This privacy policy explains the way in which [Mosfet Technologies] (“we”, “our” or “us”) collects, uses, discloses, and otherwise processes personal data in our capacity as data fiduciaries (“controllers”), which includes personal data processing in relation to our enterprise websites, for establishing, maintaining contractual relationships with our customers, and for performing out contractual obligations. We endeavour to be transparent with you and encourage you to reach out to us for any questions you may have about our personal data processing activity.

For the purpose of privacy legislation, the controller is [Mosfet Technologies, address]. Questions regarding this policy should be addressed to our Grievance Officer who can be contacted using the contact information in this policy.

Data protection laws differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means of processing personal data whereas a “processor” processes personal data on behalf of and on the controller’s instructions.

This policy sets out our privacy practices where we are acting as the controller of personal data and does not cover or address how we process personal data as a processor acting for and on our customer’s instruction (who will be the controllers) and who will determine their own purposes and means of processing.

Such customers may access personal data processed by the products and services issued to their users (such as data processed by our [Mosfet’s app/service name] issued by our customer to their particular users). In such situations, our customers are responsible for determining how they will process their users’ personal data and for providing required notices and taking any other legal steps with regard to the collection and processing of such information. For information on such processing activity, please refer to the privacy notice of the business or organization which has granted you access to our products and services.

Further, this privacy policy does not extend to our processing activity relating to employment or personal data that is excluded from the purview of data protection laws such as anonymised or publicly available information.

Information we collect and process

We may collect the following types of information directly from you:

• Contact information: This includes basic details like your name, company, business and/or personal contact information, and how you prefer to be contacted. We use this to create accounts, fulfil orders, communicate with you, and send marketing materials
• Account details: This includes information needed to manage your account, such as your name, contact details, login information, a customer reference number, and your product interests
• Payment information: We use third-party payment processors, so you provide your payment details directly to them. We don't store sensitive financial information like your credit card number. Please check the payment processor's privacy notice for details on how they handle your data
• Event and survey information: This includes information you provide when participating in events, contests, promotions, surveys, or submitting feedback. We use this to manage these activities, conduct market research, and improve our offerings.
• Support information: This includes any messages, feedback, or recordings of calls and chats you have with our support team. We use this to address your questions and improve our services.
• Security information: When you visit our offices, we may collect information like your name, contact details, and video recordings via our CCTV systems, for security purposes

If you contact us with specific requests, we may need to collect additional information. In those cases, we'll provide further details about how we'll use that information.

Other sources of personal data

• When you engage with us on social media (e.g., following or sharing), we may get information from the social network based on your privacy settings there. This could include your profile, picture, username, etc. Always check your privacy settings on those platforms before connecting them to other services. We mainly use this information to send you messages
• We advertise on our platforms and via third parties. Advertisers and others may share your data with us to measure ad effectiveness (e.g., which ads led you to engage with us)
• We work with companies who help us with things like analysing data and marketing. They might collect your information and share it with us, like when you give feedback in a survey
• We might also collect your information from other places, such as publicly available sources, data providers, partners (like brands we work with or companies that sell our products)
• We may use the information we have about you to generate inferences about your interests and preferences
• Where you appear in footage captured by users of our dashcams or security cameras, who may then share this footage with us
• We may collect personal data that you provide to us at trade shows that we participate in
• When you visit our offices, security cameras and check-in systems may record images and videos, potentially capturing your likeness, appearance, and presence on our premises
• Other customers may share your information with us when they refer you to our services
• You can log in using accounts like Google or Facebook. We don't see your passwords for those accounts, but we get information to confirm who you are and let you in to our systems
• We may enable you to log in to our mobile apps using biometrics (like face or fingerprint scan). Your device handles this, and we don't store your biometric data, just whether the login was successful

Automatically collected personal data

We, along with our partners, utilize a range of technologies to automatically gather information when you interact with our services. These technologies include cookies, web beacons, pixels, embedded scripts, and other similar tracking tools. This helps us understand how our services are used and improve your experience. Here's some of the information we collect:

• Device and network details. This covers things like your device type, operating system, IP address, browser, and unique identifiers. We may use this to track your usage across multiple devices.
• How you interact with us. This includes what links you click, pages you visit, and how you interact with our content. We may even track detailed actions like mouse movements and keystrokes
• Your location. This can be a general area based on your IP address, or more precise if you give us permission

You can adjust your cookie preferences on our websites using the tools provided in the ‘cookies’ section below.

Additional uses of personal data

In addition to the reasons above, we may also use your personal data for the following purposes:

• To provide and improve our services. This includes fulfilling your requests, processing payments, managing our daily operations, and communicating with you effectively. We also use your data to manage your account, verify your identity, and provide access to various resources like our online store, events, and surveys.
• To understand and connect with you better. We may analyse your data to understand your preferences and tailor our interactions with you. This may include marketing our products and services through various channels like email, social media, and phone calls. We may also create aggregated or de-identified data that cannot be linked back to you for research and analytics.
• To protect our business and comply with legal requirements. We use your data to ensure the safety and security of our company, employees, and assets. This includes detecting and preventing fraud, enforcing our legal rights, and complying with applicable laws and regulations.

We may also use your data to facilitate business transactions, such as mergers or acquisitions, and to resolve disputes

Sensitive information

We do not process sensitive personal data. Sensitive personal data includes:

• Financial information such as bank account and payment instrument details
• Physical, physiological and mental health condition
• Sexual orientation
• Medical records and history
• Biometric information

We do not need sensitive personal data and urge you to be cautious about the information you provide. Please ensure that the information you provide to us does not include your sensitive personal data.

We may record certain information pertaining to your financial transactions when paying for our products and services. However, such information will be retained only for our internal accounting and fraud prevention purposes and will not be shared with others except where we are required to provide this information under a legal requirement, which will typically be for law enforcement purposes or to enforce our legal and contractual rights.

Our lawful basis for collecting and using your personal data

Our collection and use of your personal data rely on a variety of lawful bases, depending on the nature of our interaction and the type of information involved:

• Consent and performance of a contract. Where we have your consent for processing (for instance, when you opt in to receive marketing communications). When consent is the legal basis for our processing of your personal data, you may withdraw your consent at any time. We may also process your data to fulfil our contractual obligations when you purchase our products or services or when we engage with you as a vendor or partner. Although this effectively relies on your consent, you having contracted with us, your withdrawal of consent may have consequences for your contractual obligations to us, meaning withdrawing consent to personal data processing may cause you to be in breach of other terms of your contract. It may also adversely impact our ability to fulfil our contractual obligations to you.
• Legitimate use. When interacting with other businesses, we may receive personal data about their employees. In such cases, we expect our business partners to have obtained necessary consents or established other lawful grounds for sharing their employees' data with us. If you are such an employee and have questions about processing, you may contact your employer for clarifications.
• Vital interests. Where the processing is necessary for responding to medical emergencies involving a threat to your life or health or of another individual.
• Public interest or legal obligation. We may process your data when necessary for tasks in the public interest or to comply with legal obligations. This includes cooperating with law enforcement or maintaining records according to bookkeeping, tax, or employment laws. We may also process your data to enforce our legal rights.

While you're not obligated to share your personal data with us, some information is necessary to access certain services or features. For instance, we need your address to deliver an order. If you choose not to provide this information, we may not be able to fulfil your request. We'll always let you know whether providing specific data is mandatory or optional.

Transfers of your personal data

We may need to share your personal data in the following situations:

• We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company
• We may share your information with our affiliates, in which case we will require those affiliates to honour this privacy policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us
• We may share your information with our subcontractors and business partners to offer you certain products, services, or promotions, or to operationalise and deliver certain features of our products or services
• Technology companies such as cloud services providers who help us host and deliver our services
• Marketing and advertising partners for promotional activity related to our products and services
• Law enforcement agencies based on information requests that we are required to comply with, or to enforce our terms and conditions or to protect the rights, property, or safety of ourselves, our customers or other third parties

Security of our systems

We are committed to ensuring the security and confidentiality of your personal data. We implement a variety of technical and organizational measures to safeguard your information against unauthorized access, disclosure, modification or destruction, including:

• Data encryption. We encrypt data both at rest and in transit using industry-standard encryption protocols. This helps protect your data from unauthorized access while stored on our servers and transmitted over networks
• Access controls. We maintain strict access controls to limit access to your personal data to authorized personnel only. This includes regular reviews of user permissions, logging of all access attempts, and investigation of all unsuccessful login attempts
• Secure authentication. We use secure authentication methods to authenticate and authorise access to our systems, and to verify the identity of users and devices accessing our systems
• Data retention and destruction. We retain your personal data only for as long as necessary and based on applicable laws and regulations. We have data retention and destruction policies and procedures in place to ensure that your data is securely disposed of when no longer needed
• Employee training and awareness. We provide regular training and awareness programs to our employees on data protection and security best practices to ensure they handle your data responsibly and in compliance with our policies and applicable laws
• Vendor due diligence. We vet our third-party service providers to ensure they maintain adequate security measures to protect your personal data. We also have contractual agreements in place with these providers that require them to comply with our data protection standards. We only provide the information they need to undertake the service they provide and ensure contractually that they can only use the information for a specific and defined purpose. We also require them to return or delete any information held when their services cease
• Physical security. We maintain physical security measures to protect your personal data from unauthorized access or loss. These measures include storing physical documents securely, clean desk and clear screen practices, and secure disposal of paper documents through shredding and electronic media through physical destruction to prevent data recovery
• Incident response. We have an incident response plan in place to promptly detect, investigate and respond to any security incidents or data breaches. We will notify you and relevant authorities of any breaches, as required by law
• We update our security measures and organizational practices commensurate with the personal data that we process, to ensure the ongoing protection of your personal data.

Use of cookies and tracking technologies

We use cookies and similar technologies, such as local storage objects, to collect information about how you use our website and services. This helps us understand user behaviour and preferences, allowing us to improve your experience when using our website and service and also enhancing them.

Cookies are small text files that are placed on your device when you visit our website. They allow us to recognize your device and remember your preferences, such as language settings or login information.

We use the following types of cookies:

• Essential cookies. These cookies are absolutely necessary for our website and services to function properly. They enable core features such as authentication, security, and basic functionality. These cookies do not require your consent and are always active. Without these cookies, our website and services may not function properly.
• Analytics cookies. These cookies help us understand how you interact with our website and services by collecting information about your usage patterns and preferences. This information allows us to analyse trends, track user interactions, and improve our website and services. Subject to local legal requirements, these cookies may be placed on your device with your consent. You can manage or withdraw your consent at any time through the cookie settings panel on our website.
• Third-party cookies. We may allow third-party service providers, such as Google Analytics, to use cookies on our website. These cookies help us analyse user behaviour and measure the effectiveness of our marketing efforts. Subject to local legal requirements, third-party cookies may be used with your consent. You can manage your preferences regarding these cookies through the cookie settings panel on our website.

You have several options to control or limit how we use cookies:

• Cookie settings. You can manage your cookie preferences through the cookie settings panel on our website which allows you to accept or decline non-essential cookies. You will be prompted to set your preferences the first time you visit our website, and you can update your preferences at any time.
• Browser settings. You can also manage your cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling cookies altogether may prevent you from using certain functionality of our website or services.

Cookie settings

Processing personal data of minors

We do not knowingly collect or solicit data from or market to children under 18 years of age. By using our website and services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of our website and services. If we learn that personal data from users less than 18 years of age has been collected, we may deactivate the account and take reasonable measures to delete such data from our records.

Your privacy rights

• Withdrawing your consent. Where we rely on your consent to process your personal data, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in this privacy policy. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
• Access your information. You can request a summary of personal data we hold about you and the nature of processing we undertake in the context of that information.
• Third party information. You can seek the identities of other controllers/data fiduciaries and processor with whom we have shared your personal data along with a description of the information shared.
• Correct, complete, update your personal data. You may access your personal data through your account and correct, complete or update your information. You may also ask us to do any of these by writing to us at [email].
• Delete your information. Where we rely on your consent to process personal data, you have the right to request deletion of the personal data we collect from you. Your right to request deletion may be restricted based on the nature of your contractual commitments to us. Where we delete your data, we may not be able to continue providing some or all of our services to you. In such cases, we will not have any liability to you, and you may not be entitled to refunds for unusable services. To request deletion of your personal data, please write to us as [email].
• Account Information. If you would at any time like to review, correct, complete or change the information in your account or delete your account, you can: <To be discussed>. Upon your request to delete your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal rights and/or comply with applicable legal requirements.

Updates to this privacy policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated ‘last updated’ section and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes on our website or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

Contacting us about this policy

If you have questions or comments about this policy, you may contact us by post at: [email]

If you have any complaints about our collection and use of your personal data, you may report it to our Grievance Officer at the address below, who will then provide you an appropriate response and/or redressal of your complaint within legally stipulated timelines.

[Grievance officer]

[name]

[email id]

[other contact information if any]