Privacy policy
Last updated 28 October 2026
This policy explains what personal data UBR Infrastructure LLP (“UBR Infra”, “we”, “us”) collects through ubrinfra.com, why, how long we keep it and the rights you have. We have written it to meet India’s Digital Personal Data Protection Act 2023 and Rules 2025 and, for visitors in the European Union and the United Kingdom, the EU and UK General Data Protection Regulation.
1. Who we are
UBR Infrastructure LLP (LLPIN AAE-4874) is a limited liability partnership registered in India, with its office at 8th Floor, Shiv Sagar Estate, Dr Annie Besant Road, Worli, Mumbai 400018, India. For the purposes of these laws we are the data fiduciary (India) and data controller (EU and UK) for the personal data described here.
2. What we collect and why
| When | What we collect | Why we use it | Legal basis (EU/UK) |
|---|---|---|---|
| You send an enquiry or request a call | Name, work email, company, country, the help you need and anything you write to us | To reply, arrange a call and assess whether we can help | Steps you ask for before a contract; our legitimate interest in answering business enquiries |
| You download a report, such as the Water Market Playbook | Name, work email, company, country and, if you choose, your area of interest | To give you the report and, if you ask, follow up about it | Our legitimate interest; your consent for any later updates |
| You apply for a role | Your CV, covering note and contact details | To consider your application | Steps you ask for before a contract |
| You become a client or partner | Business contact details and correspondence | To deliver our services and meet our legal, tax and accounting obligations | Contract; legal obligation |
| You browse the site | Technical data such as IP address, browser and pages visited, held in server logs and, only if you agree, analytics cookies if we introduce them | To run and secure the site and, with consent, to understand which pages are useful | Our legitimate interest in security; consent for analytics |
We ask only for business details. Please do not send us sensitive personal data. The site is meant for businesses and is not directed at anyone under 18; we do not knowingly collect children’s data.
3. Consent and withdrawal
Where we rely on your consent, it is your choice, and you can withdraw it at any time as easily as you gave it, by emailing info@ubrinfra.com or using the unsubscribe link in any email. Withdrawal does not affect anything we did before it. We do not send marketing emails unless you have asked for them.
4. Who we share it with
We do not sell personal data. We share it only with:
- Service providers who host our website and email and help us run the business, under contracts that require them to protect it and use it only on our instructions.
- Prospective partners, with your agreement. If you ask us to introduce you to an Indian partner, adviser or authority, we share only what is needed and only after you agree.
- Professional advisers and authorities where the law requires it, or to establish or defend legal claims.
5. International transfers
We are based in India and our service providers may store data in India or other countries. Where EU or UK data is transferred out of those regions, we rely on safeguards such as the European Commission’s standard contractual clauses or the UK equivalent. We do not transfer data to any country the Government of India restricts.
6. How long we keep it
- Enquiries and report downloads that do not lead to work: up to three years after our last contact, then deleted.
- Job applications: up to one year after the role is filled, unless you agree we may keep them longer.
- Client and partner records: for as long as the relationship lasts and then for as long as Indian tax, accounting and limitation laws require, generally up to eight years.
- Server and security logs: at least one year, as India’s data protection rules require, and then deleted.
7. Security and breaches
We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls and limiting who can see it. If a breach affects your data, we will tell you and the relevant authorities as the law requires, including India’s Data Protection Board.
8. Your rights
Depending on where you are, you can ask us to:
- tell you what personal data we hold about you and how we use it, and who we have shared it with;
- correct, complete or update it;
- erase it, where we no longer need it or you withdraw consent;
- restrict or object to our use of it, or give you a copy in a portable format (EU and UK);
- nominate someone to exercise your rights if you die or become incapacitated (India).
Email info@ubrinfra.com with “Privacy request” in the subject line. We may need to confirm your identity. We will reply within one month, and in any case within the 90 days India’s rules allow for grievances.
9. Grievances and complaints
Our grievance officer is Binoy Khimji, Designated Partner, UBR Infrastructure LLP, 8th Floor, Shiv Sagar Estate, Dr Annie Besant Road, Worli, Mumbai 400018, India; email info@ubrinfra.com. Please contact us first so we can try to resolve your concern. If you are not satisfied, you may complain to the Data Protection Board of India. In the EU or UK you may also complain to your local data protection authority, such as the UK Information Commissioner’s Office.
10. Changes to this policy
We will update this page if our practices or the law change, and show the date of the latest version at the top.