Privacy Policy for Pest Eraser

Effective Date: July 18, 2025

Welcome to Pest Eraser. Your privacy is a cornerstone of our business philosophy. We are deeply committed to protecting the trust you place in us when you choose our services. This Privacy Policy is designed to be a comprehensive guide to how Pest Eraser ("we," "us," "our") collects, uses, processes, discloses, and safeguards your Personal Information when you visit our website (the "Site"), engage with our mobile applications, contact our customer service, or otherwise use our pest control services (collectively, the "Services").

This document aims to provide you with a clear and transparent understanding of our data practices. We want you to feel confident and informed about making decisions regarding your personal data. We encourage you to read this policy in its entirety to understand your rights and our obligations.

1 – IMPORTANT NOTICE AND YOUR CONSENT

This Privacy Notice is provided in full compliance with the prevailing data protection laws applicable in the Republic of India, most notably the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). Our practices are also informed by global data protection standards such as the General Data Protection Regulation (GDPR) to ensure a high level of privacy protection for all our clients.

By accessing our Site, using our Services, or otherwise providing your information to us, you are expressly consenting to the collection, storage, use, and disclosure of your personal information as articulated in this comprehensive policy. This consent is the primary legal basis for our processing of your data. If you do not agree with the terms and conditions outlined herein, we respectfully request that you refrain from using our Services or providing us with your personal information.

We reserve the exclusive right to amend, modify, or update this policy at any time to reflect changes in legal frameworks, technological advancements, or our business operations. When we make material changes to this policy, we will notify you through a prominent notice on our website's homepage, and where appropriate, we may also notify you directly via email. The "Last Updated" date at the top of this policy will indicate when the latest revisions were made. Your continued use of our Services after such modifications will constitute your acknowledgment and acceptance of the amended policy.

2 – HOW TO CONTACT US: OUR DATA PROTECTION OFFICER

Your questions, comments, and concerns about privacy are important to us. To ensure your inquiries are handled efficiently and with the requisite expertise, we have appointed a dedicated Grievance Officer (also serving as our Data Protection Officer) who is responsible for overseeing our compliance with this policy and applicable data protection laws. Should you wish to exercise your rights, clarify any part of this policy, or raise a concern about our handling of your data, please do not hesitate to contact us through the following channels:

• Designated Officer: Data Protection and Grievance Officer
• Email: support@pesteraser.com (Please use the subject line "Privacy Query" for faster processing)
• Phone: +91-XXXXXXXXXX (Available during standard business hours, 10:00 AM to 6:00 PM IST, Monday to Saturday)
• Mailing Address:
  Attn: Data Protection Officer
  Pest Eraser HQ
  123 Clean Street, Eco City
  India, PIN: XXXXXX

We are committed to resolving any complaints or concerns about your privacy and our collection or use of your personal information in a timely and effective manner.

3 – CATEGORIES AND TYPES OF PERSONAL DATA WE COLLECT AND WHERE WE COLLECT IT FROM

To provide you with our specialized pest control services effectively and efficiently, we collect information from various sources. The data we collect can be broadly categorized as follows:

3.1. Information You Voluntarily Provide to Us

This is personal data you knowingly and actively provide to us in the course of interacting with our Services. This occurs when you:

• Request a Quote or Inspection: When you fill out a form on our website or call us to request a quote, you provide your full name, the address of the property requiring service, your primary phone number, and your email address. You may also provide details about the nature of the pest infestation, which helps us prepare for the service.
• Book a Service: When you confirm a booking, in addition to the above, we collect billing information, which may include your billing address and payment method details (which are securely handled by our payment processors).
• Contact Customer Support: If you contact us with an inquiry or a complaint, we will collect your name, contact information, and the details of your correspondence, including any information you provide regarding the issue.
• Subscribe to Our Newsletter or Marketing Communications: When you opt-in to our mailing list, we collect your name and email address to send you updates, tips, and promotional offers.
• Participate in Surveys or Feedback Forms: From time to time, we may ask for your feedback to improve our services. Participation is voluntary, but if you choose to respond, we will collect your responses, which may be linked to your customer profile.

3.2. Information We Collect Automatically

When you navigate our Site or use our digital services, we use technology to automatically collect certain information about your device and browsing activity. This helps us understand how our customers use our services, enabling us to improve user experience and security.

• Device and Connection Information: We collect your IP address, device type (e.g., mobile, desktop), operating system, browser type and version, and screen resolution.
• Usage Data: We log information about your interactions with our Site, such as the pages you visit, the time and date of your visit, the time spent on those pages, the links you click, and the referring website from which you arrived.
• Location Data: With your explicit consent, we may collect precise geolocation data from your mobile device to assist our technicians in locating your property for a scheduled service. You can disable this feature through your device's settings at any time.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect this automated information. A detailed explanation of our use of cookies is provided in a separate section below.

3.3. Information We Collect from Third-Party Sources

In some instances, we may receive personal information about you from third parties, such as business partners or public sources, in compliance with applicable laws. For example, if you were referred to us by a partner real estate agency, they might provide us with your basic contact information with your prior permission.

4 – HOW WE USE YOUR PERSONAL DATA & OUR LEGAL BASIS FOR USING IT

We are committed to using your personal data lawfully, fairly, and transparently. Each of our data processing activities is grounded in a specific purpose and justified by a valid legal basis under Indian law. Below is a detailed breakdown of why we use your data and the legal grounds we rely upon:

Purpose of Processing	Types of Data Used	Legal Basis for Processing
To Provide and Manage Our Services This includes scheduling appointments, dispatching technicians, performing the pest control treatment, and providing follow-up support.	Name, Address, Phone Number, Email, Service Details (e.g., pest type, property size).	Performance of a Contract: This processing is essential for us to fulfill the service agreement we have with you.
To Process Transactions and Billing This involves generating invoices, processing payments, and maintaining financial records.	Name, Billing Address, Payment Information, Transaction History.	Performance of a Contract and Compliance with a Legal Obligation (e.g., tax and accounting laws).
To Communicate With You Sending service reminders, responding to your inquiries, providing status updates on your service, and sending important notices about our services or policies.	Name, Email Address, Phone Number, Correspondence History.	Performance of a Contract and our Legitimate Interest in maintaining good customer relations.
For Marketing and Promotions Sending you newsletters, special offers, and information about new services that may interest you.	Name, Email Address, Service History, Location.	Your Explicit Consent. You can withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To Improve Our Website and Services Analyzing usage data to understand user behavior, identify areas for improvement, troubleshoot technical issues, and develop new features and services.	IP Address, Device Information, Usage Data, Cookies, Feedback.	Our Legitimate Interest in enhancing our business operations and providing a better user experience.
To Ensure Security and Prevent Fraud Monitoring our systems for suspicious activity, verifying identity, and protecting our company and customers from fraudulent or illegal activities.	IP Address, Device Information, Payment Information, Account Activity.	Our Legitimate Interest in protecting our assets and our customers, and in some cases, Compliance with a Legal Obligation.
To Comply with Legal and Regulatory Obligations Responding to lawful requests from government or law enforcement, complying with court orders, and fulfilling our statutory reporting requirements.	Any data required by the specific legal request.	Compliance with a Legal Obligation.

5 – WHO RECEIVES YOUR PERSONAL DATA

We do not sell your personal data. We only share your information with trusted third parties under specific circumstances and with appropriate safeguards in place. Your data may be shared with:

• Our Employees and Authorized Contractors: Our technicians and customer service staff have access to your information on a "need-to-know" basis to perform their duties. They are all bound by strict confidentiality agreements and trained in data protection.
• Third-Party Service Providers (Data Processors): We engage other companies to perform functions on our behalf. This includes payment processors (e.g., Razorpay, Stripe) for secure payment handling, cloud hosting providers (e.g., AWS, Google Cloud) for data storage, email delivery services for communications, and analytics providers (e.g., Google Analytics) to help us understand site usage. These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.
• Marketing Partners: If, and only if, you have given us your explicit consent, we may share your information (such as your email address) with trusted marketing partners whose services we believe might be of interest to you. You can opt-out of this sharing at any time.
• Government Authorities and Law Enforcement: We may disclose your personal data if we are required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal proceeding, a court order, or a legal request from a government or law enforcement agency.
• Professional Advisors: We may share your information with our lawyers, accountants, and other professional advisors in the course of the services they provide to us, under a duty of confidentiality.
• In Case of a Business Transfer: If Pest Eraser is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

6 – INTERNATIONAL TRANSFERS OF PERSONAL DATA

Our primary business operations are located in India, and your data is predominantly stored and processed on servers within India. However, the global nature of technology means that in some limited circumstances, we may need to transfer your personal data to countries outside of India. This typically occurs when we use service providers whose servers are located abroad, such as for cloud hosting or email services.

When we transfer your data internationally, we take stringent steps to ensure that your information receives a level of protection that is consistent with Indian law. We will only transfer your data if:

• The destination country is deemed to provide an adequate level of data protection by the relevant authorities.
• We have put in place appropriate safeguards, such as entering into Standard Contractual Clauses (SCCs) with the recipient, which contractually obligate them to protect your data to the standards required within India.
• The transfer is necessary for the performance of our contract with you, or it is based on your explicit consent.

7 – DATA SECURITY AND RETENTION

7.1 How We Look After Your Personal Data

We take the security of your personal data extremely seriously. We have implemented a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) technology to encrypt data during transmission. Sensitive information stored on our servers is also encrypted at rest.
• Access Controls: Access to personal data is strictly limited to authorized personnel who have a legitimate business need for it. We use role-based access controls to enforce this principle.
• Regular Security Audits: We conduct periodic vulnerability scanning and penetration testing of our systems to identify and remediate potential security weaknesses.
• Employee Training: All our employees undergo regular data protection and security training to ensure they understand their responsibilities.
• Incident Response Plan: We have a documented plan to respond to and manage any potential data security incidents.

7.2 How Long We Store Your Personal Data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected. Our data retention periods are determined by the nature of the data and the legal, regulatory, and business requirements. For example:

• Customer Service and Warranty Data: Information related to your service, including your name, address, and service details, is retained for up to 5 years after your last service. This allows us to handle any warranty claims, respond to disputes, and analyze service effectiveness.
• Payment and Billing Records: In compliance with Indian tax and company laws, we retain financial records, including invoices and payment data, for a period of 7 years.
• Marketing Data: If you have subscribed to our marketing communications, we will retain your contact information until you choose to unsubscribe. We conduct periodic reviews to remove inactive contacts.
• Website Analytics Data: Anonymized or pseudonymized data used for analytics is typically retained for a period of 26 months.

Once the retention period expires, we will securely and permanently delete or anonymize your personal data so that it can no longer be associated with you.

8 – CONTRACTUAL OR STATUTORY REQUIREMENTS ON YOU TO PROVIDE PERSONAL DATA

In most cases, the personal information you provide is necessary to enter into and perform a contract with us. For instance, to provide you with pest control services, we contractually require your name, contact details, and the address of the service location. Without this information, we are simply unable to schedule a visit or perform the service.

Similarly, certain information is required to comply with statutory obligations. For example, we are legally required to collect information for invoicing and tax purposes. Failure to provide this data may prevent us from completing your transaction. We will always inform you at the point of collection whether the provision of certain data is mandatory and what the consequences of not providing it are.

9 – YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA

Under Indian data protection law, you have several important rights regarding your personal information. We are committed to upholding these rights. You have the right to:

• Access Your Personal Data: You can request a copy of the personal information we hold about you and details about how we are processing it.
• Request Correction (Rectification): If you believe any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Request Deletion (Erasure): You can request that we delete your personal data from our systems. Please note that this right is not absolute and may be subject to legal or regulatory exceptions (e.g., we cannot delete financial records before the statutory retention period has expired).
• Withdraw Your Consent: Where our processing of your data is based on your consent (e.g., for marketing), you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.
• Object to or Restrict Processing: You have the right to object to our processing of your data where we are relying on a legitimate interest as our legal basis. You also have the right to request a restriction on processing in certain circumstances, such as if you are contesting the accuracy of the data.
• Lodge a Complaint: You have the right to file a complaint with the relevant data protection authority in India if you believe that we have not complied with data protection laws. We would, however, appreciate the chance to deal with your concerns first.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 2.

10 – LINKS TO OTHER WEBSITES

Our Site may contain links to third-party websites, plug-ins, or applications that are not owned or controlled by Pest Eraser. This Privacy Policy does not apply to those external sites. Clicking on those links may allow third parties to collect or share data about you. We are not responsible for the privacy practices or the content of these other websites. We strongly encourage you to review the privacy statements of every website you visit to understand how they collect and use your information.

11 – PRIVACY BY DESIGN AND BY DEFAULT

We are committed to the principles of "Privacy by Design" and "Privacy by Default." This means we proactively embed data protection into the design and architecture of our systems and business practices. We conduct Data Protection Impact Assessments (DPIAs) for new projects that involve processing personal data to identify and mitigate risks. By default, we aim to collect only the minimum amount of personal data necessary to achieve a specific purpose (data minimization) and to apply the highest privacy settings automatically.

12 – COOKIES AND SIMILAR TRACKING TECHNOLOGIES

We use cookies and similar technologies like web beacons to enhance your user experience, analyze site traffic, and deliver our services. A cookie is a small text file that is stored on your device when you visit a website.

Types of Cookies We Use:

• Strictly Necessary Cookies: These are essential for you to navigate our website and use its features, such as accessing secure areas or making a booking. Without these cookies, our services cannot be provided.
• Performance and Analytics Cookies: These cookies collect information about how you use our website, such as which pages you visit most often. This data helps us improve how our website works. We use Google Analytics for this purpose.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your username or region) and provide enhanced, more personal features.
• Targeting or Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see an ad and to help measure the effectiveness of advertising campaigns.

Managing Your Cookie Preferences:

You can control and manage cookies in various ways. Most web browsers allow you to accept, reject, or delete cookies through their settings. Please note that if you disable cookies, some features of our Site may not function properly.

13 – CHILDREN’S PRIVACY

Our services are not intended for or directed at individuals under the age of 18 ("Children"). We do not knowingly collect personal information from children. If you are a parent or guardian and you become aware that your child has provided us with personal data without your consent, please contact us immediately. If we discover that we have inadvertently collected personal data from a child, we will take steps to delete that information from our servers as quickly as possible.

14 – DATA BREACH NOTIFICATION

In the unlikely event of a data breach that compromises your personal information, we have a response plan in place. We will take immediate steps to contain and assess the breach. If the breach is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authorities without undue delay, in accordance with applicable law. The notification will describe the nature of the breach, the likely consequences, and the measures we have taken to address it.

15 – CHANGES TO THIS PRIVACY POLICY

As our company evolves and the legal landscape changes, we may need to update this Privacy Policy. We will post any changes on this page and, for significant changes, we will provide a more prominent notice. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Last updated: July 18, 2025