Privacy Statement | Milestone Technologies

Milestone is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Statement of Privacy (“Privacy Statement”) describes our practices regarding use, maintenance and disclosure of your Personal Data that we collect through our website available at https://milestone.tech/ (“Website”) and services (the Website and services shall hereinafter collectively be referred to as “Services”). We respect the privacy of your Personal Data and undertake to ensure that the data that you provide us with will be treated only in the manner described in this Privacy Statement.

Whenever the Privacy Statement mentions the terms “Milestone” or “we” or “us” or “our”, it refers to Milestone Technologies, Inc., which is responsible for your Personal Data under this Privacy Statement.

We conduct our business in compliance with applicable laws and shall collect, use and process your Personal Data only in accordance with applicable data protection and security laws, regulations and guidelines.

We urge you to read this Privacy Statement thoroughly. By consenting and subsequently, accessing and using our Website, you will have represented your agreement to this Privacy Statement and bound by its terms. If you do not agree with the practices described in this Privacy Statement, please do not provide us with your Personal Data or interact with the Website.

Scope of the Privacy Statement

To make our Services accessible to you and to administer and manage your relationship with us, we will necessarily need to collect, use, disclose and/or process your information and Personal Data, to which you consent by agreeing to this Privacy Statement.
For the purpose of this Privacy Statement the term “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
Our privacy and security practices in connection with the access and use of our Services are governed by the Terms of Use agreement, which is a binding contract between you and us and which is incorporated herein by reference.
Our Privacy Statement does not apply to services offered by other companies, third party service providers or individuals, including products or sites that may be displayed to you in search results or other sites linked from our Services. You should consider the privacy practices of those third-parties carefully.

Collection of your Personal Data

We collect information that you provide us directly or automatically when you use the Services. The collection of your Personal Data shall be strictly restricted to what is necessary for the purpose of fulfilling the purposes identified herein below. We may collect and retain the following Personal Data from and about you if you interact with us through the Services;

Your Personal Data, such as but not limited to your Name, E-mail address, Company Name, Telephone Number, Your Role/Occupation, and how you heard about us.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
When you use or visit our Services we may collect information about your computer hardware and software. This information can include: your IP address, web browser type, web browser version, internet service provider, site trends, location, referring URL, timestamp information, app packages, app names, URLs, email address, poll inputs and the operating system that your computer or device is running. This information is used by Milestone for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Milestone website.
Any information entered by you when you interact with the Services or our personnel for any purpose, including but not limited to reporting a problem with or difficulty using our Services or for providing feedback.
Any information that we ask for and may collect from various sources, which may include but are not limited to, information you voluntarily provide us at any events, seminars, conferences, talks, promotions, surveys organized by us, and/or information we collect when you submit web forms on our Services or if you use interactive features of our Services.
Please keep in mind that if you directly disclose Personal Data through Milestone’s public message boards, this information may be observed and used by others.

Use of your Personal Data

We use the Personal Data and information that is collected from you or that you provide to us or that we collect through other sources for the purpose of fulfillment of our obligations under our agreement with you and/or to comply with our statutory legal obligations. Without prejudice to the above, enumerated hereunder is a non-exhaustive list of the purposes for which your Personal Data may be used/processed;

To operate the Milestone website and deliver the services you have requested;
To inform you of other products or services available from Milestone and its affiliates;
To contact you via surveys to conduct research about your opinion of current services or of potential new services that may be offered;
To provide you with information that may be requested by you from time to time;
To send promotional emails about new products, special offers or other information which we think you may find interesting;
To maintain, operate and improve the Services;
Contact you to ensure that the information we have in our records is accurate or when in need of additional information to complete your profile;
To facilitate communication and improve our business relationship with you and to respond to your queries, requests or complaints and/or resolve any issues and disputes which may arise in connection with any dealings with us;
Create our own internal statistical for in-house analytical purposes;
Prevent activity we determine to be potentially illegal; enforce this Privacy Statement and/or our Terms of Use or any other purpose referenced herein or therein;
To control and monitor and ensure compliance with security arrangements and policies adopted by us, and also to ensure their compliance with the law and other regulatory obligations;
To comply with any request or direction or lawfully disclose information required by any applicable law, regulation, direction, court order, bylaw, guidance, circular or code applicable to us;
To monitor and identify areas of our Services in which improvement may be needed;
To investigate, detect and prevent any fraudulent transaction, unauthorised access to the services and prohibited or illegal activity or omission or misconduct;
We may use information for the security of our company, customers, employees and/or our Services
We shall not use your Personal Data for any purpose, than for what it is collected. We may use your Personal Data for purposes not stated herein above but only with your express or implied prior consent for such use.

Lawful Basis of processing of personal information

We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:

Consent: For example, where you have provided your consent to receive certain marketing from us and/or where you have provided your explicit consent for us to process certain of your physical information as part of your use of the Website(as described above).
Our legitimate business interests: Where it is necessary for us to understand our customers, promote our services and operate effectively as an IT services tech company, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights.
Performance of a contract with you (or in order to take steps prior to entering into a contract with you): For example, where you may purchase products/services from us and we need to use your contact details and payment information in order to process your order.
Compliance with law: Where we are subject to a legal obligation and need to use your personal information in order to comply with that obligation.
Vital interests: In some limited cases, we may need to process your personal information where it is necessary to protect your vital interests or the vital interests of another person. For example, we may need to process your personal information to provide you with medical assistance in an emergency.

We will always take steps to ensure that the processing of your personal information is fair and lawful, and that it does not unduly affect your privacy

Disclosure/ Sharing of your Personal Data

Milestone does not sell, rent or lease your Personal Data to third parties without your consent. Milestone may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your Personal Data is not transferred to the third party. In addition, Milestone may share your Personal Data with trusted partners to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your Personal Data except to provide these services to Milestone, and they are required to maintain the confidentiality of your information.
Milestone does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent.
We may disclose your Personal Data to third party recipients for the purposes laid out following, including: (i) To third parties who we engage to provide services or benefits to us or to you, such as professional advisers, auditors, insurers and outsourced service providers (e.g. payroll services providers, health insurers and pension trustees); (ii) To other members of our group or affiliates; (iii) To third parties, their agents and professional advisers, subject to confidentiality obligations, for the purpose of a due diligence exercise by third parties in connection with any proposed merger, acquisition, re-organization or transfer of our business and to any person proposing to participate in, or promote or underwrite or manage any such arrangement; (iv) To competent regulatory authorities and other bodies as requested or required by law. Provided that all third parties listed at (i) to (iv) agree to provide adequate protections for the Personal Data that are no less protective than those set out in this Privacy Statement.
We may with your prior and expressed consent share Personal Data for reasons not described in this Privacy Statement with third parties.

Transfer of your Personal Data

The information collected by us may be sent to servers located in United States and/or other countries around the world. By interacting with and/or using the Services you understand that your Personal Data will be transferred to such countries and you consent to such transfer.
We do not transfer your Personal Data with third parties, unless it is necessary to fulfill our obligations to you and as permitted by law. We shall make appropriate arrangements to ensure that your data is processed in a secure manner and in compliance with applicable data protection laws, specific to your country.

Security of your Personal Data

We maintain appropriate technical and organizational security measures in accordance with applicable laws and regulations and industry standards to protect your Personal Data from unauthorized access, use or disclosure. Milestone secures the Personal Data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure.
The nature of the internet is such that Milestone cannot guarantee the security of any information you transmit to us online. However, Milestone takes all steps required by applicable law (including appropriate technical and organizational security measures) to protect your Personal Data.
Access to your Personal Data is allowed to only a restricted number of our personnel. All our employees and intermediaries, who have access to and process your Personal Data, are trained in handling Personal Data and are required to respect the confidentiality of your Personal Data.
You agree that any security breaches beyond our reasonable control are at your sole risk and discretion, we cannot and do not accept responsibility for the same. If you have any questions about our security arrangements please contact us at the contact details provided herein under.

Retention of your Personal Data

Milestone will only retain your Personal Data for as long as necessary to fulfill the purposes Milestone collected it for.
Milestone’s retention periods differ depending on the type of categories of Personal Data. To determine the appropriate retention period for Personal Data, Milestone takes into account various criteria including considering the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which Milestone processes your Personal Data and whether Milestone can achieve those purposes through other means, the impact on our Services we provide to you if we delete some of your information and the applicable legal requirements such as mandatory retention periods. In general, Milestone will hold your Personal Data for the duration of our relationship with you and for a period of time after as necessary to comply with our legal and regulatory obligations under applicable law and, if relevant, to deal with any complaint or dispute that might arise between us.
When we have no ongoing legitimate business, operational, legal or other statutory need to process your Personal Data, we will either delete or anonymize it, or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

Personal Data of Minors

We do not consciously collect Personal Data from minors (i.e individuals under 13 years of age or for Indian residents, those individuals below the age of 18 years and/or any such age as required in your country for you to be authorized to use our Services) and respect the privacy of minors who may inadvertently use our Services and provide us with Personal Data. If you are a minor, do not submit any Personal Data to us. If you are a parent or a guardian, we strongly recommend you to supervise the online activity of your minor children and ensure that your children do not disclose any Personal Data. If you believe that we may have unknowingly collected Personal Data from minors without parental consent, kindly contact us at the contact details provided herein below, so that we may adopt immediate measures to remove the information from our servers.

Links to other Websites

This website may contain links to third party websites. Such websites are not under Milestone’s control. Milestone encourages you to review the privacy statements of websites you choose to link to from Milestone so that you can understand how those websites collect, use and share your information. Milestone is not responsible for how those websites may use your Personal Data or for the privacy statements or other content on websites outside of the Milestone and Milestone family of websites.

Additional Terms for California residents

If you are a resident of California, we shall handle your Personal Data in consonance with the California Consumer Privacy Act (CCPA). We will not, without your consent, disclose your Personal Data. You hereby give us consent to disclose your Personal Data for business purposes. You consent to and agree to direct us to and/or use the Services to intentionally disclose Personal Data or to intentionally interact with a third party.
We will not, without your consent, sell and/or disclose your Personal Data for valuable consideration. If you have given us your Personal Data, we have not sold and/or disclosed it for valuable consideration in the twelve (12) months immediately preceding the last update of this Privacy Statement.
You consent and agree that we may disclose the following categories of such Personal Data of consumers (as defined under the CCPA) in the 12 months immediately preceding the last update of this Privacy Statement:Identifiers such as your name, email address etc.
Geolocation data such as the location of a consumer’s device or computer etc.
Internet or other electronic network information
Professional or employment- related information
Inferences drawn from any of the above information
As a resident of California you have certain additional rights in relation to your Personal Data;

Right to access– You have a right to and are allowed access to your data that we collect and process.
Right to deletion– You have a right to request deletion of your Personal Data. This right is a subjective right, we may not comply with a data deletion request if we are permitted and/or required under law.
Right to disclosure– You have a right to request us to disclose the categories of Personal Data collected, sources from which Personal Data is collected, purpose of collecting Personal Data, categories of third parties with whom Personal Data is shared.
You have a right not to be discriminated against for exercising certain rights under California law.
You may exercise your rights by contacting us at the contact details provided herein under.

Additional Terms for EU residents

This is applicable only to persons in the European Union. We ensure that all your data that we collect, store, use and process is done in compliance with the General Data Protection Regulation (GDPR). Elucidated hereunder are additional terms applicable to citizens of the European Union.
Legal basis for processing your Personal Data: If you are an EU resident, we process Personal Data only for purposes for which we collect it. We shall process data only if we have your consent or if processing is necessary for complying with our legal obligations or where the processing is in our legitimate interest. Where we rely on your consent as the legal basis, you have the right to withdraw your consent at any time, but this will not affect any processing that has already taken place. If you need further clarification concerning the legal basis on which we collect and use your Personal Data, you may contact us at the Contact information provided hereunder.
Residents of the European Union have certain additional rights in relation to their Personal Data under the General Data Protection Regulation (GDPR);
Right to access – You have a right to and are allowed access to your Personal Data that is processed.
Right to erasure– You may request erasure of your Personal Data only under certain circumstances which include but are not limited to unlawful processing of your data, if your Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, if you withdraw your consent etc. Please note, however, that we may need to retain certain information to comply with our legal obligations.
Right to rectification– You may at any time request for rectification of your Personal Data that we process. You may also complete Personal Data if it is incomplete.
Right to restriction of processing– You have a right to restrict the processing of Personal Data if you contest the accuracy of the data, lawfulness of processing and or if you have objected to processing of data or if the data is no longer needed for the purpose of processing. We will inform you when such restrictions are lifted.
Right to data portability– You have a right to receive the Personal Data you have provided to us in a structured, commonly used and machine-readable format. You are also entitled to the right to transmit your Personal Data to another controller to another where it is technically feasible.
Right to object– You have a right to object to the processing of your Personal Data. You have a right to object where your Personal Data is processed for marketing purposes.
You may exercise any of the rights listed above by contacting us at the contact details provided herein under.
Transfer of Personal Data: Kindly note that you are signifying agreement to the transfer of your Personal Data to outside the EU. Such transfer to which you hereby expressly consent is primarily for processing and we ensure an adequate level of protection through a series of agreements with our service providers.

Additional Terms for UK residents

These additional terms shall be applicable to persons in the United Kingdom. We shall collect, use, store and process your Personal Data only in accordance with the Data Protection Act, 2018 and other regulations and guidelines on data privacy protection and data security. Elucidated hereunder are rights available to persons in the UK;
Right to access– You have a right to and are allowed access to your Personal Data that is processed.
Right to erasure– You may request erasure of your Personal Data only under certain circumstances which include but are not limited to unlawful processing of your data, if your Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, if you withdraw your consent etc. Please note, however, that we may need to retain certain information to comply with our legal obligations.
Right to rectification– You may at any time request for rectification of your Personal Data that we process. You may also complete Personal Data if it is incomplete.
Right to restriction of processing– You have a right to restrict the processing of Personal Data if you contest the accuracy of the data, lawfulness of processing and or if you have objected to processing of data or if the data is no longer needed for the purpose of processing. We will inform you when such restrictions are lifted.
Right to data portability– You have a right to receive the Personal Data you have provided to us in a structured, commonly used and machine-readable format. You are also entitled to the right to transmit your Personal Data to another controller to another where it is technically feasible.
Right to object– You have a right to object to the processing of your Personal Data.

You may exercise any of the rights enlisted above by contacting us at the contact details provided below. In exercise of your rights you may be required to provide us with sufficient information for us to confirm your identity, which shall include but shall not be limited to your full name, address, username or registration details. In addition to the above you will also be required to confirm the right you wish to exercise and the Personal Data to which your request relates.

Additional Terms for Singapore residents

If you are a resident of Singapore, we collect, use and process your data in accordance with the Personal Data Protection Act (PDPA), 2012. Details of our obligations, and your rights and other essential provisions are set out herein below.
Accuracy of your Personal Data: We will make all reasonable efforts to ensure that the Personal Data collected by us is accurate, complete and up-to-date. We shall adopt methods to verify and authenticate information provided by you. We shall make sure that any and/or all changes made or requested are updated in our records. We rely on the information you provide to us for performing our obligations/ Channels to you, you are required to provide us with accurate and complete information and to promptly update us in the event there are any changes to your Personal Data.

Your Rights

You shall, to the extent that the applicable law allows, have the right to request access to your Personal Data held by us.
You have a right to request correction/ rectification of your Personal Data entrusted to us or update your Personal Data held by us.
You have a right to request us at any time to limit the processing and use of your Personal Data.
You may by giving notice, withdraw any consent given to us for the collection, use or disclosure of your Personal Data. We shall upon receipt of such notice inform you of the repercussions of withdrawing your consent. We may not allow withdrawal of consent in circumstances where it is required or authorised under this Act or any other written law. It is essential to note that your withdrawal of consent could result in legal consequences arising from such withdrawal

Additional Terms for Indian Residents

These additional terms shall be applicable to processing activity within the territory of India or outside Indian when the processing activity is related to persons residing in the Republic of India. We shall collect, use, store and process your Personal Data only in accordance with the Digital Personal Data Protection Act, 2023 (to be referred to as “DPDPA”) and other regulations and guidelines on data privacy protection and data security that are and/or will be in force in India. Elucidated hereunder are rights available to persons residing in the Republic of India-

Right to access information about personal data

You have a right to access the following information-

A summary of personal data which is being processed by us and the processing activities undertaken by us with respect to such personal data;
The identities of all other third persons with whom the personal data has been shared by us, along with a description of the personal data so shared; and
Any other information related to your personal data and its processing, as may be prescribed by the relevant laws in force.

Right to correction and erasure of personal data

You shall have the right to correct, complete, update and

erase your personal data for the processing of which you have previously given consent or provided deemed consent.

Right of grievance redressal

You shall have the right to readily available means of grievance redressal by us, with respect any of the rights that have been mentioned earlier or any of our obligations under the relevant Indian laws. We shall respond to your grievances as per the prescribed time periods as per the Indian laws or thirty (30) days, whichever is earlier. If your grievance has not been suitably redressed then you are entitled to approach the Data Protection Board of India.

Right to nominate

You shall have the right to nominate, any other individual, who shall, in the event of your death or incapacity, exercise your rights in accordance with the provisions of the DPDPA and the rules made thereunder.
The expression “incapacity” shall mean the inability to exercise your rights under the provisions of the DPDPA or the rules made thereunder due to unsoundness of mind or infirmity of body.

1. You are also entitled to withdraw consent to the processing of personal data which was collected from you with your consent. You will be informed of the consequences of such withdrawal of consent before we act upon the request for withdrawal of consent.
2. You shall have the right to have every request for consent from us or details of our concerned contact person on our behalf in either English or in any of the languages specified in the Eighth Schedule of the Constitution of India.
3. The personal data of the residents residing in India, for the purpose of processing, shall be transferred outside India on the conditions that the measures of data security and protection as envisaged by the DPDPA are fulfilled and that the transfer of personal data to that other country or territory has not been restricted by the Central Government through notification. If any other law passed by the Parliament of India envisages a much higher degree of protection or restriction of transfer of personal data, then the requirements of such a law shall also be fulfilled by us.

Interpretation

This policy is in the English language and shall supersede any other translated version of the same document or the meaning that those may imply.

Changes to this Privacy Statement

Milestone may periodically update this Privacy Statement to reflect any changes in the processing of your Personal Data. Where material changes are made to this Privacy Statement, we will post a prominent notice on our website indicating that we have updated the Privacy Statement and will indicate at the top of the Privacy Statement when it was last updated. You are requested to check our Website periodically for such updates. If you access our Services after a notice of change has been published on our page, you hereby provide us your consent to the changed terms.

Dispute Resolution

Milestone welcomes your comments regarding this Privacy Statement. If you believe that we have not adhered to this Privacy Statement, you may convey the same to us by contacting us in the manner mentioned below. In your email, please describe in as much detail as possible ways in which you believe the Privacy Statement has not been complied with. In addition to the foregoing, any disputes arising under this Privacy Statement shall be governed by the laws of the State of California

Timeframe for Processing User Requests

On receipt of a request for the exercise of any of the rights stated under this Privacy Statement, we shall make best efforts to respond to and resolve the same without undue delay within a period of 30 (thirty) days of its receipt. If the requests received are complex or numerous we may, by giving you notice, extend this said period of 30 (thirty) days. We reserve the right to charge you an administrative fee to process your request, we shall notify you of such fee before proceeding with your request.

Contact Information

If you have questions regarding this Privacy Statement or about our privacy practices, feel free to contact us at;

Attn:
Gayathri Sribharath
Data Protection Officer
Email : Privacy@milestone.tech