§ Privacy
Privacy & cookie notice.
This notice explains how the Kloudpad group handles personal data collected through this website and through enquiries sent to us. It covers the laws of every region we work in: the EU and UK GDPR, the India Digital Personal Data Protection Act 2023, US state privacy laws and GCC data protection laws.
In short
- This website sets no advertising, analytics or tracking cookies, and does not load third-party fonts or scripts. Everything is served from our own host.
- The front-door form does not send data to a server. It opens your own email app with a message to corporate@kloudpad.com, which you choose whether to send.
- We use your details only to reply to you and manage the relationship that follows. We do not sell or share personal information for cross-context behavioural advertising.
Who is responsible for your data
The controller (called the "data fiduciary" under Indian law) is the Kloudpad entity that handles your enquiry:
| Your region | Controller |
|---|---|
| European Union / EEA | Kloudpad Europe, Helsinki, Finland |
| United Kingdom | Kloudpad UK, London |
| United States and the Americas | Kloudpad Inc., 169 Madison Avenue, Suite 11913, New York, NY 10016 |
| India, GCC and the rest of the world | Kloudpad Mobility Research (P) Limited, Kochi, Kerala, India |
Group entities may act as joint controllers, or as processors for one another, under intra-group agreements. When we deliver services to clients, we usually act as a processor on the client's behalf, under a data processing agreement. This notice does not cover that processing.
What we collect
- Enquiry data you send us: your name, work email, organisation, role, region, enquiry type, message, and, for investors, a self-declared investor category.
- Correspondence: emails, calls, meeting notes and any documents you choose to share.
- Technical data: our hosting provider (Amazon Web Services) processes standard server and security logs, such as IP address, browser type and time of request, to deliver and protect the site. Enquiries sent through the website form are delivered to our inbox by our form provider, Web3Forms, which does not use them for any other purpose.
- Storage on your device: one strictly necessary preference that records your choice on the privacy notice, and a session flag that records you have read the investor notice.
Please do not send special-category or sensitive personal data, such as health, biometric or financial account details, through this website.
Why we use it, and our legal basis
| Purpose | EU / UK GDPR basis | India DPDP Act basis |
|---|---|---|
| Replying to your enquiry and taking pre-contract steps | Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests | Consent (s.6), which you give by sending the enquiry; legitimate uses (s.7(a)) |
| Investor relations, eligibility and NDA checks | Art. 6(1)(c) legal obligation; Art. 6(1)(f) | Consent; compliance with law (s.7) |
| Recruitment and research partnerships | Art. 6(1)(b); Art. 6(1)(f) | Consent; legitimate uses |
| Security, fraud prevention and site operation | Art. 6(1)(f) | Legitimate uses |
| Legal, regulatory and audit obligations | Art. 6(1)(c) | Compliance with law (s.7) |
We do not use your data for automated decisions that produce legal or similarly significant effects on you, and we do not use enquiry data to train AI models.
Retention & security
We keep enquiry data for up to 24 months after our last contact, unless it becomes part of a contract, an investment or an employment relationship, or the law requires a longer period. Investor KYC and transaction records are kept as long as company, anti-money-laundering and securities laws require. We use access controls, encryption in transit, least-privilege access and staff confidentiality to protect personal data. If a breach puts your rights at risk, we will notify the relevant authorities and you, as the law requires.
Your rights by region
European Union / EEA · United Kingdom
You have the right to access, rectify, erase, restrict or port your data, and to object to processing, including direct marketing. You can withdraw consent at any time. You can complain to a supervisory authority: in Finland the Data Protection Ombudsman (tietosuoja.fi), in the UK the Information Commissioner's Office (ico.org.uk), or the authority in your own EU country.
India · DPDP Act 2023
You have the right to information about your processing, to correction, completion, updating and erasure, to grievance redressal, and to nominate another person to exercise your rights. You can withdraw consent as easily as you gave it. Grievances go to our Grievance Officer at corporate@kloudpad.com (subject "DPDP grievance"). If you are not satisfied with our response, you can approach the Data Protection Board of India.
United States · CCPA/CPRA & other state laws
California residents, and residents of states with similar laws such as Virginia, Colorado, Connecticut, Texas and Oregon, may ask to know, access, correct or delete personal information, and may opt out of sale, sharing or targeted advertising. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics. We honour Global Privacy Control signals. We will not treat you differently for exercising your rights. An authorised agent may make a request for you, subject to verification.
GCC · UAE, DIFC, ADGM, Saudi Arabia, Qatar, Bahrain, Oman
Depending on where you are, your rights come from UAE Federal Decree-Law No. 45 of 2021 (PDPL), DIFC Data Protection Law No. 5 of 2020, the ADGM Data Protection Regulations 2021, the Saudi Personal Data Protection Law (Royal Decree M/19), Qatar Law No. 13 of 2016, Bahrain Law No. 30 of 2018 and Oman Royal Decree 6/2022. These include rights of access, correction, erasure, restriction and objection, and the right to complain to the competent regulator, such as the UAE Data Office, the DIFC Commissioner of Data Protection or SDAIA in Saudi Arabia.
To exercise any right, email corporate@kloudpad.com with the subject "Privacy request". We will verify your identity and reply within the time the applicable law allows, usually one month (GDPR) or 45 days (CCPA).
Children
This website is for business audiences. It is not directed at children under 18, and we do not knowingly collect their data. Under the India DPDP Act, we would process a child's data only with verifiable parental consent.
Contact & complaints
Privacy contact and Grievance Officer: corporate@kloudpad.com. Post: Kloudpad Mobility Research (P) Limited, G7, 7th Floor, Heavenly Plaza, Civil Lane Road, Padamughal, Kochi, Kerala 682021, India. EU contact: Kloudpad Europe, Helsinki, Finland. We will post any changes to this notice here and update the date at the top.