Privacy Policy
Last updated: January 1, 2025
This Privacy Policy describes how WeAirAssist Concierge ("we," "us," or "our"), a company registered in India, collects, uses, and protects your personal information when you use our luxury concierge services. This policy complies with the Information Technology Act, 2000, and other applicable Indian laws.
1. Information We Collect
1.1 Personal Information
- Full name and contact details
- Email address and phone number
- Billing and payment information
- Travel preferences and requirements
- Service requests and communications
1.2 Usage Information
- Website usage and interactions
- Service preferences and history
- Communication records
- Device and browser information
2. How We Use Your Information
- Provide and manage our concierge services
- Process membership applications and requests
- Communicate with you about services
- Personalize your experience
- Improve our services and website
- Comply with legal obligations
- Prevent fraud and ensure security
3. Legal Basis for Processing (Indian Law & GDPR)
Under Indian law (Information Technology Act, 2000) and the General Data Protection Regulation (GDPR), we process your personal data based on:
- Contract: To fulfill our service obligations
- Legitimate Interest: To improve services and prevent fraud
- Consent: For marketing communications (where applicable)
- Legal Obligation: To comply with applicable laws
- Indian IT Act: Compliance with Section 43A and Section 72A
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information with:
- Service Providers: Hotels, airlines, restaurants, and other partners to fulfill your requests
- Legal Requirements: When required by law or to protect rights
- Business Transfers: In case of merger, acquisition, or sale of assets
- Consent: With your explicit permission
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
- Incident response procedures
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Typically, we retain data for 7 years after the end of our business relationship, unless a longer retention period is required by law.
7. Your Rights (Indian Law, GDPR & CCPA)
7.1 Indian Law Rights (All Users)
- Right to Information: Know what personal data is collected
- Right to Access: Request a copy of your personal data
- Right to Correction: Correct inaccurate or incomplete data
- Right to Deletion: Request deletion of your data
- Right to Grievance: File complaints with Indian authorities
- Right to Compensation: Seek damages for data breaches
7.2 GDPR Rights (EU/EEA Residents)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data
- Portability: Receive your data in a structured format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Where processing is based on consent
7.3 CCPA Rights (California Residents)
- Know: What personal information is collected and how it's used
- Delete: Request deletion of personal information
- Opt-out: Opt-out of the sale of personal information
- Non-discrimination: Not be discriminated against for exercising rights
8. International Data Transfers
Your personal information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Adequacy decisions where applicable
- Other appropriate safeguards as required by law
9. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences
- Analyze website usage
- Improve user experience
- Provide personalized content
You can control cookie settings through your browser preferences.
10. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Updating the "Last updated" date
12. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: privacy@weairassist.com
Phone: +91 (555) 123-4567
Address: WeAirAssist Concierge, New Delhi, India
Data Protection Officer: dpo@weairassist.com
Grievance Officer: grievance@weairassist.com
13. Grievance Redressal & Authorities
13.1 Indian Users
Indian residents can file grievances with:
- Our Grievance Officer: grievance@weairassist.com
- Ministry of Electronics and Information Technology (MeitY)
- State Consumer Disputes Redressal Commission
- National Consumer Disputes Redressal Commission
13.2 EU/EEA Residents
If you are an EU/EEA resident and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.