GDPR Privacy Notice

For individuals in the European Economic Area (EEA) and the United Kingdom

Effective date: 8 August 2026

This GDPR Privacy Notice supplements our main Privacy Policy and applies where LTTRBX Technolabs Pvt. Ltd. (“LTTRBX”, “we”) processes the personal data of individuals located in the EEA or the UK, in a manner subject to the EU General Data Protection Regulation (“GDPR”) or the UK GDPR. Where this Notice and the main Privacy Policy differ, this Notice prevails for EEA/UK data subjects.

1. Data Controller

LTTRBX Technolabs Pvt. Ltd. (CIN: U72200GJ2018PTC103107), E-1214, Ganesh Glory 11, Jagatpur Road, S.G. Highway, Ahmedabad, Gujarat 382470, India, is the controller of your personal data. Contact: info@lttrbxtech.com.

Drafting note (remove before publish): If LTTRBX actively targets EEA/UK data subjects (offering services to or monitoring them), Article 27 GDPR may require an EU/UK representative. Ask your advocate whether this applies; if so, name the representative here.

2. What personal data we process

We process the categories of personal data described in Section 3 of our main Privacy Policy — principally identity and contact details you provide through our forms, and technical/usage data collected via cookies. We do not intentionally collect special categories of personal data through the Website.

3. Legal bases for processing (Article 6 GDPR)

We rely on the following legal bases:

Processing	Legal basis
Responding to your enquiry and providing requested services	Performance of a contract / taking steps at your request prior to a contract (Art. 6(1)(b))
Analytics and marketing cookies; marketing communications	Your consent (Art. 6(1)(a)) — withdrawable at any time
Website security and core operation	Our legitimate interests (Art. 6(1)(f)) in running a secure, functional website
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))

4. Recipients and processors

We share personal data with service providers acting as our processors (for hosting, analytics, email and similar functions), including Google (Analytics) and Meta (Pixel), under contractual data-protection terms. We do not sell personal data.

5. International transfers

LTTRBX is established in India and stores personal data in India. Transfers of EEA/UK personal data to India and to our other service providers are made on the basis of appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where required. You may request a copy of the relevant safeguards by contacting us.

6. Retention

We keep personal data only as long as necessary for the purposes described, and in line with the retention periods in our main Privacy Policy, after which it is deleted or anonymised.

7. Your rights under the GDPR

If you are in the EEA or UK, you have the right to:

access your personal data (Art. 15);

rectification of inaccurate or incomplete data (Art. 16);

erasure — the “right to be forgotten” (Art. 17);

restriction of processing (Art. 18);

data portability — receive your data in a portable format (Art. 20);

object to processing based on legitimate interests or to direct marketing (Art. 21);

not to be subject to solely automated decision-making with legal or similarly significant effects (Art. 22) — we do not carry out such processing;

withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email info@lttrbxtech.com. We will respond within one month, as required by the GDPR. We may ask you to verify your identity first.

8. Right to lodge a complaint

You have the right to lodge a complaint with your local data-protection supervisory authority in the EEA, or with the Information Commissioner's Office (ICO) in the UK, if you are dissatisfied with how we handle your personal data. We would, however, appreciate the chance to address your concerns first — please contact us.