Lotus365 Privacy Policy

Scope of This Privacy Policy

This Privacy Policy describes general privacy considerations relating to access to Lotus365-related websites, digital content, account features, communications, and other online interactions.

Its precise scope depends on the website operator and the services actually provided. It does not automatically cover independent third-party websites, applications, payment services, or external platforms linked from a website.

Third-party services may follow different privacy policies and data-handling practices. Users should review the relevant notices before submitting personal information to those services.

Information That May Be Collected

The information collected depends on how a visitor interacts with the website and which features are available.

How Personal Information May Be Used

Personal information should be processed for specific, legitimate purposes and in accordance with applicable legal requirements.

Depending on the website and its functionality, these purposes may include:

• Responding to enquiries and providing requested information.
• Maintaining website performance and technical functionality.
• Managing account-related requests where account services exist.
• Protecting systems against unauthorised access, fraud, and misuse.
• Maintaining security logs and investigating technical incidents.
• Understanding website performance and improving usability.
• Meeting applicable legal, regulatory, and recordkeeping obligations.
• Communicating important service or policy updates.

Promotional communications, where offered, should be handled in accordance with applicable consent, notice, and communication requirements.

The actual purposes and lawful grounds for processing must be confirmed by the relevant Lotus365 website operator rather than assumed from the brand name alone.

Cookies and Similar Technologies

Websites may use cookies, pixels, local storage, or similar technologies to support essential functionality, maintain preferences, analyse performance, or improve the browsing experience.

Some technologies may be necessary for technical operation or security. Others may require consent or additional disclosures under applicable law.

Visitors can review available browser controls to restrict or delete cookies. Disabling certain cookies may affect website functionality or prevent some preferences from being retained.

Where required, the website operator should provide appropriate information about non-essential cookies, the purposes for which they are used, and how users can manage their choices.

How Information May Be Shared

Personal information should not be shared without an appropriate purpose and a lawful basis.

Depending on the website's actual operations, information may be disclosed to authorised service providers involved in hosting, website maintenance, security, communications, analytics, or technical support.

Where relevant and lawfully available, information may also be shared with payment processors, identity-verification providers, professional advisers, or other organisations performing authorised functions.

Personal data may be disclosed to courts, regulators, law-enforcement agencies, or other public authorities when required or permitted by applicable law.

If a business transfer, restructuring, or similar corporate transaction occurs, personal information may be affected by that process, subject to applicable legal requirements and appropriate safeguards.

The specific recipients and sharing practices should be identified in the verified operator's privacy notice.

International Data Processing

Digital services may use hosting providers, technical infrastructure, or service partners located in different countries. As a result, personal information may be processed or stored outside the country from which a visitor accesses a website.

Where international data transfers occur, the responsible organisation should comply with applicable legal requirements and use any required safeguards.

Users should consult the relevant privacy notice for details about international transfers, the organisations involved, and any rights or protections that apply to their personal information.

No particular country, overseas office, or data-storage location should be attributed to Lotus365 without verified documentation.

Data Retention

Personal information should be retained only for as long as necessary for the purpose for which it was collected, subject to applicable legal obligations and other permitted requirements.

Retention periods may vary according to the information involved, the nature of the interaction, security needs, dispute resolution, and statutory recordkeeping obligations.

When information is no longer required, it should be deleted, anonymised, or otherwise handled in accordance with applicable requirements.

The specific retention periods used by a Lotus365 website must be confirmed with the responsible operator. This page does not establish a fixed retention period for any particular category of data.

Data Security

Protecting personal information is an important consideration for any digital service.

Appropriate technical and organisational safeguards may include access controls, secure communications, system monitoring, staff procedures, and measures intended to reduce the risk of unauthorised access, disclosure, alteration, or loss.

No online system can guarantee absolute security. Visitors should also take reasonable precautions by using strong passwords, protecting their devices, and avoiding suspicious links or unofficial websites.

If you suspect that your personal information has been exposed or an account has been compromised, use the verified contact channel of the relevant website operator to report the concern.

Your Privacy Rights

Privacy rights depend on the laws applicable to the individual and the organisation processing the data.

Depending on the circumstances, individuals may have rights to:

• Request information about the processing of their personal data.
• Seek correction or updating of inaccurate information.
• Request deletion where permitted by law.
• Withdraw consent where processing relies on consent.
• Raise a grievance or privacy-related complaint.
• Exercise other rights provided by applicable legislation.

Some rights may be subject to exceptions, including legal retention requirements, security considerations, or the need to establish or defend legal claims.

Requests should be directed to the verified privacy contact or responsible organisation identified in the applicable website notice. Additional information may be required to verify the identity of the requester and protect against unauthorised disclosure.

Privacy and Data Protection in India

Individuals accessing websites from India should consider the data-protection requirements applicable to the relevant organisation and processing activity.

India's Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025 establish a framework for the processing of digital personal data, subject to the provisions and implementation timelines applicable at the relevant time.

The responsible website operator should assess which provisions apply to its activities and maintain appropriate privacy notices, safeguards, and processes for handling data-related requests.

Nothing in this policy should be interpreted as a legal opinion about the compliance status of Lotus365 or any particular website. Users should consult current official legal materials or qualified advisers where necessary.

Children and Age Restrictions

Websites and services may be subject to age-related eligibility requirements depending on their nature and the laws that apply.

Personal information relating to children requires particular care. Where applicable law imposes requirements concerning children's data, parental consent, age assurance, or restrictions on certain processing activities, the responsible organisation should follow those requirements.

Parents and guardians should supervise children's internet use and help prevent unauthorised access to age-restricted websites and services.

If information relating to a child has been submitted inadvertently, the relevant website operator should be contacted through a verified channel to determine the appropriate next steps under applicable law.

Third-Party Websites and Services

A Lotus365-related website may include links to external websites, applications, social platforms, or other third-party services.

Once visitors leave the original website, their information may be handled under the third party's own policies and terms. The operator of the original website may not control those practices.

Before sharing information with an external service, check its domain, privacy policy, contact details, and requested permissions.

The presence of a link or logo does not, by itself, establish that the linked organisation is owned by, operated by, or affiliated with Lotus365.

Changes to This Privacy Policy

Privacy notices may need to be updated when website features, technical systems, data-processing practices, or legal requirements change.

When a revised policy is published, the update date should be displayed clearly. Where applicable law requires additional notice or consent for material changes, the responsible organisation should follow those requirements.

Visitors should review the latest published version periodically to understand how their information may be handled.

Contact Us About Privacy

If you have a question, concern, or request relating to personal information, contact the verified operator using the privacy or customer-support details published on the relevant website.

When submitting a request, explain the nature of your concern and provide only the information necessary to identify the issue. Do not include passwords, one-time codes, or unnecessary identity documents in ordinary messages.

This Privacy Policy should be reviewed against the actual data collected, services offered, third-party providers used, and laws applicable to the responsible organisation. It is general policy content and should not be treated as confirmation of Lotus365's ownership, compliance, or data-handling practices.