At MESCIUS Technologies India Private Limited (“MESCIUS”, “Company”, “we”, “us”, or “our”), we value the trust you place in us. Protecting your personal data and respecting your privacy are fundamental to how we conduct our business. We are committed to handling your information responsibly, transparently, and securely.

This Privacy Policy (“Policy”) describes how MESCIUS Technologies India Private Limited, a company incorporated under the laws of India, having its registered office at Unit No. 882, 8th floor, Office Block B, High Street, Vegas Mall, Sector 14, Dwarka, New Delhi, India - 110075 (“Company”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects personal data of visitors and users (“you” or “User”) in connection with its website at https://www.mescius.in/ (“Website”) and is intended to align with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and other applicable laws of India, as and when applicable.

By accessing or using our Website or Services, you agree to the collection and use of your personal data as described in this Policy. If you do not agree with this Policy, please do not access or use the Website or Services any further.

The personal data that we collect depends on how you interact with our Website and Services which is categorized and includes the following:

We process your personal data for the following purposes in compliance with the applicable laws. We will not use your personal information beyond the scope necessary to achieve the purposes specified here without your permission:

• To receive, review, evaluate, manage and respond to enquiries and communications submitted through the contact form, including by sharing such enquiries with relevant MESCIUS group personnel where reasonably necessary to address the enquiry.
• To send marketing communications about new products, features, or offers, where you have consented to receive them.
• To improve the Website and user experience, including through third party analysis software.
• To detect, prevent, and address fraud, security incidents, or misuse of the Website or Services.

Where the purpose above is based on your consent, you may decline or withdraw that consent without affecting purposes that rely on any different legal basis.

Providing personal data is voluntary. However, if you choose not to provide certain information that we request, we may be unable to respond to your inquiries, provide requested services, or otherwise fulfil the purposes described in this Policy. Where we rely on your consent to process personal data, we will obtain your free, specific and informed consent in accordance with applicable laws.

You may withdraw your consent at any time by contacting us using the details in “Contact Us” section below. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal, however, may affect our ability to continue providing certain Services to you.

We use cookies and similar tracking technologies to ensure the proper functioning, security, and performance of our Website, as well as to better understand how visitors interact with our Website and Services. The cookies we use may include:

• Strictly Necessary Cookies – essential for the operation, functionality, and security of the Website.
• Analytics Cookies – used to collect aggregated information about Website usage and performance, helping us improve user experience and enhance our Services.

We may engage trusted third-party analytics providers, such as Google Analytics, to assist us in understanding Website usage. The information collected through these technologies does not directly identify you but helps us analyze trends and improve our Website. The information collected, stored, and analyzed by these services is managed based on the privacy policies established by the service providers.

You can manage or disable cookies through your browser settings or any cookie preference tools we may make available.

Please note that disabling certain cookies may affect the availability or functionality of some features of the Website.

We do not sell, rent or otherwise disclose your personal data to any third parties for their independent marketing purposes. We may share personal data with the following categories of recipients where necessary for the purposes described in this policy:

• Service Providers – including providers of cloud hosting, email, communication, analytics and information technology services (such as Microsoft 365) that assist us in operating the Website, processing enquiries, managing communications, and storing data.
• Analytics Providers – including Google Analytics, which helps us understand how visitors interact with our Website, improve its performance, and enhance user experience.
• Professional Advisors –including auditors, legal advisors, and other professional advisors engaged by the Company, to the extent their involvement is reasonably necessary for the Company’s legal, regulatory, audit, compliance or legitimate business requirements, and subject to applicable law.
• Regulators, law enforcement agencies, or courts where required to comply with applicable law, legal process, or to protect our rights, property, or safety, or that of others.
• A successor entity in connection with a merger, acquisition, reorganisation, or sale of business assets, subject to that entity agreeing to protect personal data consistently with this Policy.
• MESCIUS Group Companies – including MESCIUS inc. and other group companies, where reasonably necessary to respond to your enquiries, or for any other legitimate internal business purposes consistent with this Policy.

We seek to ensure that personal data shared with third parties is protected through contractual or other appropriate safeguards, where required by applicable law.

We do not share the following with third parties, except where legally required:

• Government-issued identity data, for any purpose beyond verification required by law;
• Payment or financial account information as the Website does not process payments and does not collect any such data;
• Personal data with data brokers or aggregators for their independent commercial use.

Your personal data may be stored, processed, or accessed in countries outside India, including Japan, by us or our affiliated MESCIUS group companies, trusted service providers, including providers of cloud hosting, communication, and technology services . Where personal data is transferred outside India, we will comply with applicable data protection laws, including the Digital Personal Data Protection Act, 2023, and any restrictions or requirements prescribed by the Government of India. We will take reasonable measures to ensure that personal data transferred internationally is appropriately protected against unauthorised access, misuse, loss or disclosure.

Personal data may be accessed by authorized personnel of MESCIUS and its affiliated group companies, outside India, on a need-to-know basis for the purposes described in this Policy

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected and processed, or for such longer period as may be required or permitted under applicable law. The duration for which personal data is retained depends on factors such as the nature of the data, the purpose of processing, our legal and regulatory obligations, and the need to establish, exercise, or defend legal claims. Once personal data is no longer required for the relevant purpose, we will securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and our internal retention practices.

You may request deletion of your personal data. However, in accordance with applicable law, we may retain certain information where necessary to comply with legal obligations, resolve disputes, enforce our agreements, or protect our legitimate rights and interests.

We maintain reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction, in accordance with applicable law. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Personal data transmitted to and stored in Microsoft 365 is protected by Microsoft's encryption in transit and at rest, in accordance with Microsoft's applicable security standards for its Online Services. You may access Microsoft 365’s data security procedure at https://www.microsoft.com/en-in/trust-center/privacy for reference.

In the event of a personal data breach, we will notify affected individuals and report the incident to the competent authorities to the extent, in the manner, and within the timelines required under applicable law.

Our Website and Services are neither intended nor designed for children. We do not knowingly collect personal data from individuals below the age of 18 years. If we become aware that such data has been submitted to us without the required parental control, supervision or consent, we will promptly delete it.

We believe that you should have meaningful control over your personal data. Subject to applicable law, Digital Personal Data Protection Act, 2023, you may exercise the following rights in relation to your personal data:

• Right to access information: You may request information about the personal data we hold about you, including how it is being used and shared.
• Right to correction: You may request that inaccurate, incomplete, or outdated personal data be corrected, updated or deleted.
• Right to erasure of personal data: You may request the deletion of your personal data at your desire, subject to our legal and regulatory obligations.
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw that consent at any time. Such withdrawal will not affect the lawfulness of processing undertaken before the withdrawal.

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We may take reasonable steps to verify your identity before responding to your request. We will address all requests in accordance with applicable law and may decline a request where an exception or legal obligation applies.

We are committed to addressing any questions, concerns, or complaints relating to this Privacy Policy or our processing of personal data in a fair, transparent, and timely manner. In accordance with applicable law, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000 and the rules made thereunder, you may contact our Grievance Officer using the details below:

We aim to acknowledge grievances within 7 days and resolve them within 30 days of receipt, in accordance with applicable law.

Where necessary, we may request additional information to verify your identity and facilitate the resolution of your request. If you are not satisfied with our response, you may have the right to seek further remedies or lodge a complaint with the Data Protection Board of India or any other competent authority, in accordance with applicable law.

The Website may contain links to third-party websites, plug-ins, or services not operated by us. This Policy does not apply to such third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

We may amend or update this Policy from time to time to reflect changes in applicable law, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the rules, regulations, and guidelines issued thereunder, as well as changes to our services or business practices. Any revised Policy will be posted on the Website with an updated “Last Updated” date and where required by applicable law or deemed appropriate by us, we may provide additional notice of material changes. Your continued access to or use of the Website after the revised Policy becomes effective shall constitute your acceptance of such changes.

This Policy shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Delhi, India.

If you have any questions about this Policy, please contact us at:

MESCIUS Technologies India Private Limited
Address: COWRKS Aerocity, Ground Floor and First Floor, Worldmark 1, Asset Area 11, Aerocity, Hospitality District, Indira Gandhi International Airport, Delhi 110037, India
Contact: Please submit your inquiry through the Contact Us form on our Website.