Privacy Statement

Privacy Policy

for Soft Elevation Pvt Ltd.

Introduction and Preamble

  • This Privacy Policy (“Policy”) is issued by Soft Elevation Private Limited, a company incorporated under the provisions of the Companies Act, 2013, and having its registered office at Plot No ITC 10, Ground Floor, Sector 67, SAS Nagar, Punjab, PIN 160062 (hereinafter referred to as the “Company”, “we”, “us”, or “our”).
  • The Company is committed to safeguarding the privacy and confidentiality of personal data entrusted to it. This Policy is framed in compliance with the provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws and regulations governing data protection in India.
  • The purpose of this Policy is to set out, in clear and comprehensive terms, the manner in which the Company collects, uses, processes, stores, discloses, and protects personal data of individuals, and to inform data subjects of their legal rights in relation thereto.

Definitions

For the purposes of this Policy, unless the context otherwise requires:

  1. “Data Subject” shall mean any natural person to whom the personal data relates.
  2. “Personal Data” shall mean any information relating to an identified or identifiable natural person, whether directly or indirectly.
  3. “Sensitive Personal Data” shall mean such categories of personal data as are defined under applicable law, including but not limited to passwords, financial information, health records, sexual orientation, medical records, and biometric information.
  4. “Processing” shall mean any operation or set of operations performed upon personal data, whether or not by automated means, including but not limited to collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.

Data Controller

  • The Company shall act as the Data Controller in respect of all personal data collected and processed under this Policy. The details of the Data Controller are as follows:

          –  Entity: Soft Elevation Private Limited
          –  Registered Address: Plot No ITC 10, Ground Floor, Sector 67, SAS Nagar, Punjab, PIN 160062

  • The Data Protection Officer shall be the designated point of contact for all queries, concerns, and requests relating to the processing of personal data.

Categories of Data Collected

1. The Company may collect and process the following categories of personal data:

  • Identity Data, including but not limited to name, title, date of birth, and gender.
  • Contact Data, including postal address, email address, and telephone numbers.
  • Technical Data, including IP address, browser type, device identifiers, and operating system.
  • Usage Data, including website navigation patterns, click-through rates, and time spent on pages.
  • Marketing Data, including preferences regarding receipt of marketing communications.
  • Transaction Data, including payment details, billing information, and purchase history.

2. In addition, the Company may collect Sensitive Personal Data, including but not limited to:

  • Financial information for the purpose of payment processing;
  • Professional credentials and certifications, where relevant to the services provided;
  • Health-related information, where relevant to employment or service delivery.

Legal Basis for Processing

The Company shall process personal data only where such processing is lawful under applicable law. The lawful bases for processing shall include:

  • Consent: Where the Data Subject has provided explicit consent for the processing of personal data.
  • Contractual Necessity: Where processing is necessary for the performance of a contract to which the Data Subject is a party.
  • Legal Obligation: Where processing is required to comply with a statutory or regulatory obligation.
  • Legitimate Interests: Where processing is necessary for the legitimate business interests of the Company, provided that such interests do not override the fundamental rights and freedoms of the Data Subject.