Purpose
This Policy sets out how we (Stellar) process the personal data of individuals (each a “User”, “you”,
“your”) who contact us or who use our websites, services, programs, content and
related features (collectively, the “Services”). It sets out our views and practices regarding your
personal data and how we will treat it. We will let you know, by posting on our website or otherwise,
if we make any changes to this policy from time to time. Your continued use of the Services after
notifying such changes will amount to your acknowledgement of the amended policy
Scope
This policy applies to all individuals who access, use or control Stellar owned resources. This includes
but is not limited to Stellar employees, contractors, consultants, and other workers including all
personnel affiliated to external organizations with access to the Stellar network.
The term employee(s), its synonyms (staff, personnel etc.) and vice versa hereafter encompasses the
scope defined in the paragraph above.
References:
ISO 27002 – Information Security Guidelines
Acronyms:
ISO 27002 – Information Security Guidelines
4.1. CISO: Chief Information Security Officer
4.2. CIA: Confidentiality, Integrity, Availability
4.3. QMS: Quality Management System
4.4. ISMS: Information Security Management System
4.5. IP: Internet Protocol
4.6. URL: Uniform Resource Locator
4.7. TCP: Transmission Control Protocol
4.8. SAR: Subject Access Request
4.9. SSL: Secure Sockets Layer
Policy
Personal data
“Personal data” means any information relating to an identified or identifiable natural person, known
as ‘data subject’, who can be identified directly or indirectly; it may include name, address, email
address, phone number, IP address, location data, cookies, call recording and similar information. It
may also include “special categories of personal data” such as racial or ethnic origin, political opinions,
religious or philosophical beliefs, or trade union membership, and the processing of genetic data,
biometric data for the purpose of uniquely identifying a data subject, data concerning health or data
concerning a natural person’s sexual orientation.
What personal data do we process?
We may process the following personal data:
- Information provided by you. You may give us information about you by filling in forms such
as the contact form on our website or the Content Download Form, making applications in
respect of job postings, corresponding with us by e-mail, phone or otherwise. This
information may include your name, mailing address (including zip code) email address,
employer, job title and department, telephone number and facsimile numbers, the content
of any email you send to us and other personal identifying information.
- Information about others. You may also provide us personal data relating to third parties,
such as people who you work with, reporters and other individuals who comment on
markets and news, business actors relevant to your industry and other individuals.
- Information about your device. About each of your visits to our website we may collect
technical information about your device. This information is compiled and analyzed on
both a personal and an aggregated basis. This information may include the Web site’s
Uniform Resource Locator (“URL”) that you just came from, which URL you go to next, what
browser you are using, and your Internet Protocol (“IP”) address. A URL is the global
address of documents and other resources on the World Wide Web. An IP address is an
identifier for a computer or device on a Transmission Control Protocol/Internet Protocol
(“TCP/IP”) network, such as the World Wide Web. Networks like the World Wide Web use
the TCP/IP protocol to route information based on the IP address of the destination. In
other words, an IP address is a number that is automatically assigned to your computer
whenever you are surfing the web, allowing web servers to locate and identify your
computer. Computers require IP addresses for users to communicate on the Internet.
- Information from third party sources. This may include information received from our
service providers and other third parties providing us with your information which is
publicly available or collected by them.
How do we use your personal data?
We will only process personal data, in accordance with applicable law, for the following purposes:
- Responding to your queries, requests and other communications.
- Providing the Services including our website and related features as well as providing other information services.
- Resolve disputes, troubleshoot problems and enforce our agreements with you, including our Site Terms of Use, Sales Terms and Conditions, and this Privacy Policy.
- Enabling suppliers and service providers to carry out certain functions on our behalf in order to provide the Services such as sending postal mail and e-mail, removing repetitive information from customer lists, analyzing data, providing marketing assistance, etc. These third-party service providers have access to personal data needed to perform their functions but may not use it for other purposes. We do not sell, rent, share, or otherwise personally disclose data from customers for commercial purposes.
- Register to subscribe to newsletters.
- Participate in discussion forums.
- Diagnose problems with our servers, software, to administer our site, to gather demographic information and to track visitors to our website.
- Sending you personalized marketing communications based on your interests opted upon filling forms on our website.
- Serving personalized advertising to your devices, based on your interests in accordance with our Cookie Statement. You have the right to disable cookies as set out in Cookie statement.
- Complying with applicable law, including in response to a lawful request from a court or regulatory body.
Disclosure of personal data
There are circumstances where we may wish to disclose or are compelled to disclose your personal data to third parties. These scenarios include disclosure to:
- Our affiliates and subsidiaries.
- Our service providers who capture and store data collected through the forms that are filled by visitors to our website.
- Subject to appropriate legal basis such as consent, our advertising and marketing teams who enable us, for example, to deliver personalized ads to your devices or who may contact you by email, telephone, SMS or by other means.
- Our service partners to operate our website and better serve the visitors to our website:
- Payer, such as your employer, who pays for our products and services.
- Public authorities where we are required by law to do so; and
- Other third parties where you have provided your consent.
The service providers are contractually bound not to share Personal data collected from visitors to our website with anyone else.
Data subject rights
- Right to make a subject access request (SAR): Data subjects may request in writing copies of
their personal data. However, compliance with such requests is subject to certain
limitations and exemptions and the rights of other individuals. Each request should make
clear that a SAR is being made. You may also be required to submit a proof of your identity
and any payment permitted by law, where applicable.
- Right to rectification: Data subjects may request that we rectify any inaccurate or incomplete
personal data.
- Right to withdraw consent:: Data subjects may at any time withdraw their consent to the
processing of their personal data carried out by us based on their previous consent. Such
withdrawal will not affect the lawfulness of processing based on such previous consent.
- Right to object to processing including automated processing and profiling: We do not make
automated decisions about data subjects. However, we may rely on information provided by third parties such as credit reference agencies which may score data subjects based on
automated decisions. Profiling may be carried out for business administration purposes,
such as monitoring trends in User visits of our website and in order to deliver relevant ads
to Users’ devices. We will comply with valid objection requests unless we have a
compelling overriding legitimate ground for the continuation of our processing, or we have
another lawful reason to refuse such request. We will comply with each valid opt-out
request in relation to marketing communications.
- Right to erasure: Data subjects may request that we erase their personal data. We will
comply unless there is a lawful reason for not doing so. For example, there may be an
overriding legitimate ground for keeping the personal data, such as, our business record
retention obligations that we must comply with.
- Restriction: Data subjects may request that we restrict our processing of their personal data
in various circumstances. We will comply, unless there is a lawful reason for not doing so,
such as, a legal obligation to continue processing your personal data in a certain way.
- Right to data portability: In certain circumstances, data subjects may request the controller
to provide a copy of their personal data in a structured, commonly used and machinereadable format and have it transferred to another provider of the same or similar services.
We do not consider that this right applies to our Services. However, to the extent it does,
we will comply with such transfer request. Please note that a transfer to another provider
does not imply erasure of the data subject’s personal data which may still be retained for
legitimate and lawful purposes.
- Right to lodge a complaint with the supervisory authority: We suggest that data subjects
contact us about any questions or complaints in relation to how we process their personal
data. However, each data subject has the right to contact the relevant supervisory
authority directly.
Cookies and Similar Technologies
This site uses cookies and similar technologies to track aspects of you and other people who visit us.
This tracking is done to provide us with information on how people move about the site, what is of
interest to them and what is not, how our marketing is performing, and incidental items such as what
percentage of users access the site from a personal computer versus a mobile phone. You may block
most cookies by adjusting your browser settings as well as responding to the cookie consent notice
that appears when you visit this site.
Cookies used on our website are categorized as follows:
Strictly Necessary Cookies
These cookies are essential for the operation of the website and cannot be disabled. They
are used to enable core functionality such as security, network management, and
accessibility.
Non-Essential Cookies
Non-essential cookies, such as analytics and functional cookies, are used to collect information
about how visitors interact with the website and to improve website performance and
functionality. These cookies are used only after obtaining user consent.
Data Security
We take due care to protect customer data. Technical measures are in place to prevent unauthorized
or unlawful access to data and against accidental loss, destruction, or damage to data. The employees
who are dealing with the data have been trained to protect the data from any illegal or unauthorized
usage.
We work to protect the security of your information during transmission by using Secure
Sockets Locker (SSL) software, which encrypts information you input. SSL allows sensitive
information to be transmitted securely.
We maintain physical, electronic, and procedural safeguards in connection with the
collection, storage and disclosure of personal customer information.
We take reasonable steps to help protect your personal information in an effort to prevent
the loss, misuse, unauthorized access, disclosure, alteration, and destruction of such
information. It is your responsibility to protect your usernames and passwords to help
prevent anyone from accessing or abusing your accounts and services. You should not use
or reuse the same passwords you use with other accounts as your password for our
services.
It is important for you to protect against unauthorized access to your password and your
computers, devices, and applications. Be sure to sign off when you finish using a shared
computer.
The information you provide to us is shared on our secure servers. We have implemented
appropriate physical, technical and organizational measures designed to secure your
information against accidental loss and unauthorized access, use, alteration, or disclosure.
In addition, we limit access to personal data to those employees, agents, contractors, and
other third parties that have a legitimate business need for such access.
Information collected from you will be stored for such period as required to complete the
transaction entered with you or such period as mandated under the applicable laws.
Links to Third Party Site/Apps
Our Site may, from time to time, contain links to and from other websites of third parties. Please note
that if you follow a link to any of these websites, such websites will apply different terms to the
collection and privacy of your personal data, and we do not accept any responsibility or liability for
these policies. When you leave our Site, we encourage you to read the privacy policy of every website
you visit.
Newsletter
Following subscription to Stellar’s newsletter, your e-mail address is used for our advertising purposes
until you cancel the newsletter again. Cancellation is possible at any time. The following consent has
been expressly granted by you separately, or possibly in the course of an ordering process: (I am
accepting to receive newsletter from this website). You may revoke your consent at any time with
future effect. If you no longer want to receive the newsletter, then unsubscribe by clicking on
unsubscribe option given in the email footer.
Enforcement
Stellar expects all employees to comply with this policy and any related policy, standards, processes,
procedures and guidelines. Failure and/or refusal to abide by this policy may be deemed as violations.
Compliance with the policies will be a matter for periodic review by the Information security officer /
Information Security Team. Any employee found to have violated this policy may be subject to
disciplinary action, as deemed appropriate by the policies of management and Human Resources.
- Monitoring: The company employs appropriate technological solutions to monitor policy/
procedure compliance.
- Self-Assessment: Managers and Department Heads are required to conduct selfassessment within their areas of control to verify compliance with this policy/ procedure.
- Security Audits: Internal Audit may assess the implementation of and compliance with this
policy/ procedure as part of its audit program.
Special Circumstances and Exceptions
All exceptions to this policy/ procedure will require a waiver explicitly approved by Stellar Management.
Contact
For any concerns, questions or grievances about privacy, please contact us with a thorough
description and we will try to resolve the issue for you.
Contact Details
Email: Compliance@stellaripl.com
- Address :
- Attention – Compliance Department
- Stellar Innovations Private Limited,
- TIRUMALA
- 27, Doddanekundi,
- Phase II Industrial Area, Mahadevepura Post,
- Bangalore, Karnataka - 560048.
(Last Updated March 13, 2026)