Privacy Policy

caratRED Technologies (“caratRED”, “we”, “us” or “our”) builds software platforms and services for the hospitality industry. This Privacy Policy explains how we collect, use, share and protect personal data when you visit this website, contact us, or use our products and services. It also describes your rights and how to exercise them.

We are committed to processing personal data lawfully and transparently in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the EU and UK General Data Protection Regulation (GDPR), Malaysia’s Personal Data Protection Act 2010 (PDPA), and other data-protection laws that apply to the regions we serve.

Who we are

caratRED Technologies is headquartered in Hyderabad, India, with offices in Malaysia and the United States, and an office opening in the UAE. For the purposes of the DPDP Act we act as a Data Fiduciary, and under the GDPR as a Data Controller, in respect of the personal data described in this policy. Where we process data on behalf of our business customers under a services agreement, we act as a Data Processor and process that data only on their documented instructions.

The data we collect

• Information you give us — when you complete a contact or demo-request form, or email us, we collect your name, business email address, phone number, company name and the contents of your message.
• Technical and usage data — when you visit the site we automatically collect your IP address, browser type, device information, referring pages and the pages you view, through server logs and cookies.
• Approximate location — we use your IP address to estimate your country so we can show the office and regional information most relevant to you. This is a non-essential feature that runs only where you have consented.
• Analytics data — where you consent, we may use analytics cookies to understand how visitors use the site so we can improve it.

We do not knowingly collect sensitive personal data through this website, and we ask that you do not send it to us through our forms.

How and why we use your data

• To respond to your enquiries, arrange demos and provide the information you request.
• To provide, operate, maintain and improve our products, services and website.
• To communicate with you about your account, our services and relevant updates.
• To keep the site secure, prevent fraud and misuse, and meet our legal and regulatory obligations.

Under the DPDP Act we rely on your consent, or on other legitimate uses permitted by the Act, as our lawful basis. Under the GDPR our lawful bases are your consent (for non-essential cookies and marketing), the performance of a contract (to deliver services you request), our legitimate interests (to run and improve our business and secure the site), and legal obligation where the law requires it. You may withdraw consent at any time.

Cookies and similar technologies

We use a small number of cookies and similar technologies. Strictly necessary cookies are required for the site to function and are always active. Preference, analytics and marketing cookies are non-essential and are set only after you accept them through our consent banner. You can accept or decline non-essential cookies when you first visit, and change your choice at any time by clearing the site’s stored consent in your browser. Declining non-essential cookies will not affect access to the site’s core content.

How we share data

We do not sell your personal data. We share it only with:

• Service providers (Data Processors) who host our website, deliver email, and provide analytics or IT services under contract, and only for the purposes above.
• Group companies and partners where needed to respond to your request or deliver a service you have asked for.
• Authorities or advisers where required by law, regulation, or to establish, exercise or defend legal claims.

International transfers

Because we operate across India, Malaysia, the United States and the UAE, your data may be processed in a country other than your own. Where we transfer personal data across borders we put appropriate safeguards in place — such as standard contractual clauses or equivalent measures — as required by applicable law.

How long we keep data

We keep personal data only for as long as necessary for the purposes it was collected, to provide our services, and to meet legal, tax and regulatory requirements. When it is no longer needed we securely delete or anonymise it.

How we protect data

We apply appropriate technical and organisational measures — including access controls, encryption in transit, and secure hosting — to protect personal data against unauthorised access, loss or misuse. No system is perfectly secure, but we work continually to safeguard the data entrusted to us.

Your rights

Depending on where you live, you have rights over your personal data. Under the DPDP Act you may request access to a summary of your data and its processing, ask us to correct or complete it, ask us to erase it, nominate another person to exercise your rights, and raise a grievance with us. Under the GDPR you may request access, rectification, erasure, restriction of processing, and data portability, object to processing, and withdraw consent at any time.

To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by the applicable law. If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority. If you are in India, you may complain to the Data Protection Board of India if your grievance is not resolved.

Children’s data

This website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are significant, provide a more prominent notice.

Contact us

For any question about this policy, or to exercise your rights or raise a grievance, contact our Data Protection / Grievance Officer:

caratRED Technologies
Email: info@caratred.com
305-308, Block-2, White House Building, Begumpet, Hyderabad, Telangana 500016, India