Privacy Policy

This Privacy Policy ("Policy") describes how Wifi Dabba India Pvt Limited ("Dabba", "we", "us", or "our") collects, uses, processes, discloses, and protects your personal data when you access or use our website dabba.network ("Site") and associated services.

We are deeply committed to protecting your personal data and ensuring transparency about our data practices.

1. Who We Are

The Site dabba.network is owned and operated by Wifi Dabba India Private Limited. Wifi Dabba is the data controller responsible for processing your personal data in accordance with this Privacy Policy.

For any queries about this Policy or your data, contact us at: 📧 Email: hello@dabbanetwork.com

2. Scope of This Privacy Policy

This Policy applies to:

All visitors to our websites (dabba.network & dabba.com)
Users interacting with our content, tools, and features (e.g., blogs, newsletters)
Hotspot owners, LCO partners, and other stakeholders engaging with the Dabba Network through the Site

It does not cover external websites linked from our Site or third‐party services used independently by you.

3. What Data We Collect

We may collect and process various categories of personal data, either directly from you, automatically through your use of our Site, or via third parties.

a) Data you provide voluntarily:

Contact details: Name, email, phone number, postal address
Account data: Username, password, profile information
KYC/AML data: Identity documents, facial scans, video selfies, proof of address (handled via our verification partner, e.g., Sumsub)
Payment data: Limited payment information (we do not store full payment card details; payments are processed via secure third parties)
Feedback & correspondence: Survey responses, support queries, reviews, comments

b) Data we collect automatically:

Device and usage data: IP address, browser type, device identifiers, operating system
Usage analytics: Pages viewed, time spent, links clicked, referring URLs, site navigation paths
Location data: General geographic location inferred from IP address

c) Sensitive or biometric data:

Biometric identifiers: Facial images or scans for identity verification, processed via our partner Sumsub to verify liveliness and document authenticity

4. How We Use Your Data (Purposes and Legal Basis)

We process your personal data for the following purposes and legal bases:

Purpose	Legal Basis
To provide access to our Site, services, and content	Performance of a contract
To verify your identity, prevent fraud, and comply with AML/CFT laws	Legal obligation
To process payments and manage financial transactions	Performance of a contract
To send newsletters, updates, and marketing communications	Consent
To analyze site traffic, usage trends, and improve our offerings	Legitimate interests
To manage community engagement, support, and partnership programs	Legitimate interests
To protect network integrity, security, and enforce terms	Legitimate interests

Where we rely on consent (e.g., for marketing emails or non-essential cookies), you can withdraw your consent at any time.

5. Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to help us understand how users interact with our Site, measure performance, and improve our services.

Google Analytics uses cookies and similar technologies to collect and process data about your use of the Site, including:

Your IP address (anonymized in the EU/EEA before storage or further processing)
Device information, browser type and version
Operating system
Pages visited, time spent on pages, and navigation paths
Referral URLs

Google acts as our data processor and may also use the collected data for its own purposes as described in Google's Privacy Policy: https://policies.google.com/privacy

You can opt out of Google Analytics tracking by:

Using Google's browser add-on: https://tools.google.com/dlpage/gaoptout
Adjusting your cookie preferences through our cookie banner or settings

6. Cookies and Tracking Technologies

Our Site uses cookies, web beacons, and similar technologies to:

Enable essential website functions (e.g., login, session management)
Remember user preferences and settings
Measure website performance and audience analytics
Deliver personalized advertising or content (if applicable)

You can manage or disable cookies in your browser settings.

7. Sharing and Disclosure of Your Data

We may share your personal data with:

Verification providers: e.g., Sumsub, to perform KYC/AML checks
Payment processors: e.g., Stripe, PayPal (we do not store full card details)
IT and cloud hosting providers: e.g., AWS, Google Cloud, to operate our services
Analytics services: e.g., Google Analytics, to monitor website usage
Marketing platforms: to send newsletters or campaigns (only if you've opted in)
Legal and regulatory authorities: if required to comply with applicable laws
Professional advisors: auditors, lawyers, or consultants under confidentiality

We ensure that third parties only process your data according to our instructions and under data protection agreements.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction (e.g., cloud servers hosted in the USA or EU).

We implement safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfers to countries deemed to have adequate protection by the EU
Technical and organizational security measures

9. Retention of Your Data

We retain your data only as long as necessary:

To fulfil the purposes stated above
To comply with legal, accounting, and tax requirements
To resolve disputes and enforce agreements

Retention of biometric data:

Processed via Sumsub and retained only as per defined policies (e.g., destroyed after verification or within legally specified timelines)
Stored securely in data centers operated by AWS or Google Cloud, depending on region and compliance

When data is no longer required, it is securely deleted or anonymized. For more information please refer to Sumsub's privacy policy here: Sumsub's Privacy Notice

10. Data Security

We use technical and organizational measures to protect your data:

Encryption (HTTPS, SSL/TLS)
Secure data storage with access controls
Regular vulnerability assessments
Access restricted to authorized personnel under confidentiality obligations

While we strive to secure your data, no method of electronic transmission is completely secure.

11. Your Rights and Choices

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have rights to:

Access your personal data
Correct or update inaccurate data
Request deletion (right to be forgotten)
Object to or restrict processing
Withdraw consent at any time
Receive your data in a portable format (data portability)
Lodge a complaint with your local data protection authority

To exercise your rights, contact us at: hello@dabbanetwork.com

12. Children's Privacy

Our services are intended for users aged 18 and above. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, contact us so we can delete it promptly.

13. Third-Party Links

Our Site may contain links to external sites or services. We are not responsible for their content, privacy practices, or data handling. Please review their privacy policies separately.

14. Updates to This Policy

We may update this Privacy Policy occasionally. Updates will appear on this page with a revised effective date.

Significant changes will be communicated via email or Site notices. We recommend checking this page periodically.

15. Contact Us

If you have questions, concerns, or requests related to your personal data, contact:

Wifi Dabba
📧 Email: hello@dabbanetwork.com
🌐 Website: dabba.network

16. Additional Information

Automated decision-making: We do not use your data for profiling that produces legal or significant effects.
Data sources: Most data is collected directly from you; some technical data may come from analytics tools or verification partners.
Email: hello@dabbanetwork.com