We, NTT DATA Payment Services India Private Limited, formerly NTT DATA Payment Services India Limited (hereinafter referred to as the "Company") value the trust placed in us by our users and therefore, we follow the highest standards of privacy guidelines to protect the information shared by you our user, with us.

This Privacy Policy governs the use of Personal Information shared (as defined below) with or collected by the Company from its users and describes the protocol for the usage of such information provided or collected on the sites and mobile applications "Sites" ("*.nttdatapay.com" / mGalla mobile Application") hereafter refer as where this Privacy Policy is posted.

We follow this Privacy Policy in accordance with applicable law, in the places where we operate our business. Your use of the Sites indicates to us that you have read and accepted our privacy practices, as outlined in this Privacy Policy. In some cases, we may provide "additional data privacy notices" specific to certain services or regions. Those terms are to be read in combination with this Privacy Policy.

The terms "we", "our" and "us" refer to Company and the terms "you", "your" and “User” refer to you, as a user of Companys Sites.

This Privacy Policy should be read in conjunction with all other applicable terms and conditions pertaining to your use of the Company"s Sites.

User Consent

By using the Company"s Sites (for example, when you register for an account, purchase a service, enter a contest or promotions, communicate with us, on our Sites), you agree to provide consent to our collection, use and sharing of your personal information as described in this policy. In some cases, particularly if you reside in a country governed by a data protection regulation, we may ask you to provide explicit consent to access our services before proceeding for further operations.

Collection and Use of Personal Information

For the purposes of this Privacy Policy "Personal Information" or "PII" shall mean to be any information that identifies (whether directly or indirectly) to a particular individual or natural person, such as the individual"s name, postal address, email address, and mobile number indicating to that person or is identifiable. When any anonymous information is directly or indirectly associated with personal information, the resulting information also is treated as Personal Information. We use your personally identifiable information to provide you with the information or content that you have requested, and, in some cases, to contact you about our programs, products, features or services. If you no longer wish to receive press releases or any other type of information from us, you may send us an email through our "Contact Us" link to change your preferences; or follow the “unsubscribe” link provided in the e-mail that you receive.

We use non-identifying personal information collected on our Sites in the aggregate to better understand your use of the Sites and to enhance your enjoyment and experience. For example, we may use the information to improve the design and content of our Sites or to analyse the programs and services that we offer.

We may employ other companies and individuals to perform functions on our behalf. Our employees, agents and contractors who have access to personally identifiable information are required to protect the information in a manner that is consistent with this Privacy Policy.

We may provide access to your personally identifiable information when legally required to do so, to cooperate with police investigations or other legal proceedings, to protect against misuse or unauthorized use of our Sites, to limit our legal liability and protect our rights, or to protect the rights and safety of visitors to the Sites or the public. In those instances, the information is provided only for that limited purpose.

We will not share your personally identifiable information in ways unrelated to those described above without providing you with an opportunity to opt out of such use or otherwise prohibit such unrelated uses.

Information you provide to us

We may ask for and collect the following personal information about you when you use the Company"s Sites and without this information, we may not be able to provide you with all the requested services:

• First and Last Name
• Email id
• Contact No.
• City & State

Information we collect automatically

We collect information about you and your use of our service, your interactions with us and our advertising, as well as information regarding your computer or other device used to access our service. The information includes:

• Your interactions with our email, customer care and messaging platform
• Geo-location information like IP addresses,
• Cookies: Cookies provide simplified user access to our Sites and helps us to remember details of your next visit, and thereby improving user experience which you can re-set your browser/phone settings to accept/deny/clear cookies. This information is collected on an aggregate basis. None of this information is associated with you as an individual

Purposes and Lawfulness of processing

We will only collect and process personal data about you where we have been allowed to do so on a lawful basis by applicable laws. Lawful basis on which we would process your personal information includes obtaining explicit consent from you for processing your personal information or processing for “legitimate interests” where processing is necessary by us to provide you with customer support or process your data for providing premium services (For e.g., processing your information by our payment gateway service providers, etc.;)

We use information to provide, analyse, administer, enhance, and personalize our service and marketing efforts, to process your registration, your orders, payments, and to communicate with you related to below mentioned points.

For example, we use information to:

• prevent, detect and investigate potentially prohibited or illegal activities, including fraud, and enforcing our terms (such as determining free trial eligibility)
• communicate with you concerning our service (for example by email, push notifications text messaging, and online messaging channels), so that we can send you news about “Company”, details about new features and content available on the Company Sites, and special offers, promotional announcements, and consumer surveys, and to assist you with operational requests such as password reset requests.
• notify you about changes in terms of service.
• allow you to participate in interactive features offered through our Services.
• carry out our obligations and enforce our rights arising from any contracts entered between you and us, including for billing, chargeback, and collection.

We may also use your information to contact you about our own and third-party services that may be of interest to you. If you do not want us to use your information in this way, please provide explicit consent for the same when we collect your data and/or adjust your user preferences in your account profile concerning your choices/preferences provided.

Disclosure to third parties

We do not share your personal information with Companies, organizations, or individuals outside of Company except in the following cases:

• Regulators
• Schemes & Processors (like Visa, Mastercard, RuPay, etc.)
• Banks & Acquirers for processing payment

General Disclosure

At times the Company may make certain personal information available to strategic partners that work with the Company to provide service, or that help the Company in marketing to customers. For example, when you purchase and activate subscription, you authorize the Company to exchange the information you provide during the activation process to carry out a service. If you are approved for service, your account will be governed by the Company"s privacy policy. Personal information will only be shared by the Company to provide or improve our service and marketing aspects; it will not be shared with third parties for their marketing purposes.

Promotional Offers

We may share or disclose your personal information outside of Company for promotional activities only when we have your consent. For example, providing E-mail related services such as marketing newsletters, promotions and offers.

Business Transfers

We may share your Personal Information with our parent company, subsidiaries, joint ventures, or other companies under a common control (collectively, "Affiliates") that we may have now or in the future, and with other trusted businesses or persons, in which case we will require them to honour this Privacy Policy. If another company acquires our company or our assets, that company will possess your Personal Information, and will assume the rights and obligations with respect to that information as described in this Privacy Policy.

Legal

We may disclose your Personal Information to third parties in a good faith belief that such disclosure is reasonably necessary to (a) take action regarding suspected illegal activities; (b) enforce or apply our terms and conditions and Privacy Policy; (c) comply with legal process, such as a search warrant, subpoena, statute, or court order; or (d) protect our rights, reputation, and property, or that of our Users, affiliates, or the public. Please note that we are not required to question or contest the validity of any search warrant, subpoena, or other similar governmental request that we receive.

Your Controls and Choices

Managing Your Information

You can access and update some of your personal information through your account settings. If you have chosen to connect your account to a third-party application, like Facebook, Google, or Twitter, you can change your settings and remove permission for the Site by changing your account settings. You are responsible for keeping your personal information up to date. The Company will send you periodic reminders via e-mail to maintain the accuracy of your personal information.

Rectification of Inaccurate or Incomplete Information

You can ask us to correct any inaccurate or incomplete personal information concerning you (this is the information which you cannot update yourself for using the Sites) by sending us an e-mail.

Data Retention and Erasure

We shall retain your personal information only as long as necessary for the performance of the contract for services between you and us to enable us to comply with our legal obligations. If you no longer want us to use your personal information; then you can request that we erase your personal information and close your account for the Sites. Please note that on your request for the erasure of your personal information:

• We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend a user account for fraud or safety reasons, then we may retain certain information from that account to prevent that user from opening a new account in the future.
• We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, we may keep some of your information for tax, legal reporting and auditing obligations.
• To protect ourselves from accidental or malicious loss and destruction, some residual copies of your personal information may not be removed from our backup systems for a limited period of time.

Withdrawing Consent and Restriction of Processing

For withdrawing your consent at any time during the tenure of your services with us, you may choose to do so by sending us an e-mail. We shall review your request and may ask you to verify your identity. Post verification we will accept your withdrawal of the consent for which request was made by you and stop any further processing of your personal information.

Complaints

You can write to our data protection officer in case of any grievance or compliant. You have the right to complaint about the data processing activities carried out by us before the competent data protection authorities.

Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our services may not be available/able to take into account any/some of your interests and preferences.

If collection of personal information is mandatory, we will make that clear at the point of collection so that you can make an informed decision whether to participate. If you have questions about the specific personal information about you that we process or retain, and your rights regarding that personal information, please contact our customer support team.

Data transfer, storage & processing globally

We operate globally and may transfer your personal information to individual companies of the Company affiliated companies or third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored, or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. Additionally, when using or disclosing personal information transferred from the European Union, adopt other means under European Union law for ensuring adequate safeguards.

Security and compliance with laws

We are and shall be continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. While we unceasingly try our best to provide security that is better than the industry standards, but because of the inherent vulnerabilities of the internet, we cannot ensure or warrant complete security of all information that is being transmitted to the Company by you. If you know or have reason to believe that your personal information/ credentials have been lost, stolen, altered, or otherwise compromised or in case of any actual or suspected unauthorized use of your account, please contact us by contacting our customer support team.

Change in Policy

This Privacy Policy is subject to change from time to time. We reserve the right, at our sole discretion, to modify the terms of this Privacy Policy from time to time to ensure compliance with applicable laws (“Updated Terms”). The Updated Terms shall be effective immediately and shall supersede the terms of this Privacy Policy. We will not be under an obligation to notify you of any changes to this privacy policy except as may be required by law. You shall be solely responsible for reviewing the Privacy Policy from time to time for any modifications. By continuing to use “Company website / application” after the updated Terms have been published, you affirm your agreement to the updated terms.

Applicable law

Your use of this Website will be governed by and construed in accordance with the laws of India. The Users agree that any legal action or proceedings arising out of your use may be brought exclusively in the competent courts/ tribunals having jurisdiction in Mumbai in India and irrevocably submit themselves to the jurisdiction of such courts/ tribunals.

Contact Information

Support

If you require any information or clarification regarding the use of your personal information or this privacy policy or grievances with respect to use of your personal information, please email us at ndps.info@nttdata.com.

Data Controller

If you have any queries, complaints regarding the collecting, processing, transfer of personal data/information or regarding this policy please do contact us.