Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how Wular Data Lake Private Limited ("WularData", "we", "us" or "our") collects, uses, shares and protects personal data when you visit wulardata.com, contact us, create an account, or buy and use our services (together, the "WularData Services"). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the rules made under it, the Information Technology Act, 2000 and other applicable laws. For the purposes of the DPDP Act, WularData is the Data Fiduciary for the personal data described in this Policy.

1. What this Policy does not cover

This Policy does not apply to the data that our customers store, host or process on our servers and infrastructure ("Customer Content"). For Customer Content, our customer is the Data Fiduciary and WularData acts as a Data Processor on the customer's instructions, as set out in our Customer Agreement and Service Terms. If your personal data is held on a website or application hosted by one of our customers, please contact that customer directly.

This Policy also does not cover third-party websites, products or services linked from our website, which have their own privacy policies.

2. Personal data we collect

Information you give us

Identity and contact details: name, company name, designation, email address, phone number, billing and postal address.
KYC and verification details: government-issued identity or business documents and GSTIN, collected to verify customers as required by CERT-In Directions and for tax compliance.
Account details: Customer Portal login, security settings and authorised contacts.
Transaction details: orders, invoices, payment records and payment references. Card and bank details are processed by our payment gateway partners; we do not store full card numbers.
Communications: enquiries, quote requests, support tickets, emails, call notes and feedback.

Information collected automatically

Technical data: IP address, browser type, device type, operating system and time zone when you visit our website or log in to the Customer Portal.
Usage data: pages viewed, links clicked and referring pages, collected through cookies and similar technologies (see our Cookie Policy).
Service data: IP addresses allotted to you, login records, resource usage and system logs relating to the services you use.

Information from other sources

Business contact details from referral partners, resellers, public directories and professional networks.
Payment confirmations and fraud-screening results from payment gateway partners.
Information from credit-reference, KYC-verification or fraud-prevention services where permitted by law.

3. How and why we use personal data

We use personal data only for specified and lawful purposes, namely:

To provide the WularData Services — to create and manage your account, provision and support services, process orders and payments, and send invoices and service notices.
To meet legal obligations — including customer verification and record-keeping required by the CERT-In Directions issued under the Information Technology Act, 2000, GST and income-tax law, and lawful requests from courts and government authorities.
To keep our services secure — to detect, prevent and investigate fraud, abuse, security incidents and breaches of our Acceptable Use Policy.
To support and improve our services — to respond to enquiries and tickets, monitor performance, fix problems and develop our offerings.
To communicate with you — about your account, maintenance, security, changes to our terms, and, where you have consented or where permitted by law, about our products, offers and events. You can opt out of marketing communications at any time.

Where we rely on your consent, we will ask for it through a clear notice, and you may withdraw it at any time by writing to the Grievance Officer listed below. Withdrawal does not affect processing already carried out, and we may continue to process data where another lawful basis applies, such as performing a contract you have requested or complying with law.

We do not sell personal data. We share it only as follows:

Service providers acting on our behalf, such as payment gateways, cloud and email providers, KYC-verification services, accounting and CRM software, and courier services, under contracts that require them to protect the data and use it only for our purposes.
Technology partners and suppliers where needed to deliver a service you have ordered, such as domain registries and registrars, software licensors (for example, Microsoft) and upstream network providers.
Professional advisers such as auditors, lawyers and tax consultants, under duties of confidentiality.
Government and law enforcement where required by law, including CERT-In, courts, tax authorities and law-enforcement agencies acting under lawful authority.
Business transfers — if WularData is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the successor, subject to this Policy.
Protection of rights — where reasonably necessary to protect the rights, property or safety of WularData, our customers or others.

5. Where personal data is stored

WularData is based in India, and we store and process personal data primarily in our data centres and systems in India. Subscriber information that we must retain under the CERT-In Directions is kept in India. Some of our service providers (for example, email or software-as-a-service providers) may process personal data outside India. Any such transfer is made in compliance with the DPDP Act and will not be made to any country restricted by the Government of India.

6. How long we keep personal data

We keep personal data only for as long as needed for the purposes described in this Policy, or as required by law. In particular:

customer KYC and subscriber records required under the CERT-In Directions are retained for at least five years after your account is closed;
system and access logs are retained for at least 180 days, as required by the CERT-In Directions;
invoices and accounting records are retained for the period required by GST and tax law (generally eight years); and
enquiries from people who do not become customers are retained for up to two years after our last interaction, unless you ask us to delete them sooner.

When personal data is no longer needed, we delete or anonymise it securely.

7. How we protect personal data

We use reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration and loss, including access controls, encryption in transit, network firewalls, monitoring, physical security at our data centres and confidentiality obligations for staff. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India as required by the DPDP Act, and report cyber-security incidents to CERT-In within the prescribed time. We may need to verify your identity before responding to a request concerning your personal data.

8. Your rights

Subject to the DPDP Act and its rules, you have the right to:

obtain a summary of the personal data we process about you and the processing activities;
request correction, completion or updating of inaccurate or incomplete personal data;
request erasure of personal data that is no longer needed, unless we are required by law to retain it;
withdraw consent where processing is based on consent;
nominate another person to exercise your rights in the event of your death or incapacity; and
have your grievances redressed by our Grievance Officer and, if you are not satisfied, approach the Data Protection Board of India.

To exercise these rights, write to our Grievance Officer at the address below. We will respond within the time limits set by law.

9. Children

The WularData Services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Cookies

We use cookies and similar technologies on our website. For details of what we use and how to manage them, please see our Cookie Policy at wulardata.com/legal/cookies.

11. Grievance Officer and contact

If you have any question or complaint about this Policy or our handling of your personal data, please contact:

Name: Sandeep Bhardwaj
Designation: Grievance Officer, Wular Data Lake Private Limited
Email: grievance.wdlc@wulardata.com
Address: B8, Sector 2, Noida, Uttar Pradesh 201301, India

We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.

12. Changes to this Policy

We may update this Policy to reflect changes in our services or in the law. The latest version will always be available at wulardata.com/legal/privacy, with the "Last updated" date shown above. If we make material changes, we will notify customers by email or through the Customer Portal before they take effect.