Work246 Logo
Legal

Privacy Policy

Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it.

Effective: 1 January 2025 ·  Last updated: 27 February 2026

Overview

Skillset Squad Private Limited ("Work246", "we", "us", or "our") operates the Work246 website and workspace booking platform. This Privacy Policy applies to all personal data collected when you visit our website, create an account, make a booking, or interact with our services. We are committed to processing your data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian data protection laws. By using our services, you consent to the practices described in this policy.

Data We Collect

We collect only the data necessary to provide and improve our services:

Account & Identity

  • Full name
  • Email address
  • Phone number
  • Profile photo (optional)
  • GST number (for businesses)

Booking Information

  • Booking dates & times
  • Location & room preferences
  • Number of attendees
  • Add-ons selected
  • Special requests

Payment Data

  • Transaction IDs
  • Payment method type (UPI/card/netbanking)
  • Billing address
  • Invoice details

Usage & Technical Data

  • IP address
  • Browser type & version
  • Device identifiers
  • Pages visited & clickstreams
  • Referrer URLs
We do not store raw card details. Payment card data is handled directly by our PCI-DSS compliant payment gateway partners Cashfree. Work246 only stores tokenised transaction references.

How We Use Your Data

Service delivery

Processing bookings, sending confirmations, managing your account, and providing customer support.

Payments & invoicing

Generating tax invoices, processing refunds, and maintaining financial records as required by law.

Communications

Sending booking reminders, policy updates, and service announcements. Marketing emails are opt-in only.

Personalisation

Recommending relevant spaces and locations based on your booking history and preferences.

Analytics & improvement

Understanding how users interact with the platform to fix bugs and improve features.

Legal compliance

Fulfilling obligations under Indian tax law, DPDPA, and court/regulatory orders.

Data Sharing

We do not sell your personal data. We share it only in the following limited cases:

Service providers: Cloud hosting (AWS), payment gateways (Razorpay), analytics (Google Analytics), email delivery (SendGrid). All processors are bound by data processing agreements.
Location partners: When you book at a partner-operated Work246 location, limited booking details (name, time, attendees) are shared with the on-site team.
Legal & regulatory: We may disclose data to law enforcement, courts, or regulators when legally required or to protect the rights and safety of users and Work246.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. You will be notified before your data is subject to a new privacy policy.

Storage & Retention

Account data

Retained while your account is active, and for 3 years after account deletion for legal compliance.

Booking records

Retained for 7 years to comply with GST and Indian accounting regulations.

Marketing preferences

Until you unsubscribe or withdraw consent, whichever is earlier.

Usage & analytics data

Anonymised after 26 months and retained in aggregate form only.

All data is stored on servers located in India. Any cross-border transfer (e.g., to analytics tools) is governed by standard contractual clauses.

Your Rights

Under the DPDPA 2023, you have the following rights over your personal data:

Access

Request a copy of the personal data we hold about you.

Correction

Ask us to correct inaccurate or incomplete data.

Erasure

Request deletion of your data, subject to legal retention obligations.

Withdraw consent

Withdraw consent for processing at any time via account settings or by contacting us.

Grievance

Raise a grievance with our Data Protection Officer if you believe your rights have been violated.

Nominate

Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.

To exercise any right, email [email protected] with subject line "Data Rights Request — [Your Name]". We will respond within 30 days.

Cookies

We use cookies and similar technologies to operate and improve the platform.

Essential cookies

Required for login sessions, shopping cart state, and security (CSRF protection). Cannot be disabled.

Analytics cookies

Help us understand how the site is used (Google Analytics 4, anonymised). You can opt out via browser settings.

Preference cookies

Remember your city preference, language, and display settings across sessions.

Marketing cookies

Used for retargeted advertising (e.g., Google Ads, Meta Pixel). Only set with your explicit consent.

You can manage or delete cookies via your browser settings at any time. Disabling essential cookies may affect platform functionality.

Third-Party Links

Our website may contain links to third-party websites, social media platforms, or partner portals. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal information without verifiable parental consent, we will delete it promptly. Contact [email protected] if you believe a minor's data has been collected.

Security

Encryption

All data in transit is encrypted via TLS 1.3. Data at rest is encrypted using AES-256.

Access controls

Production data is accessible only to authorised personnel on a need-to-know basis.

Breach notification

In the event of a breach affecting your rights, we will notify you and the Data Protection Board within 72 hours as per DPDPA.

Audits

We conduct regular security audits and penetration tests through certified third-party firms.

Policy Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. For material changes, we will notify you via email or an in-app notification at least 14 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

Contact Us

For any privacy-related queries, requests, or grievances:

Privacy / DPO

[email protected]

Grievance Officer

[email protected]

General Support

[email protected]

Phone

+91 99922 26701

Skillset Squad Private Limited (Work246) · Registered in India · CIN: U63999MH2025PTC450146 · GSTIN: 27ABQCS4622Q1ZHData Protection Officer: [email protected]