Privacy Policy

Welcome to ConsentGuru. ConsentGuru is a consent management and privacy technology platform designed to help organisations obtain, record, manage and respect the privacy choices and consent preferences of individuals. We believe privacy should be understandable, transparent and practical. This Privacy Policy explains what information ConsentGuru may collect, how we use it, when we share it, how we protect it and the choices available to individuals. This Privacy Policy applies to the ConsentGuru website, platform, applications, APIs and related services operated through www.consentguru.com.

ConsentGuru, #10, Second Floor, Manasa Towers, MG Road, Mangalore - 575003, Karnataka, India.

For privacy-related questions: support@consentguru.com. Data Protection Officer: Shijas Mohidheen, shijas@consentguru.com.

Depending on the nature of the processing, ConsentGuru may act as a Data Fiduciary, Data Controller, Data Processor, service provider or equivalent entity under applicable data protection law.

ConsentGuru is primarily a consent management platform. When an organisation uses ConsentGuru to obtain or manage consent from its customers, website visitors, employees, patients, students, users or other individuals, that organisation generally determines what personal data is collected, why it is collected, the purpose or legal basis for processing, how long information is retained and how it is otherwise used.

In these circumstances, the organisation will generally act as the Data Fiduciary, Data Controller or equivalent entity, while ConsentGuru acts as a Data Processor, service provider or equivalent entity. If you interact with ConsentGuru through another organisation's website or service, that organisation's privacy policy should be your primary source of information regarding why your personal data is collected and used.

• Information you provide: name, email address, telephone or mobile number, organisation name, job title, login credentials, billing and transaction information, enquiry information, demonstration/onboarding information and support communications.
• Account and subscription information: information necessary to create and maintain accounts, authenticate users, provide services, manage subscriptions, process payments and communicate with account administrators.
• Technical and usage information: IP address, browser type and version, operating system, device type, approximate location derived from IP address, date and time of access, referring website, pages/features accessed, logs and security/authentication information.
• Consent and preference information: whether consent was given, refused or withdrawn; date/time; consent category or purpose; notice version; method of obtaining consent; cookie/privacy preferences; withdrawal or modification; and technical information necessary to establish and maintain a consent record.

We may use personal data to provide and operate ConsentGuru; create and manage accounts; authenticate users; record and manage consent and privacy preferences; maintain consent records and audit trails; provide customer support; communicate with customers and users; process subscriptions and payments; monitor service performance; detect and prevent fraud and abuse; maintain security; diagnose technical problems; improve products and services; comply with applicable laws; establish, exercise or defend legal claims; and perform other purposes disclosed at the time of collection. We do not intentionally use personal data for purposes incompatible with the purpose for which it was collected unless permitted or required by applicable law.

ConsentGuru is designed to help organisations manage consent in a transparent and accountable manner. Depending on configuration, our technology may help organisations present privacy notices and consent requests, provide granular choices, record affirmative consent and refusal, record withdrawal, maintain consent histories and audit trails, manage cookie preferences and demonstrate the status and history of consent. The organisation deploying ConsentGuru remains responsible for determining whether its notices, purposes, processing activities and implementation comply with applicable law.

ConsentGuru and organisations using our technology may use cookies, pixels, local storage, SDKs, tags and similar technologies for essential functionality, authentication, security, privacy preferences, consent management, analytics, performance monitoring, service improvement and other disclosed purposes. Where legally required, non-essential cookies and similar technologies will be used only after appropriate consent or another lawful basis has been established. Further information is provided in the Cookie Policy section of this Privacy Centre.

If you interact with ConsentGuru because it has been deployed by another organisation, that organisation determines the categories of personal data and purposes for which information is processed. A customer may configure ConsentGuru to manage cookie preferences, marketing preferences, communication preferences, privacy notices, data-sharing choices, consent records, subscription preferences and other privacy choices. ConsentGuru processes such information according to the customer's instructions and applicable contractual arrangements.

We do not sell personal data as a general business practice. We may disclose personal data to cloud hosting and infrastructure providers, security providers, payment processors, customer support providers, communication providers, professional advisers, auditors and legal advisers, government authorities where legally required, service providers supporting our operations, a successor entity in connection with a merger, acquisition or restructuring, and other parties where permitted by law or authorised by you. Appropriate contractual and legal requirements apply to service providers.

ConsentGuru may use infrastructure, service providers or business partners located in countries other than the country in which you reside. Where personal data is transferred internationally, we will take appropriate measures required by applicable data protection laws, which may include contractual safeguards, adequacy mechanisms, approved transfer mechanisms or other legally recognised safeguards.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction. Measures may include encryption in transit, encryption or equivalent protection at rest, access controls, authentication and authorisation, role-based access, logging and monitoring, vulnerability management, backup and recovery, security testing, incident response procedures and employee and contractor security controls. No internet-based service can guarantee absolute security.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to provide services, meet contractual obligations, comply with legal requirements, resolve disputes and protect our legitimate interests. Where ConsentGuru processes personal data on behalf of a customer, retention will generally be determined by the customer's instructions, contractual terms and applicable law. When personal data is no longer required, it will be deleted, anonymised or securely disposed of, subject to applicable legal requirements.

Depending on the jurisdiction and applicable law, you may have rights including access to personal data, correction, deletion or erasure, withdrawal of consent, objection to certain processing, restriction of processing, data portability, information regarding processing, applicable opt-out rights and the right to lodge a complaint with a competent authority. Not every right is available in every jurisdiction and legal exceptions may apply. Where ConsentGuru processes information on behalf of another organisation, that organisation may be responsible for responding to your request.

You may submit a Data Principal request through the ConsentGuru Data Principal Rights portal, or contact support@consentguru.com or our Data Protection Officer, Shijas Mohidheen, at shijas@consentguru.com. We may request reasonable information necessary to verify your identity and protect against unauthorised requests. We will respond within the period required by applicable law.

ConsentGuru is primarily intended for businesses and professional users. Unless expressly stated otherwise, ConsentGuru does not knowingly seek to collect personal data directly from children in circumstances where such collection is prohibited by law. Where our platform is used by a customer in connection with children or minors, the customer is responsible for implementing appropriate age-related safeguards, parental or guardian consent and other applicable requirements.

Our website or platform may contain links to third-party websites, applications or services. ConsentGuru is not responsible for the privacy practices or security of third-party services. We encourage you to review their privacy policies before providing personal information.

If you create an account, request a demonstration, contact us or become a customer, we may send service-related communications such as account notifications, security alerts, service announcements, billing communications, support communications and important service or policy updates. Where permitted by law, we may also send information about our products, services or events. You may opt out of promotional communications at any time.

We may process or disclose personal data where necessary to comply with applicable law, respond to lawful government requests, protect rights, property or safety, detect or prevent fraud or security incidents, establish or defend legal claims, or enforce our agreements. We will seek to limit such disclosure to what is legally required or reasonably necessary.

We may update this Privacy Policy from time to time to reflect changes in our services, technology or applicable law. Where material changes are made, we will provide appropriate notice where required. The latest version will be published on www.consentguru.com.

If you have a privacy concern or believe that your personal data has been processed inconsistently with this Privacy Policy or applicable law, please contact Shijas Mohidheen, Data Protection Officer, at shijas@consentguru.com or support@consentguru.com. Where applicable law provides a right to complain to a data protection authority or other regulatory body, you may exercise that right.

This Privacy Policy shall be interpreted in accordance with applicable law. Nothing in this Policy is intended to restrict any privacy right that cannot lawfully be excluded or restricted under applicable law.

ConsentGuru, #10, Second Floor, Manasa Towers, MG Road, Mangalore - 575003, Karnataka, India. General Privacy Contact: support@consentguru.com. Data Protection Officer: Shijas Mohidheen, shijas@consentguru.com. Website: www.consentguru.com.