PRIVACY POLICY

Effective Date: 3 July 2026
Last Updated: 3 July 2026

At Onextel Limited ("Onextel", "Company", "we", "our" or "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, store and protect information collected through our website and related online interactions.

This Privacy Policy applies only to information collected through our website and does not govern customer data processed through Onextel's communications platform services, which are governed by separate customer contracts, service agreements, data processing terms and applicable laws.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

For the purposes of this Privacy Policy:

Data means any information submitted by you through the Website or automatically collected during your interaction with the Website.

Cookies means small text files placed on your device by this Website when you either visit, or use certain features of, the Website that help the Website function effectively and enhance user experience. A cookie generally allows the website to “remember” your actions or preference for a certain period of time.

Data Protection Laws means applicable data protection, privacy and cybersecurity laws, including the Information Technology Act, 2000, applicable rules framed thereunder, the Digital Personal Data Protection Act, 2023, applicable rules framed thereunder, and any amendments, modifications or replacement legislation.

Grievance Officer means the Data Protection Officer appointed by Onextel. 

Personal Data means information relating to an identified or identifiable individual.

User, you or your means any individual accessing or using the Website.

Website means the Onextel website and all associated webpages and sub-domains unless governed by separate privacy notices.

Onextel, Company, we, our or us means Onextel Limited, having its registered office at: C-802, ATS Bouquet, Sector-132, Noida – 201308

2. Scope

This Privacy Policy applies to the collection, use, storage, and processing of personal information obtained through various interactions on the Onextel website. Such interactions include information submitted through contact forms, sales enquiry forms, demo request forms, newsletter subscriptions, media enquiries, career applications, feedback submissions, and any other forms or communication channels that may be made available on the website from time to time. The Policy also covers information collected automatically through website analytics tools, cookies, and similar technologies that help us understand website usage, improve user experience, enhance website functionality, and maintain security. 

The information collected through these channels may include personal and business-related details provided voluntarily by users, as well as technical and usage information collected automatically when users visit or interact with the website. This Privacy Policy applies solely to information collected through the website and related online interactions and does not govern customer data processed through Onextel’s communication platform services, which are subject to separate contractual terms, data processing agreements, and applicable laws. 

Users may browse certain portions of the Website without providing personal information.

Users acknowledge that they are responsible for ensuring that any information submitted to us is accurate, complete and up to date.

3. Information We Collect

A. Information You Provide

We may collect personal and business-related information that you voluntarily provide when engaging with us through the Website, including when you submit enquiries, request information, apply for employment opportunities, subscribe to communications, participate in surveys or otherwise communicate with us. Such information may include:

• First name and last name;
• Mobile number, telephone number or other contact details;
• Business email address;
• Company name and business affiliation;
• Job title, role, designation or professional information;
• Information regarding your business requirements, areas of interest, service requests, enquiries or feedback;
• Communication preferences, including preferences regarding marketing and promotional communications;
• Information submitted through contact forms, sales enquiry forms, support requests, demo requests, customer feedback forms or other interactive features available on the Website;
• Resume, employment history, professional qualifications, educational background, references and any other information submitted in connection with recruitment or career opportunities;
• Correspondence and communications exchanged with us through email, telephone, chat features or other communication channels;
• Records of your consent, preferences and instructions provided to us; and
• Any other information that you choose to voluntarily provide while using the Website or interacting with us.

You are not required to provide personal information to browse certain areas of the Website. However, failure to provide certain information may limit our ability to respond to your requests, provide services, process applications or otherwise engage with you effectively.

You represent and warrant that any information submitted by you is accurate, complete and up to date. Where you provide personal information relating to another individual, you confirm that you are authorized to provide such information and have obtained any necessary consents required under applicable law.

B. Information Collected Automatically

When you access, browse or interact with the Website, we and our authorized service providers may automatically collect certain technical, device and usage-related information. This information helps us understand how visitors use the Website, improve functionality and user experience, maintain security, and support our business operations.

Information collected automatically may include:

• Internet Protocol (IP) address;
• Browser type, version and configuration settings;
• Operating system and platform information;
• Device identifiers, device type, hardware information and mobile device characteristics;
• Referring URLs, websites, search engines or sources that directed you to the Website;
• Pages viewed, features accessed and content interacted with on the Website;
• Date, time and duration of visits;
• Navigation paths, clickstream data and user interaction patterns;
• Website performance data and diagnostic information;
• Geographic location information derived from your IP address or device settings, where permitted by law;
• Cookie identifiers, advertising identifiers and similar online tracking technologies;
• Analytics and statistical information relating to Website usage and visitor behavior; and
• Security-related information used to detect fraud, unauthorized access, abuse, malicious activity or technical issues.

Such information may be collected directly by us or through third-party analytics, security, hosting and performance-monitoring service providers acting on our behalf.

In many cases, this information is aggregated, anonymized or de-identified and may not, by itself, directly identify a specific individual. However, where such information is capable of identifying an individual, it will be treated as personal information in accordance with this Privacy Policy and applicable laws.

4. How We Collect and Use Your Information

We collect information when you submit a contact form, request a demonstration of our services, subscribe to newsletters or marketing updates, contact us through the Website, apply for employment opportunities, participate in surveys or feedback programs, browse or interact with the Website, or when cookies and analytics technologies collect usage information. 

We use the information collected to respond to inquiries and requests, provide information regarding our products and services, schedule demonstrations and consultations, improve Website content, functionality and user experience, conduct analytics and business intelligence activities, manage recruitment processes, send newsletters and marketing communications where permitted by law, conduct customer satisfaction surveys, detect fraud, misuse and security incidents, maintain and secure our systems and infrastructure, comply with legal and regulatory obligations, and establish, exercise or defend legal claims. 

Where required by applicable law, we will obtain your consent before sending marketing communications. You may opt out of receiving marketing communications at any time by using the unsubscribe option provided in such communications or by contacting us directly.

5. Legal Basis for Processing

Where required under applicable Data Protection Laws, Onextel processes personal information only where a valid legal basis exists. We may process personal information based on your consent, including where you voluntarily submit information through contact forms, subscribe to newsletters, request demonstrations, participate in surveys, or opt in to receive marketing communications. We may also process personal information where such processing is necessary to take steps at your request before entering into a contract or to perform contractual obligations, including responding to business enquiries, providing information about our services, evaluating employment applications, and managing customer or prospective customer relationships. In certain circumstances, we may process personal information to comply with applicable legal, regulatory, statutory, judicial, law enforcement, tax, accounting, telecommunications, cybersecurity, or reporting obligations. We may further process personal information where necessary for our legitimate business interests, including operating and improving the Website, enhancing user experience, conducting analytics and business intelligence activities, maintaining network and information security, preventing fraud and misuse, managing internal operations, protecting our rights and interests, and supporting business development activities, provided such interests are not overridden by your rights and freedoms. We may also process personal information where necessary for the establishment, exercise, protection, or defence of legal claims, rights, disputes, investigations, regulatory proceedings, arbitration, or litigation. Where consent forms the basis of processing, you may withdraw such consent at any time; however, the withdrawal will not affect the lawfulness of processing carried out prior to such withdrawal.

6. Sharing of Information

At Onextel Limited, we respect the confidentiality of your personal information and do not disclose, share, or transfer your information except as described in this Privacy Policy, where necessary for legitimate business purposes, to provide services, comply with legal obligations, protect rights and interests, or where otherwise permitted under applicable laws. 

a. Group Companies: We may share your personal information with our affiliates, subsidiaries, parent entities, and associated companies within the Onextel group structure for legitimate business and operational purposes. All affiliated entities receiving such information will be required to process the information in accordance with applicable data protection laws and appropriate confidentiality obligations.

b. Service Providers: We may engage carefully selected third-party service providers, vendors, consultants, and business partners to perform services on our behalf. These providers may be granted access to personal information only to the extent necessary to perform their contractual responsibilities and are required to implement appropriate security and confidentiality measures. Such service providers may include: Website Hosting Providers, Cloud Infrastructure Providers, Analytics and Performance Service Providers, Customer Relationship Management (CRM) Providers, Security and Cybersecurity Vendors, Marketing and Communication Service Providers, Recruitment and Human Resources Service Providers.

Where personal information is processed by service providers, such processing will be governed by appropriate contractual protections requiring confidentiality, data security, limited use, and compliance with applicable laws. 

c. Regulatory and Government Authorities: As a general principle, we do not disclose personal information to regulatory authorities, government agencies, law enforcement bodies, courts, or other public authorities unless, We have obtained your consent; disclosure is required or authorized by applicable law, such disclosure is necessary to comply with a legal obligation, court order, judicial proceeding, regulatory inquiry, subpoena, or governmental request. We may also disclose personal information where reasonably necessary to prevent, investigate, detect, or prosecute criminal activities, combat fraud, cybercrime, telecommunications abuse, phishing, spoofing, or security incidents. Protect the rights, safety, property, and security of Onextel, its customers, employees, users, or the public. Cooperate with regulatory investigations, audits, and lawful enforcement actions.

In all such cases, we will ensure that disclosures are legitimate, proportionate, and limited to the information reasonably necessary for the relevant purpose. 

d. Corporate Transactions: Your personal information may be disclosed, shared, transferred, or otherwise made available in connection with actual or proposed corporate transactions, such as- mergers, acquisitions, restructuring, financing transactions or sale of assets.

Where such transactions occur, we will take reasonable steps to ensure that any receiving party protects personal information in a manner consistent with this Privacy Policy and applicable legal requirements.

e. Professional Advisors: We may disclose personal information to professional advisors who require access to such information for legitimate business, legal, financial, compliance, or regulatory purposes. 

Such disclosures will be limited to information necessary for the relevant advisory services and will be subject to professional confidentiality obligations and applicable legal protections.

We do not sell personal information to third parties.

7. Data Security

Onextel is committed to protecting the security of your Data. We implement reasonable technical, administrative and organizational measures to protect personal information against unauthorized access, alteration, disclosure, misuse or destruction. Further, we have adequate internal policies to protect and safeguard any personal identifiable information.

While we strive to protect information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

8. Data Retention

We will keep your personal information in line with our retention policy and as per applicable law, which ensures that we keep your details for no longer than is necessary. Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle. 

After the applicable retention period, information will be securely deleted, anonymized or archived in accordance with our internal policies and legal obligations.

Certain information may continue to exist in backups or archival systems for legal, audit, regulatory or disaster recovery purposes.

Subject to applicable law, you may have the right to:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can request to update or correct any inaccurate or incomplete personal data.
• Deletion: You can request the deletion of your personal data, subject to certain exceptions.
• Opt-Out of Marketing: You can unsubscribe from promotional emails at any time by clicking the unsubscribe link in the email.
• Data Portability: You can request to receive your personal data in a structured, commonly used format.
• Withdraw Consent: If you have provided consent for processing your personal data, you can withdraw your consent at any time.

To exercise these rights, please contact us using the details provided below.

We may request information necessary to verify your identity before processing a request.

9. International Transfers

Your personal data may be transferred to, stored or processed in India or other jurisdictions where Onextel, its affiliates or service providers operate. If you access the Website from a country other than India, please note that your personal information may be transferred to, processed, and stored in India or other countries where we or our service providers maintain facilities or conduct operations.

Where such transfers occur, we will take reasonable measures to ensure appropriate protection of personal information and compliance with applicable laws.

By using the Website and providing your personal information, you acknowledge and understand that your information may be transferred, stored, and processed in jurisdictions outside your country of residence in accordance with this Privacy Policy.

10. Communications and Marketing

If you subscribe to our communications or otherwise consent, we may send information regarding-products and services, industry updates, webinars and events, company announcements, marketing campaigns.

You can unsubscribe at any time by following the instructions included in our communications or by contacting us directly.

11. Children's Privacy

The Website is intended for business users and is not directed toward children.

We do not knowingly collect personal information from children or individuals below the age prescribed under applicable law. If we become aware that such information has been collected, we will take appropriate steps to delete it.

12. Third-Party Websites

The Website may contain links to third-party websites.

We are not responsible for the content, security practices or privacy practices of such websites. We encourage users to review the privacy policies of third-party websites before providing personal information.

13. Cookies and Analytics

We use cookies and similar technologies to improve user experience, understand Website usage and support Website functionality.

You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies, but this can be changed. 

This Website may place the following Cookies:

a. Type of Cookie: Marketing & analytics cookies. Purpose: This cookie is necessary to display content in expand / collapse format on pages.

b. Type of Cookie: Purpose: Google Analytics is used on the Websites to track visitor traffic and site performance traffic by collecting anonymous information about the average time spent on the website, the pages viewed and other relevant usage statistics. 

To opt out of being tracked by Google Analytics visit:

https://tools.google.com/dlpage/gaoptout You can choose to delete Cookies at any time. However, you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings. 

You can choose to delete Cookies at any time. However, you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings. 

14. Compliance with Communication and Anti-Spam Laws

As a communications technology company, Onextel supports lawful and responsible communications practices.

We do not knowingly promote, facilitate or encourage spam, fraudulent communications, phishing activities, spoofing, illegal telecommunications activities, unauthorized marketing communications

We may cooperate with regulators, telecom operators and law enforcement agencies where required under applicable law.

15. Changes to this Privacy Policy

We may update this Data Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting an updated version on our website or by other means. The "Effective Date" and Updated versions will be posted on the Website with a revised "Last Updated" date.

Continued use of the Website following publication of changes constitutes acceptance of the revised Privacy Policy.

16. Grievance Officer

For any concerns and complaints regarding this Privacy Policy or our privacy practices, you may contact our Data Protection Officer at dpo@onextel.com.

We will review and address your requests and complaints in a timely manner as prescribed under applicable law.