Privacy Policy

Information We Collect

Depending on how you interact with us, we may collect:

Information you provide

This may include:

• Name
• Business email address
• Phone number
• Company or organisation name
• Job title or designation
• Business address
• Information submitted through enquiry, demo, RFI/RFP, partner or contact forms
• Information you provide when communicating with our team

Information collected automatically

When you use our website, we may automatically collect limited technical and usage information, such as:

• IP address
• Browser and device information
• Operating system
• Pages visited and website interactions
• Date and time of access
• Referring website
• Cookies and similar technologies
• Technical and diagnostic information

We collect this information to operate, secure and improve our website and digital services.

How We Use Your Information

We may use your information to:

• Respond to enquiries and requests for information
• Arrange product demonstrations or discovery discussions
• Understand your business or security requirements
• Provide information about our products, solutions and services
• Process partner or business enquiries
• Provide customer and technical support
• Improve our website, services and user experience
• Understand website usage and performance
• Protect our website and systems against fraud, misuse and security threats
• Send relevant business communications where permitted by applicable law
• Meet legal, regulatory and contractual obligations

We do not use your personal information for purposes that are incompatible with the purpose for which it was collected without providing appropriate notice or obtaining consent where required.

Enterprise and Biometric Data

MEHS provides enterprise security solutions that may include biometric authentication, access control, visitor management, workforce management and other identity-related technologies.

When these solutions are deployed by an organisation, the organisation using the solution will generally determine why and how its employees, visitors, contractors or other users’ personal data is processed.

In such cases, the deploying organisation may act as the Data Fiduciary, while Mantra may act as a Data Processor, processing information on the organisation’s instructions and under the applicable contractual arrangements.

The processing of biometric or other personal data within a customer’s deployment is therefore generally governed by the customer’s privacy policies, applicable agreements and instructions, in addition to applicable data protection laws.

Where Mantra independently determines the purpose and means of processing personal data, Mantra will act as a Data Fiduciary and process that information in accordance with applicable privacy laws.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential website functionality, remember preferences, understand website usage and improve your digital experience.

Essential cookies may be required for the website to function.

Analytics, advertising or other non-essential cookies will be used in accordance with your cookie preferences and applicable law.

You can manage or withdraw your cookie preferences through the Cookie Settings option available on our website.

Third-Party Services

We may use trusted third-party service providers to help operate our website and business activities.

These may include providers supporting:

• Customer relationship management
• Enquiry and form processing
• Website analytics
• Website performance and security
• Marketing and communication services
• Hosting and infrastructure

We require relevant service providers to handle personal information in accordance with applicable contractual and security requirements.

Where applicable, specific third-party services may process information outside India. We take appropriate measures to ensure that such processing is carried out in accordance with applicable data protection requirements.

How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Depending on the nature of the information and service, these measures may include encryption, access controls, authentication mechanisms, monitoring and other security safeguards.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, to maintain our business relationship with you, or as required by applicable law.

When personal information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.

For information processed by Mantra on behalf of a customer, retention and deletion are generally determined by the applicable customer instructions and contractual arrangements.

When We Share Your Information

We do not sell or rent your personal information.

We may share personal information where necessary with:

• Our authorised employees and business teams
• Service providers and technology partners supporting our operations
• Authorised channel partners or system integrators where required to respond to or fulfil a business request
• Professional advisers, auditors or other authorised service providers
• Government authorities, regulators or law-enforcement agencies where required by law
• Relevant parties in connection with a merger, acquisition, restructuring or transfer of business, subject to applicable safeguards

We share only information that is reasonably necessary for the relevant purpose.

Your Privacy Rights

Depending on the law applicable to you, you may have rights relating to your personal information, including the right to:

• Request access to information we hold about you
• Request correction or updating of inaccurate information
• Request deletion of personal information where permitted
• Withdraw consent where processing is based on consent
• Manage your cookie preferences
• Raise a privacy-related concern or grievance

To exercise your rights or ask questions about how your information is processed, please contact us using the details below.

Children’s Privacy

Our website and MEHS services are intended primarily for businesses, organisations and professional users.

We do not knowingly collect personal information from children through our website for marketing or business enquiry purposes.

If you believe that personal information relating to a child has been provided to us, please contact us so that we can review and take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices or applicable privacy requirements.

When we make changes, we will update the Effective Date at the top of this page.

We encourage you to review this page periodically for the latest information about our privacy practices.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a privacy-related concern, please contact: