PRIVACY POLICY

A. Introduction

At Find My Business, we value your privacy rights and understand the importance of secure transactions and information privacy. This Privacy Policy outlines how Bizznest Technologies LLP and its affiliates (collectively referred to as “Find My Business”, “we”, “our”, “us”) gather, utilize, share, or otherwise handle your personal information through the Find My Business website (www.findmybusiness.in), its mobile application, and m-site (hereinafter referred to as the “Platform”).

This Privacy Policy constitutes an electronic agreement under the Information Technology Act, 2000, and the rules and regulations made thereunder (as amended till date), including the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. It does not require any physical or digital signatures to make the terms of this policy binding.This privacy policy is a legally binding document. The terms of this privacy policy will be effective upon your use of our Platform/service. Please read this policy carefully, along with our Terms of Services.

By visiting our Platform, providing your information, or using our product/service, you expressly agree to be bound by the terms of this Privacy Policy and the applicable Terms of service. By accessing or using our platform/services, you have given explicit consent to collect, use, share, or otherwise process your information in accordance with this Privacy Policy. If you do not agree, please do not access or use our Platform or service.

You acknowledge that you are disclosing Personal Information voluntarily. Before completing any registration process on our platform or before availing of any services offered on our platform, if you wish not to disclose any Personal Information, you may refrain from doing so; however, if you don't provide the requested information, it is possible that the registration process would be incomplete and/or you would not be able to avail of our services.

If you are our corporate customer, it is possible that we have entered into a contract with you for non-disclosure of confidential information. This Policy shall not affect such a contract in any manner.

B. Scope of Policy

This policy applies to every website, mobile site, application, and/or other service, regardless of how distributed, transmitted, published, or broadcast (“Service”) provided by Bizznest Technologies LLP and/or its affiliates (“we,” “us,” “our” or “Find My Business”) that links to this policy.

It is binding on all who access, visit, and/or use Find My Business’s Services, including but not limited to Listing Service, Search Plus Services, Business Directory, Payment Solutions, Business Management Tools, Expert Consultation, Online Shopping, etc. This policy also applies equally to all of our vendors, service providers, subcontractors, partners, agents, representatives, employees, and any other third parties.

Find My Business collects and uses personal data that you voluntarily provide. You can browse our platform without disclosing any personal information; however, you will need to provide limited personal data to register or use certain services.

This policy is applicable to all contractors, suppliers, customers, users, vendors, sellers, partners, and other third parties working on behalf of Find My Business or accessing or using our platforms/services. It also applies to the headquarters, branch offices, and other offices of Find My Business, as well as all employees/officials.

It covers all data that Find My Business holds relating to identifiable individuals, even if that information technically falls outside the Privacy & Data Protection laws. Such information includes names, addresses, mobile/telephone numbers, email IDs of users, and any other information collected or received from users while accessing or using our platforms/services.

This Privacy Policy is part of Find My Business’s Terms of Service and addresses the treatment of user information, including personally identifying information, obtained by Find My Business, including information collected when you access the Find My Business platform, use the Find My Business Service, or any other software provided by Find My Business.

Unless explicitly stated otherwise, this Policy applies to Personal Information disclosed on any of our Platforms. This policy does not apply to the practices of organizations that we do not own or to people that we do not employ or manage.

C. Policy Objectives

Find My Business must collect and use certain information about individuals, such as customers, suppliers/vendors, business contacts, employees, and third parties with whom we have business relationships or may need to contact.This policy outlines how Find My Business collects, receives, possesses, stores, handles, or processes personal information, including sensitive personal information, about you and ensures it is available for your review.Personal information must be collected, handled, and stored to meet data protection standards and legislative requirements.This policy ensures compliance with data protection laws, follows good practices, and protects the rights of employees, customers, suppliers/vendors, business contacts, and third parties from data breach risks.

D. Information Collection

During the execution of its functions and activities, Find My Business collects information from individuals and third parties, generating a wide range of data stored on our platform. This information can take various forms, such as corporate records, financial records, legal records, contracts, letters from third parties, personnel/employee records, invoices, completed application forms, contact lists, email communications and attachments, photos, etc. Find My Business collects information to provide and continuously improve its products and services.

Information may be collected online or offline, but the same privacy protection applies to all data, including personal information.

We gather Personal Information from you in several ways when you interact with us through our services, such as:

• Installing, accessing, or using our services;
• Creating an account on our platform; requesting customer service or contacting us;
• Conducting a transaction where we collect personal information, including when required by law and regulations;
• Submitting a testimonial, rating, review, or other user-generated content that may be posted;
• Or otherwise submitting personal information to us along with any related content of the communication.

During the registration process and while availing various services we provide through our website www.findmybusiness.in ("Website"), telephone search, SMS, and Apps, or any other medium, you may need to provide your name, residential address, workplace address, email address, date of birth, educational qualifications, marital status, and similar Personal Information ("Personal Information"), as well as credit card/debit card and other payment instrument details.

KYC Documentation

We may collect Know-Your-Customer (KYC) related documents either through a third-party service provider or on our own.

• Individual Documents: Driving licenses, proof of possession of Aadhaar numbers, Voter's Identity Cards, PAN Cards, GST, passports, job cards issued by NREGA (duly signed by an officer of the State Government), and letters issued by the National Population Register containing details of name and address.
• Additional Address Proof (if OVD is outdated): Utility bills (electricity, telephone, post-paid mobile phone, piped gas, water bill) not older than two months, property or municipal tax receipts, pension or family pension payment orders (PPOs), and letters issued by Foreign Embassies (for foreigners), as prescribed by RBI.

Documents for Business Entities:

• Sole Proprietorship: (a) Registration certificate; (b) Shop and Establishment Act license; (c) Sales/income tax returns; (d) GST certificate; (e) IEC or professional license; (f) Income Tax Return acknowledgment; (g) Utility bills or proof of business activity.
• Legal Entity (Company): (a) Certificate of incorporation; (b) Memorandum and Articles of Association; (c) PAN of the company; (d) Board resolution & power of attorney or beneficial ownership documents.
• Partnership Firm: (a) Registration certificate; Partnership deed; Permanent Account Number; Beneficial ownership/manager documents.
• Trust: (a) Registration certificate; Trust deed; Permanent Account Number or Form No.60; Beneficial ownership/manager documents.
• Unincorporated Association/Body of Individuals: (a) Resolution of managing body; Permanent Account Number or Form No.60; Beneficial ownership/manager documents.

We may also undertake Video-based Customer Identification Process (V-CIP) in compliance with the KYC policy of RBI, either through a third-party service provider or on our own.

Personal Information is used for three general purposes: to customize the content you see, to fulfill your requests for certain services, and to contact you about our services through emails, SMSs, and other means of communication. Where possible, we indicate which fields are required and which are optional. You always have the option not to provide information by choosing not to use a particular service, product, or feature on our Platform.

Find My Business collects personal information voluntarily provided by you while accessing or using our platforms/services. We also collect data regularly from various sources, such as newspapers, visiting cards, pamphlets, magazines and journals, through data collectors, and through the join-free option available on our platforms.

Types of Information Collected by Find My Business

E. Data Collection and Usage

At Find My Business, we do not collect sensitive personal data unless it is essential for providing our services or fulfilling specific lawful purposes. You can browse or search our Platform without providing any information; however, certain services require the submission of personal information. We do not gather email addresses, physical addresses, or other contact details from your mobile address book or contact lists, aside from names and phone numbers. Additionally, we do not retain historical location information, except for the last known location if current location data is unavailable.

Our app may integrate with third-party services and occasionally send aggregate usage data to these services. The handling of information by these third parties is subject to their respective privacy policies.

When collecting information, Find My Business ensures that you are informed about:

• The fact that your information is being collected;
• The purpose for which your information is being collected;
• The intended recipients of the information; and
• The name and address of the entity collecting and retaining the information.

Data will not be collected unless:

• You have provided valid, informed, and voluntary consent;
• Processing is necessary to fulfill a contract to which you are a party;
• Processing is required to comply with legal obligations;
• Processing is needed to protect your interests; or
• Processing is essential for performing a task carried out in the public interest.

F. Use of Information

The information collected through our Platform is utilized for the specific purposes for which it was collected. Additionally, Find My Business uses this data for various purposes including:

• Providing and managing our services effectively.
• Processing your requests for products and services, and communicating with you regarding these requests.
• If you search for products or services on our Platform without logging in or request information via our hotline, we collect your mobile number and generate leads with our vendors/service providers as per your request.
• If you are logged in, we share your details (such as name, mobile number, email) with our vendors/service providers to fulfill your request.
• Managing and administering contests, sweepstakes, promotions, and surveys.
• Responding to feedback, reviews, and comments you provide.
• Customizing our services, websites, mobile services, and advertisements to better suit your needs.
• Enhancing the functionality, performance, and usability of our services, including fixing errors and improving user experience.
• Recommending features, products, and services that might interest you, and personalizing your experience.
• Operating, developing, and improving the products and services we offer.
• Supporting core business functions such as order fulfillment, internal processes, marketing, authentication, fraud prevention, public safety, and legal compliance.
• Displaying interest-based advertisements for features, products, and services that may be relevant to you.
• Detecting and preventing fraud and abuse to protect our users and the integrity of our services.
• Communicating with you for various purposes, including service promotion.
• Using Personal Data for legal proceedings and potential legal actions arising from improper use of our services.
• Maintaining and operating our services effectively.
• Utilizing voice inputs, images, videos, and other personal data to respond to your requests and enhance our service offerings.
• Ensuring compliance with legal obligations. For example, we may collect information from sellers regarding their place of establishment and bank account details for identity verification.

Your Personal Information will remain confidential and used solely for our research, marketing, strategic analysis, and other internal business purposes. We do not sell Personal Information. If you are a customer, your information may be shared with our subscribers/advertisers with your consent. Subscribers/advertisers listed with us may contact you based on your queries or requests. If you are a vendor/seller/business entity, your information may be shared with users, customers, and subscribers seeking our services.

We use your Personal Information to assist vendors, service providers, and partners in fulfilling orders; improving customer experiences; resolving disputes; preventing fraud; measuring consumer interest; updating you on offers and services; customizing your experience; and enforcing our terms and conditions. With your consent, we may access your SMS, contacts, location, and device information. We may also request PAN, GST Number, Government-issued ID, and Know-Your-Customer (KYC) details to: (i) assess eligibility for certain products and services, (ii) issue GST invoices, (iii) enhance your experience on our Platform. Your access to these products/services may be limited if consent is not provided.

We and our affiliates analyze demographic and profile data from user activity on our Platform to improve our offerings. We use your IP address to diagnose server issues, administer our Platform, and gather broad demographic information.

Occasionally, we may invite you to participate in surveys conducted by us or third-party market research agencies. These surveys might collect personal information, contact details, demographic information, interests, and other preferences to tailor your experience and display content accordingly.

We engage other companies and individuals to perform functions such as data analysis, marketing, search results, credit card processing, and customer service. They may access personal information necessary for these functions but must comply with this Privacy Policy and applicable laws.

In certain cases, we collect personal information to comply with legal requirements. If you submit Personally Identifiable Information through our Platform or services, we use it to operate and maintain the Platform’s features and functionality. Your mobile phone number is essential and will be retained. Your name may be visible to other users if tagged, and your ratings may be displayed if applicable. You can review and manage your tagged friends list, untag contacts, and adjust your privacy settings accordingly. Ratings and other user interactions are visible on our Platform.

We do not use your mobile phone number or other Personally Identifiable Information for commercial or marketing messages without your consent, except as part of specific programs where you can opt-in or opt-out. We may use cookies and log file information to remember your preferences, provide personalized content, monitor page views, and track your interactions with our Platform.

G. Handling of Personal Information

Personal or sensitive data may be processed if required for any function of Parliament or any State Legislature, or for the exercise of any function of the State authorized by law. This includes the provision of any service or benefit to the data principal by the State or the issuance of any certification, license, or permit for any action or activity of the data principal by the State.

Personal or sensitive data may also be processed if such processing is explicitly mandated under any law made by Parliament or any State Legislature, or for compliance with any order or judgment of any Court or Tribunal in India.

Personal or sensitive data may be processed in response to medical emergencies involving a threat to the life or severe threat to the health of the data principal or any other individual. This also includes measures to provide medical treatment or health services during an epidemic, outbreak of disease, or any other threat to public health, and to ensure safety or provide assistance or services during any disaster or breakdown of public order.

Personal data may be processed if necessary for recruitment or termination of employment, provision of any service or benefit sought by the data principal, verifying attendance, or any other activity relating to the assessment of the performance of the data principal.

Beyond these grounds, personal data may be processed for reasonable purposes, considering the interest of Find My Business in processing for that purpose, the feasibility of obtaining consent, public interest, the effect on the rights of the data principal, and the reasonable expectations of the data principal given the context of processing. Reasonable purposes may include prevention and detection of unlawful activities like fraud, whistleblowing, mergers and acquisitions, network and information security, credit scoring, debt recovery, and processing publicly available personal data.

However, Find My Business ensures the protection of the rights of data principals. Sensitive personal data may be processed based on explicit consent. Consent is considered explicit if it is informed, clear, and specific, ensuring the data principal is aware of the significant consequences, the consent is meaningful, and the data principal can separately consent to different purposes, operations, and categories of sensitive data relevant to processing.

Processing of personal data of children: Find My Business does not allow children below the age of 13 years to visit our platform without parental guidance or control. We verify your age based on the date of birth you provide. When children visit our platform or use our services, we assume they are doing so under parental guidance, control, and consent, and we process their information accordingly. Find My Business shall process personal data of children in a manner that protects the rights and best interests of the child.

H. Disclosure of Information

Other users of Find My Business Service may see your ratings submissions in a way that is consistent with the use of the Find My Business Service. For instance, a rating of "XYZ Store" on Find My Business will be visible to any user of the Find My Business Service who has that mobile phone number in their contact list and has tagged the number as a friend in the Find My Business App friends ratings feature.

We do not sell or share your Personally Identifiable Information (such as mobile phone number) with other third-party companies for their commercial or marketing use without your consent, except as part of a specific program or feature for which you will have the option to opt-in or opt-out. We may share your Personally Identifiable Information with third-party service providers to the extent necessary to perform, improve, or maintain the Find My Business Service.

We may disclose your personal information to third parties, such as vendors, sellers, service providers, business partners, and other stakeholders. This disclosure may be required to provide you access to our products and services, fulfill your orders, enhance your experience, provide feedback on products, collect payments from you, comply with our legal obligations, conduct market research or surveys, enforce our Terms of Use, facilitate our marketing and advertising activities, analyze data, provide customer service assistance, and prevent, detect, mitigate, and investigate fraudulent or illegal activities related to our product and services. We do not disclose your personal information to third parties without your explicit consent.

These third-party service providers may have access to personal information needed to perform their functions but may not use it for other purposes. Further, they must process the personal information in accordance with applicable law.

We share information with our affiliated companies, business partners, and associates with whom we have arrangements to provide or receive services. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings. This includes helping improve infrastructure and delivery systems, understanding how our Services or theirs are used, securing systems, fighting spam, abuse, or infringement activities, and promoting or marketing our business.

As we continue to develop our business, we might sell or buy other businesses or services. In such cases, all of our rights and obligations under our Privacy Policy are freely assignable by us to any of our affiliates in connection with a merger, acquisition, restructuring, or sale of assets, or by operation of law or otherwise. We may transfer your information to any of our affiliates, successor entities, or third parties while providing the services subject to the pre-existing Privacy Policy.

We may disclose personal information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to: (a) respond to subpoenas, court orders, or other legal processes or to government/law enforcement agencies' requests; (b) enforce our Terms and any other applicable terms and policies, including investigations of potential violations; (c) detect, investigate, prevent, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our users, companies, or others; (e) for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offenses.

We disclose account and other personal information when we believe such disclosure is appropriate to comply with the law, enforce or apply our Terms of Use and other agreements, or protect the rights, property, or safety of Find My Business, our users, or others. This includes exchanging information with other companies and organizations for fraud protection.

Find My Business shall share/disclose the data/information, without obtaining prior consent from you, with Government agencies mandated under the law to obtain information, including sensitive personal data or information, for the purpose of verification of identity, or for prevention, detection, investigation, including cyber incidents, prosecution, and punishment of offenses.

I. Transfer of Information

Find My Business will not transfer sensitive personal data or information, including any information, to third parties within or outside India, except under the following conditions:

• To fulfill your requests for products and services.
• To correct errors and enhance the usability and effectiveness of our Services.
• For purposes related to fraud prevention, public safety, and legal functions.
• To prevent and detect fraud and abuse, thereby protecting the security of our customers, Find My Business, and others.
• When it is necessary for the performance of a lawful contract between Find My Business and the data principal.
• When the data principal has consented to the data transfer.

However, Find My Business ensures that the same level of data protection is maintained as provided by Find My Business itself. When utilizing vendors to collect personal information on behalf of Find My Business, we ensure that these vendors comply with the data protection requirements as defined in this Policy.

J. Retention of Your Information

Personal information collected from you will only be used for the purposes specified in our Terms of Service and only if you have provided your consent. This information will be kept as long as necessary for the business purposes identified at the time of collection or as subsequently authorized by you. We retain your personal information in compliance with applicable laws, for a duration no longer than necessary for the purpose for which it was collected or as required by law.

However, we may keep data related to you if we believe it may be necessary to prevent fraud or future abuse or if required by law or for other legitimate purposes. We may continue to retain your data in anonymized form for analytical and research purposes. When personal information is no longer needed for business purposes, we ensure that the information is destroyed or de-identified in a manner that prevents unauthorized access.

Find My Business has a documented process to communicate any changes in the retention periods of personal information as required by the business to authorized personnel who can request those changes.

Sensitive personal data or information will not be retained for longer than necessary for the purposes for which it was collected or as required under any applicable law. Find My Business has established a data retention policy and retains all forms of data/information, including sensitive personal data, in accordance with this policy. Data/information will be de-identified or destroyed once the purposes for data collection have been fulfilled, in accordance with our data retention policy.

Personal information will be erased if its storage violates any data protection laws or if the information is no longer needed by Find My Business or for the benefit of the data providers. Additionally, Find My Business has the right to retain personal information for legal and regulatory purposes as per applicable laws.

We conduct an internal audit annually to ensure that personal information collected is used, retained, and disposed of in compliance with applicable laws.

K. Review of Your Information

Find My Business will set up and provide a system that allows you to review the information you have given us. You will have the option to access, edit, correct, modify, or delete any personal or sensitive personal information that is found to be incorrect or insufficient. However, Find My Business is not liable for the accuracy of the personal information or sensitive personal information provided by you.

You have the right to request details about your personal information in writing. Find My Business will respond within 72 (seventy-two) hours of receiving your written request. You are entitled to ask Find My Business to correct or update any erroneous, misleading, outdated, or incomplete personal information. We will document each request for access as it is received and note the actions taken in response. Find My Business will provide your personal information in a clear, simple format that is easy to understand.

L. Your Consent (Opt-in & Opt-out)

By accessing our Platform or by sharing your information, you agree to the collection, use, storage, disclosure, and processing of your information (including sensitive personal data) on our Platform as outlined in this Privacy Policy. If you provide us with personal information about others, you confirm that you have the necessary authority to do so and allow us to use the information in accordance with this Privacy Policy.

By submitting your personal information on our Platform or any of our partner Platforms or establishments, you consent to us (including our affiliates, lending partners, technology partners, marketing channels, business partners, vendors, service providers, and other third parties) contacting you through SMS, instant messaging apps, calls, and/or e-mail for the purposes specified in this Privacy Policy.

If you wish to manage, modify, or update your information, we provide tools in the Settings section for you to do so. You can adjust your settings to control what information is visible to other users. You can manage your contacts, groups, and broadcast lists, or use our blocking feature to manage who you communicate with.

If you are a vendor, you can add or update certain information in the vendor’s module, update your account information through your vendor Account Information section, and adjust your email or other communications you receive from us by updating your Notification Preferences. You can regularly update your Personal Information. Find My Business will retain your previous Personal Information in its records.

You may choose not to provide Personally Identifiable Information through the Find My Business Service, which may limit our ability to provide certain services to you. If you disagree with our Privacy Policy or Terms of Service, please delete your account and uninstall the Find My Business mobile application; continued use of the Find My Business Service indicates your acceptance of our Privacy Policy and Terms of Service.

To protect your privacy and security, we take reasonable steps (such as SMS authentication in certain cases) to verify your identity before registering your mobile phone number and granting you access to the Find My Business Service. Please contact us via email at privacy@findmybusiness.in or through available web forms with any questions or comments about this Privacy Policy, your personal information, your consent, or your opt-in or opt-out choices.

Before collecting any information, including sensitive personal data, Find My Business will provide an option for you to withhold the data or information sought. We will establish systems for collecting and documenting your consent to the collection, processing, and/or transfer of personal data. You will be informed about the choices available to you concerning the collection, use, and disclosure of personal information.

Furthermore, Find My Business will establish and facilitate a mechanism for you to withdraw your consent at any time while availing the services or otherwise. If you withdraw your consent, Find My Business reserves the right not to provide goods/services for which the information was required. Consent will be obtained (in writing/electronically) before or at the time of collecting personal information or as soon as practical thereafter. Changes to your preferences will be managed and documented. Consent or withdrawal of consent will be appropriately documented. The choices will be implemented in a timely manner and respected.

If personal information is to be used for purposes not identified at the time of collection, the new purpose will be documented, you will be notified, and consent will be obtained prior to such new use or purpose. You will be notified if the collected data is used for marketing purposes, advertisements, etc. Find My Business will review the policies of third parties and the types of consent required before accepting personal information from third-party data sources.

M. Consent to Notifications

By using our Platform, you consent to receive notifications and updates from Find My Business. This includes, but is not limited to, alerts related to reviews, ratings, comments, or other content that you submit or post on our website, mobile application, or other digital channels. These notifications may also be shared with any tagged contacts or users of our services at our discretion.

N. Third-Party Advertisers and External Links

Find My Business may feature advertisements from third-party sources. We strive to maintain transparency regarding these ads and will keep this section updated if our approach to advertising changes. When you utilize services provided by our partners, you may be redirected to their websites or applications. Access to these partner sites may require you to use your Find My Business login credentials, following your permission to share data.

Please note that Find My Business is not responsible for the privacy practices or the content of these external sites. We encourage you to review their privacy policies before providing any personal information. If you make payments through our services, we may receive information and confirmations, such as payment receipts, from app stores or other third parties involved in processing your transactions. If you make purchases from these partners, Find My Business will not be responsible for handling payment receipts, as these transactions are managed directly by the partner entities.

O. Information Regarding Minors

We do not intentionally seek or gather personal information from individuals under the age of 13. Our Platform is intended for use only by individuals who are capable of entering into a legally binding agreement under the Indian Contract Act, 1872. If you are under 18 years of age, you may use our Platform or services only with the supervision of a parent, legal guardian, or another responsible adult.

P. Information Security Commitment

At Find My Business, safeguarding your personal information is of utmost importance to us. It is your responsibility to maintain the security of your device and account, and you must promptly notify us of any unauthorized access or security breaches. Your account is protected by the password you use to access it, so please ensure it remains confidential.

We employ commercially reasonable physical, managerial, technical, electronic, and procedural measures to protect the integrity and security of your personal information. Find My Business adheres to relevant legal requirements for the protection of your information and conducts regular internal reviews of data collection, storage, processing practices, and security measures. This includes the use of encryption and physical security to prevent unauthorized access. However, we cannot guarantee the absolute security of any information you transmit to us, and you assume the risk of such transmission. You hereby release Find My Business from any claims for damages related to contract breaches.

We may share your information with third parties under confidentiality agreements that restrict further disclosure except for specified purposes. However, we are not responsible for any security breaches or actions taken by these third parties once they receive your personal information. Additionally, we are not liable for any loss or damage resulting from your provision of personal information to third parties, including third-party websites linked from our Platform.

We shall not be held responsible for any loss, damage, or misuse of your personal information due to events beyond our reasonable control, such as sabotage, fire, flood, or computer hacking. While we strive to protect your personal information, we cannot guarantee absolute security due to the inherent risks associated with internet and network security. We maintain physical, electronic, and procedural safeguards and may request proof of identity before disclosing personal information.

We implement reasonable physical, electronic, and procedural safeguards to protect your information. Our secure server is used whenever you access your account information. Although we follow stringent security guidelines, data transmission over the internet involves inherent risks that cannot be completely eliminated. By using our Platform, you acknowledge these risks and accept responsibility for protecting your login credentials. You hereby release Find My Business from any claims for damages under contract.

To ensure the protection of your sensitive personal data during transmission, we use encryption protocols and software. We adhere to the Payment Card Industry Data Security Standard (PCI DSS) for handling payment card data. If you choose to use a payment gateway on our Platform, your credit/debit card data will be stored in compliance with industry standards and applicable laws for the security of financial information.

Find My Business reviews the policies and data collection practices of third-party sources before accepting personal information from them. We conduct annual audits of our security practices and procedures and undertake significant updates to our processes and resources as needed.

Q. Privacy Practices

1. Privacy by Design

Find My Business is committed to integrating privacy into its operational and technological framework. We ensure that our organizational, managerial, and technical processes are designed to anticipate, identify, and prevent any potential harm to your privacy. We use technology and practices in the handling of personal data that meet or exceed commercially accepted standards to maintain data integrity and security. We strive to balance the legitimate interests of businesses, including innovation, with the protection of your privacy interests. Our approach ensures that privacy is maintained throughout the entire data processing lifecycle, from collection to deletion, and that all processing activities are transparent and respectful of the data provider's interests.

2. Transparency

Find My Business is dedicated to transparency in its data processing practices. We provide clear information regarding:

• The types of personal data we collect and how it is collected.
• The purposes for which we process personal data.
• Any special categories of data or exceptional processing activities that might pose significant risks.
• Your rights regarding your personal data and the procedures to exercise those rights.
• The process for lodging complaints with relevant authorities.
• Details about any cross-border transfers of personal data, if applicable.

3. Security Measures

We implement appropriate security measures tailored to the nature, scope, and purpose of data processing, considering the risks involved. These measures include:

• Using techniques such as de-identification and encryption to protect data.
• Taking necessary steps to safeguard the integrity of personal data.
• Preventing misuse, unauthorized access, alteration, disclosure, or destruction of personal data.

We periodically review and update our security measures to address evolving risks and maintain data protection.

4. Data Breach Notification

In the event of a personal data breach that could potentially harm individuals, Find My Business will notify the relevant authorities. The notification will include:

• The nature of the breached personal data.
• The number of affected individuals.
• Potential consequences of the breach.
• The actions being taken to address and mitigate the breach.

5. Record-Keeping

We maintain accurate and up-to-date records of key data processing activities, including:

• Collection, transfer, and deletion of personal data to demonstrate compliance.
• Regular reviews of our security safeguards.
• Data protection impact assessments.

6. Data Audits

Find My Business engages an independent data auditor to conduct annual audits of our data processing practices. The audit evaluates our compliance with data protection laws, focusing on:

• The clarity and effectiveness of our privacy notices.
• Transparency of our practices.
• Security measures in place.
• Response to any personal data breaches.

R. Monitoring and Compliance

Dispute Resolution & Remediation: Find My Business is committed to maintaining a comprehensive incident management program that addresses data protection and privacy-related incidents. This program includes a structured escalation path that may involve executive management, legal counsel, and the board, depending on the nature and severity of the data breach. The program ensures that all incidents, complaints, and queries related to data breaches are documented and processed. Regular reviews are conducted to ensure that complaints are resolved in a timely manner, with resolutions clearly documented and communicated to the affected individuals. In cases of unresolved complaints or disputes, an escalation process is in place, ensuring a systematic approach to addressing such issues. Communication channels for reporting privacy incidents or breaches, along with the escalation matrix, are made available to all data providers.

Dispute Resolution & Escalation Process for Employees: Employees who have concerns or complaints about the handling of their personal information are encouraged to first discuss the matter with their immediate supervisor. If an employee prefers not to discuss the issue with their supervisor, or if the supervisor and the employee are unable to reach a satisfactory resolution, the employee is encouraged to escalate the issue to the Grievance Officer.

Dispute Resolution & Escalation Process for Customers/Third Parties: Customers or third parties who have inquiries or complaints about the processing of their personal information should bring the matter to the attention of the Grievance Officer in writing. If disputes arise regarding the handling of personal information, they will be addressed through arbitration, ensuring that all concerns are managed in a fair and impartial manner.

S. Usage Terms, Policy & Amendments

Use of Services and Dispute Resolution: By choosing to use Find My Business services, you agree that your use and any privacy-related disputes are governed by this Privacy Policy and our Terms of Use, which include limitations on damages, the resolution of disputes, and the application of prevailing Indian laws. If you have any concerns regarding your privacy with, Find My Business, please reach out to us with a detailed description, and we will make every effort to resolve the issue promptly.

As our business evolves, this Privacy Policy may also undergo changes. We recommend checking our website frequently to stay informed about any updates.

Applicability of Current Privacy Policy: Unless otherwise specified, our current Privacy Policy applies to all the information we have about you and your account. We guarantee that any changes to our policies and practices will not reduce the level of protection for your information collected in the past without your explicit consent.

T. Concerns and Complaints

In accordance with the Information Technology Act 2000 and relevant rules and regulations, we provide the following contact details to address any concerns related to your privacy and the handling of your personal information:

• Contact No: +91 97074 99294
• Email: support@findmybusiness.in

If you have any questions, concerns, or complaints about how your personal information is collected or used under this Privacy Policy, please reach out to us via the contact information provided above or write to us at support@findmybusiness.in.

DEFINITIONS