PRIVACY POLICY

Introduction

At Elev8 (“Elev8”, “platform” “We”, “Us”, “Our”), we hold your privacy in high regard and are dedicated to safeguarding it by adhering to this policy. Whenever you engage with our website, application, contact us, or interact with our services, we collect personal information from you.

This Privacy Policy outlines our practices regarding the collection, storage, usage, processing, and disclosure of personal data that you have consented to share with us when you access, use, or otherwise interact with our platform, including both our mobile or web application, “Elev8” (collectively, the “App”).  By using the services offered by EASYSTEPIN IT SERVICES PVT LTD (“Company”) through the App (collectively, the “Services”), you agree to the terms described herein. In this Policy, the services provided by our professional partners through the App are referred to as “Professional Services.”

The policy describes:

1. The categories of personal information we collect when you download, register with, access, subscribe or use the Elev8 App.
2. Our methodologies for the collection, utilization, maintenance, protection, and disclosure of this information.

We collect this data to enhance the user experience, manage our relationship with you, improve our Services, and comply with legal obligations. It is important to note that this policy pertains solely to the information collected within the App and through email, text, and other electronic communications related to the App. This policy does not apply to:

• Information provided by you to or collected by third parties (referred to as Third-Party Information Collection).
• Information collected by third parties, which may have their own privacy policies. We encourage you to review these policies before providing any information on or through them.

We urge you to carefully review this policy to fully understand our policies and practices concerning your personal information and how it will be handled. If you do not agree with our policies and practices, do not download, register with, or use this App. By proceeding to download, register with, or use our App, you consent to this privacy policy.

It is important to be aware that this policy may undergo revisions in the future. We encourage you to stay informed about any updates to ensure your satisfaction with these changes. Your continued engagement with our App after a policy revision signifies your acceptance of these changes. Therefore, we kindly ask you to periodically review this policy for any updates.

Children Under the Age of 16

The App is not designed for users under the age of 16, and we make it a policy not to collect personal information from individuals under the age of 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you suspect we may have any information related to a user under 16, please contact us [see Contact Information].

Information We Collect and How We Collect It

We collect information from and about users of the Elev8 platform, which includes tools for employee engagement, recognition, rewards, and corporate gifting. The information is gathered through two main methods:

• Directly from you when you provide it to us.
• Automatically when you use the App.

Information You Provide to Us

When you register, onboard employees, or use the Elev8 platform, we may collect the following information:

• Personal Information: This includes your name, email address, and location, as well as your IP address for diagnostic purposes. These details help us facilitate employee recognition, rewards management, and corporate gifts delivery.
• Optional Demographic Information: You have the option to update your profile with additional details such as age, gender, preferences, and clothing size. This data is collected to ensure that any branded merchandise, apparel, or gifts you order through the platform are appropriately sized and tailored to your preferences.
• Other Information You Provide:
  • Information filled in during onboarding, or when subscribing to services.
  • Records and copies of your communications (including email addresses and phone numbers) if you contact us for support or inquiries.
  • Information related to the transactions you carry out through Elev8, such as orders for gift cards, branded products, and corporate rewards. You may need to provide financial information before completing a transaction.
  • Details about your interactions with the platform, such as points earned, rewards redeemed, gift card purchases, and the features you use.
  • Details of transactions you carry out through the App and of the fulfilment of your orders. You may be required to provide financial information before placing an order through the App

User Contributions

You may also provide information that can be displayed on public areas of the platform, such as employee recognition posts, reviews, and comments. These User Contributions are visible to others within your organization or authorized third parties and are shared at your own discretion. While we offer privacy settings to control visibility, we cannot guarantee that unauthorized third parties will not access your contributions.

Information Automatically Collected

We automatically collect certain data when you interact with the Elev8 platform, including:

• Usage Information: This includes data on how long you use the platform, which features you interact with, and the number of rewards or gifts managed.
• Device Information: We collect details about the devices you use to access Elev8, such as IP addresses and browser types, to improve platform performance and diagnose issues.
• Transaction Details: Information on purchases and rewards redeemed through the platform is also tracked to ensure the smooth operation of our corporate gifting and recognition services.
• Cookies: We use cookies provided by Google, Facebook, Sentry, and Countly to track user actions on the platform. These cookies collect data such as page views, navigation patterns, and interactions within the platform for monitoring and diagnostic purposes. Certain cookies are essential for the operation of the platform and cannot be disabled without affecting its functionality.
• Web Beacons and Pixel Tags: Our platform and emails may include small electronic files known as web beacons or pixel tags. These allow us to track the number of users who open certain pages or emails, helping us gather statistics on app usage and content popularity.
• Server Logs: Our servers automatically collect data when you access the platform, which may include your web request, IP address, browser type, referring/exit pages, number of clicks, and other interactions with the platform. This information is used to diagnose issues, analyze trends, and gather demographic data.
• Other Similar Technologies: We may also use technologies like device fingerprinting to enhance security and prevent fraud. These technologies collect and analyze information such as browser type, operating system, and language settings to create a unique identifier for your device, ensuring a secure and personalized user experience.

Opting Out of Cookies and Tracking

Some cookies are enabled by default on the Elev8 platform for essential monitoring and diagnostic purposes. These cookies are crucial to the platform’s operation, and disabling them may limit your ability to use certain features of the platform. As the platform does not currently collect sensitive data, specific opt-out scenarios are not offered. If you have concerns about tracking technologies or need assistance with privacy settings, please reach out to our support team.

Information Specific to Corporate Clients and Administrators

If you are a corporate client or administrator using Elev8 to manage employee recognition and rewards, we collect additional information to support your use of the platform:

• Personal Identification Information: We collect your name, phone number, email address, and password to securely create and manage your corporate account.
• Employee Profile Information: For onboarding and recognition purposes, we collect information about your employees, including names, job titles, and milestones reached for award purposes.
• Financial Information: We collect financial details such as bank account information or payment processor details (e.g., via Razorpay, Qwikcilver) to process transactions related to corporate gifting and rewards.
• Scheduling and Corporate Gift Management: We collect data on how you schedule rewards, manage corporate gifting, and interact with the branded product store. This allows us to provide smooth delivery and customization of corporate gifts.
• Order and Transaction History: We collect details on the orders made through Elev8, including the delivery of gift cards, corporate gifts, and reward points redeemed by employees.
• Business-Related Information: For corporate clients, we may collect additional business-related information, such as your company’s address, contact details, and industry-specific data needed to tailor our services to your organization’s requirements.

Third-Party Links and Information Collection

The Elev8 platform may include links to third-party websites for your convenience, such as external tools or resources. Clicking on these links may allow third parties to collect or share your data. Please note that we do not control these third-party websites and are not responsible for their privacy practices. Once you leave the Elev8 platform, this Privacy Policy no longer applies. We strongly encourage you to review the privacy policies of any third-party websites you visit to understand how your information will be handled.

While Elev8 does not share your personal data with third parties for general use, certain payment and order-related information may be shared with trusted third-party service providers who assist in fulfilling your transactions. Specifically:

• Razorpay: Used for processing payments related to transactions on the Elev8 platform. Only necessary financial data is shared with Razorpay to complete the payment process.
• Quikwcilver by Pinelabs: Used for managing gift card transactions. Data related to the distribution and redemption of branded gift cards is shared to ensure the proper functioning of this feature.

These third-party providers comply with applicable privacy laws and have their own security measures in place to protect your data. We ensure that any third parties we work with adhere to industry-standard security practices to maintain the confidentiality and security of your information.

When using the Elev8 platform, certain other third parties may employ automatic information collection technologies to gather data about you or your device. These third parties may include:

Please note that some cookies and tracking technologies enabled on the Elev8 platform are essential for monitoring and diagnostic purposes and cannot be opted out of as they ensure the platform’s smooth operation. For more details, see the section on “Your Choices About Our Collection, Use, and Disclosure of Your Information.”

User Authentication and Identity Verification

To access the Elev8 platform, each user is required to create an account with a username and a bcrypt-encrypted password. This helps protect user accounts and ensures that only authorized individuals can access their specific subscription and services. Additionally, domain checks are in place to ensure users are restricted to accessing the platform according to their subscription plan.

How We Use Your Information

We use your personal information to provide, enhance, and personalize the services offered by Elev8, fulfill our contractual obligations, and comply with legal requirements. Below is an outline of how we use your personal data:

1. Provision of Services and Account Management

• Creating and Maintaining Your Account: We use your personal data, such as your name, email, and password, to set up, authenticate, and manage your account on the Elev8 platform. This includes processing orders for corporate gifts, managing employee rewards, handling returns, and delivering customer service, including payment processing and administrative tasks.
• Identity Verification: Your personal information, such as email address and location, is used to verify your identity and ensure you are authorized to use the platform for employee recognition, corporate gifting, and related services.
• App and Content Provision: We use the information we collect to deliver the Elev8 platform and its various features, ensuring that you receive the products and services you request, such as branded gift cards or recognition rewards.

2. Personalized Services and Marketing

• Personalized Recommendations: Your data helps us provide personalized product recommendations, tailored content, and a seamless user experience based on your preferences and interactions with the platform.
• Tailored Advertising

3. Analytics and Business Development

• Analytics: We analyze your usage data, such as platform interactions and employee recognition activities, to generate insights and improve our services. Aggregated and anonymized data may be shared with third-party partners for marketing, research, or advertising purposes.
• Product and Business Development: Your data helps us improve the Elev8 platform, enhance existing features, and develop new services aligned with corporate engagement and business trends.

4. Customer Service and Non-Marketing Communications

• Customer Support: We use your personal data to respond to your inquiries, process support tickets, and address any issues related to orders, corporate gifts, or platform usage.
• Non-Marketing Communications: We may contact you with non-promotional information, such as updates to your account, changes in terms of service, or policy changes that directly affect your usage of Elev8.

5. Site Optimization and Security

• Platform Management: We use your data to maintain and optimize the performance of Elev8, ensuring the platform runs smoothly and delivers an efficient user experience. This includes troubleshooting technical issues and improving functionality.
• Fraud Prevention: Your personal data is used to detect and prevent fraudulent activities, protect our platform, and maintain the security of our systems.

6. Legal Compliance and Obligations

• Legal Requirements: We may use your personal data to comply with legal obligations, respond to court orders, and exercise our legal rights when necessary.
• Employment Applications: If you apply for a position through Elev8, we use your data to evaluate your application and contact you regarding employment opportunities.

7. Data Sharing

• Legal and Regulatory Requirements: We may share your data with legal advisers, auditors, regulators, or other entities as required by law or when necessary for our legitimate business interests.
• Aggregated and De-Identified Data.

We ensure that any third parties with whom we share your data follow strict security protocols and only use your information according to our instructions and applicable laws. For any questions or if you wish to exercise your rights regarding your data, please contact us (see “Contact Information”).

Disclosure of  Your Information

At Elev8, we may disclose aggregated, anonymized information about our users, as this does not identify any individual. We take careful measures to ensure your personal information is only shared when necessary, and only for purposes aligned with your use of our platform.

Below are the circumstances in which we may disclose your personal data:

1. Personal Information Disclosure

We may disclose personal information that we collect or you provide in the following ways:

• To Our Affiliates and Subsidiaries: We may share your information with our affiliates and subsidiaries for internal administrative purposes, research, and marketing initiatives.
• To Contractors, Service Providers, and Other Third Parties: We may disclose your data to third-party service providers such as IT services, analytics platforms, and payment processors like Razorpay and Quikwcilver by Pinelabs. These service providers assist us in operating the platform, processing orders, payments, and providing corporate gifting solutions. They are contractually required to maintain confidentiality and use the data only for the specified purposes.
• Payment Providers: We share transaction-related data with payment providers like Razorpay to fulfill your orders. These providers are responsible for maintaining the confidentiality of your payment information and ensuring secure transactions.
• Analytics Providers: Analytics services help us understand how users interact with our platform. This diagnostic data, shared with services like Google and Countly, helps us improve the platform while safeguarding user information.
• IT and Technical Service Providers: We disclose data to third-party technical service providers for hosting, data storage, and ensuring the technical stability of Elev8. These providers must protect your data and adhere to our confidentiality requirements.
• To a Buyer or Successor: In the event of a merger, restructuring, or sale of Elev8 or its assets, your personal information may be transferred to the successor company as part of the business transition.
• For Legal Obligations and Rights Protection: We may disclose your information in response to court orders, government or regulatory requests, or to enforce our Terms of Service, such as billing and collection activities, or to protect the rights, property, or safety of Elev8, its users, or others.
• For Marketing Purposes: We may share your information with third parties to offer their products or services if you have given your consent. You can opt out of such disclosures at any time (see “Your Choices About Collection and Disclosure”).
• Fraud and Risk Mitigation: In cases of suspected fraud, abuse, or risk to the platform, we may share information with relevant authorities or industry organizations for fraud protection and credit risk reduction.

2. User Rights Regarding Data

You have control over your personal information and how it is collected, used, and shared. Your rights include:

• Access and Data Correction: You have the right to request access to the personal data we hold about you. You can update or correct your data through the self-serve panel in your account.
• Data Deletion: While we do not offer a direct “delete account” option, you can raise a support ticket to request the deletion of your personal data. However, transaction-related data will be retained for 2 years for audit purposes.
• Opt-Out of Marketing: As there is no collection of sensitive data or opt-out mechanism currently in place, you will not be able to opt out of data collection or marketing communications.
• Data Retention: Your data will be retained for 2 years post-deletion for audit purposes as per legal and business requirements.
• Data Portability: We currently do not offer the ability for users to request the portability of their personal data to another platform or service.

Your Choices About Our Collection, Use, and Disclosure of Your Information

Elev8 provides users with options to control the personal data they share with us. Below are the mechanisms available for managing the use and disclosure of your personal data:

• Tracking Technologies and Cookies: Elev8 uses tracking technologies, such as cookies, provided by Google, Facebook, Sentry, and Countly for monitoring and diagnostic purposes. Users can set their browser settings to refuse all or some cookies, but this may limit the functionality of certain parts of the platform. Some cookies are necessary for performance monitoring and cannot be opted out of.
• Location Information: You can control whether the App collects and uses real-time location information by adjusting your device’s privacy settings. However, disabling location tracking may restrict the platform’s location-based features.
• Marketing Communications: If you do not wish to receive promotional emails or other marketing materials from Elev8, you can opt-out by adjusting your preferences in your account settings or by contacting support. Changes will take effect promptly to ensure that you do not receive unwanted communications.
• Targeted Advertising: We may use your data for personalized advertising on third-party platforms, such as social media. If you wish to opt out of targeted ads, you can adjust your ad preferences in your account settings or contact support.
• Disclosure for Third-Party Marketing: If you do not want your information shared with third parties for marketing purposes, you can opt out by adjusting your user preferences in the platform or by contacting support.
• Payment Information: Transactions processed through Elev8 will be handled via third-party services, such as Razorpay for payments and Quikwcilver by Pinelabs for gift-related transactions. We ensure that your data is shared securely, but users are encouraged to review these providers’ privacy policies.

Data Security

Elev8 is committed to protecting your personal data through robust security measures, including encryption, access controls, and regular security updates. Your data is stored securely, and access is restricted to authorized personnel.

• Encryption: Data in transit and at rest is secured using industry-standard encryption methods (e.g., bcrypt and PGP encryption).
• Access Control: We implement role-based access control (RBAC) to restrict access to your data, ensuring only authorized users can access the specific data points allocated to them.
• Data Retention: Personal data will be retained for 2 years after account deletion for audit purposes. During this period, your data will be securely stored and accessible only for legal or regulatory reasons.

Data Transfer and Subprocessors

Elev8 ensures secure data transfer when sharing diagnostic data with subprocessors (e.g., cloud services, analytics providers). While no cross-border data transfer agreements are in place, we take steps to protect your data during transfer using secure encryption methods.

Data Adherence

Elev8 adheres to all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This includes:

• Compliance: Ensuring that personal data is processed lawfully, fairly, and transparently.
• Rights: Upholding your rights to access, correct, and delete your personal data, as well as to object to or restrict processing.
• Data Protection: Implementing appropriate measures to protect personal data and maintain compliance with regulatory requirements.

Changes to the Privacy Policy

Any updates or changes to this Privacy Policy will be communicated via email and as a pop-up notification on the platform. Users are encouraged to review the updated policies when prompted.

Contact Information

For queries or to exercise your rights, you can contact Elev8’s support team via this email address info@elev8.ind.in or raise a support ticket directly from the platform.