and, to the extent necessary, shall survive termination of access or services in accordance with its terms.