Docs GDPR

GDPR Compliance

At NiyatiOne, we are fully committed to ensuring compliance with the General Data Protection Regulation (GDPR) of the European Union. This page outlines how we manage and protect the data of EU/EEA users and honor their privacy rights.

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law that enhances the protection of personal data and gives individuals more control over how their data is collected, used, and stored. It applies to any company that processes personal data of individuals residing in the EU, regardless of the company’s location.

Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access: You can request access to your personal data and obtain information on how it’s used.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
  • Right to Erasure (Right to be Forgotten): You have the right to request deletion of your data where applicable.
  • Right to Restrict Processing: You can restrict how we process your data under certain conditions.
  • Right to Data Portability: You can receive your personal data in a commonly used format and transfer it to another controller.
  • Right to Object: You can object to processing based on legitimate interests, direct marketing, or profiling.
  • Automated Decision Making: You have the right not to be subject to decisions made solely based on automated processing (including profiling) that affect you.

You are in full control of your consent preferences.
You may:

  • Opt-in or opt-out of data processing at any time.
  • Revoke your consent for marketing communications.
  • Disable cookies and trackers via your browser or cookie settings.
Note: Withdrawing consent does not affect the lawfulness of processing based on prior consent.

Data Processing Overview

We collect only the necessary data for:

  • Delivering and improving services.
  • Communicating and providing support.
  • Legal and security purposes.
We never sell your data. We process data strictly on the legal basis of consent, contract, legitimate interest, or legal obligation.

Data Transfers Outside the EU

If your data is transferred outside the European Economic Area (EEA), we ensure:

  • Adequate protection under EU-approved mechanisms (e.g., Standard Contractual Clauses).
  • Only trusted partners and secure servers are used (AWS, DigitalOcean, Azure, etc.).

Our Commitment to Data Protection

We implement:

  • Secure encryption and firewalls.
  • Regular audits and compliance checks.
  • Employee training on data privacy.
  • Strict access control and monitoring.

Data Protection Officer (DPO)

For any GDPR-related queries or to exercise your rights, please contact our DPO: You can contact [email protected]

Last Updated on: 23rd July 2025 at 11:30 AM SGT
Did this page help you?