Effective Date: 25th June 2025
At Inboundly (operated by Padmakuvar Growth Catalyst Private Limited), we are committed to upholding the highest data privacy and protection standards. We fully comply with the General Data Protection Regulation (GDPR) and other relevant data protection laws worldwide to ensure transparency, accountability, and the secure handling of personal data.
1. How We Protect Data
- Data Security & Encryption: All personal data is encrypted, securely stored, and protected from unauthorised access.
- Access Control: Only authorised personnel can access sensitive user data under strict internal controls.
- Vendor Compliance: We engage only with GDPR-compliant vendors and third-party service providers (e.g., hosting, analytics, payments).
- No Unauthorised Sharing: We never sell, rent, or disclose personal data to unauthorised third parties.
2. User Rights Under GDPR
As per the GDPR, all users have the following rights regarding their personal data:
- Right to Access – Request a copy of your personal data.
- Right to Rectification – Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to Be Forgotten”) – Request deletion of data, subject to applicable laws.
- Right to Restrict Processing – Request restricted use of your data in specific circumstances.
- Right to Object – Opt out of data use for marketing or profiling purposes.
- Right to Data Portability – Request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at compliances@inboundly.digital As required by GDPR, we will respond within 30 days.
3. Data Retention Policy
- We retain personal data only as long as necessary for business operations, legal, or compliance purposes.
- Transaction and billing data may be retained for up to 7 years to meet tax and audit requirements.
- Marketing-related data is deleted upon user request or after a prolonged period of inactivity.
4. Data Breach Response
- In the event of a breach, we will:
- Immediately assess and contain the incident.
- Notify affected users within 72 hours, as per GDPR obligations.
- Cooperate with regulators and authorities for resolution.
- Users will be informed of the nature of the breach, potential risks, and recommended action steps.
5. International Data Transfers
- For users located outside India, data may be transferred to servers in India or other jurisdictions where our vendors operate.
- We ensure legal protection for international transfers via:
– Standard Contractual Clauses (SCCs)
– Data Processing Agreements (DPAs) with third-party vendors
6. Compliance with Global Data Protection Laws
In addition to GDPR, we comply with:
- India: Information Technology Act (2000), IT Rules (2011), and DPDP Act (2023)
- United States: California Consumer Privacy Act (CCPA), CAN-SPAM Act
- Australia: Privacy Act (1988)
- Other local data protection laws are applicable based on user geography
7. Contact & Complaints
If you have questions, concerns, or wish to make a complaint:
Email: compliances@inboundly.digital
Website: https://inboundly.digital
Registered Office:
- Inboundly by Padmakuvar Growth Catalyst Private Limited
- C/o. Girishkumar H. Sidhpura
- Block No J-1/1 Nilkanth Park,
- Behind Nilkanth Cinema,
- Sorathiyawadi, Rajkot, Gujarat, INDIA,
- Pincode: 360002
You also have the right to lodge a complaint with your local data protection authority.
