Privacy policy — found from the homepage — Darwinbox

Cited by

Facts read from this source

• Frameworks referenced Report an error

  “For the purposes of this policy references have been made to the General Data Protection Regulation (“EU GDPR”), 2016 and, the California Consumer Privacy Act, 2018 (“CCPA”), the California Privacy Rights Act, 2020 (together with the CCPA, “CPRA”), and the Digital Personal Data Protection Act, 2023 of India (“DPDP Act”) together with the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”).”

• Entity name Report an error

  “Darwinbox Digital Solutions Private Limited”

• Registered address Report an error

  “Darwinbox Digital Solutions Private Limited Skootr Managed Office, Block C, RMZ Futura, 3rd Floor, Plot No. 14 and 15, Survey No. 64 (P), Road No. 2, Hitech City Layout, Madhapur, Serilingampally Mandal, Ranga Reddy District – 500081, Telangana”

• Global presence Report an error

  “Darwinbox while headquartered in Hyderabad, India and with registered offices in Singapore, Indonesia, the US, Malaysia, Dubai, Thailand and the Philippines, operates as a global business”

• Eea transfers Report an error

  “if Darwinbox transfers personal data from the EEA to a country outside it, such as the United States, it will implement an appropriate data transfer solution such as entering into EU standard contractual clauses with the data importer or taking other measures to provide an adequate level of data protection under EU GDPR.”

• India transfer restriction Report an error

  “Darwinbox will transfer such data outside India only in accordance with Section 16 of the DPDP Act, 2023 and the DPDP Rules, 2025, and will not transfer personal data to any country or territory that is restricted by a notification of the Central Government of India. Darwinbox monitors such notifications on an ongoing basis and adjusts hosting region pinning per customer as required.”

• No sale Report an error

  “Darwinbox does not sell personal data that is collected or processed under this Privacy Statement.”

• Retention principle Report an error

  “Darwinbox will retain your personal data as long as is necessary to fulfil the service that you have requested.”

• Retention contact Report an error

  “For an elaborate insight on the retention periods of individual categories of data collected by Darwinbox, please contact us at privacy@darwinbox.com”

• Processor retention customer defined Report an error

  “The customer shall define the data retention period for their data, taking into account the purpose for which the data was collected and processed, the applicable legal requirements, and the customer’s own data retention policies.”

• Controller role Report an error

  “Darwinbox is the controller for the personal data discussed in this Privacy Statement, except as noted in the “Darwinbox as a Service Provider” section below.”

• Processor role Report an error

  “Darwinbox acts as a processor processing personal data in these services only according to the customers’ instructions.”

• Multifactor authentication Report an error

  “If you use certain systems provided by Darwinbox, the company will collect data from you to enable multi-factor authentication.”

• Tracking technologies Report an error

  “Darwinbox may use Cookies, Web Beacons, and other similar website tracking technologies like Google Analytics, LinkedIn, Bamboobox, HubSpot Marketing Hub”

• Data collected categories Report an error

  “First name Last Name Email ID Phone Number Company Name Job Level Functional Role Address”

• Children policy Report an error

  “Darwinbox’s services are not intended for or directed to children under the age of thirteen.”

• US dsr timeline Report an error

  “If you are a California resident and would like to make a CCPA request, please send an email to privacy@darwinbox.com. Darwinbox will respond to your request within 45 days.”

• GDPR dsr timeline Report an error

  “If you are an individual in the EU and would like to exercise your rights under GDPR, please send an email to privacy@darwinbox.com. Darwinbox will respond to your request within 30 days”

• Privacy email Report an error

  “For DSR related queries as mentioned in Section 15 and Section 18 of this policy please send an email to privacy@darwinbox.com.”

• India grievance board Report an error

  “If you are not satisfied with the resolution provided, you may approach the Data Protection Board of India in accordance with the DPDP Act.”

• Breach notification dpdp Report an error

  “In the event of a personal data breach, Darwinbox will, in its capacity as a Data Fiduciary, give intimation to each affected Data Principal and to the Data Protection Board of India in the manner and within the timelines prescribed by the DPDP Rules, 2025.”

• Government data requests Report an error

  “Darwinbox will attempt to redirect the same to the Customer which shall be at the sole discretion of such authority. Governmental and regulatory bodies need to follow the stipulated procedure to obtain valid and binding orders that shall be undisputed. The company will review all orders and object to overbroad or otherwise inappropriate ones.”

• Security measures Report an error

  “This includes conducting Transfer Impact Assessments and having Standard Contractual Clauses in place before cross border data transfers. As per technical measures only role-based and department-based access is allowed for employees who require access to the personal data collected by Darwinbox. This is done by only allowing for SSO login.”

• Audit frequency Report an error

  “To ensure that the organization is in compliance with the principles of data protection and the mechanisms in place are effective, reviews are conducted in a quarterly basis. An internal audit is also conducted periodically.”

• Last updated Report an error

  “Last Updated On: 27/01/2026”

• Processor dsr handling Report an error

  “For customer data, the customer will be responsible for raising DSRs to the organization. The customer will act as the data controller and provide Darwinbox with the necessary information to identify the requester and the personal information requested.”

• Disclosure to affiliates Report an error

  “Darwinbox may share information with its affiliates and third-party service providers or vendors that have been contracted to offer services on behalf of the Organization.”

Scores citing this record

• The Data Protection Officer Employee data protection & co-determination
• The Data Protection Officer European sovereignty
• The IT Integrator Employee data protection & co-determination
• The IT Integrator European sovereignty
• The Payroll Officer Employee data protection & co-determination
• The Payroll Officer European sovereignty
• The People Lead Employee data protection & co-determination
• The People Lead European sovereignty
• The Skeptic Employee data protection & co-determination
• The Skeptic European sovereignty
• The Works Council Advocate Employee data protection & co-determination
• The Works Council Advocate European sovereignty