ClickPost Compliance Statement
On May 25, 2018, the European Union (the “EU”) implemented a new data privacy and protection regulation, called the General Data Protection Regulation and the United Kingdom (the “UK”) post Brexit implemented the UK General Data Protection Regulations (collectively referred to as the “GDPR”). This regulation aims to standardize data protection laws across the EU and the UK and lay down standards to be observed worldwide while processing of personal data originating in the EU and the UK. The GDPR also has a strong emphasis on affording individuals stronger, more consistent rights to access and control their personal information.
At Felurian Technology Private Limited (“we”, “us”, “our”, “Felurian”), we take compliance of data privacy and security regulations very seriously. For the GDPR, we are working diligently to ensure that we are compliant with the rules laid out by the law. In the following sections, we have outlined our approach to comply with the GDPR.
GDPR Compliance
Felurian Technology Private Ltd. is the owner and is responsible for the day-to-day operation of the website www.clickpost.ai and the web-based application named Clickpost. The website and application are collectively referred to as the platform (the “Platform”). The Platform assists Felurian Technology Private Limited’s clients to integrate logistic carriers. The Platform facilitates shipment tracking, order-tracking notifications to customers, NDR automation, returns & exchange management.
We at Felurian Technology Private Limited process the personal information of our customers in the capacity of a Data Controller (for any personal information submitted on the website) and in the capacity of a Data Processor (for any personal information provided by our customers when they use our platform).
Risk Assessment
We have performed a company-wide information discovery exercise to identify and assess what personal information we hold, where it comes from, how and why it is processed, and to whom it is disclosed.
Data Subject Consent and Rights
As a Data Controller, Felurian Technology Private Ltd. has updated its Privacy and Cookie Policies and Disclaimer for the usage of Cookies as per the requirements of the GDPR on its website www.clickpost.ai and it requires all the visitors, users of its website to provide consent for the use of personal information. ClickPost also allows such users to exercise their rights in relation to their personal information such as modification, rectification, and deletion of their personal information.use cookies and/or similar in-house and third-party tracking tools to track user traffic patterns. Tracking tools also used are beacons, tags and scripts to collect and track information and to improve and analyse our Website and our Services. You may choose to disable cookies through your browser settings. For more information, please refer to our cookie policy https://www.clickpost.ai/cookie-policy
Data Processing Agreements and Transfer of Data outside the EU And UK
As a Data Controller, we execute contracts required under the GDPR with our data processor to ensure that the data processor process the personal information as per the GDPR. Additionally, we implement technical and organizational security measures to ensure compliance.
As a Data Processor, we comply with the required safeguards pertaining to the safety of personal information received from our clients.
We at Felurian, have in place a GDPR-compliant data processing addendum (as required by Article 28 of the GDPR) including the EU Standard Contractual Clauses (“SCCs”) and the UK International Data Transfer Addendum (“ITDA”) to ensure an appropriate legal basis for data transfers outside the EU and UK respectively.
Data Retention and Erasure
We have formulated an organisational data protection compliance policy. This Policy includes a data retention schedule which ensures that we comply with the principles under the GDPR, including ‘data minimization’ and ‘storage limitation’ and that personal information is stored, archived, and destroyed in accordance with the GDPR.
Record Keeping as per GDPR:
According to Article 30 of the GDPR, each processor and controller’s representative needs to maintain a record of all activities pertaining to the processing of personal information in such an organization. Felurian maintains such records as required under Article 30(1) and Article 30(2) of the GDPR.
Data Breach and Mitigation Process
The GDPR has stipulated measures and notifications that must be made upon discovery of a data security breach. We at Felurian have implemented internal measures to minimize the risk of any data security breach happening. However, in the unlikely event of any such breach happening, Felurian intends to honour its responsibilities as laid down under the GDPR, which includes notifying in a timely manner, its customers, and the supervisory authorities.
Our Promise on GDPR
At Felurian Technology Pvt Ltd., maintaining the security, integrity, safety and confidentiality of personal data in our possession is of the highest priority. We have already taken adequate measures to ensure that we fulfil our promise of being fully compliant with the GDPR. In case you have any queries, please feel free to reach us at security@clickpost.in.