Indo MailPolicies & help › Privacy
UK Privacy Policy
Extra information for people in the United Kingdom under the UK GDPR and the Data Protection Act 2018. It adds to our main Data Protection Policy and does not replace it.
1. Who is responsible
INDO CHATS PRIVATE LIMITED (CIN U62012WR2026PTC295588), 168, GT Rd, near Aloka Cinema, Shibpur, Howrah, West Bengal 711102, India, is the controller of personal data processed for Indo Mail accounts. Contact: privacy@indoemail.in.
Indo Mail is offered worldwide from India. We have not yet appointed a representative in the UK under Article 27 of the UK GDPR; we will publish the representative's details on this page when appointed. Until then, write to privacy@indoemail.in.
2. What we collect and why
The data we collect is listed in section 2 of our Data Protection Policy. Under the UK GDPR we rely on these lawful bases:
| Purpose | Lawful basis |
|---|---|
| Providing your mailbox, storage, apps and support | Performance of our contract with you |
| Security, fraud and spam prevention, activity monitoring | Our legitimate interest in keeping the service and its users safe |
| Billing and tax records | Legal obligation |
| Optional features you switch on (Indo Mail AI, personalised ads if ever offered) | Your consent, which you can withdraw in Settings at any time |
| Responding to lawful requests from authorities | Legal obligation, assessed case by case |
3. International transfers
Indo Mail stores data in Amazon Web Services' Mumbai region in India. The UK has not made an adequacy decision for India. Where personal data of people in the UK is transferred to India, we rely on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses with our service providers, together with the security measures in our Security Whitepaper. You can ask for a copy of the relevant safeguards at privacy@indoemail.in.
4. Your rights
- Access a copy of your data.
- Correct inaccurate data.
- Erase your data (Settings → Accounts and Import → Delete account removes everything after 30 days).
- Restrict or object to processing based on legitimate interests.
- Data portability: export mail (.mbox) and contacts (.vcf or .csv).
- Withdraw consent for optional features at any time.
- Not be subject to decisions based solely on automated processing with legal or similarly significant effects. Our spam and security systems can pause sending for up to 24 hours; a person reviews every such case and you can appeal.
5. How long we keep data
As set out in our Data Retention Policy. Unused personal accounts are turned off after 12 months with five reminders and closed after 24 months.
6. Complaints
Write to privacy@indoemail.in or our Grievance Officer, Salena (grievance@indoemail.in). You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
7. Changes
We will update this page when the law or our practices change, and tell account holders about important changes by email.