1. About this Privacy Policy

Hub.iTroSys (“we,” “us,” or “our”) operates hub.itrosys.com (the “Website”). The Website helps users discover, compare, list, contact, and book workspaces, private offices, event spaces, and related business venues.

By accessing or using the Website, creating an account, submitting a listing, sending an enquiry, subscribing to updates, or otherwise interacting with us, you acknowledge that your personal information will be handled as described in this Privacy Policy. If you do not agree with this Policy, please do not use the Website.

2. Information We Collect

We collect information that you provide directly, information generated when you use the Website, and information received from service providers or third-party integrations.

2.1 Information you provide to us

• Account and profile details: name, username, email address, phone number, password, profile information, account preferences, and login details.
• Listing and business details: company or business name, venue details, address, location, amenities, pricing, availability, images, descriptions, contact persons, and related listing materials.
• Booking, enquiry, and transaction details: selected dates, venue preferences, booking requests, order details, cart information, invoice or billing information, communications with venue owners or our team, and customer support records.
• Newsletter and marketing details: email address, subscription status, consent preferences, and interactions with our promotional communications.
• User-generated content: reviews, testimonials, messages, uploaded photographs, comments, saved listings, bookmarks, wishlist details, and other content you submit.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, device type, operating system, pages viewed, time spent, referring URLs, search activity, language preferences, and interactions with Website features.
• Approximate location data: general location derived from your IP address or location-related search filters, such as city or area preferences.
• Cookies and similar technologies: cookies, pixels, tags, local storage, and analytics identifiers used to keep the Website functional, secure, and relevant.

2.3 Information from third parties

• If you choose to sign in using a third-party service such as Google, we may receive basic account information such as your name, email address, and profile identifier, depending on your settings with that provider.
• Payment gateways, hosting providers, analytics providers, communication tools, map services, and other service providers may share limited information with us to support Website operations, security, billing, and customer service.

We do not intentionally collect sensitive personal information unless it is necessary for a specific service, required by law, or voluntarily provided by you. Please do not submit sensitive information unless requested for a lawful and necessary purpose.

3. How We Use Your Information

We use personal information for lawful business purposes, including:

• Creating, authenticating, and managing user accounts.
• Publishing, managing, verifying, and improving listings for co-working spaces, private offices, events, corporate parties, and related venues.
• Helping users search, compare, contact, enquire about, and book listed spaces or services.
• Processing orders, bookings, invoices, payments, refunds, and related customer support requests.
• Sending service-related communications such as confirmations, account notices, policy updates, security alerts, and support replies.
• Sending newsletters, offers, updates, and promotional communications where permitted by law and subject to your opt-out choices.
• Maintaining wishlist, bookmark, saved listing, and preference features.
• Personalizing Website content and improving search results, recommendations, user experience, and service quality.
• Monitoring Website performance, analytics, usage trends, and technical issues.
• Preventing fraud, misuse, spam, unauthorised access, and other harmful activity.
• Enforcing our Terms and Conditions, policies, contractual rights, and legal obligations.
• Complying with applicable laws, regulatory requests, tax, accounting, audit, and dispute-resolution requirements.

4. Legal Grounds for Processing

Where applicable law requires a legal basis for processing, we rely on one or more of the following grounds:

• Consent: when you subscribe to newsletters, allow optional cookies, use certain features, or voluntarily provide information for a specified purpose.
• Contractual necessity: when processing is needed to create accounts, provide services, manage listings, process bookings, or respond to your requests.
• Legal obligations: when we must maintain records, respond to lawful requests, prevent fraud, or comply with statutory duties.
• Legitimate business purposes: when processing is necessary to operate, secure, improve, and protect the Website, provided such processing is balanced against your rights and expectations.

For users in India, we process digital personal data for lawful purposes in accordance with applicable data protection laws, including consent-based processing and other permitted uses where applicable.

5. Cookies and Tracking Technologies

The Website uses cookies and similar technologies to operate properly, remember preferences, enable login sessions, improve security, analyse performance, and support marketing or measurement activities.

• Essential cookies: required for Website functionality, security, login, forms, bookings, cart, and account features.
• Analytics cookies help us understand traffic, page performance, user journeys, and feature usage.
• Preference cookies: remember language, city, currency, saved settings, and similar preferences.
• Marketing cookies may help measure campaigns and show relevant updates where permitted.

You can control cookies through your browser settings and, where available, through the Website cookie banner or preference tools. Blocking some cookies may limit Website functionality.

6. Payments and Billing

If you make a booking, purchase, paid listing, subscription, or other transaction through the Website, payment may be processed by third-party payment gateways or financial service providers. We may receive payment status, transaction reference numbers, invoice details, billing information, and related records, but we do not store complete card numbers, CVV codes, UPI credentials, or banking passwords on our servers.

Payment processors handle your payment information under their own terms and privacy policies. Please review those policies before completing a transaction.

7. How We Share Information

We do not sell personal information. We may share information only as described below:

• With venue owners, listers, or booking parties: to complete enquiries, bookings, confirmations, venue access, event check-ins, support, and related service delivery.
• With service providers: including hosting, cloud infrastructure, payment gateways, email delivery, SMS or communication tools, analytics, security, customer support, mapping, and maintenance providers.
• With business partners: when necessary to provide a requested service, manage a listing, run promotions, or support operational requirements.
• For legal and safety reasons: to comply with applicable laws, court orders, regulatory requests, law enforcement requests, fraud prevention, security investigations, or to protect rights, property, and safety.
• In a business transfer: if we are involved in a merger, acquisition, reorganisation, investment, sale of assets, or similar transaction, personal information may be transferred subject to appropriate safeguards.

Where service providers process personal information for us, we expect them to use it only for the agreed purpose and to maintain appropriate confidentiality and security protections.

8. Third-Party Websites and Integrations

The Website may contain links or integrations related to maps, payment gateways, social media platforms, mobile app stores, listing partners, advertisers, analytics tools, and other third-party services. We are not responsible for the privacy practices, content, or security of third-party websites or services. Their privacy policies apply when you interact with them.

9. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods may vary depending on the type of information and the reason it is collected.

• Account information is generally retained while your account remains active and for a reasonable period afterwards for security, audit, dispute, and legal purposes.
• Booking, billing, payment, invoice, and transaction records may be retained for tax, accounting, compliance, and dispute-resolution purposes.
• Support, enquiry, and communication records may be retained to resolve issues, maintain service history, and improve services.
• Marketing records are retained until you unsubscribe, withdraw consent, or we no longer need them for the purpose collected.

When information is no longer required, we will delete it, anonymise it, or securely archive it in accordance with applicable law and our internal retention practices.

10. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorized access, misuse, alteration, disclosure, or loss. These safeguards may include access controls, secure hosting, encryption where appropriate, logging, monitoring, backups, and internal policies.

No website, internet transmission, or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account password and for notifying us promptly if you suspect unauthorised access to your account.

If a data breach affects your personal information, we will take appropriate steps to investigate, mitigate, and notify affected users and/or authorities where required by applicable law.

11. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Access or request a summary of personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion or erasure of information where applicable.
• Withdraw consent for consent-based processing.
• Object to or restrict certain processing where applicable.
• Request portability of information where applicable.
• Opt out of marketing communications at any time.
• Raise a grievance or complaint about the way your personal information is handled.
• Nominate another person to exercise rights on your behalf where applicable under Indian data protection law.

To exercise your rights, contact us at enquiry@itrosys.com. We may verify your identity before fulfilling a request. We will respond within the time required by applicable law or, where no specific timeline applies, within a reasonable period.

You may also update certain account information through your account dashboard, unsubscribe from marketing emails using the unsubscribe link, or adjust browser cookie settings.

12. Children and Minors

The Website is intended for business users, professionals, venue owners, event organisers, and adult consumers. It is not directed to children. We do not knowingly collect personal information from children without appropriate consent where such consent is required by law.

If you believe a child has provided personal information to us without proper authorisation, please get in touch with us so we can review and take appropriate action.

13. International Transfers

We may use service providers, infrastructure, or business tools located in India or other countries. Your information may be processed, stored, or accessed in jurisdictions that may have different data protection laws from your country of residence. Where required, we use appropriate safeguards for such transfers.

14. Public Listings, Reviews, and User Content

Information submitted for public listings, venue pages, business profiles, reviews, images, or testimonials may be visible to Website visitors and search engines. Please do not publish personal information that you do not want to be publicly available. If you need to edit or remove public listing content, contact us or use the available account tools.

15. Communications and Marketing

We may send service communications related to accounts, listings, bookings, transactions, security, support, and policy updates. These communications are necessary for service operation and may not always include an opt-out option.

We may also send newsletters, promotional offers, updates, and marketing communications where permitted. You can opt out of marketing emails by using the unsubscribe link in the email or by contacting us.

16. Grievance Redressal

If you have questions, concerns, complaints, or requests about privacy or data protection, please get in touch with us using the details below. We will review your request and take reasonable steps to resolve it.

• Email: enquiry@itrosys.com
• Phone: (+91) 84949-84949
• Address: Unit 701, 7th floor, Saket Callipolis commercial building, Sarjapura Main Road, Doddakannelli, Bengaluru, Karnataka, India, PIN Code: 560035

If applicable law gives you the right to approach a data protection authority or board after exhausting internal grievance channels, you may do so in accordance with that law.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, Website features, legal requirements, or privacy practices. The updated version will be posted on this page with a revised effective date. Your continued use of the Website after an updated Policy is posted means you acknowledge the updated terms.

18. Contact Us

For privacy questions, data requests, complaints, or concerns, please contact:

• iTroSys
• Website: itrosys.com
• Email: enquiry@itrosys.com
• Phone: (+91) 84949-84949
• Address: Unit 701, 7th floor, Saket Callipolis commercial building, Sarjapura Main Road, Doddakannelli, Bengaluru, Karnataka, India, PIN Code: 560035