Privacy Notice
Arborworld India Pvt Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This notice explains what personal data we collect, why we collect it, and the rights you have in relation to it.
Last updated 10 August 2026
Version history
- 10 August 2026Current- First published version of this notice.
When we revise this notice, the version you are reading now will stay published here so you can always see what you were told at the time.
1. Who we are
Arborworld India Pvt Ltd, which operates the Sammati brand, having its registered office at 164, 25th Main, Judicial Layout, Allalasandra, G.K.V.K., Bangalore North, Bangalore, 560065, Karnataka. If you have any questions about this notice, you can contact us at [email protected].
2. Personal data we collect
We may collect the following categories of personal data:
- Identity and contact details (name, email address, phone number, postal address)
- Account or registration details, where you create an account with us
- Transaction and payment-related information
- Technical data (IP address, device and browser information) when you use our website or services
- Any other information you choose to provide to us directly
3. Why we collect it
We process your personal data only for specified, lawful purposes, including to:
- Provide and deliver our products and services to you
- Respond to your queries and provide customer support
- Process payments and maintain transaction records
- Comply with applicable legal and regulatory obligations
- Communicate updates, where you have consented to receive them
4. Basis for processing
We process your personal data on the basis of your consent, or for certain lawful purpose permitted under applicable law. Where processing is based on consent, you may withdraw it at any time, and withdrawal will not affect the lawfulness of processing carried out before withdrawal.
5. How we collect your data
We collect personal data:
- Directly from you, when you create an account, contact us, or otherwise interact with us;
- Automatically, through cookies and similar technologies when you use our website or app (subject to the consent/notice mechanism presented at that time); and
- From third parties, such as payment processors or group companies acting on our behalf, where relevant.
6. How we share your data
We do not sell your personal data. We may share it, only to the extent necessary for the purposes stated above, with:
- Partners and vendors and processors who act on our behalf under contract, bound to process your data only on our instructions and to protect it;
- Group companies, where necessary for the stated purposes;
- Regulators, authorities, or other parties where required by law;
- Consent Managers, where you choose to manage your consents through a registered Consent Manager platform.
7. Cross-border transfers
We primarily process and store personal data in India. Where we transfer personal data outside India (for example, to a group company or a service provider located abroad), we do so in accordance with the applicable data protection laws, which permit transfer to any country or territory except those restricted by the Central Government by notification, and subject to any conditions the Government may specify. We take reasonable steps to ensure such transfers are protected by appropriate contractual and security safeguards.
8. Retention
We retain your personal data only for as long as necessary to fulfil the purposes set out above, or as required to meet legal, regulatory, or accounting obligations. We will erase your personal data when:
- you withdraw your consent and no other lawful basis applies;
- the purpose for which it was collected is no longer being served; or
- you have not engaged with us within the applicable retention period,
unless retention is required by law. On expiry of the retention period, personal data is securely deleted or anonymised.
9. Your rights
Subject to applicable law, you have the right to:
- Access a summary of the personal data we hold about you
- Request correction, completion, or updating of your data
- Request erasure of your data, where applicable
- Withdraw consent previously given
- Nominate another individual to exercise your rights in the event of death or incapacity
- Register a grievance with us
10. How to exercise your rights / withdraw consent
You may exercise any of the rights above, including withdrawing consent, by writing to our Grievance Officer.
Where you withdraw consent, we will stop the relevant processing (and, unless another lawful basis applies, erase the data) within a reasonable period. Note that withdrawing consent may affect our ability to provide a service that depends on that data.
11. How we protect your data
We have a robust network security and information security protocol for ensuring the protection of your data. We implement reasonable technical and organisational security measures to safeguard your personal data against unauthorised access, disclosure, alteration, or loss.
12. Grievance Officer / Contact
If you have any concern or complaint regarding the processing of your personal data, you may contact our Grievance Officer:
- Name
- Grievance Officer
- [email protected]
We will respond to your request within the timeframe prescribed under applicable law.
13. Changes to this notice
We may update this notice from time to time. The revised version will be posted at sammati.io/legal/privacy with an updated "Last updated" date, and earlier versions will remain listed in the version history above.