GDPR Compliance

1. GDPR Commitment

Web Tech Udaan is committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the UK GDPR. We process personal data in accordance with data protection principles and provide individuals with rights over their data.

2. Data Controller Information

For GDPR purposes, Web Tech Udaan acts as both a Data Controller (for our own operations) and a Data Processor (when processing data on behalf of clients).

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual Necessity: When processing is necessary for service delivery
• Legitimate Interests: For business operations and service improvements
• Consent: When explicitly given for specific purposes
• Legal Obligation: When required by applicable laws

4. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

4.1 Right to Access

You may request confirmation of whether we process your data and access to that data.

4.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

4.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances.

4.4 Right to Restriction of Processing

You may request we limit how we use your personal data.

4.5 Right to Data Portability

You may request a copy of your data in a structured, machine-readable format.

4.6 Right to Object

You may object to certain types of processing, including direct marketing.

4.7 Rights Related to Automated Decision Making

You have rights regarding automated processing that significantly affects you.

5. Exercising Your Rights

To exercise any GDPR rights, please contact us using the information below. We may require verification of your identity before processing requests.

We aim to respond to all valid requests within 30 days. If we require more time, we will notify you.

6. Data Transfers

As an India-based company, we may transfer EU/UK personal data outside these regions. We ensure such transfers are protected by:

• EU Standard Contractual Clauses
• Adequate organizational and technical safeguards
• Processing only when necessary for service delivery

7. Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication protocols
• Regular security assessments
• Employee training on data protection
• Incident response procedures

8. Data Breach Notification

In the event of a personal data breach affecting EU/UK data subjects, we will:

• Notify affected individuals without undue delay when required
• Notify relevant supervisory authorities within 72 hours when required
• Document all breaches regardless of notification requirement

9. Data Protection Officer

While not legally required to appoint a DPO, we have designated a Data Protection Lead:

10. Changes to This Statement

We may update this GDPR Compliance Statement periodically. The "Last Updated" date at the top indicates when revisions were made.

11. Contact Information

For GDPR-related inquiries or to exercise your rights: