Privacy Policy
This Privacy Policy explains how Wkey Labs Private Limited(“Wkey Labs”, “we”, “us”) collects, uses, discloses, and safeguards information when you visit wkeylabs.com(the “Site”), contact us, or engage our services. We are committed to handling your data in compliance with the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act / CPRA (CCPA), and India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who we are (Data Controller)
Wkey Labs Private Limited is incorporated in India. Our registered office is at:
No. 74, MASS Complex, 3rd Floor, 15th Cross, JP Nagar III Phase, Bangalore South, Bangalore – 560078, Karnataka, India.
Privacy contact: [email protected]
1.1 Data Protection Officer
We have appointed a Data Protection Officer (DPO) — also serving as our Grievance Officer under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 — to oversee compliance with this policy and respond to data subject requests.
- Name: Mithun Mohan
- Designation: Data Protection Officer / Grievance Officer
- Email: [email protected] (subject line: “Attn: Data Protection Officer”)
- Phone: +91 73587 50954
- Address: Wkey Labs Private Limited, No. 74, MASS Complex, 3rd Floor, 15th Cross, JP Nagar III Phase, Bangalore – 560078, Karnataka, India
2. Information we collect
2.1 Information you provide
- Contact & enquiry data — name, work email, company, message contents when you submit the contact form or email us.
- Engagement data — information shared during commercial discussions, proposals, contracts, and invoicing.
2.2 Information collected automatically
- Device & usage data — IP address (truncated where required), browser type, device type, operating system, referring URL, pages viewed, timestamps, and approximate location derived from IP.
- Cookies & similar technologies — see our Cookie Policy for details.
2.3 Information from third parties
- Advertising and analytics platforms (Meta, Google) may share aggregated campaign performance data with us.
- Enrichment tools may append publicly available business information (e.g., company name from an email domain).
3. Why we use your information (purposes & legal bases)
| Purpose | GDPR legal basis |
|---|---|
| Respond to enquiries, deliver services, manage contracts | Contract / pre-contractual steps; legitimate interest |
| Operate, secure, and improve the Site | Legitimate interest |
| Analytics, advertising, remarketing (Meta Pixel, Google Ads, Google Analytics) | Consent |
| Comply with legal, tax, and regulatory obligations | Legal obligation |
4. Cookies, analytics & advertising
We use cookies, pixels, SDKs, and similar technologies provided by us and by third parties including Google Analytics, Google Ads, Google reCAPTCHA, and the Meta (Facebook) Pixel. These technologies help us understand site usage, measure marketing performance, and deliver relevant advertising on third-party platforms (including retargeting on Facebook, Instagram, and the Google Display Network).
Where required by law, we load non-essential cookies only after you provide consent. You can withdraw consent at any time via the cookie banner or by following the instructions in our Cookie Policy.
5. Sharing & disclosure
We disclose personal data only to:
- Service providers / processors — hosting, email, CRM/marketing automation (e.g., HubSpot, Mailchimp, Resend), analytics, advertising, and customer support tools, bound by contract to process data only on our instructions.
- Advertising & measurement partners — Meta Platforms, Inc. and Google LLC for analytics, conversion measurement, and advertising, subject to their respective terms.
- Professional advisors — lawyers, auditors, and accountants under confidentiality.
- Authorities — where required by law, regulation, court order, or to protect our rights.
- Successors — in connection with a merger, acquisition, financing, or asset sale.
We do not sell personal information for money. Some sharing with advertising partners may constitute “sale” or “sharing for cross-context behavioral advertising” under the CCPA/CPRA; California residents may opt out as described in Section 9.
6. International data transfers
We are based in India and use providers located in the United States, the European Economic Area, and elsewhere. When we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses and equivalent safeguards. Transfers from India follow the requirements of the DPDP Act.
7. Data retention
We retain personal data for as long as necessary for the purposes set out above, to comply with our legal, tax, and accounting obligations, or to resolve disputes. Enquiry data is typically retained for up to 36 months from last contact. Analytics data is retained per the provider’s default (e.g., 14 months in Google Analytics 4).
8. Security
We use industry-standard technical and organizational measures including TLS encryption in transit, access controls, least-privilege principles, and vendor due diligence. No system is perfectly secure; we encourage you to use strong, unique passwords and to notify us promptly of any suspected compromise.
9. Your rights
Subject to applicable law, you have the right to:
- Access, correct, update, or delete your personal data.
- Object to or restrict certain processing, including direct marketing.
- Withdraw consent at any time (without affecting prior lawful processing).
- Port your data to another provider in a structured, machine-readable format.
- Lodge a complaint with your local supervisory authority (e.g., the Data Protection Board of India, an EU/EEA DPA, the UK ICO).
California residents (CCPA/CPRA)additionally have the right to know, delete, correct, and to opt out of “sale” or “sharing” of personal information, and the right to limit use of sensitive personal information. To exercise any right, email [email protected]. We will respond within the statutory timeframe.
To delete data associated with Facebook Login or Meta integrations, see our Data Deletion Instructions.
10. Children
The Site and our services are not directed to children under 16, and we do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date and, where appropriate, communicated to you directly.
12. Contact
General privacy enquiries
Wkey Labs Private Limited
No. 74, MASS Complex, 3rd Floor, 15th Cross, JP Nagar III Phase, Bangalore – 560078, Karnataka, India
[email protected]
Data Protection Officer / Grievance Officer
Mithun Mohan
[email protected] · +91 73587 50954