Privacy policy.

Who we are

This privacy policy is issued by Woverp Management Consultants Private Limited, a company incorporated under the Companies Act, 2013 in India, having its registered office at #35, Ground Floor, 2nd Cross, Jogpalya, Halasuru, Bengaluru – 560008, Karnataka, India (CIN: U74999KA2017PTC107838) (referred to in this policy as "Woverp", "the firm", "we", "us" or "our").

We carry on our advisory practice under the brand "Kompound". References in this policy to "Kompound" are references to the firm acting under that brand.

This policy explains how we handle personal information that is collected, received or processed by us in connection with our websites (including the domain on which this policy is published), our mobile and desktop applications, and our advisory engagements (together, our "Services").

Information we collect

We collect personal information in three broad ways: information you provide to us directly, information we receive automatically when you use our Services, and information we receive from third parties acting on your instructions.

2.1 Information you provide

• Identifying information such as your name, designation, employer, postal address, email address and telephone number.
• Information you choose to share when contacting us, including the content of correspondence and documents you attach.
• Account information, where you register for or sign in to an application we operate, including authentication identifiers issued by your identity provider.
• Information necessary to perform an engagement, including documents and data you or your authorised representatives upload to our applications.

2.2 Information collected automatically

• Technical information about the device and software used to access our Services, including device model, operating system, browser, IP address, time-zone and approximate region.
• Usage information about which pages and features were accessed, the time of access, and the actions taken within our applications.
• Cookies and similar technologies set by us or our service providers, only to the extent necessary for the Services to function and, where applicable, with your consent.

2.3 Information from third parties

• Information from authentication providers (for example, Google or Apple sign-in) where you choose to use such a provider to sign in to our applications.
• Information from analytics, error-reporting and infrastructure providers that we engage on our behalf and that act under our instructions.

How we use information

We use personal information for the following purposes only:

• To provide, operate, secure and improve our websites and applications.
• To respond to enquiries, communications and requests from you or your organisation.
• To perform our obligations under engagement letters, contracts and other agreements with our clients.
• To maintain books of account, records and documents required under Indian law.
• To detect, investigate and prevent fraud, security incidents and misuse of our Services.
• To comply with applicable law, regulation, court orders and lawful requests from public authorities.

We do not sell personal information. We do not use personal information to make automated decisions that produce legal or similarly significant effects on you without human review.

Legal basis for processing

We process personal information on the basis of: (a) your consent, where consent is required; (b) the performance of a contract with you or your organisation; (c) compliance with our legal obligations; and (d) our legitimate interests in operating, securing and improving the Services, where those interests are not overridden by your rights and freedoms.

Sharing of information

We share personal information only in the following circumstances:

• Service providers. With infrastructure, hosting, authentication, analytics, error-reporting and communications providers that process personal information on our behalf under appropriate contractual safeguards.
• Professional advisers. With our auditors, lawyers and other professional advisers, on a confidential basis, where necessary for the management of the firm.
• Legal and regulatory. With courts, regulators, statutory authorities, law-enforcement agencies and other competent bodies, where required or permitted by law.
• Business transfers. With a successor entity in the event of a merger, acquisition, reorganisation or sale of all or part of our business, subject to appropriate confidentiality undertakings.

International transfers

Some of our service providers may be located outside India. Where personal information is transferred outside India, we take reasonable steps to ensure that the transfer is lawful and that the information continues to be protected by appropriate safeguards consistent with this policy.

Retention

We retain personal information for as long as is reasonably necessary for the purposes for which it was collected, including to satisfy our legal, accounting, regulatory and contractual obligations. Records that we are required to maintain under Indian law are retained for the periods prescribed by that law.

Security

We maintain reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction, including encrypted transport, access controls, audit logging and a documented incident-response procedure. No system, however, is completely secure, and we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may have the following rights in relation to personal information we hold about you:

• To request access to, and a copy of, the personal information we hold about you.
• To request correction of inaccurate or incomplete personal information.
• To request deletion of personal information, subject to our legal and regulatory obligations to retain certain records.
• To withdraw consent, where processing is based on your consent, without affecting the lawfulness of processing before such withdrawal.
• To object to or restrict certain processing, on the grounds permitted by applicable law.
• To lodge a complaint with the competent supervisory authority in your jurisdiction.

You may exercise these rights by writing to us at the contact address below. We may need to verify your identity before responding to a request.

Children

Our Services are not directed to children under the age of eighteen. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

Third-party links and services

Our websites and applications may contain links to, or integrate with, third-party websites and services that we do not control. This policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party service before providing personal information to it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective from" date at the top of this page. Material changes will be communicated through our websites or applications, or directly to you, before they take effect.

Contact

If you have any questions about this policy, or if you wish to exercise any of your rights, please write to us at: