Privacy Policy
Introduction
This Privacy Policy explains how NoteG Technologies Private Limited ("NoteG", "we", "our", or "us") collects, uses, stores, shares, discloses, and otherwise processes Personal Information in connection with our corporate website available at notegtechnologies.com (the "Site") and the professional technology and consulting services that we provide, including services relating to education technology (EdTech), data analytics, technology consulting, change management, business strategy, and other related consulting engagements (collectively, the "Services").
We recognize that privacy and the responsible handling of Personal Information are important to our clients, business partners, website visitors, and other individuals with whom we interact. We are committed to processing Personal Information in a lawful, transparent, and responsible manner and to implementing appropriate safeguards designed to protect such information in accordance with applicable privacy and data protection laws.
This Privacy Policy describes the categories of Personal Information we collect, the purposes for which we use such information, the legal grounds on which processing is carried out where required by applicable law, the circumstances in which Personal Information may be shared, the rights available to individuals regarding their Personal Information, and the measures we take to protect the information entrusted to us.
Please read this Privacy Policy carefully before using our Site or interacting with us through our Services.
Personal Information processed through our Sampark communication and consultation platform is governed by the Sampark Privacy Statement and not by this Privacy Policy. This Privacy Policy applies solely to the processing of Personal Information relating to NoteG Technologies Private Limited's corporate website, business operations, and consulting activities.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Applicable Law" means any applicable privacy, data protection, cybersecurity, or other law or regulation governing the processing of Personal Information, including, where applicable, the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and any other applicable legislation.
- "Client" means any organization or individual that engages NoteG Technologies Private Limited to provide one or more of its Services under a contractual arrangement.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Information. Where applicable under Indian law, this term includes the equivalent concept of a Data Fiduciary.
- "Data Processor" means an individual or organization that processes Personal Information solely on behalf of and under the documented instructions of a Data Controller or Data Fiduciary.
- "Personal Information" or "Personal Data" means any information relating to an identified or identifiable natural person, whether directly or indirectly, as defined under applicable privacy and data protection laws.
- "Processing" means any operation or set of operations performed on Personal Information, whether by automated or non-automated means. This includes collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, sharing, restriction, deletion, destruction, or any other handling of Personal Information.
- "Services" means the technology consulting, EdTech, business strategy, data analytics, software development, change management, and related professional services offered by NoteG Technologies Private Limited.
- "Site" means the corporate website operated by NoteG Technologies Private Limited at notegtechnologies.com, together with any webpages through which this Privacy Policy is made available.
- "Subprocessor" means a third-party service provider engaged to process Personal Information on behalf of NoteG where NoteG itself is acting as a Data Processor.
- "You" or "Your" means any individual who accesses the Site, contacts us, receives our communications, or otherwise interacts with NoteG Technologies Private Limited.
Scope
This Privacy Policy applies to the Personal Information that NoteG Technologies Private Limited collects and processes in connection with the operation of its corporate website, the management of its business relationships, and the delivery of its professional consulting and technology Services.
This Privacy Policy applies to Personal Information relating to:
- Visitors who access or browse the Site.
- Individuals who contact us through our website, email, telephone, or other communication channels.
- Prospective clients, business contacts, and individuals who submit enquiries regarding our Services.
- Individuals who subscribe to newsletters, updates, or marketing communications.
- Representatives, employees, contractors, consultants, or other authorized personnel of our clients, partners, vendors, or business associates whose Personal Information is processed during the course of providing or receiving our Services.
Depending on the nature of the processing activity and the contractual relationship involved, NoteG may process Personal Information either as a Data Controller or as a Data Processor.
Where we collect and process Personal Information for our own business purposes—including operating and maintaining our website, responding to enquiries, communicating with prospective or existing clients, marketing our Services, maintaining business relationships, improving our operations, or complying with legal obligations—we act as the Data Controller (or Data Fiduciary, where applicable under Indian law).
Where we process Personal Information solely on behalf of a client in connection with a consulting or technology services engagement, we generally act as a Data Processor and process such information only in accordance with the documented instructions of the relevant client, the applicable services agreement, and any Data Processing Addendum ("DPA") or other contractual arrangements governing the engagement.
Unless expressly stated otherwise, this Privacy Policy does not govern Personal Information processed through the Sampark platform. Such processing is governed by the separate Sampark Privacy Statement applicable to that platform.
Information We Collect
The categories of Personal Information that we collect depend on the manner in which you interact with our Site and Services. We collect Personal Information that you voluntarily provide to us, as well as certain technical information that is collected automatically when you access or use our Site.
Information You Provide to Us
We may collect Personal Information that you choose to provide directly to us when communicating with us, requesting information about our Services, engaging with us for business purposes, or otherwise interacting with our Site. Depending on the nature of your interaction with us, this information may include:
- Identity and Contact Information including your full name, email address, telephone or mobile number, company or organization name, and job title, designation, or professional role.
- Enquiry and Communication Information including messages submitted through contact forms, email correspondence, customer support requests, business enquiries, and any other information you voluntarily provide.
- Marketing Preferences including your newsletter subscriptions, communication preferences, consent records, and opt-out choices where required by applicable law.
- Information Shared During a Services Engagement to the extent agreed under the applicable contract or statement of work. The categories processed depend on the scope of the professional services being delivered.
Information Collected Automatically
When you visit or interact with our Site, certain technical and usage-related information may be collected automatically through standard web technologies. This information helps us operate, maintain, secure, and improve our Site.
Information Collected Automatically
When you visit or interact with our Site, certain technical and usage-related information may be collected automatically through standard web technologies. This information helps us operate, maintain, secure, and improve our Site.
- Device and Browser Information, including browser type and version, device characteristics, Internet Protocol (IP) address, and approximate geographic location derived from the IP address.
- Website Usage Information, including pages viewed, referring webpages or sources, navigation patterns, and time spent on the Site. This information assists us in understanding how our Site is used and supports the ongoing operation and improvement of our website and Services.
- Cookies and Similar Technologies used to support the functionality, performance, and operation of our Site. Additional information regarding the cookies we use, the purposes for which they are used, and the choices available to you can be found in our Cookie Policy.
Sensitive Personal Information
We do not intentionally request or collect special category or sensitive Personal Information through our corporate website.
Accordingly, we request that you do not submit confidential, sensitive, or special category Personal Information through our website forms unless specifically requested by us or otherwise required in connection with an applicable contractual engagement.
How We Use Information
We process Personal Information only for legitimate business purposes, to provide our Services, operate our website, communicate with individuals and organizations that engage with us, and to comply with applicable legal and regulatory obligations. The purposes for which we process Personal Information depend on the nature of the individual's interaction with NoteG Technologies Private Limited.
- To operate, maintain, and improve our Site by understanding how visitors interact with the Site, improving user experience, troubleshooting technical issues, maintaining performance, and supporting the ongoing availability and functionality of the Site.
- To respond to enquiries and provide customer or client support by communicating with prospective clients, existing clients, business partners, and other individuals interacting with our organization.
- To send marketing communications and manage communication preferences where permitted by applicable law or where consent has been provided. Individuals may opt out of marketing communications at any time.
- To deliver, manage, and improve our professional consulting and technology Services, including managing client engagements, coordinating project activities, and supporting continuous improvement.
- To maintain security and prevent fraud or abuse by detecting, investigating, preventing, or responding to unauthorized access, fraudulent activity, misuse of our Site or Services, security incidents, or activities affecting the confidentiality, integrity, or availability of our systems.
- To protect our rights and legitimate business interests, including establishing, exercising, or defending legal claims, enforcing contractual rights, protecting intellectual property, and safeguarding our business interests.
- To comply with legal and regulatory obligations, including responding to lawful requests, maintaining legally required records, fulfilling statutory obligations, and complying with applicable laws and regulations.
Legal Bases for Processing
Where applicable privacy and data protection laws require a legal basis for the processing of Personal Information, NoteG Technologies Private Limited processes Personal Information on one or more of the following legal grounds, depending on the nature of the processing activity and the applicable legal requirements.
- Performance of a Contract: We process Personal Information where such processing is necessary to enter into, perform, or manage a contractual relationship with you or the organization that you represent. This includes responding to requests for our Services, providing and supporting our Services, communicating regarding ongoing client engagements, fulfilling contractual obligations, and taking steps at your request prior to entering into a contractual relationship.
- Legitimate Interests: We may process Personal Information where necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual concerned.
Legal Bases for Processing
Where we rely on legitimate interests as a legal basis, we consider the nature of the processing and balance our legitimate interests against the rights and reasonable expectations of the individuals whose Personal Information is processed.
- Operating, maintaining, and improving our Site and Services.
- Managing and developing our business relationships.
- Responding to enquiries and business communications.
- Maintaining the security, integrity, and availability of our systems.
- Detecting, preventing, and investigating fraud, abuse, or other unauthorized activities.
- Protecting our legal rights, intellectual property, and business interests.
- Supporting the efficient administration and operation of our business.
Consent: Where required by applicable law, we process Personal Information based on your consent. This includes, where applicable, sending marketing or promotional communications, placing or using non-essential cookies or similar technologies, and any other processing activity for which applicable law requires consent. You may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the consent was withdrawn.
Compliance with Legal Obligations: We may process Personal Information where such processing is necessary for compliance with applicable laws, regulations, judicial proceedings, lawful governmental requests, or other legal obligations to which NoteG Technologies Private Limited is subject.
Processing under the Digital Personal Data Protection Act, 2023: Where the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies, NoteG Technologies Private Limited processes Personal Information based on consent where required and on such other lawful grounds as may be permitted under the DPDP Act and any applicable rules or regulations issued thereunder.
International Transfers
NoteG Technologies Private Limited is incorporated and operates primarily in India. Depending on the nature of our business operations, the Services we provide, and the service providers that support our business, Personal Information may be processed, accessed, stored, or transferred in India and, where necessary, in other jurisdictions.
As a result, Personal Information may be transferred to countries whose data protection laws may differ from those of the country in which the information was originally collected.
Where Personal Information originating from the European Economic Area (EEA) or the United Kingdom is transferred to a country that has not been recognized as providing an adequate level of data protection under applicable law, NoteG Technologies Private Limited implements appropriate safeguards to protect such Personal Information.
- The European Commission's Standard Contractual Clauses (SCCs).
- The United Kingdom's International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, where applicable.
We take reasonable steps to ensure that Personal Information transferred internationally continues to receive an appropriate level of protection consistent with applicable legal requirements and the safeguards implemented for the relevant transfer.
Retention of Personal Information
NoteG Technologies Private Limited retains Personal Information only for as long as it is reasonably necessary to fulfil the purposes for which the information was collected, unless a longer retention period is required or permitted by applicable law.
The length of time for which Personal Information is retained may vary depending on the nature of the information, the purpose for which it is processed, the applicable contractual relationship, and any legal or regulatory obligations that apply.
In determining appropriate retention periods, we consider the purpose for which the Personal Information was collected, the nature of our relationship with the relevant individual or organization, applicable contractual commitments, legal, regulatory, accounting, or compliance requirements, the need to establish, exercise, or defend legal claims, and our legitimate business requirements where permitted by applicable law.
Retention of Personal Information
When Personal Information is no longer required for the purposes for which it was collected, and there is no legal, contractual, or other legitimate requirement to retain it, we will take appropriate steps to delete, erase, or otherwise dispose of such information in accordance with our applicable retention practices and legal obligations.
Where Personal Information is processed as part of a client engagement, the retention of such information is governed by the applicable services agreement, statement of work, Data Processing Addendum ("DPA"), or other contractual arrangements entered into with the relevant client.
Nothing in this section shall prevent NoteG Technologies Private Limited from retaining Personal Information where such retention is necessary to comply with applicable legal or regulatory obligations, resolve disputes, establish, exercise, or defend legal claims, or enforce applicable agreements or contractual rights.
Your Privacy Rights
Depending on your location, the applicable privacy and data protection laws, and the circumstances under which your Personal Information is processed, you may have certain rights in relation to your Personal Information. These rights are subject to applicable legal requirements, limitations, and exceptions and may vary depending on the jurisdiction in which you reside.
- Request access to the Personal Information that we hold about you.
- Request the correction or updating of inaccurate or incomplete Personal Information.
- Request the deletion or erasure of your Personal Information.
- Request the restriction of the processing of your Personal Information.
- Object to certain types of processing where permitted by applicable law.
- Request the portability of your Personal Information where applicable.
- Withdraw your consent at any time where processing is based on consent.
Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, you may also have the right to lodge a complaint with the competent supervisory authority in your country or region.
Where the Digital Personal Data Protection Act, 2023 (DPDP Act) applies, you may have rights including access to information relating to the processing of your Personal Information, correction of inaccurate or incomplete information, erasure of Personal Information subject to applicable legal requirements, grievance redressal, and the right of nomination as provided under the Act. Where applicable, you may also approach the Data Protection Board of India.
Where the California Consumer Privacy Act (CCPA/CPRA) applies, eligible California residents may have the right to know or access the Personal Information collected about them, request deletion, request correction of inaccurate Personal Information, and exercise their rights without unlawful discrimination. NoteG Technologies Private Limited does not sell Personal Information or share Personal Information for cross-context behavioural advertising.
If you wish to exercise any of these rights or have questions regarding our processing of your Personal Information, please contact us or email business@notegtechnologies.com.
Grievance Redressal
NoteG Technologies Private Limited is committed to addressing privacy-related questions, concerns, and grievances in a fair, timely, and transparent manner.
Where the Digital Personal Data Protection Act, 2023 (DPDP Act) applies, individuals may submit privacy-related grievances or requests regarding the processing of their Personal Information by contacting our designated Grievance Officer.
- Grievance Officer: Simran Kashyap
- Email: business@notegtechnologies.com
Upon receiving a privacy-related grievance or request, we will review the matter and respond in accordance with applicable legal requirements. We may request additional information where necessary to verify identity or better understand the request.
Personal Data Breach
NoteG Technologies Private Limited is committed to responding appropriately to incidents involving Personal Information.
In the event of a Personal Data Breach, we will take reasonable steps to investigate the incident, contain its impact, implement appropriate remedial measures, and notify affected individuals and competent regulatory authorities where required by applicable law.
Children's Privacy
Our Site and our corporate Services are intended for business and professional use and are not directed toward children. We do not knowingly collect Personal Information from children through our corporate website.
If we become aware that Personal Information has been collected from a child in a manner inconsistent with applicable law, we will take appropriate steps to address the matter.
For education-related deployments of the Sampark platform involving minors or students, the applicable processing activities are governed by the separate Sampark Privacy Statement and Sampark Children's Education Privacy Statement.
Changes to this Privacy Policy
We may update or modify this Privacy Policy from time to time to reflect changes in our business operations, the Services we provide, applicable legal or regulatory requirements, or other operational developments.
Where this Privacy Policy is updated, the revised version will be published on our Site and the Last Updated date will be revised accordingly. Where required by applicable law, we will provide additional notice of material changes.
Your continued use of our Site or interaction with our Services following publication of an updated Privacy Policy constitutes your acknowledgement of the revised Privacy Policy to the extent permitted by applicable law.
Contact Us
If you have any questions regarding this Privacy Policy or our privacy practices, please email business@notegtechnologies.com.
You may also wish to review our Cookie Policy and Terms & Conditions for additional information relating to our website and services.