Global Privacy, Cookies, and Data Policy

1. Privacy Notice and Global Scope

Trettayu Tech LLC takes privacy with the utmost seriousness and care. As a global provider of Data, Analytics, and AI consulting solutions, we are committed to protecting the privacy of individuals across all jurisdictions in which we operate.

This comprehensive policy is designed to comply with global data protection frameworks, including but not limited to:

• United States: State-level privacy laws such as the California Consumer Privacy Act (CCPA) and CPRA.
• Europe & UK: The General Data Protection Regulation (EU GDPR) and the UK Data Protection Act 2018 (UK GDPR).
• Middle East: The United Arab Emirates Personal Data Protection Law (PDPL - Federal Decree Law No. 45 of 2021).
• Africa: South Africa's Protection of Personal Information Act (POPIA).
• Asia-Pacific: India's Digital Personal Data Protection Act (DPDP Act 2023) and Singapore's Personal Data Protection Act (PDPA).

Controller vs. Processor Distinction: When we collect personal data directly for our business, marketing, or recruitment, we act as a Data Controller. When we process personal information on behalf of our global clients as part of our AI and Data Analytics service delivery, we act as a Data Processor. Such activities are governed strictly by the Data Processing Agreements (DPAs) with our clients.

2. What Personal Data We Collect

“Personal data” means any information relating to an identified or identifiable natural person. We collect the following categories:

• Information You Provide: Name, company email, contact number, company name, and country when you use our contact forms.
• Technical and Device Data: IP addresses, browser types, online identifiers, and referring URLs.
• Sensitive Personal Data: We do not intentionally collect sensitive data such as health, genetic, or biometric data from our website users.
• Children’s Privacy: We do not provide services to or engage children under the age of 18. If we inadvertently collect such data, we will delete it immediately.

3. Lawful Bases for Processing

We process personal data based on the following lawful grounds:

• Consent: Explicit, informed, and unambiguous consent obtained for specific purposes, such as marketing.
• Contract Performance: Processing necessary to perform a contract to which the data subject is a party.
• Legitimate Interests: Processing necessary for business operations, analyzing service usage, or preventing fraud, provided it does not override your fundamental rights.
• Legal Obligations: Processing necessary to comply with applicable legal and statutory requirements.

4. Cookies and Tracking Technologies

We use cookies to analyze user behavior, improve website functionality, and deliver targeted advertising.

• Necessary Cookies: Required for basic website functionality.
• Analytics Cookies: Track usage, page visits, time spent, and demographic information to improve our services.
• Advertising Cookies: Used to deliver relevant advertisements through third-party advertising networks.

Managing Consent: Visitors are presented with a consent pop-up upon arrival. You can withdraw or adjust your consent at any time through your browser settings or our privacy icon.

5. Your Global Privacy Rights

Depending on your residency, you may have specific rights regarding your personal data. Trettayu Tech LLC respects and facilitates the following rights globally:

• Right to Access/Know: The right to obtain an overview of your data being processed and request a copy of it.
• Right to Rectification/Correction: The right to request correction of inaccurate or outdated personal data.
• Right to Erasure: The right to request deletion of personal data, subject to applicable legal retention requirements.
• Right to Object and Restrict: The right to request that processing of your data be restricted or stopped.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right Regarding Automated Decisions: The right to object to decisions based solely on automated processing and request human intervention.
• US-Specific Rights: Rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information for targeted advertising.

Exercising Your Rights: To submit a Data Subject Request, please contact our Data Protection Officer. We will respond within the statutory deadlines applicable to your jurisdiction.

6. International Cross-Border Data Transfers

As a global entity, Trettayu Tech LLC may transfer personal data outside your country of residence. We ensure that personal data continues to receive adequate protection through recognized transfer mechanisms, including:

• Adequacy decisions granted by relevant authorities.
• Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs).
• Data Privacy Frameworks where applicable for US-based processing.

7. Data Security and Retention

Security: We implement robust technical and organizational measures to protect personal data against unauthorized access, loss, or damage. These measures include encryption, role-based access controls, regular vulnerability assessments, and privacy-by-design architectures.

Retention: We collect only the data necessary for defined purposes and retain it only for as long as required to fulfill those purposes or comply with legal and contractual obligations. Data is securely deleted or anonymized when no longer required.

8. Data Breach Notification

In the event of a reportable data breach, Trettayu Tech LLC will notify the relevant regulatory authorities without undue delay. Where required, affected data subjects will also be informed about the nature of the breach, mitigation steps, and relevant contact information.

9. Contact Us & Grievance Redressal

If you have any questions, grievances, or wish to exercise your privacy rights, please contact our Data Protection Officer.

Trettayu Tech LLC
Wyoming, USA
Email: contact@tretaiyutech.com
Website: https://www.tretaiyutech.com