Privacy Policy

Last updated: June 15, 2025

This Privacy Policy explains how RiyalVerse Technology Private Limited ("Company", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website https://group.riyalverse.com, or use our services, including but not limited to our XR, Metaverse, AI, and MedTech platforms (collectively, the "Service").

We comply with international privacy standards including the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA). By accessing our Service, you consent to our use of your personal data as described in this Privacy Policy.

1. Information We Collect

Personal Data

We collect personal information that you voluntarily provide, which may include:

• Full Name
• Email Address
• Phone Number
• Billing and Mailing Address
• Payment details (processed securely via payment gateways)
• Health-related data (where explicitly required by MedTech services, protected under HIPAA)

Usage & Technical Data

We collect information automatically when you use our Service, such as:

• IP Address
• Device ID, OS, and browser type
• Pages visited and time spent
• Referral sources

Cookies & Tracking

We use cookies and similar technologies for:

• Analytics (Google Analytics)
• Remarketing (Google Ads, Facebook Pixel)
• User preferences and authentication

2. Legal Basis for Processing (GDPR)

We collect and process your personal data under the following bases:

• Consent (for email communications and marketing)
• Contractual necessity (for payment, service delivery)
• Legal obligations (taxation, healthcare compliance)
• Legitimate interests (analytics, fraud prevention)

3. HIPAA Compliance (Health Data)

For our MedTech offerings, we take additional precautions to protect Protected Health Information (PHI). We ensure all data handling, transmission, and storage follow HIPAA security standards. Access to PHI is limited to authorized personnel and encrypted at rest and in transit.

4. How We Use Your Information

• To provide, manage, and maintain the Service
• To process payments and deliver paid services
• To send transactional and promotional emails
• To deliver remarketing and targeted ads
• To comply with legal and regulatory obligations

5. Sharing Your Information

We may share your personal data with:

• Payment processors (Stripe, Razorpay, etc.)
• Email service providers (e.g., SMTP, SendGrid)
• Analytics and advertising partners (Google, Meta)
• Healthcare data processors (for MedTech services)
• Government authorities (when legally required)

6. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal, accounting, or regulatory requirements. You may request data deletion at any time by contacting us.

7. Your Rights

Under GDPR, you have the right to:

• Access your data
• Rectify inaccurate information
• Withdraw consent or object to processing
• Request data portability
• Request deletion of your personal data

Under HIPAA (if applicable), you may:

• Request access to your PHI
• Request amendment or correction
• Request an accounting of disclosures

8. Email Communications

By using our services, you agree to receive transactional and informational emails (e.g., order confirmations, updates). You may also receive marketing emails unless you opt out. You can unsubscribe at any time using the link in the footer of our emails.

9. Remarketing & Behavioral Advertising

We use third-party services (like Google Ads, Meta Pixel) to deliver personalized ads based on your browsing behavior. These services may collect your data using cookies or similar technologies. You can opt out via browser settings or ad preference platforms such as:

• Google Ads Settings
• Facebook Ad Preferences

10. Data Security

We implement industry-standard security measures, including SSL encryption, access control, and secure storage to protect your personal and health-related data. However, no method is 100% secure.

11. Children's Privacy

We do not knowingly collect data from individuals under 13. If you believe your child has provided data without your consent, contact us immediately for deletion.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure data protection through standard contractual clauses or similar safeguards.

13. Links to Third-Party Sites

Our website may contain links to external sites. We are not responsible for the content or privacy practices of those sites. Please review their policies independently.

14. Cookies Policy

We use cookies for functionality, analytics, and marketing. You can control or delete cookies via browser settings. Disabling cookies may impact your experience.

15. Changes to This Policy

We may update this policy from time to time. Users will be notified of significant changes via email or through a notice on the website. Continued use of the Service after updates constitutes acceptance.

16. Contact Us

If you have any questions, requests, or concerns regarding this policy, contact:

• Company: RiyalVerse Technology Private Limited
• Email: info@riyalverse.com
• Address: Jondhan Kalan, Jondhan Kalan (68), Panipat, Haryana, 132107, India