Privacy Policy

Welcome to Vesta Work Spaces Pvt Ltd (referred to herein as "Vesta Workspaces","we", "us", or "our"). We provide premium workspace solutions, including dedicated coworking desks, private cabins, managed enterprise suites, virtual offices, meeting spaces, and ancillary IT infrastructure across Bengaluru, Gurugram, GIFT City, and other Indian hubs.

This Privacy Policy outlines our principles and practices concerning the collection, recording, storage, processing, dissemination, and protection of information obtained through our website (vestaworkspaces.com), booking systems, center reception logs, biometric access terminals, and enterprise service contracts.

Depending on how you interact with Vesta Workspaces—whether browsing our website, touring a center, registering a corporate membership, or using guest WiFi—we may collect the following categories of information:

A. Direct Inquiries & Contact Data

• Personal Identifiers: Name, professional title, corporate affiliation, company email address, mobile/telephone number.
• Workspace Requirements: Preferred city, micro-market, seating team capacity, estimated move-in date, and custom fit-out preferences.

B. Membership & KYC Onboarding (Virtual & Managed Offices)

• Corporate Records: Certificate of Incorporation, Memorandum of Association (MOA), Articles of Association (AOA), Goods and Services Tax (GSTIN) registration certificate, and Company PAN.
• Authorized Signatory Identity: Government-issued photo identification (Aadhaar, Passport, Voter ID, or Driving License) and Board Resolution appointing the designated signatory.
• Billing & Invoicing: Registered legal billing address, bank account details for ACH/NEFT transfers, and billing contact coordinates.

C. Center Operations, Physical & IT Access

• Access Credentials: RFID keycard identifiers, biometric credentials (stored solely as encrypted mathematical hash templates without storing raw biological images), and visitor log entries.
• CCTV Video Surveillance: Visual recordings captured by closed-circuit surveillance cameras installed in common corridors, lift lobbies, entry turnstiles, and reception zones.
• Network Logs: IP address, device MAC address, device hostname, session duration, and bandwidth consumption metrics when authenticated onto Vesta Guest or Member WiFi networks.

Vesta Workspaces processes personal and corporate data strictly for legitimate operational, contractual, legal, and security purposes:

• Service Execution: Provisioning designated desks, private enterprise suites, conference room reservations, mail handling for virtual offices, and administrative support.
• Customer Inquiries & Tours: Coordinating center site visits, responding to pricing quote submissions, and dispatching floor plans.
• Billing & Commercial Transactions: Generating tax invoices, tracking license fee settlements, adjusting security deposits, and auditing accounts.
• Statutory & Regulatory Filings: Satisfying mandatory KYC norms required by the Ministry of Corporate Affairs (MCA), GST authorities, and municipal bodies for virtual address registrations.
• Facility Safety & Emergency Preparedness: Verifying visitor identity, operating turnstiles, maintaining fire-evacuation roll calls, and preventing unauthorized trespass.

To guarantee the safety of our occupants, their equipment, and proprietary intellectual property, all Vesta Workspaces properties maintain 24/7 security protocols:

• Surveillance Cameras: High-definition CCTV cameras continuously monitor perimeter access points, corridors, elevator vestibules, and reception desks. CCTV cameras are NEVER installed inside private cabins, executive boardrooms, or restrooms.
• Footage Retention: CCTV footage is retained on secure, access-restricted digital video recorders for a rolling cycle of 30 to 60 days, after which it is automatically overwritten unless preserved pursuant to a statutory investigation.
• Visitor Pass Registration: Day visitors must register at reception with photo verification and mobile number confirmation before entry into member floor plates.

Vesta Workspaces operates an enterprise-grade IT infrastructure powered by dual redundant tier-1 internet service providers, enterprise firewall appliances, and client-isolated VLAN architectures.

Our website utilizes standard session and analytical cookies to enhance site navigation, analyze aggregate traffic flows, and optimize page load speeds.

• Essential Cookies: Required for the fundamental functionality of our booking forms, modal overlays, and security token authentications.
• Analytical Cookies: Aggregated, anonymized telemetry (e.g. Google Analytics / Search Console) that tracks page views, bounce rates, and referring URLs without linking back to individual identities.

You may configure your browser settings to decline cookies; however, certain interactive features of our online tour scheduler may experience degraded performance.

We do not sell, rent, trade, or monetize your personal or corporate data to any third-party broker or marketing agency under any circumstances.

We may disclose relevant data only under the following strictly constrained circumstances:

• Authorized Service Vendors: Trusted third-party cloud infrastructure partners (e.g., enterprise email delivery, encrypted cloud backup, payment gateway gateways) under strict non-disclosure agreements.
• Legal & Statutory Mandates: Law enforcement agencies, courts of law, or tax authorities upon receipt of a lawful court order, subpoena, or statutory warrant under Indian law.
• Corporate Reorganization: In the event of a merger, acquisition, restructuring, or asset sale involving Vesta Work Spaces Pvt Ltd, with prior written notice to active corporate members.

Vesta Workspaces enforces technical and administrative controls conforming to ISO/IEC 27001 standards to prevent unauthorized access, alteration, disclosure, or destruction of stored data.

• Encryption: All digital communications and database archives use TLS 1.3 in-transit and AES-256 bit encryption at-rest.
• Retention Schedules: Inactive inquiry submissions are purged after 24 months. Accounting and tax records are retained for 8 financial years in accordance with the Companies Act, 2013 and Income Tax Act, 1961.
• Access Controls: Role-based access controls (RBAC) restrict customer records to designated administrative personnel on a strict need-to-know basis.

Under the Indian Digital Personal Data Protection Act, 2023 and related statutes, you are entitled to exercise the following rights regarding your personal data:

• Right to Access: Request confirmation of whether your data is being processed, and obtain a summary of data categories and processing activities.
• Right to Correction & Erasure: Request the rectification of inaccurate or outdated information, and request data erasure subject to mandatory statutory retention obligations.
• Right of Grievance Redressal: Register complaints directly with our designated Grievance Officer regarding any perceived non-compliance.
• Right to Nominate: Nominate another individual to exercise your data rights in the event of incapacity.

In compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our Corporate Grievance Officer are set forth below: