Data Privacy Policy

1. Introduction & Our Commitment to Privacy

WAE Ltd. (“WAE,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of every individual who interacts with our organization — whether as a website visitor, customer, business partner, job applicant, or employee. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your own data.

WAE is a manufacturer and supplier of sustainable drinking water solutions including drinking water stations, bottle filling stations, water dispensers, water coolers, reverse osmosis systems, and public utility water infrastructure. Our operations span commercial, institutional, hospitality, industrial, and government sectors across India and internationally.

Who We Are

WAE is the data controller responsible for personal data processed through this website (www.waecorp.com) and our associated digital platforms. Our registered office is located in India. For data protection enquiries, please contact us at the address provided in Section 10.

Scope of This Policy

This Policy applies to personal data collected through: (a) our corporate website and digital portals; (b) marketing and sales enquiries; (c) customer service interactions; (d) employment applications; and (e) event and exhibition registrations. It does not apply to third-party websites linked from our pages.

Our Data Protection Philosophy

WAE is guided by the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability. We collect only what we need, retain it only as long as necessary, and protect it with appropriate technical and organisational measures. We are committed to compliance with India's Digital Personal Data Protection Act 2023 (DPDPA) and align our practices with international standards including the GDPR.

2. Personal Data We Collect

Information You Provide Directly

We collect personal data that you provide voluntarily when you: submit a contact or product enquiry form; register for a webinar, event, or product demonstration; apply for a job with WAE; engage with our sales or customer service teams; or participate in surveys and feedback programmes.

This may include: full name; job title and organisation; professional email address; phone number; postal address; project type and requirements; and any other information you choose to include in your communications with us.

Information Collected Automatically

When you visit our website, we automatically collect certain technical data including: IP address; browser type and version; operating system; referring URLs; pages visited and time spent; device identifiers; and cookie identifiers. This data is collected via cookies and similar tracking technologies (see Section 7 and our separate Cookie Policy).

Information from Third Parties

We may receive personal data about you from third parties including: channel partners and distributors who introduce your organisation to WAE; LinkedIn and other professional networks when you engage with our content; event organisers who share attendee lists; and public procurement portals and tender databases.

3. How We Use Your Personal Data

WAE processes personal data only for legitimate, specified purposes. The primary bases for processing are: contractual necessity (to fulfil your order or service request); legitimate interests (to manage our business relationships and improve our services); consent (for marketing communications); and legal obligation (to comply with applicable law).

Business Operations & Service Delivery

We use your data to: respond to product enquiries and provide quotations; process and fulfil orders; manage installation and after-sales service; administer dealer and distributor relationships; and manage contracts and payments.

Marketing Communications

With your consent, we may send you information about our products, sustainability initiatives, case studies, industry insights, and events. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

Legal & Regulatory Compliance

We process data as required by applicable law, including tax obligations, anti-money laundering requirements, Prevention of Corruption Act compliance, and regulatory reporting.

4. Data Sharing & Third Parties

WAE does not sell personal data to third parties. We share data only as necessary and under appropriate safeguards with the following categories of recipients:

Service Providers & Data Processors

We engage third-party service providers acting as data processors including cloud hosting providers, CRM platforms, email marketing tools, and IT security vendors - who process data strictly on our instructions and under binding contractual data protection obligations.

Business Partners & Channel Partners

Where you have been introduced to WAE through a project partner, we may share relevant project details with that partner for the purposes of coordinating your service.

Legal & Regulatory Disclosures

We disclose personal data to courts, regulatory authorities, or law enforcement bodies when required by applicable law or legal process, or to protect the rights, property, or safety of WAE, our employees, or our customers.

5. Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

Right of Access: To obtain a copy of personal data we hold about you.

Right to Correction: To request correction of inaccurate or incomplete data.

Right to Erasure: To request deletion of your data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent.

Right to Withdraw Consent: Where processing is based on consent, to withdraw it at any time.

Right to Grievance Redressal: To raise a complaint with WAE's Data Protection Officer or the relevant regulatory authority.

How to Exercise Your Rights

To exercise any of the above rights, please submit a request to our Data Protection team using the contact details in Section 10. We will respond within 30 days. We may need to verify your identity before processing your request.

6. Data Security & Retention

Technical & Organisational Security Measures

WAE implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include: encryption of data in transit (TLS 1.2+); access controls and role-based permissions; regular security assessments and penetration testing; employee data protection training; and incident response procedures.

Retention Periods

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Typical retention periods are: customer order data - 7 years (statutory/tax obligation); marketing contact data - 3 years from last interaction or until consent withdrawn; job applicant data — 12 months after hiring decision; website analytics data — 26 months (as per cookie consent configuration).

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Preference Centre accessible in our website footer.

8. International Data Transfers

Where personal data is transferred outside India to service providers or group entities in other jurisdictions, WAE ensures appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms, to protect your data to the same standard as required under applicable Indian and international privacy law.

9. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or regulatory guidance. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by direct communication. We encourage you to review this Policy regularly.