Your privacy is important to us

About this Privacy Notice

This Privacy Policy explains how we collect, use, share, store and otherwise process your personal data when you visit this website, when you submit information to us through a contact form, and when you interact with the chatbot made available on this website. It is issued in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made thereunder and the Information Technology Act, 2000, and the rules made thereunder.

Please read this Privacy Policy together with our Cookie Policy, which explains the cookies and similar technologies used on this website, including those deployed by our chatbot service provider.

This website may contain links to websites that we do not operate. We are not responsible for the privacy practices or the content of those websites, and this Privacy Policy does not apply to them.

Who is responsible for your personal data

Walsons Services Private Limited, a company incorporated under the Companies Act, 1956, operating in India under the Securitas brand ("Securitas India", "we", "us" or "our"), is the Data Fiduciary in respect of the personal data described in this Privacy Policy. This means that we determine the purpose and means of processing your personal data, and we are responsible for ensuring that the processing is carried out in accordance with applicable law.

Our contact details, and those of our Grievance Officer, are set out in Section 14 below.

The personal data we collect

We collect the following categories of personal data when you use the contact forms or the chatbot on this website:

2.1 Information you provide to us

• Contact information: your name, e-mail address, telephone number, company or organisation name and country.
• Identity data: your name, business title and the organisation you represent.
• Content of your communications: any message, enquiry, request, document or other information that you voluntarily submit through a contact form or type into the chatbot, including the full text of your conversation with the chatbot.
• Marketing preferences: your choices regarding the communications and materials you wish to receive from us.

The Information collected automatically

• Technical and browsing information: your IP address, browser type and version, language settings, operating system, device information, unique device identifiers, log data, referring website and UTM parameters, pages viewed, links clicked, and other information about how you use this website.
• Organisation identification data: information about the organisation associated with your IP address, which may include the approximate size, industry and revenue band of that organisation. This information is used to understand the profile of visitors to our website.
• Chatbot interaction data: whether and when the chatbot was opened, the duration of the session, the identifier of the chatbot you interacted with, and technical identifiers used to maintain the session and to recognise your browser across pages.

Some of this information is collected through cookies, browser session and local storage, and cache-based identifiers such as eTag headers. Cache-based identifiers are not deleted when you clear your cookies; they are deleted when you clear your browser cache. Full details are set out in our Cookie Policy.

Information we ask not to provide

The chatbot and the contact forms on this website are intended for general enquiries only. Please do not submit through them any sensitive or confidential information, including financial account details, government-issued identification numbers, health information, or information about any other individual, unless we have specifically asked you to do so.

Why we process your personal data, and on what basis

We process your personal data only for lawful purposes for which you have given your consent by ticking the consent tick-box at the point at which you provide your details, or for a legitimate use. The table below sets out each purpose, the personal data used, the lawful basis relied on, and the period for which the data is retained.

Purpose of processing	Personal data used	Lawful basis	Retention
To respond to an enquiry, request or message that you submit through a contact form on this website.	Contact information, identity data, content of your message.	Your consent, given by ticking the consent check-box on the contact form at the time you submit your details.	For the duration necessary to respond to and close your request, and thereafter for 13 months for record purposes, unless a longer period is required by law.
To respond to enquiries submitted through the chatbot on this website, to assist you in locating relevant information on the website, and to follow up on your request.	Contact information, identity data, content of the chatbot conversation.	Your consent, given by ticking the consent check-box in the chatbot at the time you provide your details.	For the duration necessary to respond to and close your request, and thereafter for 13 months for record purposes, unless a longer period is required by law.
To review chatbot conversation logs for quality assurance, troubleshooting and improvement of the service.	Conversation logs, technical and browsing information.	Your consent to the review of chatbot conversations, given by ticking the consent check-box in the chatbot before the conversation begins.	13 months from the date of the conversation, after which logs are deleted or irreversibly anonymised.
To send you marketing communications, brochures, reports and other materials where you have asked to receive them.	Contact information, identity data, marketing preferences.	Your consent.	Until you withdraw your consent or unsubscribe, or until the data is no longer required for this purpose, whichever is earlier.
To measure and analyse the performance of this website and the chatbot, including through cookies and similar technologies.	Technical and browsing information, organisation identification data.	Your consent to the relevant cookie categories, given by accepting those categories in our cookie consent banner.	As set out in the Cookie Policy for each cookie or similar technology.
To establish, exercise or defend legal claims, to respond to lawful requests from public authorities, and to comply with applicable law.	Any of the categories above, to the extent relevant.	Compliance with law and legitimate uses recognised	For the period prescribed by the applicable law, or the limitation period applicable to the claim.

We will not use your personal data for any purpose that is incompatible with the purposes set out above without first providing you with notice and, where required, obtaining your consent.

  Consent and how to withdraw it  

Where we rely on your consent, that consent is free, specific, informed, unconditional and unambiguous, and is given by a clear affirmative action; for example, by ticking the consent check-box presented to you at the time you enter your details in a contact form or in the chatbot, or by accepting the relevant cookie categories in our consent banner. The check-box is not pre-ticked, and we do not treat the mere submission of a form or the use of the chatbot as consent.

You may withdraw your consent at any time, and the process for doing so is as easy as the process by which you gave it. You may withdraw consent by:

• writing to the privacy contact or the Grievance Officer set out in Section 14;
• using the unsubscribe link contained in any marketing communication we send you; or
• changing your cookie preferences through the cookie settings link available on this website, in respect of cookies and similar technologies.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Following withdrawal, we will cease processing your personal data for the relevant purpose within a reasonable period, and will erase that personal data unless retention is required for compliance with any law in force.

Please note that if you withdraw your consent, we may no longer be able to respond to your enquiry or provide you with the information or materials you have requested.

Use of artificial intelligence in the chatbot

The chatbot on this website is powered by a generative artificial intelligence system. When you use it, you are interacting with an automated system and not with a human being.

• Responses generated by the chatbot are produced automatically and may be incomplete or inaccurate. They do not constitute advice of any kind and should not be relied upon as a statement of our position, an offer, or a contractual commitment.
• The chatbot is used to provide information and to route enquiries. It is not used to make any decision that produces a legal effect concerning you or that similarly significantly affects you.
• Conversations may be reviewed by authorised personnel for quality assurance, troubleshooting and improvement of the service, as described in Section 3.
• Your conversation content is not used to train any publicly available or third-party foundation model.

If your enquiry requires a substantive response, the chatbot will collect your contact details so that a member of our team can revert to you.

  Children and persons with a disability  

This website and the chatbot are intended for use by adults acting in a business or professional capacity. They are not directed at children.

We do not knowingly process the personal data of a child (a person who has not completed eighteen years of age) without the verifiable consent of a parent or lawful guardian. We do not undertake tracking or behavioural monitoring of children, and we do not direct advertising at children.

Where we process the personal data of a person with a disability who has a lawful guardian, we do so only with the verifiable consent of that guardian.

If you believe that a child has submitted personal data to us through this website or the chatbot, please contact our Grievance Officer at the address in Section 14 and we will take steps to erase that data.

  Who we share your personal data with  

We do not sell or trade your personal data. We share it only as set out below.

Recipient	Role	Purpose of disclosure
Leadoo Marketing Technologies (and its approved sub-processors)	Data Processor acting on our documented instructions	Operation of the chatbot on this website, visitor engagement and related support services.
Other service providers and subcontractors, including Google (Google Analytics and the embedded YouTube player), Microsoft (hosting infrastructure and Application Insights telemetry), and other hosting, data storage, website development, technical support and maintenance providers	Data Processors acting on our documented instructions	Provision, hosting, support and maintenance of this website and the services made available through it.
Companies within the Securitas Group	Data Processor, or joint Data Fiduciary where applicable	Responding to your request, product development, administration and support, where the request relates to a service provided by another Group company.
Government agencies, regulators, courts and law enforcement authorities	Independent Data Fiduciary in respect of their own processing	Where we are required to disclose by law, court order or a lawful request, or where disclosure is necessary to protect our rights or the safety of any person.
Professional advisers, including legal advisers and auditors	Data Processor or independent Data Fiduciary, depending on the engagement	Obtaining advice, conducting audits, and establishing, exercising or defending legal claims.

Every Data Processor engaged by us is bound by a written contract that requires it to process personal data only on our documented instructions, to implement appropriate technical and organisational security safeguards, to restrict access to personnel who require it, and to delete or return the personal data on termination of the engagement.

Transfer of personal data outside India

Some of the recipients described in Section 7 are located outside India. In particular, the chatbot service provider hosts personal data on Amazon Web Services servers located in Ireland, and certain Securitas Group companies process personal data on servers located in the European Union and other jurisdictions.

We may transfer your personal data outside India in accordance with applicable laws, which permits such transfer other than to a country or territory restricted by the Central Government by notification. Where a country or territory is so restricted, we will not transfer your personal data to it.

In all cases, the transfer is governed by a written contract with the recipient which imposes obligations equivalent to those set out in this Privacy Policy, and we remain accountable to you as the Data Fiduciary for the personal data transferred.

A list of the countries in which Securitas Group companies operate is available at www.securitas.com.

  How we protect your personal data  

We implement reasonable security safeguards to prevent a personal data breach, in accordance with the IT and other related applicable Act. These include access controls and role-based permissions, encryption of data in transit, logging and monitoring, secure configuration of our website and hosting environment, contractual and technical controls over our processors, and training of personnel who handle personal data.

In the event of a personal data breach affecting your personal data, we will intimate the Data Protection Board of India and each affected Data Principal in the form and manner prescribed under the DPDP Act and the rules made thereunder.

  How long we keep your personal data  

We retain your personal data only for as long as is necessary for the purpose for which it was collected, as set out in the table in Section 3, or for such longer period as is required to comply with any law in force in India.

We will erase your personal data, and cause our Data Processors to erase it, when you withdraw your consent, or when it is reasonable to assume that the purpose for which it was collected is no longer being served, whichever is earlier, unless retention is necessary for compliance with law.

  Your rights as a Data Principal  

Under the relevant provisions of the Act you have the following rights in respect of your personal data:

• Right to access information: to obtain a summary of the personal data we process about you and the processing activities undertaken, the identities of the Data Fiduciaries and Data Processors with whom the data has been shared and a description of the data shared, and any other information related to the personal data and the processing, as prescribed.
• Right to correction, completion, updating and erasure : to have inaccurate or misleading personal data corrected, incomplete data completed, data updated, and personal data erased where it is no longer required for the purpose for which it was processed, unless retention is necessary for a specified purpose or for compliance with law. A request for correction, updating or erasure may be raised with our Grievance Officer through the grievance mechanism described in Section 13.
• Right of grievance redressal : to readily available means of registering a grievance with us in respect of any act or omission regarding our performance of our obligations or your exercise of your rights, which we will respond to within the 30 days of raising such grievance.
• Right to nominate : to nominate any other individual who will, in the event of your death or incapacity, exercise your rights in your place.
• Right to withdraw consent : as described in Section 4 of this Privacy Policy.
• Right to erasure of your personal data : to request the deletion of your personal data by raising a request with our Grievance Officer through the grievance mechanism described in Section 13, and we will erase that data, and cause our Data Processors to erase it, unless retention is necessary for the specified purpose or for compliance with any law in force.

To exercise any of these rights, please write to our Grievance Officer using the contact details in Section 14, stating the right you wish to exercise and providing sufficient information for us to identify you and locate your personal data. We may ask you for further information to verify your identity before acting on your request. We will respond within 30 days of receiving a complete request, or within such period as may be prescribed under the DPDP Act and the rules made thereunder, whichever is shorter.

We do not charge a fee for responding to a request to exercise your rights.

  Your duties as a Data Principal  

You must comply with applicable law when exercising your rights, must not impersonate another person when providing personal data, must not suppress any material information when providing personal data for any document or identifier issued by the State, must not register a false or frivolous grievance or complaint, and must furnish only such information as is verifiably authentic when seeking correction or erasure.

   Complaints  

If you have a concern about the way we process your personal data, we ask that you first raise it with our Grievance Officer, whose details are set out in Section 14. We will acknowledge your grievance and respond to it within the period prescribed under the DPDP Act and the rules made thereunder.

If your grievance is not resolved to your satisfaction, you may make a complaint to the Data Protection Board of India in the manner prescribed under the DPDP Act and the rules made thereunder.

  Contact details  

Data Fiduciary	Walsons Services Private Limited, U74999DL199PTC088528, having its registered office at At Plot No. 3, 1st Floor, LSC, Mayur Vihar Phase-1, East Delhi - 110091
Privacy contact	The Walsons House, 496, Udyog Vihar Phase III, Gurugram 122016, Haryana, India Email: privacy@securitas-india.com
Grievance Officer	Mr. Nitesh Kumar, Grievance Officer (AVP – IT) Email: privacy@securitas-india.com Address: The Walsons House, 496, Udyog Vihar Phase III, Gurugram 122016, Haryana, India

  Visitors from the European Economic Area and the United Kingdom  

Where the General Data Protection Regulation (EU) 2016/679 or the UK General Data Protection Regulation applies to our processing of your personal data ; for example, because you access this website from within the European Economic Area or the United Kingdom you additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection under that legislation, and the right to lodge a complaint with your local supervisory authority. Where we transfer personal data from the European Economic Area or the United Kingdom to India or to another country outside those territories, we do so on the basis of the standard contractual clauses approved by the European Commission or the equivalent UK transfer mechanism.

Requests under this Section should be sent to the privacy contact set out in Section 14.

  Changes to this Privacy Policy  

We may update this Privacy Policy from time to time to reflect changes in our processing activities or in applicable law. The current version is always published on this website and the date of the most recent update is stated at the top of this document. Where the change is material, we will bring it to your attention by an appropriate means before it takes effect and, where the change requires it, we will obtain your consent afresh.