DPDP Privacy Notice

1. Data Fiduciary

Under the DPDP Act, MatricsTek Inc. (8 The Green, Ste R, Dover, DE 19901, USA) acts as a Data Fiduciary when we determine the purpose and means of processing your personal data. Where we process data on behalf of our enterprise clients, we act as a Data Processor.

2. Purpose of Processing & Consent Notice

We collect and process your personal data only for specified, clear, and lawful purposes. Before collecting your data, we will provide you with a Consent Notice in clear and plain language that describes:

• What personal data is being collected.
• The purpose for which it will be processed.
• The manner in which you may exercise your rights under the DPDP Act.
• The manner in which you may make a grievance complaint.

Your consent will be obtained via a clear, affirmative action (opt-in). You may withdraw consent at any time, and withdrawal will not affect the lawfulness of processing prior to withdrawal.

3. Grounds for Processing

We process personal data under the following grounds as permitted by the DPDP Act:

• Consent: Free, specific, informed, and unambiguous consent from you, the Data Principal.
• Certain Legitimate Uses: Where processing is necessary for performance of a legal obligation, compliance with a court judgment, employment or safeguarding purposes, or other uses as notified by the Central Government under the Act.

4. Rights of the Data Principal

As a resident of India (Data Principal), you have the following rights:

• Right to Access Information: Request a summary of your personal data being processed, the purposes of processing, and identities of Data Fiduciaries/Processors with whom your data is shared.
• Right to Correction and Erasure: Request correction, completion, updating, or erasure of your personal data that is no longer necessary for the purpose for which it was collected.
• Right of Grievance Redressal: The right to readily available means of registering a grievance with us, which we will acknowledge and resolve within a timely manner.
• Right to Nominate: The right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.

To exercise these rights, contact our Grievance Officer at contact@matricstek.co. We will acknowledge your grievance promptly and resolve it within 30 days.

5. Duties of the Data Principal

The DPDP Act also prescribes duties for Data Principals. By using our services, you agree not to: impersonate another person; suppress material information when submitting personal data for a document issued by a State authority; or register a false or frivolous grievance or complaint.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once the purpose is served and you request erasure, we will delete your personal data within 30 days, except where retention is mandated by applicable law.

7. Cross-Border Transfer of Data

As MatricsTek Inc. is incorporated in the United States, your personal data may be transferred to and processed in the USA. Such transfers are subject to applicable data transfer restrictions under the DPDP Act and are safeguarded through appropriate contractual mechanisms consistent with applicable law.