Data Protection & Privacy Sovereignty

1. Definition of Personal Data

As per the DPDP Act, Personal Data means any data about an individual who is identifiable by or in relation to such data.

2. Personal Data We Collect

Datoway Technology collects Personal Data only to the extent necessary to provide our services, respond to inquiries, meet legal obligations, and improve user experience. The categories of Personal Data we may collect include:

3. Purpose of Data Processing

We process your Personal Data for the following legitimate and lawful purposes:

• To provide, operate, and improve our services and offerings
• To respond to business inquiries, requests, and communications
• To manage recruitment, hiring, and talent engagement processes
• To send marketing communications, updates, and announcements (where consent is provided)
• To meet legal, regulatory, compliance, and contractual obligations
• To ensure security, prevent fraud, and protect against misuse or unauthorized access

4. Consent & Lawful Processing

Personal Data is processed by Datoway Technology strictly in accordance with the Digital Personal Data Protection Act, 2023. Processing is carried out only:

• With your free, specific, informed, and unambiguous consent, or
• Where processing is required to comply with legal or regulatory obligations, or
• For legitimate uses permitted under the DPDP Act

You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.

5. Data Protection & Security Measures

Datoway Technology implements reasonable and appropriate technical and organizational safeguards to protect Personal Data, including:

• Role-based access control and restricted data access
• Secure infrastructure and encryption where applicable
• Confidentiality and data protection agreements with employees, partners, and service providers

6. Data Retention

Personal Data is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with applicable legal and regulatory requirements. Once Personal Data is no longer required, it is securely deleted, anonymized, or archived in accordance with industry best practices.

7. Data Sharing & Disclosure

Datoway Technology does not sell, trade, or rent your Personal Data to third parties.

We may share Personal Data only with:

• Trusted service providers (such as hosting, analytics, and operational support partners)
• Governmental, legal, or regulatory authorities where disclosure is required by law

All third parties are contractually obligated to protect Personal Data and process it only for authorized purposes.

8. Cross-Border Data Transfers

Where permitted by applicable law, Personal Data may be transferred and processed outside India. In such cases, Datoway Technology ensures that appropriate safeguards are implemented to protect Personal Data in accordance with the DPDP Act and applicable data protection standards.

9. Your Rights under the DPDP Act, 2023

In accordance with the DPDP Act, 2023, you have the right to:

• Access your Personal Data
• Request correction of inaccurate or incomplete Personal Data
• Withdraw consent for data processing
• Request erasure of Personal Data, where applicable
• Seek grievance redressal

Requests may be submitted using the contact details provided below.