1. Introduction
Innovative Incentives & Rewards Pvt Ltd (“we”, “our”, “us” , “Innovative Incentives” ) is committed to protecting the privacy of individuals who interact with our website and digital platforms. This Privacy Policy outlines how we collect, use, process, share, and safeguard your personal data, whether collected directly through our own channels or indirectly through data shared with us by our business partners (“Principals”).
We are committed to comply with all applicable laws and data protection regulations, including the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and relevant international data privacy standards.
2. Scope and Applicability
This Privacy Policy applies to:
- Individuals who register directly on our website or platforms.
- Individuals whose data is provided to us by our Principals for specific business purposes.
We consider all personal data—regardless of its source—to be subject to the same strict privacy and security protocols as outlined herein.
3. Definitions
- Personal Data: Information that identifies, relates to, describes, or can be linked to an individual.
- Data Principal: The individual to whom the personal data belongs.
- Data Fiduciary: Innovative Incentives & Rewards Pvt Ltd, as the entity that determines the purpose and means of processing personal data.
- Transactional Communication: Non-marketing messages essential for fulfilling a service (e.g., password resets, billing alerts , verification , account status etc).
- Promotional Communication: Marketing messages, newsletters, offers, or any non-essential updates.
4. Sources of Data
We collect personal data from the following sources:
1. Direct User Input: When users voluntarily provide information via our website forms, contact pages, or registration processes.
2. Third-Party Sources (Principals): Data received from our partner organizations in accordance with predefined contracts and user agreements.
5. Data Handling for Principal-Provided Information
We treat all principal-provided data with the same care, confidentiality, and compliance as data collected directly by us. When we act as the initiating party for communication (on behalf of the Principal), the following apply:
- Our privacy policy and communication preference system take precedence over those provided to the Principal.
- We are the party making the outreach and thus bear responsibility for consent management, opt-out options, and legal compliance.
- All data is processed strictly for the purposes for which it was received and will not be reused, resold, or extended beyond its original intent.
6. Categories of Data Collected
- Name, email address, mobile number, company name
- IP address, browser type, device ID
- Usage patterns, interaction logs, page visits
- Consent status and communication preferences
7. Purpose of Data Processing
- To enable account creation and profile management
- To provide transactional communications related to service delivery
- To send promotional communications (only if explicitly opted-in)
- To generate reports and analytics (anonymized wherever possible)
- To fulfil legal, regulatory, or compliance-related obligations
8. Communication Preferences
Users can manage their preferences regarding:
- Transactional Communication: These are mandatory and cannot be turned off, as they relate to essential service updates, billing, or security.
- Promotional Communication: These are optional and can be opted in or out anytime via user settings or unsubscribe links.
In cases where data is received from a Principal, users’ preferences registered with us shall override prior permissions granted to the Principal.
9. Legal Basis for Processing
We rely on one or more of the following lawful bases:
- User consent
- Fulfilment of a contractual obligation
- Legal obligation
- Legitimate interest (e.g., fraud prevention, system security, analytics)
10. Data Sharing and Disclosure
We do not sell personal data. We may share information:
- With trusted service providers under strict data protection agreements
- With regulators, law enforcement, or legal authorities upon valid request
- In connection with a merger, acquisition, or asset sale
All third parties are contractually obligated to ensure the protection and confidentiality of your personal data.
11. International Data Transfers
If your data is transferred outside your country of residence, we will ensure that appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your rights.
12. Data Retention
We retain personal data for as long as:
- Required to fulfil the purposes outlined above
- Mandated by applicable law or regulation
- Necessary for audit, compliance, or legal defense
Data no longer required is securely deleted or anonymized.
13. Data Security
We implement industry-standard security measures including:
- SSL encryption
- Access control and authentication layers
- Regular data audits and vulnerability assessments
- Internal training on data protection
14. User Rights
Depending on applicable laws, you may:
- Access your personal data
- Correct or update your data
- Withdraw consent (for promotional communications)
- Request deletion, portability, or restriction of processing
- Object to automated decision-making or profiling
To exercise your rights, please write to us at: contact@innovativeincentives.in
15. Children’s Privacy
Our services are not directed to children under 18 unless specified as per the terms of the applicable project in particular . We do not knowingly collect data from minors without verified parental consent.
16. Changes to This Policy
We may periodically update this Privacy Policy to reflect legal, technological, or business changes. Significant updates will be notified via our website or email. Continued use of our platform implies acceptance.
17. Contact Information
Innovative Incentives & Rewards Pvt Ltd
Registered Office :- A37 , Block A , Sector 8 , Dwarka , New Delhi , 110075
Email: hi@innovativeincentives.in
Where we act on behalf of a Principal for a specific program, campaign, or project, we may serve as a data processor, acting solely under their instructions. In such cases, the Principal is the Data Fiduciary and bears full responsibility for the lawful collection and assignment of such data.
We do not independently verify the source, accuracy, or consent status of data shared by Principals. We act in good faith under contractual obligation and are not liable for any errors, omissions, or lack of consent in Principal-supplied data. The Principal remains fully responsible for the legal validity of such data and its original collection practices.
We are not responsible for how our Principals represent our role or services to their users. Any misrepresentation or failure to disclose our involvement does not impose any liability on us.
Consent Records and Logging
We maintain records of user consent wherever applicable, including timestamped logs of opt-in/opt-out activity. These records serve as the authoritative source in case of disputes or regulatory review.
Disclaimer of Marketing Performance
While we assist in executing campaigns based on personal data (as permitted), we do not guarantee user engagement, click-throughs, conversions, or any specific outcomes from such efforts. Campaign performance depends on multiple factors beyond our control.