GDPR Compliance

GDPR Commitment

At SpendMantra, we are committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR). We respect the privacy rights of individuals and implement appropriate technical and organizational measures to safeguard personal information.

Lawful Processing

Personal data is processed only when there is a valid legal basis, including:

• User consent
• Contractual obligations
• Legal compliance
• Legitimate business interests

Data Protection Principles

We adhere to the following GDPR principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Your GDPR Rights

Individuals covered by GDPR have the right to:

• Access personal data
• Correct inaccurate information
• Request deletion ("Right to be Forgotten")
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent
• Lodge a complaint with the relevant supervisory authority

Data Security Measures

SpendMantra protects personal information using:

• Encryption technologies
• Secure cloud infrastructure
• Access controls
• Continuous monitoring
• Regular security updates
• Backup and recovery systems

International Data Transfers

Where personal data is transferred outside the applicable jurisdiction, appropriate safeguards and contractual protections are implemented to ensure GDPR compliance.

Data Breach Response

In the event of a personal data breach, we will investigate promptly, take corrective action, and notify affected parties and regulatory authorities where required by applicable law.