Privacy Policy for Third-Parties

This Privacy Policy applies to personal data that Owl Haus Private Limited, publicly known as Sun & Owl, may process about individuals who interact with us in a business or professional capacity rather than primarily as users of our consumer Services.

This includes job applicants and candidates, employees and prospective employees, contractors, consultants, freelancers, vendors, suppliers, service providers, professional advisers, business partners, investors, advisors, activity or event partners, representatives of organisations we work with, and people who communicate with us on behalf of such organisations.

1. Who we are

Owl Haus Private Limited is an Indian private limited company, publicly known as Sun & Owl. We develop and operate digital products and services, including BUMRUM.

2. Information we may collect

  • Identity information such as name, photograph, date of birth or age where relevant, nationality and identification information.
  • Contact information such as email address, telephone number, postal address and professional contact details.
  • Professional information such as CV/resume, employment history, qualifications, skills, references, portfolio information, role, title and business affiliation.
  • Application and recruitment information, including interview notes, assessments, communications, availability, compensation expectations and information provided by referees.
  • Vendor and contractor information, including business registration details, tax or invoicing information, bank/payment details, contracts, purchase orders, compliance information and service records.
  • Information relating to business relationships, meetings, communications, proposals, negotiations, events, partnerships and transactions.
  • Information contained in correspondence with us, including emails, messages, support requests and meeting records.
  • Technical information when you use our websites or systems, such as IP address, device information, browser information, log data and cookie information.
  • Information from third parties where appropriate, such as recruitment agencies, professional references, public professional profiles, business partners or service providers.

3. How we collect information

  • Directly from you when you apply for a role, contact us, enter into an agreement, provide services or otherwise interact with us.
  • From your employer, organisation or authorised representative.

Third-Party Privacy Policy   |   Owl Haus Private Limited   |   7 October 2026

  • From recruitment agencies, references, professional advisers or other authorised sources.
  • From publicly available professional or corporate sources where appropriate.
  • Automatically through our websites, systems and communications technologies.

4. Why we use this information

  • To evaluate and manage job applications, recruitment and onboarding.
  • To communicate with candidates, contractors, vendors and business contacts.
  • To negotiate, enter into and perform contracts and purchase arrangements.
  • To make payments, process invoices and maintain financial records.
  • To conduct appropriate due diligence, verification, fraud prevention and security checks.
  • To manage access to our premises, systems, applications and information.
  • To obtain professional, legal, accounting, tax, audit, insurance, security and other specialist services.
  • To develop and manage partnerships, investments, advisory relationships and commercial opportunities.
  • To operate, secure and improve our websites, systems and business processes.
  • To comply with applicable laws, regulations, court orders and lawful requests.
  • To establish, exercise or defend legal claims and protect our rights, property, personnel and business.

5. Recruitment and candidate information

If you apply for a role with Sun & Owl, we may use the information you provide to assess your application, communicate with you, schedule interviews, conduct assessments and references, evaluate suitability, make an offer and complete onboarding where you are selected.

We do not guarantee that information submitted during recruitment will result in an interview, offer or engagement. Recruitment records may be retained for legitimate business, legal or future recruitment purposes, subject to applicable law.

6. Contractors, consultants and freelancers

We may process information needed to evaluate, onboard, manage and pay contractors, consultants and freelancers, including contact information, professional qualifications, work product, invoices, bank/payment information and contractual records.

7. Vendors and suppliers

We may process information relating to representatives of vendors and suppliers to assess suitability, negotiate and manage agreements, make payments, communicate about services, conduct compliance checks and maintain business records.

8. Business partners, investors and advisors

We may process professional and contact information of representatives of current or prospective partners, investors, advisors, activity providers and other organisations to evaluate and manage business relationships, proposals, transactions and collaborations.

9. Legal basis and consent

Depending on the circumstances and applicable law, we may process personal data based on consent, contractual necessity, compliance with legal obligations, legitimate or lawful business purposes, or other grounds permitted by applicable law. Where consent is required, we will seek it in an appropriate manner and provide information about withdrawal where applicable.

Third-Party Privacy Policy   |   Owl Haus Private Limited   |   7 October 2026

10. Sharing with third parties

We may share information with service providers and professional advisers that help us operate our business, including cloud hosting providers, analytics providers, payment processors, email and communications providers, cybersecurity providers, recruitment providers, legal and accounting advisers, auditors and other contractors.

We may also disclose information to regulators, law-enforcement agencies, courts, government authorities or other parties where required or permitted by law, or where necessary to protect rights, safety, property or the integrity of our business.

11. International processing

Some service providers or business partners may process information outside India. Where applicable, we will take steps required by applicable law and use appropriate contractual, organisational or technical safeguards for international processing.

12. Cookies and analytics

Our websites may use cookies and similar technologies for essential functionality, security, analytics, performance and, where applicable, advertising. We may use services such as Google Analytics and Meta Pixel. The exact technologies may change as our websites and products evolve.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. We also expect relevant service providers to maintain appropriate security and confidentiality measures.

14. Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including recruitment and business administration, contractual performance, accounting and tax obligations, security, dispute resolution, legal claims and regulatory requirements. We may delete or anonymise information when it is no longer required, subject to lawful retention obligations.

15. Your privacy rights

Depending on applicable law and the nature of the relationship, you may have rights concerning your personal data, including rights to access information, request correction or updating, request deletion where applicable, withdraw consent where processing is based on consent, and raise a grievance.

To exercise an applicable right or raise a privacy concern, contact our Privacy & Grievance Officer at privacy@sunandowl.com. We may need to verify your identity before completing a request.

Third-Party Privacy Policy   |   Owl Haus Private Limited   |   7 October 2026

16. Grievances

Privacy & Grievance Officer
Owl Haus Private Limited
privacy@sunandowl.com
No. 57, 4th Street, Maruthi Nagar, Madambakkam, Tambaram, Kanchipuram – 600126, Tamil Nadu, India

We aim to acknowledge and address privacy-related concerns within the timeframes required by applicable law.

17. Changes to this Policy

We may update this Policy from time to time to reflect changes in our business, technology, service providers or applicable law. The updated version will be made available through appropriate channels and will indicate its effective or last-updated date.

18. Governing Law

This Policy is governed by the laws of India, subject to mandatory rights and protections under applicable law.

Contact

Owl Haus Private Limited, publicly known as Sun & Owl

No. 57, 4th Street, Maruthi Nagar, Madambakkam, Tambaram, Kanchipuram – 600126, Tamil Nadu, India

Privacy & Grievance Officer: privacy@sunandowl.com

Website: www.sunandowl.com

This Policy is intended to provide a clear description of our corporate and business-relationship privacy practices. It does not replace any product-specific Privacy Policy that applies to users of BUMRUM or another Sun & Owl service.