Privacy policy

This Website Data Privacy Policy explains how Global Wave Dynamics (“GWD”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal data when you visit or interact with our website, online forms, digital campaigns, social media pages, events, webinars, downloadable resources, newsletters or other online services that link to this policy.

GWD is headquartered in India and provides business process management, outsourcing, Global Capability Center support and operational services for aviation, shipping, logistics, transportation, IT, finance, operations and back-office functions. This policy is designed to align with applicable Indian data protection and cyber laws, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000, together with the provisions, rules, directions and regulations in force from time to time.

If you are located outside India, additional privacy laws may apply to your personal data. Where such laws apply, we will handle your personal data in accordance with those requirements as well.

This policy applies to personal data collected through:

• The GWD website and landing pages, including globalwavedynamics.com and related campaign pages;
• Contact, enquiry, lead generation, subscription, demo request and event registration forms;
• Downloads such as whitepapers, calculators, case studies, reports and gated resources;
• Email campaigns, newsletters, social media campaigns, digital advertising and analytics;
• Business communications with prospects, customers, vendors, partners and website visitors;
• Career or recruitment forms, if submitted through the website or linked channels.

This policy does not override a separate customer, vendor, employment, candidate, master services, data processing or confidentiality agreement signed with GWD. Where GWD processes data on behalf of a customer, the customer agreement will normally control the processing of that customer data.

The personal data we collect depends on how you interact with us. We aim to collect only the data that is necessary for a clear, lawful and limited purpose.

Please do not submit sensitive personal data, special category data, government identification numbers, financial account credentials, health data, children’s data or third-party personal data through the website unless GWD specifically requests it for a lawful purpose and you are authorized to provide it.

We collect personal data in the following ways:

• Directly from you when you submit a form, download content, subscribe to updates, register for an event, request a proposal, apply for a role or communicate with us.
• Automatically when you use the website, through cookies, pixels, analytics, logs and similar technologies.
• From third parties such as CRM, email marketing, advertising, analytics, social media, webinar, recruitment, public business directory and lead intelligence service providers, where permitted by law.
• From GWD clients where personal data is provided for service delivery under a contract or statement of work.

Under India’s DPDP framework, we process personal data for a lawful purpose based on your consent or for certain legitimate uses permitted under applicable law. Where another privacy law applies, we may rely on the legal basis recognized by that law, including consent, steps requested before entering into a contract, performance of a contract, compliance with a legal obligation or another applicable lawful basis.

Where we rely on consent, the request will be presented independently of unrelated information in clear and plain language. It will describe the personal data to be processed, the specific purpose and the goods, services or uses enabled by that processing, and it will explain how you may withdraw consent, exercise your rights and raise a complaint. You may refuse or withdraw consent, and withdrawing consent will be as easy as giving it. Withdrawal will not affect the lawfulness of processing based on consent before withdrawal, but we will stop the relevant processing within a reasonable time unless continued processing is required or permitted by applicable law.

You may unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us. We may still send service, transactional, compliance or security-related communications where necessary.

If a registered consent manager or similar tool is made available for GWD services, you may be able to manage consent through that mechanism in addition to contacting GWD directly.

We use cookies, pixels, tags, web beacons, server logs and similar technologies to operate the website, understand usage, improve performance, personalize content and measure marketing effectiveness.

You can control cookies through browser settings and, where available, through the website cookie banner or preference center. Blocking certain cookies may affect website functionality or personalization.

When you first visit our website, a cookie consent banner may allow you to accept, reject or customize non-essential cookie preferences. Non-essential analytics, functional or marketing cookies will be used only after the required consent, or other legally valid choice has been obtained. You may change or withdraw your preferences through the available preference controls.

GWD may use your business contact information to send relevant updates about aviation, logistics, shipping, IT, finance, operations, back-office, outsourcing, GCC enablement, events, insights, calculators, case studies or service capabilities where we have obtained consent or another applicable legal basis. Each promotional email will provide an effective way to unsubscribe, and we will honor withdrawal or opt-out requests within the applicable period. Necessary service, security, legal or transactional communications may continue where permitted by law.

We do not sell personal data. We may share personal data where necessary for the purposes described in this policy.

We require service providers to use personal data only for authorized purposes and to maintain appropriate confidentiality, security and data protection controls.

Global Wave Dynamics does not sell, rent, trade, or commercially disclose personal data to third parties for independent marketing purposes.

Because GWD serves global businesses, personal data may be transferred to, accessed from or stored in countries outside your location, including India and other jurisdictions where GWD, its clients or service providers operate. We will take reasonable steps to ensure that such transfers are lawful, limited to the relevant purpose and protected through contractual, organizational and technical safeguards.

For personal data subject to India’s DPDP framework, GWD will comply with restrictions notified by the Government of India for transfers of personal data outside India, if and when applicable to the data and processing activity. For EEA/UK or other regulated data, GWD will use appropriate transfer safeguards such as contractual clauses or equivalent protections where required.

Where personal data is transferred outside India, GWD will implement appropriate contractual, technical and organizational safeguards designed to protect such data and comply with applicable transfer restrictions.

GWD uses reasonable technical, organizational, administrative and physical safeguards designed to protect personal data from unauthorized access, alteration, disclosure, loss, misuse or destruction. Security measures may include access controls, role-based permissions, authentication, encryption where appropriate, secure hosting, malware protection, vulnerability management, logging, monitoring, training, vendor due diligence, incident response and internal policies.

No system or transmission method is completely secure. If you believe your interaction with GWD is no longer secure, please contact us immediately using the details in the Contact section.

While GWD uses reasonable security safeguards, no electronic transmission or storage system can be guaranteed to be completely secure. This statement does not limit GWD’s obligations or any rights available to Data Principals under applicable law.

If a personal data breach occurs, GWD will promptly assess, contain, investigate and remediate the incident. Where the DPDP framework applies, GWD will notify each affected Data Principal in a concise, clear and plain manner and notify the Data Protection Board of India in the form, manner and within the timelines prescribed by applicable law. Notifications will include the information required by law, including the nature and extent of the breach, likely consequences, mitigation measures, safety steps available to affected individuals and relevant contact details.

Where a cyber security incident is reportable under CERT-In directions or other Indian cyber security requirements, GWD will assess and report the incident to CERT-In within the applicable prescribed timeline, to the extent the requirement applies.

We retain personal data only for as long as necessary for the specified purpose or as required by applicable law. Retention periods are determined by the nature of the data, the purpose notified to the Data Principal, the status of the relevant relationship or request, and applicable legal, security, tax, accounting, audit and dispute-resolution requirements. When consent is withdrawn or it is reasonable to assume that the specified purpose is no longer being served, we will erase the personal data and require our processors to erase it unless retention is necessary for compliance with applicable law.

When personal data is no longer required, we will delete, anonymize, aggregate or securely archive it in accordance with applicable law and internal retention practices. Backup and archival copies may take additional time to remove but will be protected from active use where feasible.

Subject to applicable law and verification, you may have the following rights in relation to your personal data:

• Right to access information about your personal data and how it is processed.
• Right to correction, completion or updating of inaccurate or incomplete personal data.
• Right to erasure of personal data where continued retention is not necessary for the specified purpose and is not required for compliance with applicable law.
• Right to withdraw consent where processing is based on consent.
• Right to grievance redressal through GWD’s designated contact.
• Right to nominate another individual to exercise your rights in the event permitted by law.
• Any other right available under applicable data protection laws in your jurisdiction.

We may ask you to verify your identity before acting on a request. We may decline or limit a request only where permitted by applicable law, including where continued processing or retention is necessary for compliance with law, the establishment, exercise or defense of legal claims, prevention or investigation of an offence, or another applicable statutory exception. Where GWD acts as a Data Processor for a client, we may refer the request to the relevant client and assist that client in accordance with the applicable contract and law.

GWD will respond to valid personal data requests within the timelines prescribed under applicable law, subject to identity verification and any lawful exceptions.

In accordance with applicable law, a Data Principal may nominate another individual to exercise rights on their behalf in the event of death or incapacity, subject to verification and applicable legal requirements.

Requests may be submitted through the Privacy Contact details provided below. GWD may verify the identity of the requester before processing any request and will respond within the timelines prescribed under applicable law.

To exercise your rights, withdraw consent, ask a question or raise a privacy complaint, please contact:

If you are not satisfied with our response, you may pursue the grievance process available under applicable law. Where the DPDP Act applies, you must first give GWD an opportunity to resolve the grievance through the contact details above before approaching the Data Protection Board of India in the manner prescribed.

Our website and services are intended for business users and are not directed at children. We do not knowingly collect children’s personal data through the website. If we learn that children’s personal data has been submitted without appropriate authorization, we will take reasonable steps to delete or restrict it, unless retention is required by law.

For the purposes of India’s DPDP framework, a child generally means an individual who has not completed eighteen years of age. Where GWD is required to process children’s personal data for any lawful and specific purpose, we will follow applicable requirements, including verifiable parental or guardian consent where required.

The website may contain links to third-party websites, platforms, videos, social media pages, payment tools, webinar platforms or embedded content. Those third parties may collect and use personal data under their own privacy policies. GWD is not responsible for the privacy practices of third-party websites or platforms that we do not control.

If you post comments, reviews, public messages or social media interactions about GWD, those posts may be visible to others depending on the platform settings. Please avoid posting personal, confidential or sensitive information in public areas.

GWD provides operational, IT, finance, back-office, aviation, shipping, logistics and GCC support services. In that context, GWD may process personal data provided by or on behalf of clients. For such data, GWD generally acts as a Data Processor and processes the data according to the client’s documented instructions and the applicable service agreement, statement of work, data processing addendum and confidentiality obligations.

If your personal data has been provided to GWD by one of our clients, please contact that client first for rights requests. Where appropriate, GWD will assist the client in responding to the request as required under the relevant contract and applicable law.

Please provide accurate, complete and current information when interacting with GWD. Please do not impersonate another person, submit false information, misuse our website, attempt unauthorized access or provide personal data about another individual unless you have the right to do so.

Depending on where you are located and whether the relevant law applies to GWD’s processing activities, you may have additional privacy rights. The following provisions apply only to the extent the relevant jurisdictional law applies.

European Economic Area (EEA)

Where the EU General Data Protection Regulation (GDPR) applies, individuals may have rights including access, rectification, erasure, restriction of processing, data portability, objection to certain processing, withdrawal of consent and the right to lodge a complaint with a competent supervisory authority. Where required, GWD will also use appropriate safeguards for transfers of personal data outside the EEA.

United Kingdom

Where UK data protection law applies, individuals may have rights including access, rectification, erasure, restriction of processing, data portability, objection to certain processing, withdrawal of consent and the right to complain to the UK Information Commissioner’s Office or another competent authority. Where required, GWD will use appropriate safeguards for international transfers of UK personal data.

California, USA

Where the California Consumer Privacy Act, as amended, applies, California residents may have rights to know or access certain personal information, request correction or deletion, and exercise applicable opt-out rights, subject to statutory exceptions. GWD will not discriminate against an individual for exercising rights available under applicable California law. Requests may be submitted using the Privacy Contact details in Section 15.

We may update this policy from time to time to reflect changes in our services, website, technology, vendors, legal obligations or business operations. The updated policy will be posted on the website with the revised effective date. Material changes may be highlighted through the website, email or other appropriate communication where required.