NUMAPrivacy Policy
Effective date: 28 September 2026 · Version: 2026-09-28
1. Who we are
Numa is operated by NUMA TECHNOLOGY PRIVATE LIMITED (“Numa”, “we”, “us” or “our”), a company incorporated in India on 21 July 2026.
- CIN
- U58202TN2026PTC195611
- Registered office
- 232/1, North Raja Street, Tuticorin, Thoothukkudi, Tuticorin-628001, Tamil Nadu, India
- Website
- numaproc.com
- Privacy and grievances email
- info@numaproc.com
- Grievance contact
- Grievance Officer (name will be updated shortly)
- Business telephone
- +91 9566328397
For personal information used to operate our website, manage enquiries and conduct our own permitted business development, Numa determines the purposes and means of processing. We act as the controller, or the corresponding responsible organisation under applicable law.
2. What this policy covers
This policy explains how we handle personal information about website visitors, business contacts, prospective customers and people who communicate with us about our services.
Our services are intended for businesses and professional users. Business contact details can still be personal information, for example where an email address identifies an employee.
When a customer engages Numa to process personal information in freight documents or case records on its behalf, our role and obligations are also governed by the customer agreement, processing instructions and applicable data-processing terms. Where we act only on that customer's instructions, the customer is responsible for its own privacy notice. Contact us if you need help identifying the appropriate organisation for a request. This does not remove obligations that apply directly to Numa.
This policy does not authorise marketing that otherwise requires consent, and it does not replace a service agreement.
3. Information we collect and where it comes from
| Category | Examples | Source |
|---|---|---|
| Enquiry information | Your business email, company, role, company type, country, how often freight-charge exceptions happen, and your optional description of what needs review | You, when you complete the request form or email us |
| Enquiry attribution | The campaign tags in the link you followed, the address of the page that referred you and the version of our page you saw | Your browser, when you submit the request form |
| Business correspondence | Replies, meeting arrangements and notes relevant to the business enquiry | You and our interactions with you |
| Technical and security information | IP address, request time, browser and device information, requested pages, bot-check signals and security or error events | Your interaction with the site and our infrastructure providers |
| Preferences and compliance records | Marketing choices, notice and consent records, objections, unsubscribe information and request history | Your choices and our handling of them |
- Category
- Enquiry information
- Examples
- Your business email, company, role, company type, country, how often freight-charge exceptions happen, and your optional description of what needs review
- Source
- You, when you complete the request form or email us
- Category
- Enquiry attribution
- Examples
- The campaign tags in the link you followed, the address of the page that referred you and the version of our page you saw
- Source
- Your browser, when you submit the request form
- Category
- Business correspondence
- Examples
- Replies, meeting arrangements and notes relevant to the business enquiry
- Source
- You and our interactions with you
- Category
- Technical and security information
- Examples
- IP address, request time, browser and device information, requested pages, bot-check signals and security or error events
- Source
- Your interaction with the site and our infrastructure providers
- Category
- Preferences and compliance records
- Examples
- Marketing choices, notice and consent records, objections, unsubscribe information and request history
- Source
- Your choices and our handling of them
Numa does not currently carry out outbound marketing. We contact people only in reply to their own enquiries.
We do not need confidential freight records, identity documents, bank details or sensitive personal information to respond to an initial website enquiry. Please do not include these in the public request form. We arrange any necessary customer-document exchange separately.
4. How we use personal information
We use information for the following purposes, as relevant to our relationship with you:
- Responding to your enquiry, arranging a discussion and assessing whether our services fit your request.
- Managing business communications and, where appropriate, establishing or administering an engagement.
- Understanding which page, link or campaign led to an enquiry, using the attribution details described above.
- Sending relevant business-service introductions or updates only where the applicable privacy and marketing rules allow them.
- Operating and protecting the website, diagnosing faults and investigating suspected misuse.
- Recording and respecting preferences, consent, objections and unsubscribe requests.
- Meeting legal obligations, responding to lawful requests and establishing, exercising or defending legal claims.
The request form marks which fields are required. Providing them allows us to respond; the description of what needs review is optional. If essential information is missing, we may be unable to answer your request. Submitting an enquiry does not add you to marketing.
5. Legal bases where the EEA or UK framework applies
Where the EU GDPR or UK GDPR applies, we use the basis appropriate to each purpose:
| Purpose | Applicable basis and explanation |
|---|---|
| Responding to a business representative | Our legitimate interest in communicating with prospective business customers and responding to relevant enquiries, subject to a rights-and-interests assessment |
| Understanding which page or campaign led to an enquiry | Our legitimate interest in knowing which of our own pages and links bring relevant enquiries |
| Steps toward a contract with you personally, or performing it | Contractual necessity, where you are the contracting individual and the processing is necessary |
| Optional email updates or other consent-based processing | Your consent, which you may withdraw |
| Website protection and fault diagnosis | Legitimate interests in secure and reliable services; legal obligation where a specific applicable law requires processing |
| Legal compliance and rights requests | Legal obligation where applicable; otherwise the appropriate basis for handling the request or protecting legal rights |
| Maintaining a limited suppression record | Legitimate interests in respecting your objection and avoiding recontact, and legal obligation where applicable |
- Purpose
- Responding to a business representative
- Applicable basis and explanation
- Our legitimate interest in communicating with prospective business customers and responding to relevant enquiries, subject to a rights-and-interests assessment
- Purpose
- Understanding which page or campaign led to an enquiry
- Applicable basis and explanation
- Our legitimate interest in knowing which of our own pages and links bring relevant enquiries
- Purpose
- Steps toward a contract with you personally, or performing it
- Applicable basis and explanation
- Contractual necessity, where you are the contracting individual and the processing is necessary
- Purpose
- Optional email updates or other consent-based processing
- Applicable basis and explanation
- Your consent, which you may withdraw
- Purpose
- Website protection and fault diagnosis
- Applicable basis and explanation
- Legitimate interests in secure and reliable services; legal obligation where a specific applicable law requires processing
- Purpose
- Legal compliance and rights requests
- Applicable basis and explanation
- Legal obligation where applicable; otherwise the appropriate basis for handling the request or protecting legal rights
- Purpose
- Maintaining a limited suppression record
- Applicable basis and explanation
- Legitimate interests in respecting your objection and avoiding recontact, and legal obligation where applicable
We do not treat a contract with your employer as automatically making processing necessary for a contract with you personally. We consider purpose, necessity and the impact on you before relying on legitimate interests.
For processing governed by Indian or other laws, we use consent or another basis permitted by that law where required. The table above does not import GDPR legitimate interests into jurisdictions that do not recognise the same basis.
6. Business communications and your marketing choices
We distinguish replies to your enquiries and necessary service communications from marketing.
You can opt out of marketing at any time using the unsubscribe method in our message or by contacting info@numaproc.com. You do not need to create an account, pay a fee or explain your decision. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing based on that consent.
Where the GDPR or UK GDPR applies, you have the right to object at any time to processing for direct marketing, including related profiling. We will stop that processing when you object.
We keep a limited suppression record where necessary to ensure your details are not added back into a campaign. It is used to respect your choice, not to target you with further marketing. Necessary non-marketing communications concerning a requested service may continue.
An address appearing on a business website is not, by itself, proof of consent. We apply the relevant sending rules for the recipient's country and type of contact.
8. Who receives information
Access is limited to people and organisations with a relevant purpose, including:
- Authorised Numa personnel and contracted support working on the enquiry or service.
- Providers that operate hosting, security, business email and the other functions listed below.
- Professional advisers where needed for accounting, legal or business obligations.
- Authorities or other recipients where disclosure is required by law or justified to protect legal rights.
- Parties to a genuine business transfer, where appropriate safeguards and notices apply.
We require service providers processing on our behalf to follow applicable contractual data-protection and confidentiality obligations. Some recipients, such as professional advisers, may act as independent controllers for their own professional duties.
We do not sell personal information or share it for cross-context behavioural advertising.
The providers that currently receive personal information through our website are:
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare | Website hosting and delivery, bot protection (Turnstile), rate limiting, request logs, and the database that stores enquiries | Global network; company based in the United States |
| Resend | Delivers an internal email to us about each enquiry, containing the enquiry details | United States |
| Hostinger | Business email for info@numaproc.com (receives your emails to us and our enquiry notifications) and domain registration | Company based in the European Union |
- Provider
- Cloudflare
- What it does for us
- Website hosting and delivery, bot protection (Turnstile), rate limiting, request logs, and the database that stores enquiries
- Where
- Global network; company based in the United States
- Provider
- Resend
- What it does for us
- Delivers an internal email to us about each enquiry, containing the enquiry details
- Where
- United States
- Provider
- Hostinger
- What it does for us
- Business email for info@numaproc.com (receives your emails to us and our enquiry notifications) and domain registration
- Where
- Company based in the European Union
9. AI-assisted processing
We do not submit website enquiry content or identifiable prospect records to generative AI tools. Human staff review business enquiries and outreach decisions.
If an agreed customer service uses AI to analyse case documents, we explain the relevant processing through the service documentation and applicable data-processing terms before that use. We restrict it to the agreed purposes and approved providers. This website notice is not blanket permission to reuse customer documents or correspondence for model training.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals within the website and outreach activities covered by this notice.
10. International processing
Numa is based in India. Information may be accessed or processed in India and in the countries identified in section 8. Laws in those countries may differ from those in your location.
Where a restricted international transfer is subject to EU or UK data-protection law, we rely on the data-processing and transfer terms our providers offer, such as standard contractual clauses where they are included. You can ask us which arrangement applies.
You may contact us to request information about applicable safeguards and, where available, a copy subject to appropriate protection of confidential information. We do not describe a vendor as covered by an adequacy mechanism unless that coverage applies to the actual recipient and transfer.
11. How long we keep information
We retain personal information for the purpose for which it is needed, subject to applicable legal retention duties and justified legal holds.
Under our retention schedule:
| Record | Retention approach |
|---|---|
| Inbound enquiry that does not become a customer relationship | Normally deleted or anonymised after 12 months without substantive engagement |
| Optional marketing subscription | Kept until withdrawal or loss of the relevant purpose, with periodic inactivity reviews |
| Suppression record | Minimum information retained for as long as reasonably needed to respect an objection and prevent recontact; reviewed periodically |
| Security logs | Kept for the applicable mandatory period and any justified incident-investigation period, with restricted access |
| Customer, accounting, tax and legal records | Kept according to the applicable contract and statutory or claims requirements |
- Record
- Inbound enquiry that does not become a customer relationship
- Retention approach
- Normally deleted or anonymised after 12 months without substantive engagement
- Record
- Optional marketing subscription
- Retention approach
- Kept until withdrawal or loss of the relevant purpose, with periodic inactivity reviews
- Record
- Suppression record
- Retention approach
- Minimum information retained for as long as reasonably needed to respect an objection and prevent recontact; reviewed periodically
- Record
- Security logs
- Retention approach
- Kept for the applicable mandatory period and any justified incident-investigation period, with restricted access
- Record
- Customer, accounting, tax and legal records
- Retention approach
- Kept according to the applicable contract and statutory or claims requirements
Where law requires longer retention, we retain the necessary information for that limited purpose. We do not keep it active in marketing merely because another retention duty applies. Backup copies expire according to our documented backup cycle, and deletion restrictions are reapplied if a backup is restored.
You can request more information about the retention period or criteria applying to your records by contacting us.
12. Security
We use technical and organisational measures appropriate to the personal information and risks, including controlled access, confidentiality obligations and measures to protect information in storage and transit. No online service can guarantee absolute security.
If a personal-data or security incident requires notification, we notify the relevant people, customers or authorities in accordance with applicable law and our contractual responsibilities.
13. Your privacy rights
Depending on the law that applies and any permitted exceptions, you may have rights to request access, correction, deletion, restriction, portability, information about processing, or to object to certain processing. Where processing relies on consent, you may withdraw it.
Contact info@numaproc.com to make a request. We may ask for information reasonably necessary to verify your identity and locate the relevant record. We do not require government identity documents as a routine condition for marketing opt-out.
We respond within applicable legal time limits. Where EU or UK GDPR applies, this is generally within one month, with permitted extensions in appropriate cases and notice of the extension. Where applicable Indian grievance rules require resolution within one month, we follow that requirement.
India's DPDP framework has phased commencement. Rights under provisions not yet in force apply when those provisions become effective and their conditions are met; this does not limit rights already available under other applicable law or our ability to handle your request now.
If we hold the information only as a processor for a customer, we may refer the request to that customer and assist it as required. We remain responsible for responding concerning processing we control ourselves.
You may complain to the competent data-protection authority where applicable, including an EEA supervisory authority or the UK Information Commissioner's Office if the relevant law applies. This notice does not require you to give up that right. Indian statutory complaint routes apply according to the provisions in force and their procedural requirements.
14. Children
Our website and B2B services are intended for adults acting in a professional capacity. We do not knowingly seek personal information from children. If you believe a child has supplied information through our website, contact us so we can assess and address it, including deletion where appropriate and lawful.
15. Changes and contact
We update this policy when our practices or applicable requirements change. The current effective date appears at the top of this notice. Where required, we provide additional notice or obtain consent before a new use of information.
For questions, requests or grievances:
- Company
- NUMA TECHNOLOGY PRIVATE LIMITED
- Attention
- Grievance Officer (name will be updated shortly)
- info@numaproc.com
- Address
- 232/1, North Raja Street, Tuticorin, Thoothukkudi, Tuticorin-628001, Tamil Nadu, India
- Telephone
- +91 9566328397