1. Company Information

Company Name: Unique Digital Outreach Private Limited

Registered Address: #821, JMD Megapolis IT Park, Sector 48, Gurugram, Haryana – 122018

Phone: +91 98218 31304

Email: info@uniqueoutreach.in

We act as the data controller for personal information collected through our website and services. For data collected and processed on behalf of our clients through our messaging platform, we act as a data processor.

2. Information We Collect

We collect personal and non-personal information through various touchpoints, including when you visit our website, register for an account, purchase a service, or contact us.

Personal Information

• Full name, email address, and phone number
• Company name, designation, and business contact details
• Billing information and GST/tax identification numbers
• Communication preferences and support queries

Usage & Technical Data

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and search terms used to find our website
• Session identifiers and access logs

Messaging & Platform Data

• Message logs, delivery reports, read receipts, and engagement metrics
• Sender and recipient identifiers (phone numbers, WhatsApp IDs)
• Template names, campaign identifiers, and API usage records
• Error logs and delivery failure reports

We do not intentionally collect sensitive personal data such as financial account numbers, health information, or government identity numbers unless specifically required for a service and with your explicit consent.

3. How We Use Your Data

We use the information we collect for the following purposes:

• Service Delivery: To set up, operate, and maintain your account and the services you have purchased
• Billing & Payments: To process payments, generate invoices, and manage billing records
• Customer Support: To respond to your enquiries, resolve issues, and provide technical assistance
• Platform Improvement: To analyse usage patterns, identify bugs, and continuously improve our platform
• Communication: To send you service updates, product announcements, and relevant information about your account
• Legal & Compliance: To comply with applicable laws, respond to legal requests, and enforce our terms
• Security: To detect, prevent, and investigate fraud, abuse, or unauthorised access to our platform

We do not use your data for automated decision-making or profiling that produces significant legal effects on you without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal grounds, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection laws:

• Consent: Where you have provided explicit consent for a specific purpose, such as subscribing to marketing communications
• Contractual Necessity: Where processing is required to perform our services as agreed in a service contract
• Legal Obligation: Where we are required to process data to comply with applicable laws and regulatory requirements
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights

5. Consent & Messaging Compliance

If you use our platform to send communications to third parties (such as customers or prospects), you are acting as the data controller for those communications. In this capacity, you agree that:

• You have obtained valid, documented consent from all recipients before sending messages through our platform
• You comply with all applicable messaging and telecom regulations, including TRAI guidelines, DLT registration norms, and the WhatsApp Business Policy
• You will not use our platform to send spam, phishing messages, or communications that violate applicable laws
• You maintain records of user consent and make them available to us or regulatory authorities upon request

We reserve the right to suspend access to our platform if we have reason to believe that it is being used in a manner that violates consent or messaging compliance requirements.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

• Telecom & Messaging Partners: To facilitate SMS and WhatsApp message delivery through registered telecom operators and WhatsApp Business API providers
• Technology & Cloud Partners: With cloud hosting, data storage, and API providers who process data on our behalf under strict confidentiality and data processing agreements
• Legal Compliance: When required by law, court order, or government authority, or to protect our legal rights and the safety of our users
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections

All third parties with whom we share data are required to handle it in accordance with applicable data protection laws and our data processing standards.

7. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Access controls and role-based permissions to restrict data access to authorised personnel only
• Regular security assessments and vulnerability monitoring
• Secure data centre infrastructure provided by our cloud partners

While we make every reasonable effort to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and take precautions on your end as well.

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities as required under applicable law.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account and service data is retained for the duration of your active account and for a period of up to 3 years following account termination, unless a longer retention period is required by law
• Billing and transaction records are retained for a minimum of 7 years as required under Indian tax and accounting regulations
• Messaging logs may be retained for up to 90 days for operational and debugging purposes, unless otherwise agreed

Upon expiry of the relevant retention period, data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site. We use the following types of cookies:

• Essential Cookies: Required for the website to function properly, including session management and security
• Analytics Cookies: Used to collect aggregate information about website traffic and user behaviour to help us improve our site
• Preference Cookies: Used to remember your settings and preferences for a better user experience

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you
• Right to Correction: You may request that we correct inaccurate or incomplete information
• Right to Erasure: You may request the deletion of your personal data, subject to legal retention obligations
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to Grievance Redressal: You have the right to raise a grievance with us regarding our data processing practices

To exercise any of these rights, please contact us at info@uniqueoutreach.in with the subject line "Data Privacy Request". We will respond to your request within 30 days. We may require you to verify your identity before processing your request.

11. Children's Privacy

Our services are intended for business use by adults and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete it.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material updates, we will notify you by email or through a notice on our website. The date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.