Privacy policy
How we collect, use and protect personal data.
Last updated: 18 October 2026
1. Who we are
This Privacy Policy explains how Ekobon ("Ekobon", "we", "us") collects and uses personal data through the website ekobon.com and related pages. Our registered office is at 1011, Solitaire Corporate Park, Building No. 10, Mumbai, Maharashtra 400093, India. You can contact us about privacy at info@ekobon.com.
This policy covers the website. Personal data processed inside our software platforms, EKOTRACE and EKOFIN, on behalf of our clients is governed by the agreement with each client. In that case the client decides how the data is used, and we act on its instructions.
2. Personal data we collect
Information you give us
- Contact and demo requests: name, work e-mail, company, country and your message.
- Early-access and newsletter sign-ups: name and work e-mail, and the topics you choose.
- Correspondence: anything you include when you e-mail or call us.
Information collected automatically
Our web servers record standard technical logs, such as IP address, browser type, pages requested and time of request, to keep the site secure and working. We do not use advertising or tracking cookies on the website by default. If we introduce analytics or other optional cookies in future, we will ask for your consent first and update this policy.
3. How we use personal data
- To reply to your enquiries and arrange demos.
- To send you updates you have asked for, such as our regulatory newsletter. You can unsubscribe at any time.
- To keep the website secure and prevent misuse.
- To meet our legal obligations.
We do not sell personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Legal basis
We process personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable laws. We rely on your consent when you submit a form or subscribe, and on legitimate uses permitted by law for security and legal compliance. Where other data protection laws apply to you, such as the EU or UK GDPR, we rely on consent, steps taken at your request before a contract, our legitimate interests in running our business, and legal obligations.
5. Sharing
We share personal data only with:
- Service providers that host our website, send e-mail or store our records, under contracts that require them to protect the data and use it only for our instructions.
- Partners, only where you ask to be put in touch with one or where a partner delivers services to you on our behalf.
- Authorities, where the law requires it.
6. International transfers
Website data may be processed in India and in other countries where our service providers operate. Where we transfer personal data across borders, we do so as permitted by applicable law and with appropriate safeguards.
For our platforms, clients may choose the region where their platform data is hosted, or host it on their own infrastructure. Those choices are set out in each client agreement.
7. Retention
We keep enquiry and correspondence records for as long as needed to respond and to maintain a business relationship, and in any case no longer than necessary for the purposes above or as required by law. Newsletter data is kept until you unsubscribe. Server logs are kept for a limited period for security purposes.
8. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and limited access on a need-to-know basis. No system is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal data breach where the law requires.
9. Your rights
Subject to applicable law, you can:
- access a summary of the personal data we hold about you;
- ask us to correct, complete or update it;
- ask us to erase it;
- withdraw your consent at any time, without affecting processing already carried out;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us and, if not resolved, complain to the Data Protection Board of India or your local supervisory authority.
To exercise these rights, e-mail info@ekobon.com. We may need to verify your identity before acting on a request.
10. Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.
11. Links to other sites
Our website may link to other websites. We are not responsible for their privacy practices, and we encourage you to read their policies.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on this page.
13. Contact and grievances
For any question or grievance about this policy or our handling of personal data, contact us at info@ekobon.com or write to Ekobon, 1011, Solitaire Corporate Park, Building No. 10, Mumbai, Maharashtra 400093, India.