Privacy Policy
Last updated: June 2026
Gemba Concepts Private Limited ('Gemba', 'we', 'us', or 'our') respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and otherwise process personal data when you visit our website, submit enquiries, request consultations or demos, subscribe to our communications, attend events, or use any of our consulting, software, platform, or related services (collectively, the 'Services').
By using our website or Services, or by otherwise providing your information to us, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
For privacy-related requests or grievances, you may contact us at: sales@gembaconcepts.com
Gemba Concepts Private Limited
Ram Leo, 59/4, Market Rd, Basavanagudi, Bengaluru, Karnataka 560004, India
Email: sales@gembaconcepts.com
[Recommended: replace this with a dedicated privacy/grievance email if available]
2. Scope of This Privacy Policy
This Privacy Policy applies to:
- visitors to our website;
- individuals who contact us or request information, consultations, or demonstrations;
- customers, prospective customers, vendors, and business partners;
- users of our software, platform, or technology-enabled services, if applicable;
- event attendees, newsletter subscribers, and other persons who interact with us.
This Privacy Policy does not apply to third-party websites, products, or services that may be linked from our website or integrated with our Services, unless expressly stated otherwise.
3. Information We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
a. Information you provide directly
- full name;
- work email address;
- telephone/mobile number;
- company name;
- job title/designation;
- business address;
- enquiry details, project requirements, or consultation requests;
- communications you send to us by email, forms, chat, phone, or otherwise;
- event registration details;
- any other information you voluntarily provide.
b. Information collected automatically
When you visit our website or use our online Services, we may automatically collect:
- IP address;
- browser type and version;
- device type and operating system;
- pages visited and time spent on pages;
- referring website/source;
- date and time of access;
- clickstream and interaction data;
- cookie identifiers and similar technical information.
c. Information relating to service delivery
Where we provide consulting, software, platform, implementation, analytics, or related business services, we may collect or process:
- account or user profile information;
- customer support requests;
- usage, diagnostic, and log data;
- configuration, integration, or deployment-related information;
- business contact details of customer personnel;
- customer-provided content or data submitted to or processed through the Services.
d. Information from third parties
We may receive information from:
- marketing partners;
- event organizers;
- referral sources;
- publicly available business sources;
- analytics, CRM, or communication service providers;
- customers who provide business contact details of their personnel for project delivery.
4. How We Collect Information
We may collect personal data when you:
- visit or browse our website;
- fill in contact, enquiry, demo, subscription, or event forms;
- request a proposal, consultation, or meeting;
- communicate with us by phone, email, or other channels;
- register for or use our software, platform, or digital tools;
- participate in webinars, events, surveys, or promotional activities;
- interact with cookies, pixels, analytics tools, or similar technologies on our website;
- provide information in connection with our Services.
5. Purposes of Processing
We may use personal data for the following purposes:
- to respond to enquiries and communicate with you;
- to provide consultations, demonstrations, proposals, and requested Services;
- to create, manage, and secure user accounts;
- to perform contractual obligations and manage customer relationships;
- to deliver, operate, maintain, support, and improve our website and Services;
- to analyze website usage, improve performance, and enhance user experience;
- to send service-related communications;
- to send marketing or promotional communications, where permitted by law or based on your preferences;
- to manage events, registrations, and follow-up communications;
- to detect, prevent, investigate, and address security incidents, fraud, misuse, or technical issues;
- to comply with legal, regulatory, contractual, and internal compliance requirements;
- to enforce our legal rights, contractual rights, and policies.
6. Legal Basis / Consent and Notice
Where required, we process personal data based on your consent, our contractual obligations, compliance with applicable law, or our legitimate business purposes, as applicable.
Where we rely on your consent:
- you may withdraw your consent by contacting us;
- withdrawal will not affect processing already undertaken before such withdrawal;
- withdrawal may affect our ability to provide certain communications or Services.
7. Cookies and Tracking Technologies
Our website may use cookies, pixels, tags, session storage, and similar technologies for the following purposes:
- essential website functionality;
- security and fraud prevention;
- remembering preferences;
- analytics and performance measurement;
- understanding user interactions and traffic sources;
- improving website design, content, and functionality;
- marketing or campaign measurement, if applicable.
Cookies may include:
- essential cookies necessary for basic website operation;
- analytics cookies used to understand website performance and visitor interactions;
- functional cookies used to remember settings or preferences;
- marketing cookies or similar technologies, if used for campaign attribution or advertising.
You can manage cookies through your browser settings and, where available, through our cookie preferences tool or banner. Disabling certain cookies may affect website functionality.
8. How We Share Personal Data
We do not sell your personal data. We may share personal data only as reasonably necessary for the purposes described in this Privacy Policy, including with:
- service providers and processors that support our operations, such as hosting, cloud infrastructure, email, CRM, analytics, customer support, collaboration, security, and communication providers;
- professional advisers, including lawyers, auditors, accountants, or consultants;
- event, webinar, or marketing support providers;
- implementation, integration, or subcontracting partners engaged for service delivery, where applicable;
- competent authorities, regulators, courts, law enforcement, or government bodies, where required by law or to protect our rights;
- potential investors, acquirers, or successors in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to appropriate confidentiality safeguards.
9. Third-Party Processors
We may engage third-party processors to process personal data on our behalf for limited purposes such as website hosting, cloud storage, analytics, communication, CRM, productivity tools, and service delivery support.
Examples may include:
- cloud hosting and infrastructure providers;
- email and communication platforms;
- CRM and sales automation tools;
- analytics providers;
- customer support/helpdesk tools;
- payment or invoicing providers, if applicable;
- document signing or workflow tools, if applicable.
10. Cross-Border Transfers
Your personal data may be stored, accessed, or processed in India or in other jurisdictions where we, our affiliates, or our service providers operate. Where personal data is transferred outside India, we take reasonable steps to ensure that such transfers are made in accordance with applicable law and subject to appropriate contractual, technical, organizational, or operational safeguards.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including for service delivery, relationship management, legal compliance, dispute resolution, security, and recordkeeping.
Retention periods may vary based on:
- the type of information;
- the purpose for which it was collected;
- whether there is an ongoing customer relationship;
- legal, tax, accounting, or regulatory obligations;
- the need to resolve disputes or enforce agreements.
When personal data is no longer required, we will delete, anonymize, or securely dispose of it, unless retention is required or permitted by law.
12. Data Security
We implement reasonable technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, use, alteration, disclosure, loss, or destruction. These measures may include access controls, role-based restrictions, secure storage, encryption where appropriate, monitoring, and vendor management practices.
However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.
13. Your Rights
Subject to applicable law, you may have rights in relation to your personal data, including the right to:
- request access to personal data we hold about you;
- request correction or updating of inaccurate or incomplete personal data;
- request deletion or erasure of personal data, subject to legal or contractual limitations;
- withdraw consent where processing is based on consent;
- object to or request restriction of certain processing, where applicable;
- request information regarding how your personal data has been processed, to the extent required by applicable law;
- lodge a grievance or complaint through our grievance mechanism.
To exercise any of these rights, please contact us at sales@gembaconcepts.com.
We may request information necessary to verify your identity before acting on your request.
14. Grievance Redressal
If you have any grievance, complaint, or concern relating to the processing of your personal data, you may contact us using the details below:
We will review and respond to grievances within a reasonable time in accordance with applicable law and our internal processes.
Email: sales@gembaconcepts.com
Company: Gemba Concepts Private Limited
Address: Ram Leo, 59/4, Market Rd, Basavanagudi, Bengaluru, Karnataka 560004, India
15. Children's Data
Our website and Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.
16. Third-Party Links and Services
Our website may contain links to third-party websites or services. We are not responsible for the privacy, content, or practices of those third parties. We encourage you to review their privacy policies before providing any information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal requirements, or operational needs. The updated version will be posted on this page with a revised 'Last updated' date. Where required, we may take additional steps to notify users of material changes.
18. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact:
Gemba Concepts Private Limited
Ram Leo, 59/4, Market Rd, Basavanagudi, Bengaluru, Karnataka 560004, India
Email: sales@gembaconcepts.com