GSK Associates ("GSK Associates", "we", "us" or "our") respects your privacy and is committed to protecting personal data entrusted to us.

This Privacy Policy describes our approach to the collection and processing of personal data through our website, forms, electronic communications and other interactions with you.

GSK Associates is a legal and professional services organisation operating from India. For personal data processed in connection with this website and our interactions with individuals, GSK Associates may act as the relevant Data Fiduciary or otherwise process data in accordance with applicable law and contractual arrangements.

The exact role of GSK Associates in relation to particular personal data may depend on the nature and purpose of the processing.

Depending on how you interact with us, we may collect information such as:

Personal data may be obtained directly from you or generated through your interaction with our website.

• When you contact us by email, telephone or other communication channels.
• When you submit an enquiry, contact form or other online form.
• When you request information or services from us.
• When you visit or interact with our website.
• From service providers operating technology or communication services on our behalf.
• From other lawful sources where permitted under applicable law.

We may process personal data for legitimate and lawful purposes, including the following:

Where consent is required under applicable law, we will seek consent through an appropriate notice or mechanism. Consent requests should be presented in a manner that is clear and reasonably understandable.

Where applicable, you may withdraw consent by contacting us using the details provided in this Policy. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

Certain processing may be undertaken where permitted or required by applicable law, including processing necessary for specified lawful purposes.

We do not intend to sell personal data. We may disclose personal data where reasonably necessary for the purposes described in this Policy and where permitted by applicable law.

Recipients may include:

• Technology, hosting, website and IT service providers.
• Professional advisers and service providers assisting our operations.
• Communication, analytics or security service providers, where applicable.
• Government authorities, courts, regulators or law enforcement agencies where required or permitted.
• Other persons where disclosure is authorised by you or otherwise permitted by applicable law.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain records, resolve disputes, comply with legal obligations and protect our legitimate interests.

Retention periods may vary depending on the type of data, the purpose of processing, applicable professional obligations and statutory or regulatory requirements.

We take reasonable security safeguards appropriate to the nature of personal data and the risks associated with its processing.

Depending on the applicable environment, these measures may include:

• Access controls and authentication measures.
• Secure hosting and network protections.
• Administrative and organisational controls.
• Appropriate confidentiality obligations.
• Monitoring and incident-management procedures.
• Regular review of relevant security practices.

No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore encourage you to take appropriate precautions when communicating sensitive information online.

Subject to applicable law and any conditions or limitations prescribed by law, individuals may have rights in relation to their personal data.

If you have a concern, complaint or grievance regarding the processing of your personal data, you may contact our designated grievance contact using the details below.

Our website may use cookies and similar technologies to enable website functionality, understand website usage, maintain security and improve the user experience.

Types of technologies that may be used

• Essential technologies required for core website functionality.
• Analytics technologies used to understand website traffic and usage, where enabled.
• Preference technologies used to remember certain settings.

You can manage certain cookie preferences through your browser settings or any cookie-consent mechanism made available on our website.

Our services and website are not generally directed toward children. Where processing involves personal data of a child, we will take the measures required under applicable data protection law.

If you believe that personal data relating to a child has been provided to us in circumstances that should not have occurred, please contact us so that we can review the matter and take appropriate action.

Some of our technology or service providers may process personal data from locations outside the place where you access our website.

Where personal data is transferred or made accessible outside India, we will take steps appropriate to the applicable legal requirements, including restrictions or safeguards that may apply to such transfers.

Third-party websites or services linked from our website may have their own privacy policies. We encourage you to review those policies before providing personal data to them.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.

The updated version will be published on this page with its revised "Last Updated" date. Where required by applicable law, we will provide additional notice or seek consent for material changes.

For questions regarding this Privacy Policy, requests relating to your personal data, or privacy and data protection concerns, please contact GSK Associates.