Privacy Policy

This Privacy Policy explains how Nomology Technology Private Limited, operating the platform CORD (Centre for Online Resolution of Disputes) ("CORD", "we", "us", or "our"), collects, uses, stores, and protects personal information when you access our website at resolveoncord.com, register a dispute, or use any CORD service (collectively, the "Services"). This Policy is to be read in conjunction with our Terms of Use.

By using our Services, you consent to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the Services.

We collect the following categories of personal information:

Identity and contact information: Name, email address, phone number, and postal address provided when you register or file a dispute.

Case and dispute information: Documents, statements, correspondence, evidence, and other materials submitted as part of dispute proceedings.

Financial information: Fee payments, invoicing details, and transaction records. We do not store full payment card details — payments are processed by authorised third-party payment processors.

Usage and technical information: IP address, browser type, device identifiers, pages visited, and session data collected automatically through cookies and analytics tools.

Communications: Emails, messages, and submissions exchanged through our platform or customer support channels.

KYC/identity verification data: Where required by law or our Rules, identity documents submitted for verification purposes.

We use your personal information to:

• Administer dispute resolution proceedings and case management.
• Verify identity and eligibility of parties and neutrals.
• Communicate with you about your case, platform updates, and service matters.
• Process fee payments and maintain financial records.
• Comply with applicable laws, regulatory obligations, and orders of courts or tribunals.
• Improve our platform, services, and user experience through analytics.
• Send administrative communications and, where you have consented, service-related updates.

We do not sell your personal data to third parties. We do not use case or dispute information for marketing or commercial profiling purposes.

All dispute proceedings administered by CORD — including pleadings, hearings, submissions, evidence, and awards — are strictly confidential. Information shared during proceedings is disclosed only to:

• The parties and their authorised representatives.
• The appointed neutral(s) in the matter.
• CORD case management staff directly responsible for the matter.
• Regulatory authorities or courts where required by law.

CORD's confidentiality obligations are governed by the CORD Rules of Arbitration, the CORD Mediation Rules, and the Arbitration and Conciliation Act, 1996, as applicable.

We process your personal information on the following legal grounds under applicable law, including the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000:

• Contractual necessity: Processing required to perform the services you have engaged us for, including administering dispute proceedings.
• Legal obligation: Processing required to comply with applicable laws, regulatory directions, or court/tribunal orders.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your rights.
• Consent: Where you have given explicit consent for specific processing activities, such as receiving newsletters or marketing communications.

We share your personal information only in the following limited circumstances:

• Neutrals: The appointed arbitrator(s), mediator, or conciliator in your matter will receive case documents and communications relevant to the proceedings.
• Service providers: We engage technology vendors, cloud hosting providers, payment processors, and communication platforms who process data on our behalf under strict confidentiality and data processing agreements.
• Regulatory and legal compliance: We may disclose information where required by SEBI, courts, arbitral tribunals, or other competent authorities under applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to equivalent privacy protections.

We require all third-party service providers to maintain appropriate security standards and to use your data only as instructed by us.

We retain your personal information for as long as necessary to:

• Administer your dispute proceedings and fulfil our contractual obligations.
• Comply with legal retention requirements — arbitration records are typically retained for a minimum of seven (7) years after the conclusion of proceedings, in accordance with applicable law.
• Resolve disputes, enforce agreements, and exercise or defend legal claims.

After the applicable retention period, personal data is securely deleted or anonymised. You may request deletion of non-mandatory data by contacting us at contact@resolveoncord.com.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Role-based access controls limiting access to case information to authorised personnel only.
• Regular security assessments and vulnerability testing.
• Incident response procedures in the event of a data breach.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your account.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where we have no legal basis to retain it.
• Right to withdraw consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to grievance redressal: Lodge a complaint with our Grievance Officer (details below) or with the Data Protection Board of India.

To exercise any of these rights, please write to us at contact@resolveoncord.com.

Our website uses cookies and similar tracking technologies to:

• Maintain session state and authentication.
• Analyse website traffic and usage patterns through tools such as Google Analytics.
• Remember your preferences.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our website. We do not use advertising or tracking cookies for third-party ad targeting.

Our website and platform may contain links to third-party websites, including SmartODR, regulatory portals, and partner websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any personal information.

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@resolveoncord.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by posting the updated Policy on our website with a revised effective date. Continued use of our Services after such notification constitutes your acceptance of the updated Policy.

In accordance with the Information Technology Act, 2000, and rules made thereunder, CORD has designated a Grievance Officer to address privacy-related concerns:

Grievance Officer: Shweta Devgan
Organisation: Nomology Technology Private Limited (CORD)
Email: contact@resolveoncord.com
Response time: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of courts in Bengaluru, Karnataka.