Privacy Policy

We collect the following categories of information:

• Contact & business information you provide directly — name, email, phone number, business name, business address, and how you heard about us, when you submit an enquiry, request a quote, or check out.
• Account information — your email address and authentication details, managed through our account provider, Clerk.
• Payment information — processed directly by our payment processor, Stripe. We receive confirmation of payment and limited billing metadata; we do not receive or store your full card number.
• Identity verification information — where identity verification is required to activate a service, we collect the government-issued identification and verification data described below, processed by our verification provider, Didit.
• Usage & device information — pages visited, browser and device type, IP address, and similar diagnostic data, collected automatically via cookies and analytics tools.

Where a service requires identity verification before activation, we and our verification processor, Didit, collect government-issued identification documents and related verification data (which may include a photo or liveness check) solely to confirm your identity and eligibility to purchase the service, and to meet our regulatory and know-your-customer obligations as a telecommunications provider.

We treat identity verification data as sensitive and limit its use strictly to verification, fraud prevention, and legal compliance. We retain it only for as long as necessary to satisfy those purposes and applicable regulatory retention requirements, after which it is deleted or anonymized.

We use the information we collect to:

• Respond to enquiries and provide quotes;
• Create your account, provision, activate, and maintain your services;
• Process payments, billing, and refunds;
• Verify your identity and eligibility, and prevent fraud and abuse;
• Provide customer support and send service-related communications (e.g. billing notices, service agreement, account activity);
• Send product or marketing communications, where you have consented to receive them;
• Understand how our website is used and improve our website and Services;
• Comply with legal, tax, and regulatory obligations.

Where applicable data protection law requires a legal basis, we rely on: performance of a contract with you (to provide the Services you order); your consent (e.g. for marketing communications and non-essential cookies); our legitimate interests (e.g. fraud prevention, service improvement); and compliance with legal obligations (e.g. tax, telecommunications, and anti-fraud regulation).

We use strictly necessary cookies to operate our website (e.g. to keep you signed in and remember your cart), and analytics cookies to understand how visitors use our site so we can improve it. Where required by law, we will ask for your consent before setting non-essential cookies. You can control cookies through your browser settings, though disabling strictly necessary cookies may affect how our website functions.

We do not sell your personal information. We share it only as follows:

• Stripe — to process payments and prevent payment fraud;
• Clerk — to authenticate accounts and manage sign-in;
• Didit — to perform identity verification where required;
• Our content and order-management platform (Sanity) — to store order and service records;
• Analytics providers — to understand aggregate website usage;
• Telecommunications carriers and number providers — as necessary to provision phone numbers and route calls;
• Professional advisors, regulators, or law enforcement — where required by law, to establish or defend legal claims, or to protect the rights, property, or safety of CloudBharat, our customers, or others;
• A successor entity — in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy continuing to apply to your information.

CloudBharat, a Cal4Care Group company operates as part of a group of companies serving customers across multiple countries. As a result, your information may be transferred to, stored in, and processed in a country other than the one in which you are located, including countries that may have different data protection laws than your own. Where we transfer personal information internationally, we take steps intended to ensure it receives an adequate level of protection.

We retain personal information for as long as necessary to provide the Services, comply with our legal and regulatory obligations (including tax and telecommunications record-keeping requirements), resolve disputes, and enforce our agreements. Identity verification data is subject to the shorter retention approach described above.

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of sensitive credentials and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you are located, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to our legal and contractual retention obligations;
• Object to or restrict certain processing, including marketing;
• Request a copy of your information in a portable format;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with your local data protection authority.

If you opted in to receive marketing communications at checkout or sign-up, you may withdraw that consent at any time by using the "unsubscribe" link in our emails or by contacting us using the details below. We will continue to send you non-marketing, service-related communications (e.g. billing and account notices) necessary to provide the Services.

Our website and Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last updated" date above, and where changes are material, provide additional notice as required by law.