Hereafter Pvt. Ltd., of which Surrogate is one of the divisions, prioritizes your privacy. When you use the products or services offered by Hereafter, we will handle and process your personal data in accordance with the terms of this privacy notice.
This privacy notice covers how we handle any personal information we get about you either from you or from a third party as well as the reasons we use it. It also outlines your legal rights in relation to how we may use your personal information.
We may gather personal information about you as you conduct business, including when you use our applications and services and when you get in touch with us or ask for information.
This privacy statement seeks to inform you of how Surrogate collects and uses your personal information. In order to completely understand how and why we are using your data, it is crucial that you read this privacy policy as well as any other privacy policies or fair processing notices we may offer on specific occasions when we are collecting or processing personal data about you. The purpose of this privacy statement is to enhance the existing notices; it is not meant to replace them.
Your personal information is under the responsibility and supervision of Surrogate (also referred to as “Surrogate,” “we,” “us,” or “our” in this privacy statement).
A data protection officer (DPO) that we have selected is in charge of managing inquiries regarding this privacy policy. Contact the DPO using the information provided below if you have any inquiries regarding this privacy statement or if you would want to request the exercise of any of your legal rights.
Suvajeet Duttagupta
Hereafter Pvt. Ltd
suvajeet@hasdesk.com
It is crucial that the personal information we have on you is accurate and up to date. If your personal information changes throughout your partnership with us, kindly let us know.
Links to third-party websites, plug-ins, and apps may be found on Surrogate. It’s possible for third parties to gather or share information about you if you click on those links or enable those connections. These third-party websites are not under our control, and their privacy policies are not our responsibility. We advise reading the privacy policies of any website you visit after leaving ours.
Any information that can be used to identify an individual is referred to as personal data or personal information. It excludes information in which the identity has been obscured (anonymous data).
Various types of personal information about you that we may collect, use, store, and transmit are categorised together as follows:
Identity data includes first name, last name, prefix, company/organisation/institution name, role / title, username or similar identifier, title, date of birth, gender, height, time zone and current location
Contact data includes email address and business contact email address.
Transaction data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile data includes your username and password, orders made by you, your interests, preferences, feedback and survey responses.
Usage data includes information about how you use our website, products and services.
Marketing and communications data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
In cases where we are required by law or by the terms of a contract we have with you to collect personal data, and you refuse to supply that data when requested, we might not be able to carry out the contract we currently have with you or are attempting to enter into with you (for example, to provide you with products or services). In this situation, we might need to cancel a product or service you have with us, but we’ll let you know right away if that’s the case.
We use different methods to collect data from and about you including through:
Direct interactions. You may give us your data by filling in forms or by corresponding with us by call, email or otherwise. This includes personal data you provide when you:
1) Apply for our products or services
2) Create an account
3) Subscribe to our service
4) Give us some feedback.
Automated technologies or interactions. We may automatically gather technical data about your device, browsing actions, and habits when you engage with our website. Cookies, server logs, and other similar technologies are used by us to gather this personal data. If you visit other websites that use our cookies, we might also learn technical information about you from those visits. For more information, read our cookie policy below.
We will only use your personal information if it is legal for us to do so. In the following situations, where there is a legal basis for processing your personal data, we will most frequently utilize your data:
We use your personal data for the purposes listed below. Whenever we process your personal data, we do so on the basis of a lawful “justification” (or lawful basis) for processing, which we have identified in the table below.
| Purpose for processing | Lawful basis |
1 | To register you as a user | This processing is necessary to perform the contract between you and Surrogate. |
2 | To manage your personal account. | This processing is necessary to perform the contract between you and Surrogate. |
3 | To respond to your queries. | This processing is based on our legitimate interest in communicating with our customers and/or users of our applications and websites. |
4 | To comply with any applicable law, court order, other judicial process, or the requirements of a regulator. | This processing is necessary to comply with our legal obligations. |
5 | To enforce our agreements with you. | We consider that we have a legitimate interest in ensuring that our contracts are performed correctly and in defending our rights where necessary. |
6 | To enforce our legal rights and obligations, and for any purposes in connection with any legal claims made by, against or otherwise involving you. | We consider that we have a legitimate interest in protecting our organization from breaches of legal obligations owed to it and to defend itself from litigation. |
7 | To protect the rights of third parties. | This processing is necessary for the compliance with legal obligations to which Surrogate is subject. This processing is also necessary for the purpose of the legitimate interests pursued by Surrogate. We consider that we have a legitimate interest in ensuring our activities do not violate any third parties’ rights. |
Marketing
We work hard to provide you with options when it comes to how your personal data is used, especially for marketing and advertising.
Promotional offers from us
We may make assumptions about what you might need or want or find interesting based on your identity, contact, technical, usage, and profile data. This is how we determine which products, services, and deals would be appropriate for you and your business (we call this marketing).
If you have requested information from us, purchased services from us, or given us your contact information and have not chosen to opt out of getting marketing emails from us, you will receive those communications.
Third-party marketing
Before disclosing your personal information to any business outside Hereafter Pvt. Ltd. for marketing purposes, we will first obtain your explicit opt-in authorization.
Opting out
By logging into the website and using the products & services, you can change your marketing preferences by ticking or unchecking the appropriate boxes. You can also follow the opt-out instructions on any marketing message we send you, or you can contact us at any time.
The personal information that you give us as a result of a product/service purchase, registration, product/service experience, or other transactions will not be affected if you choose not to receive these marketing messages.
Cookies
You can configure your browser to inform you when websites access or set cookies, or to reject all or some browser cookies. Please be aware that some portions of our website may become inaccessible or malfunction if you disable or reject cookies. Please refer to the Surrogate cookies policy below for more details regarding the cookies we use.
Change of purpose
Unless we reasonably believe that we need to use your personal data for another reason that is compatible with the original purpose, we will only use it for those purposes for which we collected it. Please get in touch with us if you’d like further information about how the processing for the new purpose is consistent with the original purpose.
If we need to use your personal information for a different reason, we will let you know and explain the legal justification for doing so.
Please take note that, when necessary or permitted by law, we may process your personal data without your knowledge or consent and in accordance with the aforementioned guidelines.
It is possible for the user to delete their data at any time, here are the steps to do so
For the purposes outlined in the table above under ‘For what purposes we are processing that data‘, we could be required to disclose your personal information with the parties listed below:
All third parties must adhere to the law and respect the security of your personal data, as required by us. We only permit our third-party service providers to process your personal data for those reasons and in line with our instructions. We do not authorize them to use your personal data for their own purposes.
Your personal information will only be kept by us for as long as it’s required to accomplish the reasons for which it was originally obtained, including to meet any reporting or legal obligations.
The quantity, nature, and sensitivity of the data, the risk of harm from unauthorized use or disclosure, the purposes for which we process the data, including whether those purposes can be met by other means, and the applicable legal requirements are all taken into account when determining the right retention period for personal data.
You may ask us to delete your data in certain situations; for more details, see “request erasure” below.
For research or statistical purposes, we may in some cases anonymize your personal information (making it impossible to link it back to you); in such cases, we may continue to use this information without further informing you.
We have put in place the necessary security measures to guard against the unintentional loss, alteration, disclosure, or use of your personal information. Additionally, we only allow employees and other third parties that need to know for work-related purposes access to your personal information. They have a confidentiality obligation and will only act in accordance with our instructions while processing your personal data.
When we are legally obligated to do so, we will notify you and any relevant regulator of a breach and will have procedures in place to deal with any suspected personal data breach.
You may be entitled to various protections under data protection regulations with regard to your personal information (further details of each of these are provided below).
In order to verify your identity and establish that you have the right to access your personal data, we might need to ask you for certain information (or to exercise any of your other rights). This is a security safeguard to make sure that personal information is not given to someone who shouldn’t have access to it. In order to respond to your request more quickly, we might possibly get in touch with you and ask you for more details.
We make an effort to respond to all valid inquiries within a month. Occasionally, if your request is exceptionally complicated or you have made several requests, it can take us more than a month. In this scenario, we’ll let you know and keep you informed.
Lawful basis
Legitimate interest refers to our company’s desire to run and manage our operations in a way that will provide you with the finest service/product and the best and most secure experience. Before we use your personal data for our legitimate interests, we make sure we weigh all of the potential effects both good and bad on you and your rights. We don’t use your personal information for things where the impact on you would be greater than our interests (unless we have your consent or are otherwise required or permitted to by law). By getting in touch with us, you can learn more about how we weigh our legitimate interests against any possible effects on you with regard to particular activities.
Contract performance refers to using your data to carry out a contract to which you are a party or to take action at your request prior to entering into a contract.
Processing your personal data in order to comply with a legal or regulatory requirement means that we must do so in order to fulfill a duty to which we are subject.
Third parties