Grievance Policy

01Overview

We take every grievance seriously. Whether you have a concern about how we collect, store, process, or share your personal data — or whether you believe your rights under any applicable data protection law have been infringed — this policy tells you exactly who to contact, what to include in your complaint, and what to expect from us in terms of timelines and outcomes.

This policy is published in compliance with the following laws and regulations:

02Designated Grievance Officer

As required under Rule 9 of the Digital Personal Data Protection Rules, 2025, and in alignment with the requirements of the UAE PDPL, GDPR, and applicable US state privacy laws, Amatrons Technologies Pvt Ltd has designated the following Grievance Officer:

03What You Can Raise

You may submit a grievance or data request for any of the following:

04How to Submit a Grievance

To submit a grievance or data rights request, please email us at grievance@amatrons.com with the following information:

1. Your full name and contact details (email address and phone number)
2. Your country of residence — this helps us apply the correct legal framework to your request
3. Nature of your grievance or request — clearly describe what the complaint or request is about (e.g. data access, deletion, objection to processing)
4. Relevant details — include any relevant dates, service interactions, or reference numbers that help us identify your data
5. What outcome you are seeking — tell us what resolution you are looking for (e.g. data deletion, correction, explanation)
6. Supporting documentation (if any) — attach any evidence or context that helps us understand your complaint

You may also submit a grievance by post to our registered address: B-6, Sector 4, Noida, Uttar Pradesh, India – 201301. Please mark the envelope "Grievance — Data Protection".

05Response Timeline

We are committed to the following response timelines for all grievances and data rights requests:

06Our Investigation Process

When we receive your grievance, our Legal & Compliance Team follows a structured process to ensure a fair, thorough, and legally compliant resolution:

1. Receipt & Logging: Your grievance is logged in our internal system with a unique reference number and assigned to a member of the compliance team.
2. Identity Verification: Where required, we will verify your identity to ensure we are protecting your data from unauthorised disclosure.
3. Scope Assessment: We determine which personal data and processing activities are relevant to your complaint, and which legal framework(s) apply based on your jurisdiction.
4. Investigation: We review all relevant data processing records, access logs, consent records, and third-party agreements to fully understand the matter.
5. Remediation (where applicable): If we find that your complaint is justified, we take immediate corrective action — including correcting, deleting, or restricting the relevant data, and notifying any third parties where required.
6. Written Response: We provide you with a full written explanation of our findings, the action taken, and — if your complaint is upheld — confirmation of the remedy applied.
7. Record Keeping: We maintain a record of all grievances and their outcomes for a minimum of three years, in compliance with applicable legal requirements.

All grievances are treated with strict confidentiality. Information shared with us during the grievance process will only be used for the purpose of investigating and resolving your complaint.

07India — DPDP Act 2023 & Rules 2025

For individuals in India, this Grievance Policy is published in direct compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 notified by the Ministry of Electronics and Information Technology (MeitY).

Your rights under the DPDP Act include:

• The right to obtain a summary of personal data being processed and the processing activities undertaken by Amatrons Technologies
• The right to know the identities of all Data Fiduciaries and Data Processors with whom your personal data has been shared
• The right to correction and erasure of personal data that is inaccurate, incomplete, or no longer necessary
• The right to nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity
• The right to grieve any violation of your rights under the DPDP Act to our designated Grievance Officer
• The right to escalate unresolved grievances to the Data Protection Board of India

Amatrons Technologies Pvt Ltd is a Data Fiduciary under the DPDP Act. We process personal data only for lawful purposes, with your consent or on a legitimate use basis, and we are responsible for ensuring that our Data Processors comply with the same standards.

08UAE — Personal Data Protection Law

For individuals in the United Arab Emirates, this Grievance Policy is aligned with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), which came into full enforcement in 2023 and is overseen by the UAE Data Office.

Your rights under the UAE PDPL include:

• The right to be informed about how your personal data is collected, used, and shared before processing begins
• The right to access personal data held about you in a machine-readable format
• The right to rectify or correct inaccurate personal data
• The right to request deletion or erasure of your personal data when it is no longer needed for its original purpose
• The right to withdraw consent at any time — withdrawal must be as easy as giving consent
• The right to object to the use of your personal data for marketing or survey purposes
• The right to data portability

To exercise your rights under the UAE PDPL or to submit a grievance, please contact us at grievance@amatrons.com. If your complaint is not resolved to your satisfaction, you may escalate to the UAE Data Office via their official portal.

09EU & UK — GDPR

For individuals in the European Union and United Kingdom, this Grievance Policy is aligned with the EU General Data Protection Regulation (GDPR) 2016/679 and the UK GDPR (as retained in UK law following Brexit).

Your rights under the GDPR include:

• Right of Access (Art. 15): Obtain a copy of your personal data and information about how it is processed
• Right to Rectification (Art. 16): Have inaccurate or incomplete personal data corrected
• Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your data in certain circumstances
• Right to Restriction of Processing (Art. 18): Request that we limit how we process your data while a complaint is investigated
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision Making (Art. 22): Not be subject to decisions based solely on automated processing that significantly affect you

We will respond to GDPR requests within one calendar month of receipt. Where requests are complex or numerous, we may extend this by a further two months — but will notify you within the first month if an extension is required.

If you are not satisfied with our response, you have the right under Article 77 GDPR to lodge a complaint with your national data protection supervisory authority, and under Article 79 GDPR to seek a judicial remedy.

10USA — CCPA / CPRA & State Laws

For individuals in the United States, this Grievance Policy is aligned with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and with the comprehensive privacy laws of Virginia, Colorado, Texas, Connecticut, and 15+ additional states that have enacted data privacy legislation as of 2025–2026.

Your rights under US state privacy laws include:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information we hold about you
• Right to Opt-Out: Opt out of the sale or sharing of your personal information and opt out of targeted advertising
• Right to Limit Use of Sensitive Personal Information: Request that we limit use of sensitive personal information to what is necessary to provide the requested service
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

We are required to verify your identity before processing deletion or access requests to protect against fraudulent requests. We will only use the information you provide to verify your identity and process your request — not for any other purpose.

11Escalation Rights

If you are not satisfied with our response to your grievance, or if we fail to respond within the applicable statutory timeline, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction:

12Policy Updates

We review and update this Grievance Policy periodically to reflect changes in applicable law, regulatory guidance, and our internal processes. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Display a notice on our website for a period of 30 days following the update
• Where required by law, notify affected data subjects directly

The current version of this policy is always available at amatrons.com/grievance-policy. We encourage you to review it periodically.

This policy was last reviewed and updated in April 2026. The next scheduled review is October 2026.