Privacy Policy

Privacy Policy

Introduction

At Girmate ("us", "we", "our" or the "Company") we value your privacy and the importance of safeguarding your data. This Privacy Policy (the "Policy") describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or in combination with other available information, can identify an individual.

We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:

• India's General Data Protection Regulation (GDPR)

Scope

This policy applies to the Girmate websites, domains, applications, services, and products.

This Policy does not apply to third-party applications, websites, products, services, or platforms that may be accessed through (non-Girmate) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.

Processing Activities

This Policy applies when you interact with us by doing any of the following:

• Make use of our application and services as an authorized user
• Visit any of our websites that link to this Privacy Statement
• Receive any communication from us including newsletters, emails, calls, or texts / SMS.

Personal Data We Collect

What Personal Data We Collect

When you (member) post a job/event online at Girmate, or attempt to tender (member) for any jobs/events featured on our website, we collect the following types of Personal Data:

This includes:

WHEN YOU POST A JOB/EVENT ON 4NORMDS, WE GATHER AND STORE VARIOUS PIECES OF INFORMATION FROM YOU. THIS INCLUDES YOUR NAME, POSTCODE, EMAIL ADDRESS, TELEPHONE NUMBER, AS WELL AS THE DETAILS YOU PROVIDE ABOUT THE JOB/EVENT ITSELF, SUCH AS THE TITLE, DESCRIPTION, AND ANY ACCOMPANYING PHOTOS. ADDITIONALLY, IF YOU LEAVE FEEDBACK ABOUT A TRADESMAN ON THE SITE, WE COLLECT AND STORE YOUR COMMENTS AND RATINGS. FURTHERMORE, WE ALSO COLLECT COOKIE AND BROWSER SESSION INFORMATION.

When you use our platform, we collect the following types of Personal Data:

IF YOU ARE A TRADESPERSON AND WOULD LIKE TO BID ON JOBS/EVENTS LISTED ON OUR WEBSITE, YOU WILL NEED TO REGISTER AND ACTIVATE AN ACCOUNT WITH US. DURING THIS PROCESS, WE WILL REQUIRE CERTAIN DETAILS FROM YOU. WE COLLECT AND STORE ALL THE INFORMATION YOU PROVIDE DURING REGISTRATION AND ACCOUNT ACTIVATION, INCLUDING YOUR NAME, POSTCODE, POSTAL ADDRESS, TRADE NAME, EMAIL, TELEPHONE NUMBER, PAYMENT INFORMATION, PASSPORT OR DRIVER'S LICENSE, THE TRADES YOU SPECIALIZE IN, THE DISTANCE YOU ARE WILLING TO TRAVEL, AND EVEN YOUR PROFILE PHOTO.

We also collect the following Sensitive Personal Data. When collecting this data, we will ensure to get your explicit consent:

How We Collect Your Personal Data

We collect Personal Data from the following sources:

From You. You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide, for example, when you:

• Create an account or purchase products on our website.
• Use our products or services.
• Create content through our products or services.
• Express interest in our products or services.
• Downloading software and/or our mobile application.
• Subscribe to our newsletter.
• Complete a voluntary market research survey.
• Contact us with an inquiry or to report a problem (by phone, email, social media, or messaging service).
• When you log in to our website via social media.

Automated technologies or interactions: As you interact with our website, we may automatically collect the following types of data (all as described above): Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookie section (below) for further details.

Third parties: We may receive Personal Data about you from various third parties, including:

• Account Information and Payment Information from another individual when they purchase a gift for you on our website.
• Device and Usage Data from third parties, including analytics providers such as Google.
• Account Information and Payment Data from social media platforms when you log in to our website using such social media platforms.
• Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
• Account Information and Payment Data from third parties, including organizations (such as law enforcement agencies), associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction.
• Account Information, Payment Data, and Financial Data from providers of technical, payment and delivery services.

If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the “Contact us” section below.

Device and Usage Data

When you visit a Girmate website and/or mobile application, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.

We also process information when you use our services and products. This information may include:

• Device IDs
• Login information
• Location information

Data we collect from third parties.

We may receive your Personal Data from third parties such as companies subscribing to Girmate services, partners, and other sources. This Personal Data is not collected by us but by a third party and is subject to the relevant third party’s own separate privacy and data collection policies. We do not have any control or input on how your Personal Data is handled by third parties. As always, you have the right to review and rectify this information. If you have any questions, you should first contact the relevant third party for further information about your Personal Data. Where that third party is unresponsive to your rights, you may contact the Data Protection Officer at Girmate (contact details below).

Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.

Purpose and Legal Basis for the Processing of Personal Data

We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.

These purposes include:

• To deliver your product or service
• To fulfil orders including electronic and non-electronic
• Building a Safe and Secure Environment
• To verify or authenticate your identity; and
• Investigate and prevent security incidents such as breaches, attacks, and hacks!
• Providing, Developing, and Improving our Products and Services
• Deliver, maintain, debug, and improve our products and services.
• Enable you to access Girmate services and set up accounts.
• Provide you with technical and customer support.
• Organize and Deliver Advertising and Marketing
• Send you newsletters and other marketing communications about current and future products, programs and services, events, competitions, surveys, and promotions held by us or hosted on our behalf; and
• Organize events or register attendees and schedule meetings for events.
• For research and development
• To communicate with you about the Products and Services

Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business for example against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.

Third Party Tools

We use these third-party tools to store your information:

• Hubspot

International Data Transfer and Storage

Your Personal Data is primarily stored and processed on servers located in India. In certain circumstances, your Personal Data may be transferred to and processed in other countries where our cloud service providers, affiliates, or trusted third-party service providers operate.

Where such transfers occur, Girmagte will take appropriate technical, contractual, and organizational measures to ensure that your Personal Data remains protected in accordance with this Privacy Policy and applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India), where applicable.

Sharing and Disclosure

We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.

We also use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/

You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=en

We may also use your Personal Data to provide you with targeted marketing via advertisements or communications (such as newsletters).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/

Legal Requirement

We may use or disclose your Personal Data to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.

Service Providers and Other Third Parties

We may use a third-party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services. For further information on the recipients of your Personal Data, please contact us by using the information in the “Contacting us” section below.

Cookies

What are Cookies?

A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the site and/or to improve your experience.

How we use cookies

• To give you the best experience possible, we use the following types of cookies:
• Strictly Necessary. As a web application, we require certain necessary cookies to run our service.
• Preference.
• We use preference cookies to help us remember the way you like to use our service.
• Some cookies are used to personalize content and present you with a tailored experience. For example, location could be used to give you services and offers in your area.
• Analytics. We collect analytics about the types of people who visit our site to improve our service and product.
• Marketing. We share cookies with third party advertisers and/or partners to help provide you with a personalized marketing experience.

Retention & Deletion

We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.

Merger or Acquisition

If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

How We Keep Your Data Safe

We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.

We require any third party who is contracted to process your Personal Data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.

In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

Children's Privacy

We do not knowingly collect Personal Data from children under the age of 18 Years.

Your Rights for Your Personal Data

Depending on your geographical location and citizenship, your rights are subject to applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"), the General Data Protection Regulation (GDPR), and other applicable privacy laws. These rights may include:

• Right to Access (DPDP Act, 2023; GDPR Article 15)

You have the right to learn whether we are processing your Personal Data and to request access to the Personal Data we process about you, subject to applicable law.

• Right to Rectification (DPDP Act, 2023; GDPR Article 16)

You have the right to request that incomplete, inaccurate, or outdated Personal Data that we process about you be corrected, updated, or completed.

• Right to Erasure / Right to be Forgotten (DPDP Act, 2023; GDPR Article 17)

You have the right to request that we delete your Personal Data where permitted by applicable law. We may retain certain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce our agreements, or protect our legal rights.

• Right to Restriction of Processing (GDPR Article 18)

Where applicable, you have the right to request that we restrict the processing of your Personal Data under certain circumstances.

• Right to Data Portability (GDPR Article 20)

Where required by applicable law, you may request a copy of the Personal Data you have provided to us in a structured, commonly used, and machine-readable format.

• Right to Object (GDPR Article 21)

Where our processing of your Personal Data is based on legitimate interests or other lawful grounds, you may object to such processing where permitted by applicable law.

• Right to Withdraw Consent (DPDP Act, 2023 – Right to Withdraw Consent)

Where we rely on your consent to process your Personal Data, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

• Right to Grievance Redressal (DPDP Act, 2023 – Right to Grievance Redressal)

You have the right to contact our Grievance Officer regarding any concerns about the collection, use, disclosure, or processing of your Personal Data. We will respond to your grievance within the timeframe required under applicable law.

• Right to Nominate (DPDP Act, 2023 – Right to Nominate)

Where applicable under the DPDP Act, you may nominate another individual to exercise your rights under the Act on your behalf in the event of your death or incapacity.

• File a Complaint (DPDP Act, 2023; GDPR Article 77)

If you believe that your Personal Data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent data protection authority or other regulatory authority having jurisdiction, including the appropriate authority under the Digital Personal Data Protection Act, 2023 (India), where applicable.

Withdrawing Consent

If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.

How to Exercise Your Rights

You can make a request to exercise any of these rights in relation to your Personal Data by sending the request to our privacy team by using the form below.

For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.

Changes

We may modify this Policy at any time. If we make changes to this Policy, then we will post an updated version of this Policy at this website. When using our services, you will be asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.

Contact Us

To request a copy for your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy, we've made the process simple:

Make a Data Request

To contact us, please email legalnotices@girmate.com

Last Updated: 01/08/2026