Privacy Policy

Leeway Space (“Leeway Space”, “we”, “us”, or “our”) operates premium managed office hubs, executive coworking environments, private technology suites, and enterprise conference facilities across Visakhapatnam, Andhra Pradesh. We are steadfastly committed to safeguarding the privacy, confidentiality, and integrity of the personal and corporate data entrusted to us by our members, tenant enterprises, visitors, and website users.

1. Regulatory Compliance Framework

This Privacy Policy is formulated in strict accordance with applicable Indian legal standards, including:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules thereunder.
• The Information Technology Act, 2000 (as amended), including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• Statutory compliance guidelines for physical office licensing, commercial KYC, Goods and Services Tax (GST), and municipal security protocols in Visakhapatnam.

2. Categories of Information We Collect

To provide seamless workspace provisioning, high-speed leased-line connectivity, biometric facility security, and compliant virtual office registration, we collect the following data classes:

3. Purpose & Lawful Grounds of Processing

We process your personal data solely for legitimate, transparent, and contractually necessary purposes:

• Service Delivery: To allocate dedicated workstations, configure private LAN networks, manage meeting room bookings, and process mail handling.
• Physical & Cyber Safety: To prevent unauthorized entry into private company suites and protect member assets across all 5 Visakhapatnam centres.
• Statutory Invoicing: Generating tax-compliant GST invoices and facilitating automated digital payments.
• Direct Communications: Relaying operational updates, scheduled facility maintenance, power grid backups, or urgent weather advisories.

4. Strict Non-Disclosure & Third-Party Restrictions

We NEVER sell, trade, or rent member or visitor personal data to third-party telemarketers, brokers, or external advertising networks. Disclosures are made only to:

1. Authorized cloud infrastructure and payment processing partners operating under strict Data Processing Agreements (DPAs) and AES-256 encryption.
2. Law enforcement or regulatory authorities only when mandated by formal court order, statutory subpoena, or verified legal process under Indian jurisdiction.

5. Data Retention & Secure Disposal

Data is retained only as long as necessary to fulfill contractual tenancy obligations and comply with statutory retention mandates (e.g., GST records retained for 7 years as required by Indian taxation statutes). CCTV footage is maintained on rolling encrypted local storage for up to 30 days before automated cryptographic erasure, unless preservation is requested by law enforcement.

6. Your Statutory Rights Under DPDP Act 2023

As a Data Principal, you are entitled to exercise the following rights regarding your personal information:

• Right to Summary & Access: Request a full summary of personal data held, along with identities of data processors.
• Right to Correction & Erasure: Rectify inaccurate identity information or request deletion of data that is no longer contractually required.
• Right of Grievance Redressal: Direct escalation to our designated Grievance Officer with guaranteed response within 7 business days.

7. Grievance Officer & Contact Desk