Privacy Policy

Who we are and what this policy covers

Iris Global Services ("Iris Global", "we", "us", "our") takes your privacy seriously. This policy describes how we handle information that identifies you, or could reasonably be linked to you, when you use our website and take part in the activities described below.

It applies to website visitors; people who send us product or business enquiries; representatives of our customers, channel partners, original equipment manufacturers (OEMs), suppliers and service providers; and anyone who signs up for our events or marketing updates. Where a portal operated by Iris links to this policy, it also applies to accounts and transactions on that portal.

Some activities — such as recruitment and employment, specific events or particular services — may have their own notice. When we process data only on a customer's instructions, that customer's notice and our contract with them apply instead. This policy sits alongside, and does not replace, our product terms, sales contracts or website terms of use.

Information we collect

Contact and business details. Name, work email, phone number, job title, organisation, location, business address and what your enquiry or requirement is about.

Account and transaction details. Where applicable: registration details, account IDs, billing and delivery contacts, order references, payment status, warranty claims and support messages. We ask for financial or identity documents only when a particular onboarding, payment or compliance step genuinely needs them.

Interaction details. Messages you send, event sign-ups and attendance, feedback, communication preferences and records of your consents and opt-outs. Photography or recording at events will be covered by a separate event notice.

Website details. Depending on the tools in use and the choices you make: IP address, browser and device information, pages visited, how you arrived, visit times, technical logs and cookie identifiers.

Please don't put passwords, card details, health information or government ID documents into general enquiry forms. If a process needs any of these, we will tell you why and how to send them securely.

How information reaches us

Most information comes directly from you — through forms, email, phone calls, registration pages and business correspondence. We may also receive business contact details from your organisation, someone authorised to act for you, an OEM or a channel partner in connection with a particular opportunity or service request. Our website systems record technical information as you browse.

If you give us details about someone else, please make sure you're allowed to and that they know about this policy. Before using information from a third party for a new purpose, we review whether that use is appropriate.

Why we use personal information

Enquiries and partner relationships. To reply to you, set up conversations, pass an opportunity to the right internal team or partner, and manage our relationships with customers, OEMs and channel partners.

Accounts, orders and support. Where these services exist, to manage access, handle requests, arrange delivery, manage billing and provide product, warranty or technical support.

Events and communications. To run event participation and send logistics, and — where the law allows, and with your consent where it is needed — to send product news, invitations, newsletters and promotions in line with your preferences.

Running and protecting the website. To fix errors, keep the site available, measure how it performs and spot misuse or suspected fraud. We use feedback and suitably aggregated results to improve our content and services.

Records and legal duties. To keep the records needed for accounting, tax, audit, regulatory and reporting requirements, and to establish or defend legal claims.

We only process information on a ground permitted by law, including consent where the law requires it. Having a business reason listed above does not on its own make every activity lawful. Where needed, we give a specific notice at the point of collection explaining what we're asking for and why. Simply browsing our website is not treated as consent to unrelated processing.

Marketing preferences

You can stop promotional emails at any time using the unsubscribe link, or by contacting us. For other promotional channels, use the opt-out offered or get in touch. We may keep a minimal "do not contact" record so that we continue to respect your choice. Essential messages about your account, orders, service or security are not marketing and are handled separately.

Cookies and similar technologies

We use cookies and similar tools to make the website work, remember your preferences and — only if you allow it — measure visits and the effectiveness of our advertising (for example, LinkedIn). Some cookies last only for your visit; others stay for a set period. Optional cookies are used only with the choices and consent the law requires; you can make or change your choice through the cookie banner or the cookie settings link in the footer.

To find out which cookies we use, who provides them, why, for how long and what choices you have, contact us using the details in "Contact us" below. You can also control cookies in your browser settings, but blocking essential cookies may stop parts of the site working.

When we share information

Service providers. We work with providers for hosting, IT support, business systems, communications, event management, analytics, payments and logistics. Each receives only what it needs for its task and is bound by suitable confidentiality, security and data-processing obligations.

OEMs and channel partners. We may share relevant contact and requirement details to answer your enquiry, prepare a proposal, register or fulfil an opportunity, or arrange licensing, delivery, warranty or support. A partner using the data for its own purposes may be responsible for it under its own privacy notice, and any separate promotional use by that partner needs its own lawful basis and any required notice or consent.

Group companies and professional advisers. Where necessary for a purpose described here, a relevant Iris group company, or our auditors, lawyers and other advisers, may access information under appropriate safeguards.

Legal and protective disclosures. We may disclose information when lawfully required to, or where the law permits and it is necessary to investigate fraud, protect people or property, or establish or defend legal rights.

Business transfers. If we are involved in a merger, restructuring, financing or sale of all or part of our business, relevant records may need to be disclosed or transferred. We will apply confidentiality safeguards and give any notice or obtain any consent required by law. Your privacy protections continue after any such transfer.

We may share statistics that have been aggregated or anonymised so that no individual can reasonably be identified, for reporting, planning or improving our services. Any information that can still be linked to a person continues to be treated as personal data.

Storage locations and international transfers

Information may be processed in India and, depending on the services and providers involved, outside India. Before transferring information abroad, we check the legal requirements and put appropriate contractual and security safeguards in place. All transfers remain subject to Indian law and any other applicable conditions; this policy is not a blanket consent to every transfer.

Retention and disposal

We keep personal information only as long as the stated purpose or a legal requirement needs it. How long depends on the type of record, the relationship, any open request or dispute, and relevant legal obligations. When we no longer have good reason to keep it, we delete or securely anonymise it, including through managed expiry of backups.

You can ask us for the retention periods or criteria that apply to website enquiries, marketing records, transactions and technical logs using the details in "Contact us" below. Sometimes a legal duty to keep certain records will limit a deletion request; if so, we will explain why.

Security and incident response

We apply reasonable technical and organisational safeguards suited to the information and the risks involved, including access controls and confidentiality obligations on our staff and providers. No online service can promise complete security. If you have an account with us, keep your login details private, sign out on shared devices and tell us quickly if you suspect unauthorised access.

We investigate suspected personal-data incidents, act to contain and fix them, and notify affected people and the authorities where the applicable law requires.

Your choices, requests and complaints

You can contact us to ask what information we hold about you, have it corrected or deleted, update your preferences, withdraw consent or raise a privacy concern. We will consider and respond to each request in line with the rights, conditions and exceptions that apply.

Where we rely on your consent, you can withdraw it through the relevant preference setting or by contacting us. Withdrawing doesn't affect processing that was lawful beforehand. If it means we can no longer provide something you asked for, we'll explain exactly what is affected — but we won't use it as a reason to withhold unrelated services.

Where the relevant provisions of India's Digital Personal Data Protection framework are in force and apply, your rights may include information about how your data is processed, correction and erasure, grievance redressal, and nominating another person to exercise your rights in the circumstances the law allows.

To make a request, send us your name, the email address or reference you used with us, and a short description of what you need. We may ask for reasonable verification to protect your information — please don't send identity documents unless we ask. If someone is acting on your behalf, we may ask them to show their authority.

We will acknowledge privacy complaints and reply within a reasonable time, as the law requires. If we can't do what you asked, we'll tell you why and how you can escalate. Where the law permits, and after any required internal grievance process, you may approach the relevant authority. Nothing in this policy limits your legal remedies.

Children's information

Our website and services are meant for adults acting in a business or professional capacity, not for anyone under 18. We don't knowingly collect children's personal information through them. If you think a child has given us information, please tell us so we can look into it and act. Any activity specifically involving children would need its own assessment and the safeguards the law requires, including verifiable parental consent.

External websites and services

Our website links to OEM platforms, partner websites, social media and other external services. Their operators are responsible for how they handle your information, so please read their privacy notices before sharing anything. A link doesn't mean this policy applies to that site or that Iris Global controls it.

Policy updates

We may update this policy as our activities or legal requirements change. Each version shows its effective and last-updated dates. For significant changes, we will give extra notice where appropriate or required. If a new use of your information needs consent, we will ask for it first — continuing to browse is not a substitute for that consent.

Contact us