PRIVACY & COOKIES POLICY

YBEX EXPRESS PVT. LTD. is a company incorporated in India. Ybex  Express owns and operates the technology platform (“Platform”) providing parcel tracking solutions for merchants (“Service(s)”) through its websites at https://www.ybex.co.in and http://www.ybex.co.in (“Site(s)”).

Ybex  Express takes Users’ privacy seriously and are committed to providing a safe online experience. Ybex  Express believes in being transparent about its practices and provides this Privacy & Cookies Policy (“Policy”) to explain how Ybex  Express collects, uses and discloses Personal Data (described below), and how Users have control over their Personal Data.

1.This Policy

1.1This Policy govern all users, whether free or paid, of the Platform and/or Services (“User(s)”) and describes how Users’ information, including Personal Data, will be collected, used and shared in connection with the use of the Site, Platform and/or Services, Ybex  Express’s legal basis for doing so as well as Users’ rights and choices regarding the information provided by Users to Ybex  Express. This Policy is intended to meet the requirements of the Personal Data Protection Act of India (“PDPA”) as Ybex  Express is  headquartered in India and the European Union’s General Data Protection Regulation (“GDPR”) in relation to Users who are EU residents.

1.2Ybex  Express reserves the right to update this Policy from time to time. Users should periodically visit this page to review the current terms of this Policy so that they are aware of any updated terms by which they are bound. In the event of any changes to this Policy, Ybex  Express will either notify Users via e-mail or post the changes to this Policy on the Site and update the “Last Updated” date at the top of this Policy as the effective date of change. However, any changes will not apply retrospectively.

1.3By using the Site, Platform and/or Services, Users agree that they have read and understood this Policy, and consent to the use of their information in accordance with this Policy.

1.4If Users have any questions about this Policy, please contact Ybex  Express’s Data Protection Officer (“DPO”) at info@ybex.co.in (“DPO Contact”)

2.Users’ Rights

2.1Subject to exceptions under the applicable laws, Users have the rights to:

Request access to their Personal Data. This enables a User to receive a copy of its Personal Data held by Ybex  Express.

Request correction to their Personal Data. This enables a User to have any incomplete or inaccurate information corrected.

Withdraw consent. This enables a User to withdraw its consent given to Ybex  Expressus to process its Personal Data. If a User withdraws its consent, Ybex  Express may not be able to provide the User with access to the certain specific functionalities of the Site, Platform and/or Services. Ybex  Express will advise the User if this is the case at the time the User seeks to withdraw its consent.

2.2If you are residing in the EU, you have the following additional rights pursuant to the GDPR:

Request erasure of their Personal Data. This enables a User to ask Ybex  Express to delete or remove its Personal Data where there is no good reason for Ybex  Express continuing to process it. A User also has the right to ask Ybex  Express to delete or remove its Personal Data where it has exercised the right to object to processing (see below).

Object to processing of their Personal Data. This right exists where Ybex  Express is relying on a legitimate interest as the legal basis for processing of a User’s Personal Data but the User has a reason to object to processing of its Personal Data. A User also have the right to object where Ybex  Express is processing its Personal Data for direct marketing purposes.

Request the restriction of processing of their Personal Data. This enables a User to ask Ybex  Express to suspend the processing of its Personal Data, for example if the User requires Ybex  Express to establish its accuracy or the reason for processing it.

Request the transfer of their Personal Data. This enable a User to request that Ybex  Express provides to the User, or a third party designated by the User, its Personal Data in a structured, commonly used, machine-readable format. Please note that this right applies only to automated information which the User initially provided consent for Ybex  Express to use or where Ybex  Express used the information to perform a contract with the User.

3.How to exercise your rights

3.1If a User wishes to exercise the rights under paragraph 2 above, the User is required to:

put its request in writing to the DPO Contact;

provide Ybex  Express with sufficient information, or Ybex  Express may request for further information, for it to verify the User’s identity as security measures to ensure that Personal Data is not disclosed to any person who has no right to receive it; and

specify the right which the User wishes to exercise and identify the relevant Personal Data for this purpose.

3.2Ybex  Express will endeavor to respond to all legitimate requests within thirty (30) days unless a User’s request is particularly complex or the User has made multiple requests. In this regard, Ybex  Express will notify the User and keep it posted. Typically, the User will not have to pay a fee to access its Personal Data (or to exercise any of the other rights). However, if the User’s request is clearly unfounded, repetitive or excessive, Ybex  Express may refuse to comply with its request in such circumstances.

3.3Users may submit a complaint to Ybex  Express via the DPO Contact in relation to this Privacy or Ybex  Express’s practices in relation to their Personal Data.

4.Types of Data that Ybex  Express collects

4.1Personal Data that Users provide directly to Ybex  Express. When Users use the Site, Platform and/our Services, their Personal Data and other information may be collected by Ybex  Express through Users’ voluntary submission (e.g. when Users contact Ybex  Express, when Users sign up for an account with Ybex  Express or when Users provide such necessary information for Ybex  Express to execute its services to Users).

“Personal Data” means data that may enable Ybex  Express to identify Users personally, including data about a person who can be identified (i) from that data, or (ii) from that data and other information to which Ybex  Express has or are likely to have access.

The type of Personal Data collected may vary based on how it was gathered, which may include:

“Identity Data” such as name, marital status, title, date of birth and gender, picture, social security number and/or tax identification number, copies of ID cards or other forms of identification;

“Contact Data” such as home/work/billing address, e-mail address and telephone number;

“Financial Data” such as details of bank account, payment card and financial statements;

“Transaction Data” such as details about payments to and from Users and other details of services Users have subscribed from Ybex  Express;

“Marketing Data” such as Users’ preferences in receiving marketing communications from Ybex  Express and/or Ybex  Express’s third party partners and Users’ communication preferences. If Users correspond with Ybex  Express by email or messaging through the Site or Platform, Ybex  Express may retain the content of such emails, messages and its responses;

“Online Presence Data” such as links to Users’ public account pages at social media websites and other online materials related to Users;

“Behavioral Data” such as inferred or assumed information relating to Users’ behavior and interests, based on their online activity. This is most often collated and grouped into "segments";

“Technical Data” such as Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices Users use to access the Site or Platform or use the Services;

“Content Data” such as content Users post to the Site or Platform not already included in another category, including Users’ profiles, questions, preference settings, answers, messages, comments, and other contributions on the Services, and metadata about them (such as when you posted them) (collectively, "Content").

4.2Personal data from third party sources. Ybex  Express may also collect certain Users’ Personal Data from third party sources, for example, among others, tracking ID from Carriers, reports from credit reporting agencies and information from social media sites, Ybex  Express’s affiliates, analytics providers, advertisers, data brokers, and identity verification and compliance service providers. In order for Ybex  Express to provide the Services to Users, tracking IDs of parcels (without Personal Data of end-consumers / parcel recipients) will be provided by Users and/or Carriers to Ybex  Express and such tracking IDs and all information that can be obtained from them are necessarily considered public.

4.3Non-Identifiable or Aggregated Data. When Users interact with Ybex  Express through the Site or Platform, Ybex  Express may receive and store certain personally non-identifiable information. Such information, which is collected passively using various technologies, cannot presently be used to specifically identify Users. Ybex  Express may store such information itself or such information may be included in databases owned and maintained by Ybex  Express’s affiliates, agents or service providers. The Site or Platform may use such information and pool it with other information to track, for example, the total number of visitors to the Site or Platform, the number of visitors to each page of the Site or Platform, the domain names of visitors' Internet service providers, and how Users use and interact with the Services. Also, in an ongoing effort to better understand and serve Users of the Services, Ybex  Express often conducts research on its customer demographics, interests and behavior based on Personal Data and other information provided to Ybex  Express. This research may be compiled and analyzed on an aggregate basis. Ybex  Express may share such non-identifiable and aggregate data with its affiliates, agents and business partners, but this type of non-identifiable and aggregate information does not identify Users personally. Ybex  Express may also disclose aggregated user statistics in order to describe the Services to current and prospective business partners, and to other third parties for other lawful purposes.

4.4No Special Categories of Personal Data. Ybex  Express does not collect any "Special Categories of Personal Data" about Users. This includes details about race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data. Nor does Ybex  Express collect any information about criminal convictions and offences.

4.5. Data Minimization Ybex  Express collects only relevant and minimal Personal Data limited to what is necessary in relation to the purposes for which they are collected and processed. In this regard, Users agree to provide only true, accurate, current and complete information about themselves.

 

5. Consent and Withdrawal

5.1By interacting with Ybex  Express using Personal Data, or voluntarily submitting Personal Data to Ybex  Express when using the Site, Platform and/or Services, Users agree and consent to providing their Personal Data and the manner in which their Personal Data will be handled as set forth in this Policy.

5.2 Where the information provided by Users to Ybex  Express contains Personal Data belonging to third parties (e.g. Personal Data relating to Carriers or end-customers), Users warrant and represent that consent from such third parties have been obtained to enable transmission of such data to Ybex  Express and for Ybex  Express to use such data to execute the Services to Users. If the third parties have withdrawn such consent, Users shall notify Ybex  Express immediately to enable Ybex  Express to stop processing such data.

5.3 If Users are located in the EU, Ybex  Express will seek and rely on Users’ consent as a legal basis for using their Personal Data where Ybex  Express has expressly sought it for specific purpose(s). Users will be asked to provide clear and affirmative consent to the collection, processing and use of their Personal Data. If Ybex  Express relies on Users’ consent to the use of their Personal Data, Users have the right to withdraw their consent at any time (but this will not affect any processing that has already taken place).

5.4Users may, by notice in writing to Ybex  Express, withdraw their consent to providing their Personal Data to Ybex  Express. Ybex  Express shall endeavor to cease processing their Personal Data, destroy or delete the information, or remove the means by which the data can be associated with Users within thirty (30) days from the receipt of the said notice, unless its retention is required to satisfy legal, regulatory, accounting or other business requirements or to protect Ybex  Express’s interests.

5.5Users may decline to provide Ybex  Express with Personal Data. If Users choose not to provide any Personal Data whenever required by Ybex  Express, this may limit Users’ ability to use certain features of the Site, Platform and/or Services, or Ybex  Express might not be able to delivery or adequately deliver the Services to such Users.

6. How Ybex  Express uses Personal Data on a lawful basis

6.1Ybex  Express’s primary objective in collecting and using Users’ Personal Data is to provide, facilitate, personalize and/or improve its Services, including the Site and Platform, to Users. Below are the more detailed examples of relevant purposes for which Ybex  Express may use Users’ Personal Data:

Providing, updating, and maintaining the Site, Platform, Services, business and client database, including to facilitate and fulfil transactions with Users and processing payment transactions, including transactions;

Conducting research and development, including to perform market, demographic or trend analysis/survey for research and marketing purposes, and for data aggregation and analytics;

Communicating with Users about the Services, including to interact with Users via social media platforms, and to improve or personalise Users’ online experience with Ybex  Express;

Providing customer support, including to contact Users regarding any complaints, feedback, queries or requests;

Enhancing security, including to facilitate investigations into any suspicious or illegal activity on the Site or Platform or relating to use of the Services;

Communicating with Users for the purposes of marketing, promoting  and driving engagement in respect of the Services and third-party products and services which may be of interest to Users based on their interactions with Ybex  Express. Such communication may be in the form of postal mails, emails, text messages, social media channels, newsletters, brochures or other printed or digital communication;

Complying with applicable law, legal process and regulations and protecting legitimate business interests;

internal administrative and management purposes;

any purposes exempted under the applicable laws;

any other purposes reasonably relate to the aforesaid.

6.2In respect of each of the purposes for which Ybex  Express uses  Personal Data, the GDPR requires Ybex  Express to ensure that it has a legal basis for that use if Users are within the EU. The legal bases depend on the Services Users use and how they use them. This means Ybex  Express collects and uses Personal Data only where Ybex  Express needs to:

provide Users the Services, including to operate the Services, fulfill contractual obligations with Users, provide customer support and personalized features and to protect the safety and security of the Services;

pursue legitimate interests in a way that might reasonably be expected as part of running its business and that does not materially impact Users’ rights, freedom or interests; or

process Users’ data to comply with any legal or regulatory obligation.

6.3If Ybex  Express intends to use, handle or process any Personal Data in any manner that is not consistent with this Policy, Ybex  Express will publish a notification of change on the Site or Platform prior to the change becoming effective. Users are deemed to have consented to such variation if we do not receive any notice of objection within seven (7) days from the date of the said notice. If Users are in the EU, Ybex  Express will notify such Users of such changes through emails and such Users should respond accordingly to indicate whether or not they consent to such change.

7.Use of Cookies and Similar Technologies

7.1Cookies

In order to improve Ybex  Express’s products or services, Ybex  Express collects data by way of “cookies”. A cookie is a small text file containing small amounts of information which are automatically downloaded into Users’ computers (or other electronic devices) when Users access to the Site or Platform. Cookies help to measure the number of visits, average time spent, page views and other statistics relating to Users’ access to the Site or Platform. This information allows Ybex  Express to better administer the Site or Platform, and provide a more tailored and user-friendly service to Users. Cookies also enable Users to use or access certain features or services of the Site or Platform. Each time a User visits the Site or Platform from the same computer or device, the cookie will be retrieved from its computer or device, enabling the Site or Platform to recognise its computer or device as having previously visited the Site or Platform and thereby increase the functionality of the Site or Platform on its computer or device. Therefore, generally, Ybex  Express uses cookies to:

recognise a User’s browser as a previous visitor and save any preferences that may have been set during its last visit to the Site or Platform;

obtain information about a User’s preferences, online movements and use of the Internet;

track website analytics and carry out research and statistical analysis to help improve Ybex  Express’s content, products and services and to help Ybex  Express better understand its visitors’ or customers’ requirements and interests;

customise and target Ybex  Express’s marketing and advertising campaigns and those of its partners more effectively by providing personalised interest-based advertisements;

measure and research the effectiveness of Ybex  Express’s interactive online content, features, advertisements, and other communications;

make the Users’ online experience more efficient and enjoyable.

The information Ybex  Express obtains from the use of cookies will not usually contain Users’ Personal Data. Although Ybex  Express may obtain information about Users’ computers or other electronic devices such as IP address, browser and/or other internet log information, this will not usually identify Users personally. In certain circumstances, information Ybex  Express obtains through the use of cookies may be combined with other Personal Data relating to Users, in which case such combined information will be treated as Personal Data.

In most cases, Ybex  Express will obtain Users’ consent in order to use cookies on the Site or Platform. The exception is where the cookies are strictly necessary in order for Ybex  Express to operate the Site or Platform and/or to provide Users with a service that the User has requested. Most web browsers and devices can be set to notify Users when they receive a cookie or to prevent cookies from being sent. If Users use these features, they may limit the functionality of the Site or Platform. Users may free to block, delete, or disable the cookies if their devices permit so. Users can also manage their cookies and cookie preferences in their browsers or device settings. If Users have recently disabled one or more cookies, Ybex  Express will stop using the disabled cookies to collect any further information. However, Ybex  Express may still use information collected from such cookies prior to Users selecting the ‘disable’ preference setting.

Further information about cookies, including how to see what cookies have been set on computer or device and how to manage and delete them can be found at www.allaboutcookies.org and www.youronlinechoices.com.

7.2Third-Party Cookies

Third-party cookies are set by third-party sites separate from the Site or Platform. Ybex  Express works with third-party service providers who are authorised to place third-party cookies and may also set cookies on the Site or Platform. These third-party service providers are responsible for the cookies they set on the Site or Platform. If Users want further information, please visit the website of the relevant third party. If Users would like to opt-out of all other types of technologies Ybex  Express employs on the Site or Platform, Users may do so by changing their browser settings to block, delete or disable these technologies as such browsers or devices permit.

7.3Log Files

Log file information is automatically reported by a User’s browser each time it accesses a web page. When Users use the Site or Platform, Ybex  Express’s servers automatically record certain information Users’ web browsers send whenever they visit any website. These server logs may include information such as web request, Internet Protocol address, browser type, referring / exit pages and URLs, number of clicks, domain names, landing pages, pages viewed, and other such information.

7.4Clear GIFs Information (Web Beacons)

When Users use the Site or Platform, Ybex  Express may employ clear GIFs (also known as web beacons or tracking pixels) to anonymously track online usage patterns. No personally identifiable information about Users is collected using these clear GIFs. In addition, Ybex  Express may also use clear GIFs in HTML-based emails sent to Users to track which emails are opened by recipients. The information collected is used to enable more accurate reporting and make the Site or Platform better for Users.

8.How Ybex  Express shares information

8.1Ybex  Express is not in the business of selling Users’ information. There are, however, certain circumstances in which Ybex  Express may share Users’ Personal Data with certain third parties without further notice to Users, such as with:

Affiliates and Third-Party Partners. Certain authorised affiliates may access Users’ Personal Data to help Ybex  Express develops, maintains and provides the Services and helps manage Ybex  Express’s customer relationships (including providing customer support, customer liaison, etc). Ybex  Express may also share Users’ Personal Data with its business partners whom Ybex  Express collaborates in providing the Services, in which case these third parties are prohibited from using Users’ Personal Data for any other purposes.

Service Providers. Ybex  Express’s service providers provide Ybex  Express support for the Services, including, for example, website and application development, hosting, maintenance, security, backup, storage, virtual infrastructure, payment processing, analysis, identity verification, background and compliance reviews, banking services, and other services for Ybex  Express, which may require them to access or use Personal Data about Users. These third parties are prohibited from using Users’ Personal Data for any other purposes.

Professional Advisors. Ybex  Express’s lawyers, accountants, bankers, auditors and insurers may need to review Users’ Personal Data to provide consultancy, compliance, banking, legal, insurance, accounting and similar services. These third parties are prohibited from using Users’ Personal Data for any other purposes.

Governmental Authorities or Agencies. Ybex  Express may disclose Users’ Personal Data to governmental authorities or agencies if it believes that it is reasonably necessary to comply with a law, regulation, order, subpoena, rule of a self-regulatory organization or audit or to protect the safety of any person, to address fraud, security or technical issues, or to protect its legal rights, interests and the interests of others, such as, for example, in connection with the acquisition, merger or sale of securities or a business (e.g. due diligence). Ybex  Express will not share Users’ Personal Data with non-governmental entities, except where such entities have been duly authorised to carry out specific governmental activities.

Advertisers. Certain users of the Site, Platform and/or Services may have access to Users’ Personal Data for the purpose of enabling them to interact with Users and more effectively offer opportunities through the Site or Platform that are targeted towards Users’ background and preferences. Ybex  Express may also allow third-parties, including ad servers or ad networks, to serve advertisements on the Site or Platform, and such third parties may be provided with access to Users’ Personal Data to provide advertising tailored to Users’ interests.

Researchers. To enhance the public understanding of patterns and trends in the markets served by the Services, Ybex  Express may provide Personal Data to third parties under confidentiality obligations such as, for example, academics or contractors, for research purposes. These third parties are prohibited from using Users’ Personal Data for any other purposes.

8.2As Ybex  Express develops its business, it might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganisation, dissolution or similar event, Personal Data may be part of the transferred assets.

8.3Ybex  Express may also share non-Personal Data (such as anonymous usage data, referring/exit pages and URLs, platform types, number of clicks, etc.) with interested third parties to help them understand the usage patterns for certain Services or conduct independent research based on such anonymous usage data.

8.4If a User requests that Ybex  Express removes its Personal Data in exercise of its rights, Ybex  Express will convey that request to any third-party with whom Ybex  Express has shared the User’s data. Ybex  Express is not, however, responsible for revising or removing the User’s Personal Data obtained by any third party who has previously been provided with the User’s information by Ybex  Express in accordance with this Policy or any third party to whom the User has directly provided such information (whether by sharing login and password, or otherwise).

8.5Users agree that Ybex  Express may transfer Users’ Personal Data to Ybex  Express’s affiliates, subsidiaries and/or other authorised third parties located in any location as long as the Personal Data is handled in accordance with this Policy and all applicable laws relating to data privacy protection of the relevant jurisdiction.

9.Period of retention

Personal Data provided by Users will be retained and stored as long as the purpose for which the data was required continues, unless the User explicitly requests for its removal in exercise of rights. Thereafter, Ybex  Express will destroy or delete the information, or remove the means by which the data can be associated with the User, unless its retention is required to satisfy legal, regulatory, accounting or other business requirements or to protect Ybex  Express’s interests. Ybex  Express will, however, periodically review data it holds, and erases or anonymises it when it is no longer needed.

10.Information About Others

If a User or its Authorised User gives Ybex  Express information on behalf of someone else, the User shall, and procure that its Authorised User shall, warrants that it has obtained the authorisation from that person to provide such Personal Data on his/her behalf and that other person has agreed that the User or Authorised User can act on his or her behalf and (i) give consent on his or her behalf to the processing of his or her Personal Data in accordance with this Policy; (ii) receive on his or her behalf any data protection notices; and (iii) give consent to the use and transfer of his or her Personal Data abroad in accordance with this Policy. Users agree to indemnify and hold harmless Ybex  Express from any claim that such authority did not exist.

11.Security

11.1Ybex  Express uses industry-standard physical, managerial, and technical safeguards to preserve the integrity and security of Users’ information from loss, misuse, and unauthorised access or collection, disclosure, alteration, or destruction. Ybex  Express limits access to Users’ Personal Data to those employees who have a business need to have such access. All such people are subject to a contractual duty of confidentiality. Ybex  Express cannot, however, ensure or warrant the security of any information Users transmit to Ybex  Express or guarantee that Users’ information through the Services may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, managerial, or technical safeguards.

11.2In addition, Ybex  Express has in place the following additional measures with respect to Personal Data of individuals in the EU:

Ybex  Express will conduct data protection impact assessments from time to time, when required by the GDPR;

documented trail and records of the type of information Ybex  Express collected, its source, consent received and with whom it is shared;

other appropriate technical and organisational measures to implement the data protection principles and safeguard individual rights.

11.3While Ybex  Express will use all reasonable efforts to safeguard Personal Data, Users acknowledge that the use of the Internet is not entirely secure and for this reason Ybex  Express  cannot guarantee the security or integrity of any Personal Data that are transferred from Users or to Users via the Internet.

12.Monitoring and Checking

12.1Ybex  Express may monitor and record communications with Users (such as telephone conversations and emails) for the purpose of quality assurance, training, fraud prevention and compliance.

12.2For the prevention of fraud and money laundering, Ybex  Express may search the files of credit reference from fraud prevention agencies (who will record the search). If a User provides false or inaccurate information and Ybex  Express suspects fraud, Ybex  Express may disclose information about the User’s conducts on the Site or Platform to such agencies and if the situation warrants it, Ybex  Express may have to report to law enforcement authorities.

12.3Ybex  Express may preserve the content of any email or "Contact Us" or other electronic messages received. Any Personal Data contained in those messages will only be used or disclosed in ways set out in this Policy. The message content may be monitored by Ybex  Express’s service providers or employees for purposes including, but not limited to, compliance, auditing and maintenance or where email abuse is suspected.

13.Exclusions

13.1This Policy applies to all users of the Site, Platform and/or Services only. While Users may encounter links on the Site to other websites, such as those relating to Ybex  Express’s third party partners, advertisers and other parties whom Ybex  Express collaborates with (“Third Party Platforms”), this Policy does not apply to the activities of such Third Party Platforms that may collect Users’ Personal Data while accessing or using such third party’s services in connection with Users’ use of the Site or Platform. The privacy practices of those third parties are not covered by this Policy. The links from the Site do not imply that Ybex  Express endorses or have reviewed the Third Party Platforms. Users shall contact those platforms directly for information on their privacy policies.

13.2This Policy shall not apply to any unsolicited information Users provide to Ybex  Express through the Site or Platform or any other means. This includes, but is not limited to, information posted to any public areas of the Site or Platform, such as message boards, any ideas or feedback, and other unsolicited submissions (collectively, “Unsolicited Information”). All Unsolicited Information shall be deemed to be non-confidential and Ybex  Express shall be free to reproduce, use, disclose, distribute and exploit such Unsolicited Information without limitation or attribution.

14.Privacy of Children

If a User is an individual in the EU who is less than 16 years old, please do not send Ybex  Express any Personal Data. Ybex  Express does not knowingly collect nor does Ybex  Express wish to collect any personally identifiable information or other user information from children under the age of 16. In the event that Ybex  Express learns that any personal information from a child under the age of 16 has been collected, Ybex  Express will delete the information from its database and terminate the corresponding account, if any.

15. Governing Law and Dispute Resolution

Irrespective of the country from which Users access or use the Site, Platform and/or Services, to the extent permitted by law, this Policy shall be governed in accordance with the laws of India without regard to choice or conflicts of law principles, and Users hereby agree to submit to the exclusive jurisdiction of the courts of Mumbai to resolve any claims or disputes which may arise in connection with this Policy. Any disputes concerning this Policy and claims concerning breach or inadequacy of Personal Data protection raised by an EU Individual will be dealt with in accordance (to the maximum permissible extent) with the GDPR.