Privacy Policy
Effective Date: 16 September 2026
1. Introduction
Welcome to Whitestone Group.
Whitestone Group (“us”, “we”, or “our”) operates www.whitestonegroup.in (hereinafter referred to as the “Service”).
This Privacy Policy governs your visit to www.whitestonegroup.in and explains how we collect, safeguard, use and disclose information that results from your use of our Service.
We use your data to provide, maintain and improve our Service. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy shall have the same meanings as in our Terms and Conditions.
Our Terms and Conditions (“Terms”) govern all use of our Service and, together with this Privacy Policy, constitute your agreement with us.
2. Definitions
SERVICE means the www.whitestonegroup.in website and associated services operated by Whitestone Group.
PERSONAL DATA means data about a living individual who can be identified from that data, or from that data together with other information either in our possession or likely to come into our possession.
USAGE DATA means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself, for example, the duration of a page visit.
COOKIES are small files stored on your computer, mobile device or other device.
DATA CONTROLLER means a natural or legal person who, either alone or jointly with other persons, determines the purposes for which and the manner in which any Personal Data is processed. For the purpose of this Privacy Policy, Whitestone Group is the Data Controller of your Personal Data.
DATA PROCESSORS / SERVICE PROVIDERS means any natural or legal person who processes data on behalf of the Data Controller. We may use various Service Providers in order to process your data more effectively.
DATA SUBJECT means any living individual who is the subject of Personal Data.
USER means the individual using our Service. The User corresponds to the Data Subject who is the subject of Personal Data.
3. Information Collection and Use
We collect several different types of information for various purposes in order to provide, operate, maintain, secure and improve our Service.
4. Types of Data Collected
Personal Data
While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you (“Personal Data”).
Personal Data may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, Country, State, Province, ZIP/Postal Code and City
- Cookies and Usage Data
We may use your Personal Data to contact you with newsletters, marketing communications, promotional materials, offers, updates or other information that may be of interest to you.
You may opt out of receiving any or all marketing communications from us at any time by following the unsubscribe link provided in such communications or by contacting us at [email protected].
Usage Data
We may collect information that your browser sends whenever you visit our Service or when you access the Service through a computer, mobile device or other device (“Usage Data”).
Usage Data may include information such as:
- Your Internet Protocol address (IP address)
- Browser type
- Browser version
- Pages of our Service that you visit
- Date and time of your visit
- Time spent on those pages
- Device identifiers
- Operating system
- Internet browser information
- Referral information
- Diagnostic information
- Other technical information related to your use of the Service
When you access the Service through a mobile or other device, Usage Data may additionally include your device type, device ID, IP address, operating system, browser type, unique device identifiers and other diagnostic information.
Tracking and Cookies Data
We use cookies and similar tracking technologies to track activity on our Service and to store certain information.
Cookies are files containing a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.
Other tracking technologies, including pixels, beacons, tags and scripts, may also be used to collect and track information and to improve and analyse our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
However, if you do not accept certain cookies, some portions or functionality of our Service may not work properly.
Examples of cookies we may use include:
- Session Cookies - Used to operate our Service.
- Preference Cookies - Used to remember your preferences and settings.
- Security Cookies - Used for security and fraud prevention purposes.
- Advertising Cookies - Used to deliver advertisements that may be relevant to your interests.
Other Data
Depending upon your interaction with Whitestone Group and the services you use, we may also collect other information voluntarily provided by you, which may include:
- Age
- Date of birth
- Gender
- Place of birth
- Citizenship
- Residential address
- Business address
- Telephone number
- Educational information
- Qualifications
- Professional training information
- Employment-related information
- Agreements entered into with us
- Business information
- Professional information
- Payment and transaction-related information
- Information required for participation in our programs, services, events or business activities
- Other information voluntarily submitted by you
We will collect such information only where reasonably required for providing our services, fulfilling contractual obligations, complying with applicable laws, protecting legitimate business interests or where you have provided consent.
5. Use of Data
Whitestone Group may use collected information for purposes including:
- To provide and maintain our Service.
- To notify you about changes to our Service.
- To allow you to participate in interactive features of our Service.
- To provide customer support.
- To process enquiries, applications, registrations and transactions.
- To provide programs, products or services purchased or requested by you.
- To gather analysis and valuable information so that we can improve our Service.
- To monitor usage of our Service.
- To detect, prevent and address technical issues.
- To detect or prevent fraud, abuse or security incidents.
- To fulfil any purpose for which you provide information.
- To carry out our obligations and enforce our rights arising from contracts entered into between you and us, including billing and collection.
- To provide notices regarding your account, subscription, application, purchase or membership, including expiration and renewal notices.
- To provide news, special offers and information about products, services, events or programs similar to those you have already purchased or enquired about, unless you have opted out.
- To personalise your experience with our Service.
- To improve our advertising, marketing and communications.
- To comply with legal and regulatory requirements.
- In any other way described to you when you provide the information.
- For any other purpose with your consent.
6. Retention of Data
Whitestone Group will retain your Personal Data only for as long as reasonably necessary for the purposes set out in this Privacy Policy.
We may retain and use your Personal Data to the extent necessary to:
- Comply with applicable laws and legal obligations
- Resolve disputes
- Enforce our agreements and policies
- Maintain business and transaction records
- Prevent fraud and misuse
- Protect our legal rights
Usage Data is generally retained for a shorter period unless it is required to strengthen the security or improve the functionality of our Service, or where we are legally obligated to retain such information for a longer period.
7. Transfer of Data
Your information, including Personal Data, may be transferred to and maintained on computers, servers or systems located outside your state, province, country or other governmental jurisdiction where applicable data protection laws may differ from those in your jurisdiction.
If you are located outside India and choose to provide information to us, please note that we may transfer Personal Data to India and process it there.
Your use of our Service and submission of information following your acceptance of this Privacy Policy represents your acknowledgement of such transfer and processing, subject to applicable law.
Whitestone Group will take reasonable measures to ensure that your data is treated securely and in accordance with this Privacy Policy.
We will seek to ensure that appropriate safeguards are implemented where Personal Data is transferred to organisations or jurisdictions where required under applicable data protection laws.
8. Disclosure of Data
We may disclose Personal Data that we collect or that you provide in certain circumstances.
Business Transactions
If Whitestone Group, its business, assets or subsidiaries are involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to applicable laws.
Other Disclosures
We may disclose information:
- To our subsidiaries and affiliates.
- To employees and authorised representatives where reasonably necessary.
- To contractors, consultants, professional advisers and Service Providers that support our business.
- To payment processors and financial service providers.
- To technology, hosting, CRM, communication and analytics providers.
- To fulfil the purpose for which you provided the information.
- Where required in connection with business collaborations, partnerships or services.
- With your consent.
- Where disclosure is required by law, regulation, court order or governmental authority.
- Where we believe disclosure is reasonably necessary to protect the rights, property or safety of Whitestone Group, our users, customers, partners or others.
- To investigate fraud, security incidents, misuse or violations of our Terms.
Service Providers receiving Personal Data from us are expected to process such data only for authorised purposes and in accordance with applicable contractual and legal obligations.
9. Security of Data
The security of your information is important to us.
We endeavour to use commercially reasonable administrative, organisational and technical safeguards to protect Personal Data against unauthorised access, alteration, disclosure, loss or destruction.
However, no method of transmission over the Internet and no method of electronic storage is completely secure.
Therefore, while we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.
Users are also responsible for maintaining the confidentiality of passwords, login credentials and other authentication information associated with their accounts.
10. Your Data Protection Rights under the General Data Protection Regulation (GDPR)
If you are a resident of the European Economic Area (“EEA”) or are otherwise entitled to rights under the General Data Protection Regulation (“GDPR”), you may have certain rights regarding your Personal Data.
We aim to take reasonable steps to allow eligible individuals to correct, amend, delete, access or restrict the use of their Personal Data.
If you wish to know what Personal Data we hold about you or would like to request its correction or deletion, please contact:
Subject to applicable law, your rights may include:
- Right of Access - The right to request access to Personal Data we hold about you.
- Right to Rectification - The right to request correction of inaccurate or incomplete information.
- Right to Erasure - The right to request deletion of your Personal Data in certain circumstances.
- Right to Object - The right to object to certain processing of your Personal Data.
- Right to Restriction - The right to request that we restrict processing of your Personal Data in certain circumstances.
- Right to Data Portability - The right to request a copy of certain Personal Data in a structured, commonly used and machine-readable format.
- Right to Withdraw Consent - Where processing is based upon consent, you may withdraw that consent at any time, subject to applicable law.
We may ask you to verify your identity before responding to requests relating to Personal Data.
Certain information may be required in order for us to provide particular services. Therefore, exercising certain rights may affect your ability to use some features of the Service.
Where applicable, you may also have the right to lodge a complaint with an appropriate Data Protection Authority.
11. California Online Privacy Protection Act (CalOPPA)
To the extent applicable, users may visit certain areas of our website anonymously.
Our Privacy Policy:
- Is accessible through our website.
- Contains the word “Privacy”.
- May be updated periodically.
- Will display changes through an updated Privacy Policy page.
- Allows users to contact us regarding correction or modification of Personal Data.
Requests regarding Personal Data may be sent to:
Do Not Track Signals
Some web browsers provide a “Do Not Track” (“DNT”) feature that signals a user's preference regarding online tracking.
Because there is not necessarily a uniform industry standard regarding DNT signals, the way such signals are processed may depend upon the technologies and Service Providers used by our Service.
You can review or modify tracking and cookie preferences through your browser settings and, where available, through cookie or privacy controls provided on our Service.
12. California Privacy Rights
If you are a California resident and applicable privacy law provides you with rights relating to your Personal Data, those rights may include the ability to request information regarding Personal Data we have collected, used, disclosed or shared.
Subject to applicable law, you may have the right to request information regarding:
- Categories of Personal Data collected about you.
- Categories of sources from which Personal Data was collected.
- Business or commercial purposes for collecting Personal Data.
- Categories of third parties with whom Personal Data is shared.
- Specific pieces of Personal Data collected about you.
- Categories of Personal Data disclosed for a business purpose.
- Other information required under applicable California privacy law.
Request for Deletion
Subject to applicable exceptions, you may request that we delete Personal Data we maintain about you.
Where legally required, we may also instruct relevant Service Providers to delete applicable Personal Data.
Certain information may need to be retained for legal, security, contractual, fraud-prevention or other permitted purposes.
Sale or Sharing of Personal Information
Whitestone Group does not sell or rent Personal Data for monetary consideration as part of its ordinary business activities.
Certain uses of advertising, analytics or third-party technologies may nevertheless be treated as “selling” or “sharing” Personal Data under certain privacy laws.
Where required under applicable law, eligible users may exercise applicable opt-out rights.
Whitestone Group will not unlawfully discriminate against individuals for exercising applicable privacy rights.
California-related privacy requests may be submitted to:
We may take reasonable measures to verify your identity and authority before processing a privacy-related request.
13. Service Providers
We may employ third-party companies, contractors or individuals to:
- Facilitate our Service
- Provide services on our behalf
- Perform Service-related functions
- Host our websites or systems
- Provide CRM and communication infrastructure
- Provide analytics
- Process payments
- Support marketing or advertising activities
- Provide customer service
- Assist us in analysing how our Service is used
Such third parties may have access to Personal Data only to the extent reasonably necessary to perform services on our behalf.
They are expected not to disclose or use such information for unauthorised purposes.
14. Analytics
We may use third-party Service Providers, technologies or analytics platforms to monitor and analyse use of our Service.
Such technologies may collect information relating to website visits, devices, interactions, traffic sources, conversions and other Usage Data.
We use such information to understand how users interact with our Service and to improve our products, services and marketing activities.
15. Development, Hosting and Technology Tools
We may use third-party platforms, cloud providers, hosting providers, software tools, development tools, automation systems and deployment services to operate, develop, improve, secure or maintain our Service.
Such Service Providers may process limited information where reasonably necessary for performing their services.
16. Behavioral Remarketing and Advertising
We may use remarketing, advertising and marketing services to communicate or advertise to users after they have visited or interacted with our Service.
We and our advertising or technology partners may use cookies, pixels, tags and similar technologies to:
- Measure advertising performance
- Analyse website activity
- Understand conversions
- Create relevant audiences
- Optimise advertisements
- Show advertisements based upon previous interactions with our Service
Where legally required, such activities will be conducted on the basis of appropriate consent or other lawful grounds.
You may be able to manage advertising preferences through browser settings, device settings, cookie controls or relevant advertising platforms.
17. Payments
We may offer paid products, programs, consulting, memberships, subscriptions or other services through our Service.
Where payments are accepted online, we may use third-party payment processors.
Whitestone Group generally does not directly store complete payment card information when such information is handled by an authorised third-party payment processor.
Payment information submitted to a payment processor is subject to that processor's own privacy policy and security practices.
Payment processors may be required to comply with applicable payment security standards, including PCI-DSS where applicable.
18. Links to Other Websites
Our Service may contain links to websites or services that are not operated or controlled by Whitestone Group.
If you click on a third-party link, you may be directed to that third party's website or service.
We encourage you to review the Privacy Policy and Terms of every third-party website or service you visit.
Whitestone Group has no control over and assumes no responsibility for the content, privacy policies, security practices or activities of third-party websites or services.
19. Children's Privacy
Unless a specific service expressly states otherwise and appropriate parental or guardian consent arrangements are implemented, our Service is not intended for use independently by individuals under the age of 18.
We do not knowingly seek to collect Personal Data directly from children without appropriate consent where such consent is required by applicable law.
If you are a parent or guardian and believe that a child has provided us with Personal Data without appropriate authorisation, please contact:
If we become aware that Personal Data relating to a child has been collected in circumstances that do not comply with applicable law, we may take reasonable steps to delete or appropriately process such information.
20. Legal Requirements
Whitestone Group may disclose or process Personal Data where we believe in good faith that such action is reasonably necessary to:
- Comply with a legal obligation
- Respond to lawful requests from public authorities
- Protect and defend the rights or property of Whitestone Group
- Prevent or investigate possible wrongdoing
- Protect the personal safety of users or members of the public
- Protect against legal liability
- Detect or prevent fraud, abuse or security incidents
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any updated Privacy Policy will be posted on this page.
Where appropriate or legally required, we may notify users about material changes through email, website notice or another appropriate communication method.
The “Effective Date” displayed at the top of this Privacy Policy indicates when the current version became effective.
You are encouraged to review this Privacy Policy periodically for changes.
Changes become effective when posted unless otherwise stated.
22. Contact Us
If you have any questions, requests, concerns or complaints regarding this Privacy Policy or the way Whitestone Group handles Personal Data, please contact us at:
Whitestone Group
Website: www.whitestonegroup.in
Email: [email protected]