Privacy Policy

1 Who we are

This website, www.genoraworkspace.com, is run by Genora Workspace (trading as GENORA Work Space), a coworking space at 3rd Floor, 256, Srinivasa Spaces, Kandasamy Layout, Papanaicken Palayam, near Lakshmi Mills bus stop, Coimbatore - 641037 (“GENORA”, “we”, “us”).

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for the personal data described here. This policy explains what we collect, why, who sees it, how long we keep it and what you can do about it. It should be read together with our Terms of Use.

2 What personal data we collect

We collect only what we need for the service you ask for.

Please do not put anything sensitive (health, financial account or government ID details) in the notes boxes. We do not need it.

3 Why we use it

We use your personal data only for these purposes:

• to verify your email, create and manage your booking, hold and confirm your seat or room, and let you view or cancel it;
• to take payment and give refunds through our payment gateway, including a full refund if we have to cancel a paid booking (for example because of a power failure, heavy rain or another event that makes the space unusable);
• to issue GST tax invoices and credit notes and keep our accounts, as the law requires;
• to send service emails: your code, booking confirmation, changes, cancellation and invoice;
• to call, message or email you about your booking, tour or enquiry, including to tell you quickly if we must cancel or reschedule it;
• to answer your questions and follow up on enquiries you made;
• to keep the website and our premises secure, prevent fraud, abuse and fake bookings, and fix faults, including CCTV to protect people and property and to look into incidents, theft or damage;
• to understand overall demand (for example how many bookings in a month) using totals, not your personal profile;
• to meet our legal duties and to protect or enforce our rights if there is a dispute.

We do not sell your personal data, and we do not use it for advertising profiles or automated decisions about you.

4 Your consent

When you tick the box on a booking form, you agree to this policy and give us your consent to process your data for the purposes above. We also process data that you voluntarily give us for a purpose you asked for (such as an enquiry) and data we must keep to follow the law (such as tax records).

You can withdraw consent at any time by writing to us (see “Your rights”). Withdrawing does not affect what we did before, and it may mean we can no longer provide a booking or service that needs the data. Some records must be kept even after you withdraw, because the law requires it.

5 Who we share it with

Only people and companies that help us serve you, and only what they need:

Where we use a service provider to process data for us, we expect it to keep the data secure and use it only for our purposes.

6 Cookies and similar technology

• Essential cookie. We use one session cookie to keep your booking steps together and protect forms from misuse (a security token). It is needed for the booking to work and is deleted when you close your browser or shortly after.
• Website analytics. We use Google Analytics to count visits and see which pages and services people use, so we can improve the site. It sets cookies on your device and collects anonymised usage data (pages viewed, device type, approximate city, how you reached us). We do not use it to identify you, we do not collect your name, phone or email in it, and we do not use advertising or social-media tracking pixels. You can stop it by blocking cookies in your browser or by using Google’s opt-out add-on (tools.google.com/dlpage/gaoptout).
• Third-party content. Google Fonts, the Google map and YouTube videos are loaded from those companies and may set their own cookies or collect your IP address. You can block them in your browser settings; the site still works.
• Payment page. Razorpay’s checkout may use its own cookies and device checks for fraud prevention.

7 Emails, calls and messages

We use your email and mobile number to run your booking: codes, confirmations, changes, cancellations, invoices and, for requests that need our approval, a call or message to confirm. We do not send marketing emails or messages unless you separately agree to it, and every such message would carry a way to opt out.

Emails you receive from us come from info@genoraworkspace.com. We will never ask you for your card details, UPI PIN or OTP by email, call or message. If someone does so in our name, please tell us.

8 How long we keep it

• Bookings, invoices, payment and refund records: as long as tax, accounting and other laws require. For GST and accounting records this is generally several years (at least six).
• Enquiries and tour requests that do not become a booking: up to 2 years after our last contact with you, then deleted or anonymised.
• Verification codes: expire after 10 minutes; bookings that are never verified simply expire and are not acted on.
• CCTV recordings: normally about 30 days, then overwritten, unless we need to keep a recording to look into an incident or the law or the police ask us to.
• Server logs: a limited period set by our hosting provider, for security.

When we no longer need data and the law does not require us to keep it, we delete or anonymise it.

9 How we protect it

We take reasonable security steps to protect your data, including:

• encrypted (HTTPS) connections on the live website;
• verification codes stored only in hashed form, and booking links that use private tokens;
• payments handled by a PCI-DSS compliant gateway, so card details never touch our servers;
• limited, password-protected staff access to booking and customer records;
• limits on repeated attempts and requests to stop automated abuse.

No system is perfectly secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

10 Your rights

Under the DPDP Act you have the right to:

• know what personal data of yours we process, and with whom we have shared it;
• correct, complete or update your data;
• erase your data, when it is no longer needed for the purpose or you withdraw consent (unless the law requires us to keep it);
• withdraw your consent at any time;
• get your grievance resolved by us, and to complain to the Data Protection Board of India if you are not satisfied;
• nominate another person to exercise these rights for you if you die or become unable to.

To use any of these, email info@genoraworkspace.com or call us, from the email address or mobile number you used with us, and tell us your booking reference if you have one. We may ask for a little information to confirm it is you. We aim to reply within 7 days and to complete your request within 30 days, except where we must keep data by law, in which case we will tell you why.

11 Children

Our services are for adults. We do not knowingly collect personal data of anyone under 18 years of age. If you think a child has given us their data, please contact us and we will delete it. Bookings for minors must be made by a parent or guardian, who must give consent on the minor’s behalf.

12 Where your data is processed

Our website and booking records are hosted with our hosting provider, whose servers may be outside India (currently in Singapore). Zoho Books runs on its India data centre and Razorpay processes payments in India. Google services (fonts, maps, YouTube) may process data outside India. We transfer personal data outside India only to countries and in ways the DPDP Act permits, and we keep it protected by the measures described in this policy.

13 Links to other sites

Our pages link to our social media pages (YouTube, Instagram, Facebook) and to other websites. These open in a new tab and have their own privacy policies. We are not responsible for how they handle your data.

14 Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last changed. If a change is significant, we will tell you on the website or by email. Using our services after an update means you accept it, but where the law requires fresh consent we will ask for it.

15 Contact and grievances

For any question, request or complaint about your personal data, please contact our Grievance Officer. We acknowledge complaints within 48 hours and aim to resolve them within one month.

If we do not resolve your concern, you may complain to the Data Protection Board of India, as provided in the DPDP Act, 2023.