Privacy Policy.

We collect information you provide directly when using the ITW Universe platform, including:

• Personal information — name, email address, phone number, company name, job title, and business address provided during account registration or enquiry forms.
• Usage data — pages visited, features used, search queries, assets viewed, time spent on platform, and interaction patterns.
• Cookies & device data — browser type, IP address, device identifiers, operating system, and referring URLs.
• Payment information — billing address, GST number, and payment method details. Card numbers are processed by our PCI-DSS compliant payment processor and never stored on our servers.

Your information is used to:

• Service delivery — process bookings, manage campaigns, deliver marketplace functionality, and provide customer support.
• Communication — send booking confirmations, campaign updates, invoices, and respond to enquiries. Marketing communications are opt-in only.
• Marketplace matching — power our AI recommendation engine to match your brand with relevant sponsorship assets, talent, and opportunities.
• Analytics & improvement — understand platform usage patterns to improve features, pricing accuracy, and user experience. All analytics data is aggregated and anonymised.

We share your information only in the following circumstances:

• Rights holders & partners — when you initiate a transaction or enquiry, relevant details are shared with the rights holder or talent representative to facilitate the deal.
• Service providers — payment processors, cloud hosting providers (AWS Mumbai region), email delivery services, and analytics tools operating under strict data processing agreements.
• Legal obligations — when required by Indian law, court order, or regulatory authority.

We never sell your personal data to third parties.

We implement industry-standard security measures to protect your data:

• AES-256 encryption for all data at rest and TLS 1.3 for data in transit.
• SOC 2 Type II compliance — independently audited annually by a Big Four firm.
• Regular security audits — quarterly penetration testing, continuous vulnerability scanning, and annual third-party security assessment.
• Access controls — role-based access, multi-factor authentication for all staff, and principle of least privilege enforced across all systems.

We use three categories of cookies:

• Essential cookies — required for platform functionality, authentication, and security. These cannot be disabled.
• Analytics cookies — anonymised usage data to improve platform performance and user experience. Processed via self-hosted analytics (no third-party tracking pixels).
• Marketing cookies — used only with your explicit opt-in consent to deliver relevant content recommendations and retargeting. You can withdraw consent at any time via your account settings.

Under applicable data protection laws, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Correction — update or correct inaccurate personal information.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Data portability — receive your data in a structured, machine-readable format (JSON or CSV).
• Opt-out — unsubscribe from marketing communications at any time via the link in any email or through your account settings.

To exercise any of these rights, email privacy@itwuniverse.com. We respond within 30 days.

Your data is primarily processed and stored in India (AWS Mumbai region). When data is transferred to our offices in Dubai or to service providers outside India, we ensure protection through:

• Standard Contractual Clauses (SCCs) with all international data processors.
• Compliance with the Digital Personal Data Protection Act, 2023 (India) and applicable cross-border data transfer regulations.
• Data processing agreements with all sub-processors that meet or exceed our own security standards.

For any privacy-related questions, data requests, or concerns: