EBM Privacy Statement

At EBM we value your privacy and are committed to protecting and handling your personal information responsibly.

This privacy statement describes how EBM Corporation — legal name Evo Business Mechatronics Private Limited, referred to here as “EBM,” “we” or “us” — collects, uses and shares personal information about visitors to our websites, individuals within our clients, prospective clients, business partners and suppliers, applicants for employment, and our own personnel. It applies to EBM Corporation and to the entities it controls, except where an entity presents its own statement without reference to this one.

Where we provide products, services or applications to a client as a business-to-business provider, the client is responsible for the collection and use of personal information within those products, services or applications. That collection and use is covered by the client’s own privacy policy unless we say otherwise. Our agreement with a client may permit us to collect information about authorised users for contract-management purposes; where it does, this statement, or a supplementary privacy notice, applies to that information.

We may provide additional data privacy information through a supplementary privacy notice where a particular engagement, product or activity involves handling information in a way this statement does not already describe.

This section describes the types of information we collect and how we use each of them.

It includes information on Your Account, Our Websites, Applications and Online Services, Marketing, Contractual Relationships, Support Services, Protecting You and EBM, Recruitment and Former Employees, Conducting our Business Operations, Artificial Intelligence, Cookies and Similar Technologies, and Children.

The information we collect and use may include your contact and business details, the content of enquiries and support requests, communication preferences, information used to investigate malicious activity, and information used to operate and improve our business.

We may share your personal information internally and externally with service providers, advisers and partners for EBM’s legitimate business purposes, and only on a need-to-know basis.

We do not sell personal information, and we do not share it for advertising. No advertising networks, advertising technology partners or data brokers are involved in our websites.

The privacy laws of some countries distinguish between the party that determines the purposes for which personal information is handled — often called a Controller — and a party that handles information on that party’s behalf, often called a Processor. The designations and the obligations attaching to them differ by jurisdiction.

For information collected through our websites, our client portal, our recruitment process and our own business operations, EBM is the Controller and this statement applies. For information held within a product or system we build or operate for a client, the client is the Controller and EBM acts as a Processor on their instructions; requests concerning that information should be directed to them, and if they reach us we will pass them on rather than act on them ourselves.

EBM operates through legal entities structured by country. Where relevant to your rights, the Controller is the EBM entity responsible for your region, or Evo Business Mechatronics Private Limited, registered in India, where no local entity applies. We will confirm which entity holds your information on request.

EBM can be contacted regarding this statement at hello@ebmcorporation.com, or through our contact page.

To protect your personal information from unauthorised access, use, alteration and disclosure, we implement appropriate administrative, technical and organisational safeguards. These include role-based access controls granted on a need-to-know basis, encryption of information in transit, and encryption of our backups. Account passwords are not stored in a readable form.

We also require our service providers to apply appropriate safeguards through contractual terms and access restrictions, so that information is protected to an equivalent standard wherever it is handled on our behalf.

No system can be guaranteed to be perfectly secure. Where a security incident affects your personal information and the law requires us to notify you, we will do so promptly and with the information available to us at the time.

You may have certain rights regarding the handling of your personal information. Depending on your jurisdiction, these may include the right to:

• request access to the personal information we hold about you, and to have it updated or corrected;
• request that we delete personal information we hold about you;
• request your personal information in a usable format so that it can be transmitted to another party, also known as the right to data portability;
• withdraw consent you have previously given, without affecting the lawfulness of anything done before you withdrew it;
• object to, or request that we restrict, certain handling of your information, including handling based on our legitimate interests;
• submit a complaint if you are not satisfied with how we have handled your personal information.

If you are in India, these correspond to the rights available under the Digital Personal Data Protection Act, 2023. Elsewhere, the rights available to you are those provided by your local law.

In some jurisdictions the lawful handling of personal information requires a justification, sometimes referred to as a legal basis. The bases we rely on vary according to the purpose and the applicable law. The bases we may rely on are:

If a material change is made to this privacy statement, the effective date shown at the top of this page is revised and the change is noted here. By continuing to use our websites and services after a revision takes effect, you are considered to have had the opportunity to read and understand the change.

Where a change requires your fresh consent under applicable law — the introduction of a new category of cookie, for example — we will ask for that consent specifically rather than relying on your continued use. Our cookie notice is versioned for this reason: where the categories change in meaning, everyone is asked again rather than an earlier answer being applied to a different question.

This is the first published version of this statement. Previous versions will be listed here once revisions have been made.