Legal
Privacy Policy
How we handle personal data, what rights you have, and who to contact.
Version 1.0
The short version. We collect what you give us on our forms, and we use it to answer you. We do not sell it. You can ask us to show you what we hold, correct it or erase it, and we have a named person whose job is to answer you. The detail is below, and it is written to be read rather than to be defended.
01
Who we are
WeBiii Traume Private Limited is the Data Fiduciary responsible for the personal data described in this policy. That means we decide what data is collected and why, and we are accountable for it.
Our website is webiiitraum.com. Our Grievance Officer is Geetanjali Bharti, reachable at grievance@chtpl.org.
02
What we collect
We only collect personal data you give us. We do not buy data and we do not scrape it.
When you request access to the platform. Your name, work email address, company or organisation name, your role, your country, your description of what you are building, the current stage of that project, your target timeline, and how you heard about us.
When you contact us. Your name, email address, and whatever you write in your message.
When you apply for a job. Your name, contact details, your CV and anything else you choose to send us.
Automatically, when you visit. Standard technical information — the pages you view, the approximate region you are in, your browser and device type, and how you arrived. Used in aggregate to understand how the site is used. See section 8.
What we do not collect. We do not ask for financial account details, government identity numbers, health information or biometric data through this website. If a form ever appears to ask you for any of these, do not fill it in, and tell us.
03
Why we collect it, and on what basis
We collect personal data to assess and respond to access requests, to reply to enquiries, to consider job applications, to keep this site secure and working, and to meet legal obligations where they apply.
Access requests, enquiries and job applications are processed on the basis of your consent. Keeping the site secure and functioning is a legitimate use under the Act. Where a law requires us to retain or disclose something, that obligation is the basis.
We do not use your data for automated decision-making about you, and we do not use it for behavioural advertising.
04
Who we share it with
We do not sell personal data. We do not share it with advertisers or data brokers.
We use a small number of service providers to run this website, deliver our email and store our records. They process data only on our instructions, only for what we have asked them to do, and they are bound by contract not to use it for their own purposes. We remain accountable for what they do with it.
We will disclose personal data if we are legally required to — for example under a court order or a lawful demand from an authority. Where we are permitted to tell you, we will.
05
How long we keep it
We keep personal data for as long as we need it for the purpose we collected it, and then we erase it.
Access requests are kept while your request is open and for a defined period afterwards, so we can contact you when a suitable stage opens. Enquiries are kept for a defined period after the conversation ends. Job applications are kept for a defined period after the role is filled, unless you ask us to keep you on file. Records we are required to keep by law are kept for the period the law requires.
06
Your rights
Under the Digital Personal Data Protection Act 2023 you have the right to:
Know what we hold. Ask us for a summary of your personal data and how we are processing it.
Have it corrected. Ask us to correct anything inaccurate, complete anything incomplete, or update anything out of date.
Have it erased. Ask us to delete your personal data where we no longer need it for the purpose we collected it.
Withdraw your consent. At any time, and as easily as you gave it. Withdrawal does not undo processing already carried out lawfully.
Nominate someone. Appoint another person to exercise these rights on your behalf if you are unable to.
Be heard. Raise a grievance with us, and receive a response.
How to exercise them. Write to Geetanjali Bharti at grievance@chtpl.org. Tell us what you want and enough about yourself for us to find your record.
If we do not resolve it. You may complain to the Data Protection Board of India. Please raise it with us first — the Act expects you to give us the chance to put it right.
07
Children
This website is a public information site for businesses and professionals. It does not create accounts and it does not register users. Identity and age verification happen on the platform itself, at the point an account is created, not here.
This website is intended for people aged eighteen and over. We do not knowingly collect personal data from anyone under eighteen through it.
The Act treats children’s data with particular care: processing a child’s personal data requires verifiable consent from a parent or lawful guardian, and tracking, behavioural monitoring and targeted advertising directed at children are prohibited. We do not carry out behavioural tracking or targeted advertising of anyone through this website.
If you believe a child has given us personal data, write to the Grievance Officer and we will erase it.
08
Cookies and analytics
We use cookies and similar technologies to make the site work and to understand how it is used.
Necessary. Required for the site to function — page delivery, security, and remembering your cookie choice. These cannot be switched off.
Analytics. Help us see which pages are useful and where people give up. Aggregated. Not used to build a profile of you and not used for advertising.
09
How we protect it
We take reasonable security safeguards to protect personal data — encrypted connections to this website, access limited to the people who need it, and logging so we can tell what happened if something goes wrong.
No system is perfect, and we would rather say so than claim otherwise. If a breach affects your personal data, we will notify you and the Data Protection Board as the Act requires.
10
Data processed outside India
Measurements from connected devices are stored in India. Both the device service and the platform run in Indian regions.
Some processing is carried out outside India. Email delivery, and the handling of design requests submitted to the platform, are performed by service providers located outside India, including in the United States. That is information leaving the country and we would rather you knew it from us than found it out.
Those providers act on our instructions and only for what we have asked them to do.
11
Changes to this policy
We will update this page when what we do changes. The version number and date at the top always reflect the current version.
If a change materially affects how we use data you have already given us, we will tell you rather than relying on you noticing.
Contact
Questions about your data
If anything on this page is unclear, that is our problem to fix, not yours to decipher. Write to Geetanjali Bharti at grievance@chtpl.org and we will explain it in plain terms.