Home About Terms Privacy
Gonardiya / Document

Privacy Policy

Privacy Policy governing the collection, use, storage, protection and processing of information.

Origin Heritage Continuity

Privacy Policy

Effective Date: 24 September 2026

This Privacy Policy explains how Gondariya (“Gondariya”, “we”, “us”, or “our”) collects, uses, stores, protects, and otherwise processes information relating to users of our services, applications, websites, digital platforms, and related features (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on how you use the Services, we may collect the following categories of information:

1.1 Information You Provide

You may provide information directly to us, including:

  • Name and other identifying information.
  • Account credentials and authentication information.
  • Information included in profiles, submissions, forms, applications, or other content you voluntarily provide.
  • Information provided when you communicate with us through features made available within the Services.
  • Preferences, settings, and other information associated with your use of the Services.

1.2 Information Collected Automatically

When you use the Services, certain information may be collected automatically, including:

  • IP address and approximate network information.
  • Device type, operating system, browser type, and application information.
  • Language, time-zone, and general configuration information.
  • Usage activity, pages or features accessed, interaction timestamps, and diagnostic information.
  • Cookies, local storage, session identifiers, and similar technologies where used.

1.3 Information from Third Parties

Where permitted by law and necessary for providing the Services, we may receive information from third-party service providers, authentication providers, infrastructure providers, analytics providers, security services, or other sources.

2. How We Use Information

We may use information for purposes including:

  • Providing, operating, maintaining, and improving the Services.
  • Creating and managing user accounts and authentication.
  • Processing requests, submissions, transactions, or other activities initiated by users.
  • Personalising features and user experience.
  • Detecting, preventing, investigating, and addressing fraud, abuse, security incidents, and technical problems.
  • Monitoring system performance and reliability.
  • Conducting analytics and developing new features and services.
  • Complying with legal obligations and responding to lawful requests.
  • Protecting the rights, property, safety, and security of Gondariya, our users, and other persons.
  • Enforcing applicable terms, policies, and agreements.

We will use personal information only for legitimate and reasonably necessary purposes consistent with the nature of the Services and applicable law.

3. Cookies and Similar Technologies

The Services may use cookies and similar technologies to:

  • Keep users signed in and maintain sessions.
  • Remember preferences and settings.
  • Understand usage and performance.
  • Maintain security.
  • Improve functionality and user experience.

Where required, choices regarding optional cookies or similar technologies will be presented through appropriate controls.

Disabling certain technologies may affect the functionality of some parts of the Services.

4. Information Sharing and Disclosure

We do not sell personal information as a general business practice.

We may share information where reasonably necessary with:

  • Service providers and processors supporting hosting, infrastructure, security, analytics, communications, storage, payments, authentication, or other operational functions.
  • Professional advisers, auditors, insurers, or other persons who need the information for legitimate professional purposes.
  • Government authorities, courts, regulators, law-enforcement agencies, or other authorised entities where disclosure is required or permitted by law.
  • Parties involved in a merger, acquisition, restructuring, financing, transfer of assets, or similar corporate transaction, subject to appropriate safeguards.

Third parties processing personal information on our behalf are expected to handle that information according to applicable contractual, security, and legal requirements.

5. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Provide the Services.
  • Maintain legitimate business and operational records.
  • Resolve disputes and enforce agreements.
  • Meet security, auditing, and compliance requirements.
  • Satisfy applicable legal or regulatory obligations.

Retention periods may differ depending on the type and purpose of the information.

When information is no longer required for a legitimate purpose, we may delete, anonymise, or otherwise securely dispose of it, subject to legal and operational requirements.

6. Data Security

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Security measures may include access controls, authentication mechanisms, encryption where appropriate, logging, monitoring, backups, vulnerability management, and other safeguards appropriate to the nature of the information and the Services.

No electronic system or method of transmission can be guaranteed to be completely secure. Accordingly, security cannot be guaranteed in absolute terms.

7. User Responsibilities

Users should take reasonable steps to protect their own accounts and information, including:

  • Using strong and unique credentials where credentials are required.
  • Keeping authentication information confidential.
  • Avoiding disclosure of sensitive information through public or unsecured features.
  • Informing us through available mechanisms if an account or security credential may have been compromised.

Users are responsible for information they voluntarily submit through the Services and should ensure that they have the necessary authority or permission to provide information relating to another person.

8. Children’s Privacy

The Services are not intended to encourage unlawful collection of personal information from children.

Where applicable law requires parental or guardian involvement for the collection or processing of a child’s information, appropriate requirements will be followed.

If information relating to a child has been collected in circumstances where such collection was not permitted, appropriate steps may be taken to delete or restrict the information in accordance with applicable law.

9. Sensitive Personal Information

Users should not provide sensitive personal information through features that do not specifically request or require it.

Where sensitive information is legitimately required, it will be processed only for appropriate purposes and subject to applicable legal and security requirements.

The Services may integrate with or link to third-party services, platforms, applications, or resources.

A third party’s privacy practices are governed by that third party’s own policies and terms. This Privacy Policy does not govern information independently collected or processed by third parties.

Users should review the relevant privacy information before providing personal data to a third-party service.

11. International Data Processing

Depending on the infrastructure and service providers used to operate the Services, personal information may be stored or processed in jurisdictions outside the location from which a user accesses the Services.

Where such processing occurs, appropriate safeguards will be applied as required by applicable law.

12. Your Privacy Rights

Subject to applicable law, users may have rights concerning their personal information, including rights relating to:

  • Access to personal information.
  • Correction or updating of inaccurate information.
  • Deletion or erasure where legally available.
  • Withdrawal of consent where processing is based on consent.
  • Restriction or objection to certain processing.
  • Data portability where applicable.
  • Information concerning the processing of personal information.

The availability and scope of these rights depend on applicable law, the nature of the processing, and the user’s circumstances.

Requests may be subject to reasonable verification and to lawful exceptions or limitations.

Where processing is based on consent, consent may be withdrawn through the mechanism made available for that purpose, subject to applicable law.

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

Certain Services or features may not function where information that is necessary for those Services is withheld or where legally required consent is withdrawn.

14. Accuracy of Information

We take reasonable steps to maintain accurate information appropriate to the purposes for which it is processed.

Users should provide accurate information and update it when necessary, particularly where inaccurate information could affect account access, service delivery, legal compliance, or security.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, technology, legal requirements, security practices, or operational processes.

The revised policy will become effective when published or otherwise made available through the Services, unless a different effective date is stated.

Users are encouraged to review this Privacy Policy periodically.

Personal information will be processed in accordance with applicable privacy, data protection, cybersecurity, consumer protection, and other relevant laws and regulations applicable to the Services and the circumstances of the processing.

Nothing in this Privacy Policy limits any rights or protections that cannot lawfully be excluded or restricted.

17. Governing Interpretation

This Privacy Policy should be interpreted together with any applicable terms, notices, consent statements, and service-specific privacy disclosures presented to users.

Where a specific service or transaction provides a more detailed privacy notice, that notice will govern the relevant processing to the extent of any inconsistency.

18. Contact and Privacy Requests

Users may use the privacy, account, support, or other request mechanisms made available within the relevant Service to raise privacy-related questions or exercise applicable rights.

Last Updated: 24 September 2026