Privacy Policy

Introduction

Welcome to Trebound, India's premium corporate team building company. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.trebound.com, use our services, or engage with us in any capacity. We are committed to protecting your personal information and your right to privacy.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

Information We Collect

We collect various types of information in connection with the services we provide, including:

Personal Information

When you interact with our website or services, we may collect personal information that you voluntarily provide, including but not limited to:

• Name and contact details (email address, phone number, postal address)
• Company name, designation, and business information
• Number of participants for team building activities
• Preferred destinations and activity preferences
• Payment and billing information (processed securely through payment gateways)
• Any other information you choose to provide through forms, surveys, or communications

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device identifiers and characteristics
• Referring website or source
• Pages visited, time spent on pages, and clickstream data
• Date and time of access

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience on our website. These technologies help us understand user behavior, remember your preferences, and improve our services. For detailed information about our use of cookies, please refer to Section 10 (Cookies Policy) below.

User-Generated Content

We may collect photos, videos, testimonials, and reviews that you voluntarily provide about your experience with our team building activities and services. By submitting such content, you grant Trebound a non-exclusive, royalty-free license to use, reproduce, and display this content for marketing and promotional purposes. We will always seek your explicit consent before using any identifiable images or testimonials publicly. You may request removal of your content at any time by contacting us at privacy@trebound.com. We will honor such requests within 30 days except where content is part of contractual deliverables already provided to your organization.

How We Use Your Information

We process your personal information for various purposes based on the following lawful grounds under the Digital Personal Data Protection Act, 2023:

• Consent: When you explicitly agree to our processing (e.g., marketing communications)
• Contract Performance: When processing is necessary to deliver services you have requested
• Legal Obligation: When required by Indian law (e.g., tax records, financial compliance)
• Legitimate Interests: When necessary for our business operations, provided your rights are protected

You have the right to withdraw consent at any time, though this may affect our ability to provide certain services.

Service Delivery and Contract Performance

• To process and fulfill your booking requests for team building activities, corporate retreats, and related services
• To communicate with you regarding your bookings, including confirmations, modifications, and updates
• To coordinate with our resort partners and activity providers on your behalf
• To provide customer support and respond to your inquiries

Marketing and Communications (With Your Consent)

• To send you promotional materials, newsletters, and updates about our services
• To inform you about special offers, new destinations, and team building activities
• To conduct surveys and gather feedback to improve our services

You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or contacting us directly at privacy@trebound.com.

Consent Management

When we rely on your consent to process personal data:

• We will obtain clear, informed, and freely given consent
• Consent requests will be separate from other terms and conditions
• You can withdraw consent at any time without affecting the lawfulness of prior processing
• Withdrawal of consent may affect our ability to provide certain services
• We maintain records of consent obtained

To withdraw consent, use the unsubscribe links in emails, adjust your account settings, or contact our Data Protection Officer at privacy@trebound.com.

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information with the following categories of recipients under specific circumstances:

Service Providers and Business Partners

We share necessary information with trusted third parties who assist us in operating our business and delivering our services:

• Resort partners and venue providers (650+ partners across India)
• Activity facilitators and instructors
• Payment processors and financial institutions
• IT service providers, hosting providers, and cloud storage services
• Marketing and analytics service providers
• Email communication platforms

All third-party service providers are contractually bound to protect your information and use it only for the specific purposes for which it was shared.

Corporate Clients and Team Administrators

When your company or organization books team building services through Trebound, relevant booking information and participation details may be shared with your designated team administrators, HR representatives, or event coordinators. This sharing is necessary to coordinate the event and ensure all participants receive appropriate information and services. Corporate clients remain responsible for obtaining necessary consent from their employees for participation in team building activities.

Legal and Regulatory Authorities

We may disclose your information when required by law or in response to valid legal processes, such as subpoenas, court orders, or regulatory requests. We may also share information to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of any such change and provide information about your rights regarding your personal data.

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing or direct us to do so.

Payment Information Security

The security of your payment information is of utmost importance to us. When you make a payment for our services, we use industry-leading secure payment gateways that comply with Payment Card Industry Data Security Standards (PCI DSS).

Important Payment Security Information:

• Trebound does NOT store your credit card, debit card, or banking information on our servers
• All payment transactions are processed through encrypted, PCI DSS-compliant third-party payment gateways
• Payment information is transmitted using secure SSL (Secure Socket Layer) encryption technology
• We only retain transaction reference numbers and basic payment confirmation details for accounting and record-keeping purposes
• Our payment partners maintain the highest security standards to protect your sensitive financial data
• In case of suspected payment fraud, we may share limited information with law enforcement and financial institutions as permitted by law

Your Rights and Choices

Under the Digital Personal Data Protection Act, 2023, and other applicable data protection laws, you have certain rights regarding your personal information:

Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used electronic format upon verified request.

Right to Correction

You have the right to request correction of any inaccurate or incomplete personal information we hold about you. We will make reasonable efforts to update your information within 7 business days of receiving your request.

Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information, subject to certain legal exceptions such as:

• Legal or regulatory retention requirements (e.g., tax records must be kept for 7 years)
• Active contractual obligations or ongoing disputes
• Legitimate business purposes, such as fraud prevention

Right to Withdraw Consent

Where we process your data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal. However, withdrawal may affect our ability to provide certain services.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.

Right to Nominate

Under the Digital Personal Data Protection Act, 2023, you have the right to nominate another individual who may exercise your rights as a Data Principal in the event of your death or incapacity. To exercise this right, please contact us at privacy@trebound.com with the nominee's details.

Right to Grievance Redressal

If you have a grievance regarding our handling of your personal data:

• Contact our Data Protection Officer at privacy@trebound.com
• We will acknowledge your complaint within 72 hours
• We will investigate and respond within 30 days
• If unsatisfied with our response, you may lodge a complaint with the Data Protection Board of India

How to Exercise Your Rights

To exercise any of your rights under this Privacy Policy, please contact us through:

• Email: privacy@trebound.com (recommended)
• Phone: +91 080952 04666
• Written correspondence to our registered office address (see Section 20)

We will verify your identity before processing requests. You may be required to provide:

• Booking reference number, or
• Email address on file, or
• Other identifying information

We will respond to verified requests within 30 days or inform you if additional time is needed.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Technical Safeguards

• 256-bit SSL/TLS encryption for data transmission
• Encrypted data storage for sensitive information
• Regular security audits and vulnerability assessments
• Multi-factor authentication for employee access to systems
• Firewall protection and intrusion detection systems
• Regular data backups with secure storage

Organizational Safeguards

• Employee confidentiality agreements and data protection training
• Role-based access controls (employees access only data necessary for their role)
• Background verification for employees handling sensitive data
• Regular security awareness programs
• Incident response and business continuity plans
• Strict vendor management and third-party security assessments

Physical Safeguards

• Secure data centers with restricted access
• 24/7 monitoring and surveillance
• Environmental controls for server protection
• Secure disposal procedures for physical documents and storage media

Security Certifications and Compliance

While we implement robust security measures and encrypt data both in transit and at rest, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information. However, we will notify you promptly of any security breach that may affect your personal data, as required by law. In the unlikely event of a data breach, please refer to Section 9 for our notification procedures.

Data Retention

While we implement robust security measures and encrypt data both in transit and at rest, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information. However, we will notify you promptly of any security breach that may affect your personal data, as required by law. In the unlikely event of a data breach, please refer to Section 9 for our notification procedures.

Specific Retention Periods:

• Booking and Service Information: 7 years from date of service (for accounting, tax compliance, and audit requirements under Indian law)
• Marketing Communications Data: Until you unsubscribe or withdraw consent, after which we will delete within 30 days
• Website Analytics Data: 26 months (in line with industry standards and analytics platform requirements)
• Customer Support Records: 3 years after last interaction for quality assurance and dispute resolution
• User-Generated Content: Until you request deletion or revoke consent for use, subject to contractual obligations
• Payment Transaction Records: 7 years (financial record-keeping and compliance requirements)
• Legal and Compliance Data: As required by applicable laws, court orders, or ongoing legal proceedings

After the retention period expires, we will securely delete or anonymize your personal data unless we are required to retain it longer by law. You may request earlier deletion by contacting us at privacy@trebound.com, subject to legal retention requirements.

Data Breach Notification

We take data security very seriously and have implemented comprehensive measures to prevent data breaches. However, in the unlikely event of a data breach that affects your personal information:

Our Response Procedure:

• We will immediately investigate and contain the breach to prevent further unauthorized access
• We will notify the Data Protection Board of India as required by the Digital Personal Data Protection Act, 2023
• If the breach poses significant risk to your rights and freedoms, we will notify you directly via email or phone within 72 hours of becoming aware of the breach
• We will provide information about the nature of the breach, categories of data affected, potential consequences, and remedial measures taken
• We will take immediate steps to remediate the vulnerability and implement additional security measures
• We will cooperate fully with regulatory authorities and law enforcement in any investigation

To Report a Suspected Breach:

If you suspect unauthorized access to your account or a potential data breach, please contact us immediately:

• Email: security@trebound.com
• Phone: +91 080952 04666
• Available: 24/7 for security incidents

Cookies Policy

This section explains how we use cookies and similar tracking technologies on our website.

What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit our website. They help us provide you with a better user experience by remembering your preferences, analyzing website traffic, and improving our services.

We use both session cookies (which expire when you close your browser) and persistent cookies (which remain for a specified duration). Session cookies are temporary and help with immediate website functionality, while persistent cookies remember your preferences for future visits.

Types of Cookies We Use

Essential Cookies: These cookies are strictly necessary for the operation of our website. They enable core functionality such as security, network management, and accessibility. Without these cookies, services you have requested cannot be provided. These cookies do not store personally identifiable information.

Performance/Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether users receive error messages. This data helps us improve website performance and user experience. All information collected is aggregated and anonymous. We retain analytics data for 26 months.

Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred language or region) and provide enhanced, personalized features.

Targeting/Advertising Cookies: These cookies are used to deliver relevant advertisements and track campaign effectiveness. They may be set by our advertising partners and used to build a profile of your interests.

Third-Party Cookies and Analytics

Our website may use third-party services such as Google Analytics, Facebook Pixel, and LinkedIn Insights that place cookies on your device. These services help us understand how visitors interact with our website and improve our marketing efforts. These third parties have their own privacy policies governing their use of information.

You can read Google's privacy policy at: http://www.google.com/privacy.html

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, if you disable cookies, some features of our website may not function properly.

To learn more about cookies and how to manage them, visit:

• www.allaboutcookies.org
• www.cookiecentral.com

You can also adjust your cookie preferences through our Cookie Preference Center [if implemented] or by contacting us at privacy@trebound.com.

Email Newsletter and Marketing Communications

With your consent, we may send you email newsletters, promotional offers, and marketing communications about our team building services, new destinations, special offers, and company updates.

Your Choices:

• You can opt out of receiving marketing emails at any time by clicking the 'unsubscribe' link at the bottom of any marketing email
• You can also contact us directly at privacy@trebound.com to update your communication preferences
• Even if you opt out of marketing communications, we may still send you transactional emails related to your bookings and services
• We will never share your email address with third parties for their marketing purposes without your explicit consent
• We use double opt-in for marketing lists to ensure consent is genuine

CAN-SPAM Compliance: We comply with the CAN-SPAM Act and other applicable email marketing regulations by:

• Not using false or misleading subject lines or email addresses
• Identifying marketing messages appropriately
• Including our physical business address in emails
• Honoring opt-out requests promptly (within 10 business days)
• Monitoring third-party email service providers for compliance

Compliance with Digital Personal Data Protection Act, 2023

Trebound is committed to full compliance with the Digital Personal Data Protection Act (DPDPA), 2023. As a Data Fiduciary under the DPDPA, we process your personal data lawfully, fairly, and transparently in accordance with the Act and its regulations.

Our DPDPA Commitments:

• Process personal data lawfully, fairly, and transparently
• Collect data only for specified, explicit, and lawful purposes
• Ensure data accuracy and implement reasonable security safeguards
• Delete or anonymize data when the purpose is fulfilled or retention period expires
• Honor your rights as a Data Principal under the DPDPA
• Maintain comprehensive records of our data processing activities
• Ensure our Data Processors (service providers) comply with DPDPA requirements

Your Rights as a Data Principal:

Under the DPDPA 2023, you have the following rights regarding your personal data:

• Right to Access: Know what personal data we hold about you
• Right to Correction: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity
• Right to Withdraw Consent: Withdraw your consent at any time (subject to contractual obligations)
• Right to Grievance Redressal: Lodge complaints with us or the Data Protection Board of India
• Right to Data Portability: Receive your data in a machine-readable format

Data Protection Board of India:

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Data Protection Board of India. Contact details for the Board will be provided once officially published by the Indian government.

Social Media Platforms

Trebound maintains an active presence on various social media platforms including Instagram, Facebook, LinkedIn, and WhatsApp. When you interact with us through social media, please be aware that your communications are governed by the privacy policies of those platforms in addition to this Privacy Policy.

Important Social Media Guidelines:

• We will never ask for sensitive personal information (such as passwords, financial details, or identity documents) through social media platforms
• For sensitive or confidential matters, please contact us through secure channels such as email at privacy@trebound.com or phone
• Information you post publicly on social media may be visible to others and is subject to the privacy settings you have configured on those platforms
• We encourage you to review the privacy policies of each social media platform you use

Social Sharing Buttons:

Our website may include social sharing buttons that allow you to share content directly to social media platforms. When you use these buttons, the social media platform may track your action and associate it with your social media account. Please review the privacy policies of these platforms to understand how they handle your information.

Shortened Links:

We may occasionally share shortened URLs on social media platforms. While we take precautions to ensure these links are genuine, social media platforms can be vulnerable to spam and hacking. Please exercise caution when clicking on any links, even those shared by Trebound. We cannot be held liable for any issues arising from clicking on shortened links.

Adverts and Sponsored Links

Our website may contain advertisements, sponsored links, or promotional content from carefully selected partners. These advertisements may be served through our advertising partners, who may have their own privacy policies regarding the information they collect.

Important Information About Advertising:

• Third-party advertisers may use cookies for conversion tracking and referral attribution
• Advertisement cookies typically expire after 30-90 days
• We do not control the privacy practices of advertisers and recommend reviewing their privacy policies
• Clicking on sponsored links will redirect you to the advertiser's website, where our Privacy Policy no longer applies
• You click on any advertisements or sponsored links at your own risk, and Trebound is not liable for any damages resulting from such interactions

Do-Not-Track Signals and Similar Mechanisms

Some web browsers transmit 'do-not-track' (DNT) signals to websites. Currently, there is no industry-wide standard for how websites should respond to these signals. At this time, our website does not respond to DNT signals. However, you can control cookies through your browser settings and opt out of interest-based advertising through industry opt-out platforms. If and when a final industry standard for DNT signals is established, we will update our practices accordingly and notify users through this Privacy Policy.

Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Trebound. We are not responsible for the privacy practices, content, or security of these third-party sites. We strongly advise you to review the privacy policies of any third-party services you access through our website. This Privacy Policy applies only to information collected by Trebound. You access external links at your own risk, and we cannot be held liable for any damages or privacy issues arising from visiting third-party websites.

Children's Privacy

Our services are designed for corporate clients and business professionals. In accordance with the Digital Personal Data Protection Act, 2023:

• We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental or guardian consent
• If a parent or guardian believes we have inadvertently collected data from a minor, please contact us immediately at privacy@trebound.com
• We will promptly delete such information upon verification
• For corporate team-building events that may include participants under 18 (e.g. interns, young professionals), we ensure appropriate consent is obtained from the employer and, where required, the individual

For Corporate Clients: If your team building event includes participants under 18 (e.g. interns, young professionals), please inform us in advance so we can obtain appropriate consent and implement additional privacy protections.

International Data Transfers

While we primarily operate within India and store data on servers located in India, some of our service providers and technology partners may be located in other countries. When we transfer your personal information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable data protection laws.

Service Providers Located Outside India:

We may transfer your personal data to the following types of service providers:

• Cloud hosting providers (e.g. AWS, Google Cloud - with servers primarily in India and Asia regions)
• Email marketing platforms
• Customer relationship management systems
• Analytics providers
• Payment processing partners

Safeguards We Implement:

• Standard Contractual Clauses approved under applicable data protection laws
• Ensuring recipient countries provide adequate data protection standards
• Binding corporate rules for multinational service providers
• Specific consent where required by DPDPA 2023
• Data Processing Agreements with all international service providers

Countries We May Transfer Data To:

• United States (for certain software services with Standard Contractual Clauses)
• European Union countries (covered by adequacy decisions)
• Singapore (for regional data processing and cloud hosting)
• Other countries as approved by the Data Protection Board of India

We will obtain your explicit consent before transferring your data internationally if required under DPDPA 2023 or if the transfer involves sensitive personal data. You can withdraw consent for international transfers at any time by contacting privacy@trebound.com, though this may affect our ability to provide certain services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology developments, or business operations. Any changes will be posted on this page with an updated 'Last Updated' date at the top of the policy. We encourage you to review this Privacy Policy periodically.

For material changes that significantly affect your rights or how we use your personal information, we will provide prominent notice on our website or notify you directly via email (if we have your email address).

Material changes may include:

• Changes to the categories of personal data we collect
• Changes to how we share your data with third parties
• Changes to data retention periods
• Changes to your rights under this policy
• Changes required by new data protection regulations

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, please discontinue use of our website and services and contact us to close your account or delete your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

TREBOUND

Website: www.trebound.com

General Inquiries:

Email: contact@trebound.com

Phone: +91 080952 04666

Data Protection Officer (Privacy Matters):

Email: privacy@trebound.com

Phone: +91 080952 04666

Security Incidents:

Email: security@trebound.com

Phone: +91 080952 04666 (24/7 for security incidents)

Social Media:

Instagram: @trebound

Facebook: Trebound

LinkedIn: Trebound

Registered Office:

Trebound

Le Paraguas Consultants Pvt. Ltd., #10, 5th B Cross, Shardamba Nagar, Jalahalli,

Bangalore, 560013, Karnataka

India

We are committed to resolving any privacy concerns you may have and will respond to your inquiries within a reasonable timeframe:

• General inquiries: Within 7 business days
• Privacy rights requests: Within 30 days
• Security incidents: Within 72 hours
• Data breach notifications: Within 72 hours (where required)

Your Consent

By using our website, registering for our services, or providing your personal information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy and in accordance with the Digital Personal Data Protection Act, 2023.

If you do not agree with this Privacy Policy, please do not use our website or services. You have the right to withdraw your consent at any time by contacting us at privacy@trebound.com, though withdrawal may affect our ability to provide certain services.

For specific processing activities that require explicit consent, we will obtain your consent separately and inform you of the consequences of withdrawal.

Thank you for trusting Trebound with your team-building needs.

Transform Your Team Into Champions

Your Ultimate Team Building and Experience Hub

© 2026 Trebound. All Rights Reserved.

This Privacy Policy complies with the Digital Personal Data Protection Act, 2023