Our role
For visitors to this website and prospects, we are the Data Fiduciary: we decide why and how cookies are used on this website. This Policy covers that use.
Where a customer uses Firmity for its own employees, visitors or tenants, the customer is the Data Fiduciary and we act as its Data Processor, as set out in clause 1 of the Privacy Policy. This Policy does not change that.
What cookies are
Cookies are small text files that a website places on your device when you visit it. They let the website recognise your device, remember your choices and measure how the website is used.
Similar technologies, such as browser local storage and session storage, work in the same way. In this Policy, “cookies” includes them.
First-party cookies are set by Firmity. Third-party cookies are set by service providers who process data for us under written contracts (see clause 3 of the Privacy Policy).
Categories of cookies we use
| Category | Purpose | Set by | Duration | Ground |
|---|---|---|---|---|
| Essential | Keep the website working and remember your choices, such as your cookie choice, display settings and whether a pop-up has been shown. | Firmity (first party) | Up to 12 months, until you clear it, or until you close the browser tab | Not needed |
| Analytics | Understand how visitors reach and use the website, such as pages viewed, device type and traffic source, so that we can improve it. | Firmity and service providers acting for us | As fixed by each cookie; stated in the cookie list (clause 9) | Your consent |
| Marketing | Measure which campaigns and channels bring visitors to Firmity and how well our communications perform. | Firmity and service providers acting for us | As fixed by each cookie; stated in the cookie list (clause 9) | Your consent |
Essential items in use. A first-party cookie that remembers your cookie choice (up to 12 months); a browser-storage entry that remembers display settings you choose (until you clear it); and session-storage entries that stop pop-ups from reappearing during your visit (until you close the tab).
We do not sell personal data, and we do not use cookies to make solely automated decisions with legal effect on you.
We also count visits to the website in aggregate, using a method that sets no cookies, stores nothing on your device and does not identify you. This counting does not depend on your choice.
Consent
Essential cookies keep the website working and do not need consent. Analytics and marketing cookies are used only if you consent through the cookie banner.
Nothing in the analytics or marketing categories that sets a cookie or stores information on your device is used before you accept.
Under Section 6 of the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, and given by a clear affirmative action. The banner therefore offers two options of equal prominence, Accept and Reject, with nothing pre-selected. Accept enables analytics and marketing cookies together. Reject keeps essential cookies only.
If you reject, the website works as normal, and choosing Reject carries no penalty.
We ask again when this Policy changes in a way that needs fresh consent, and in any case when your choice is 12 months old.
Record of your choice
When you choose, we keep a record as proof of consent: a random identifier (also held in your consent cookie), your choice, the date and time, the version of this Policy, the page on which you chose, your device type and browser family, your country where available, and a one-way hash of your IP address (not the IP address itself). If you accept, the record also includes the website or campaign tag that brought you here.
We use this record only to show that consent was given or withdrawn, to secure the website, and to produce aggregate reports on how visitors reach and use the website. We do not combine it with your enquiry details to identify you.
We keep it only for as long as the purpose needs, or the law requires, as set out in clause 7 of the Privacy Policy. We host it in India by default (clause 4 of the Privacy Policy).
Changing or withdrawing consent
You may change or withdraw your choice at any time using , here or on the Privacy Policy page. Withdrawing is as easy as giving consent.
When you withdraw, we stop loading analytics and marketing scripts and remove the analytics and marketing cookies that we can reach on our own domain. Cookies set on other domains may stay until you delete them in your browser. Withdrawal does not affect processing done before you withdrew.
You can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the website from working, and if your browser blocks our consent cookie we will ask for your choice on every visit.
Who sets cookies
If you accept, analytics and marketing cookies may be set by service providers who process data for us under written contracts, as described in clause 3 of the Privacy Policy. We keep a current list of the processors we use and will give it to you on request.
Where data is stored
We host data in India by default. We transfer personal data outside India only as clause 4 of the Privacy Policy allows.
Cookie list
We maintain a current list of the cookies and similar technologies in use, with each one's name, provider, purpose and duration. Write to the Grievance Officer in clause 12 and we will give it to you.
Your rights and complaints
Your rights under the DPDP Act, how to exercise them, and when we may decline a request are set out in clause 9 of the Privacy Policy. They apply to the personal data described in this Policy.
Send a grievance to the Grievance Officer in clause 12. If it is not resolved within the period stated in the Privacy Policy, or you are not satisfied, you may complain to the Data Protection Board of India, after first using this process (Section 13(3) of the DPDP Act).
Updates to this Policy
We may update this Policy to reflect changes in our practices or the law. We will post the new version with its date, and where a change needs fresh consent we will ask for it.
Grievance Officer and Data Protection Officer
Sanjeev Kumar
Grievance Officer and DPO
Ufirm Technologies Private Limited
Sector-63 H-64 Noida
Email: dpo@ufirm.in
M: +91 98689 99648
Hours: Monday to Friday, 10:00 to 18:00 IST
Governing law
This Policy is governed by the laws of India. Subject to your rights before the Data Protection Board of India and any other forum the law gives you, the courts at Uttar Pradesh have jurisdiction over disputes about it.
