Privacy Policy

How we collect, use, and protect your information.

Last Updated: 29 May 2026

Vertex Workspace (“Vertex”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Vertex collects, uses, processes, stores, shares and protects personal data when individuals (“Users”, “Customers”, or “Visitors”) interact with our workspace facilities, digital platforms, Wi-Fi networks, and related services.

This Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025.

By accessing or using Vertex Workspace facilities or services, you acknowledge that you have read and understood this Privacy Policy.

Role of Vertex as Data Fiduciary

For the purposes of applicable data protection law:

Vertex Workspace acts as a “Data Fiduciary”, meaning an entity that determines the purpose and means of processing personal data.
Individuals whose personal data is processed are referred to as “Data Principals.”

Types of Personal Data We Collect

We may collect the following categories of personal data depending on how you interact with Vertex:

Identify Information: Name, photograph, government-issued identification (such as Aadhaar, passport, driving license, etc.) and company or employer details
Contact Information: Email address, phone number and postal address
Access and Security Information: Visitor registration details, entry and exit timestamps, access card or badge usage records and CCTV footage
Device and Network Information: Device MAC address, IP address, Wi-Fi authentication logs and browser or device information
Booking and Transaction Information: Desk or workspace bookings, payment details and invoices and billing records
Communications: Emails, messages or inquiries sent to Vertex and customer support communications
Visitor and Guest Information: If you bring visitors to the premises, we may collect visitor names, contact details, CCTV footage and identification information where require.

How We Collect Personal Data

We may collect personal data through:

Workspace bookings or registration
Visitor management systems
Identity verification procedures
Wi-Fi login portals
CCTV and access control systems
Communications with our team
Website forms or digital platforms
Third-party booking platforms

Purposes for Which We Process Personal Data

We process personal data only for specific lawful purposes including:

Workspace operations such as granting access to the premises, managing bookings and workspace usage and providing customer support
Security and safety such as maintaining visitor records, monitoring premises security and investigating incidents or misconduct
Network and IT management including providing internet access, preventing cyber misuse or fraud and maintaining system security
Legal and regulatory compliance including complying with applicable laws, responding to law enforcement requests and maintaining statutory records
Billing and administration activities such as processing payments, issuing invoices and maintaining financial records
Communications such as responding to queries and sending operational updates or service information
We will not process personal data for purposes incompatible with those described above without obtaining additional consent where required.

Legal Basis for Processing

Under the DPDP Act, we process personal data primarily on the basis of:

Consent – Where you voluntarily provide personal data to use our services.
Legitimate Uses Recognized by Law – Certain processing may occur where required for compliance with legal obligations, prevention or detection of fraud, protection of life or safety and responding to lawful government requests.

Wi-Fi and Network Data

When users connect to Vertex Wi-Fi networks:

We may collect device identifiers, connection logs, authentication records and internet session metadata.
This information is used for network security, preventing cybercrime, troubleshooting connectivity issues and complying with legal obligations.
Vertex does not routinely monitor the content of communications but may investigate suspected misuse of its network.

CTV and Premises Surveillance

Our premises may use CCTV surveillance:

For purposes including safety and security, crime prevention and incident investigation.
Video recordings may be retained for a limited period unless required for investigation or legal proceedings.

Data Sharing and Disclosure

We may share personal data with:

Service Providers: Third-party vendors assisting with payment processing, IT services, visitor management systems and cloud hosting.
Legal Authorities: Where required to comply with law enforcement requests, court orders and regulatory investigations.
Business Transfers: If Vertex undergoes a merger, acquisition or restructuring, personal data may be transferred subject to applicable safeguards.

Vertex does not sell personal data to third parties

We engage the following partners to process data on our behalf. All partners are bound by Data Processing Agreements (DPAs) in alignment with the DPDP Act.

Partner	Role	Data Handled
Cashfree	Payment Gateway	PCI-compliant payment processing, UPI/Card tokenization.
Zoho One	ERP & Cloud Storage	Customer profiles, booking records and administrative data.
Hapihost (Hapihost Server)	Access Control	QR code generation and entry/exit timestamp logging.

Cross-Border Data Transfers

Personal data may be processed or stored on servers located outside India where required for cloud infrastructure or IT services.
Such transfers will be conducted in accordance with applicable law and appropriate safeguards.

Data Retention

Vertex retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless longer retention is required under law.
Personal data will be securely deleted or anonymized once the retention period expires and the purpose of processing is no longer served.

Data Security

Vertex implements reasonable technical and organizational measures to protect personal data including access controls, encryption and secure networks, monitoring of IT systems and staff confidentiality obligations. However, no system can guarantee absolute security.

Rights of Data Principals

Under the DPDP Act, individuals have rights including:

Right to Access Information
Right to Correction and Erasure
Right to Withdraw Consent
Right to Grievance Redressal
If the grievance is not resolved, individuals may approach the Data Protection Board of India.

Grievance Redressal

If you have any concerns regarding your personal data or this Privacy Policy, you may contact:

Legal Consultant, jeevan@mukundmgmrealty.com
Vertex will endeavor to respond to grievances within a reasonable period.

Data Breach Response

In the event of a personal data breach, Vertex will take reasonable steps to investigate the incident, mitigate potential harm and notify affected individuals and authorities where required under applicable law.

Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Mangaluru, India.

Changes to this Policy

Vertex may update this Privacy Policy from time to time to reflect legal, operational or technological changes.
Updated versions will be published on our website.

Acceptance of this Policy

We assume that all users of Vertex website and services have carefully read this Policy and agreed to its contents. If you do not agree with this Policy, you should refrain from using our website and services immediately. We reserve the right to change our Policy at any time with or without notice. Continued use of Vertex website and services implies acceptance of the revised Policy.

If you have questions or concerns about our Privacy Policy or the processing of your personal data, please contact us at info@vertexworkspace.com
Thank you for entrusting Vertex Workspace with your privacy. We are committed to protecting and respecting your personal data.