Legal
Privacy Policy
Version 1.0 · April 2026
Nomology Technology Private Limited · contact@resolveoncord.com
CORD's mission is to make dispute resolution fair, fast, and accessible — for everyone, regardless of who they are or where they are. Transparency and accessibility are at the heart of how we build and operate our platform. So is the responsibility we carry for the personal data of those who trust us with it.
This Privacy Policy describes how Nomology Technology Private Limited ("CORD", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with our website at www.resolveoncord.com, our dispute resolution platform at platform.resolveoncord.com, and all associated services (collectively, the "Platform"). It also explains the rights you have over your personal data, and how you can exercise them.
We encourage you to read this Policy carefully. If you have questions at any point, you are welcome to reach out to us at contact@resolveoncord.com.
Definitions
The following terms are used consistently throughout this Policy:
- CORD / We / Us: Nomology Technology Private Limited, a company incorporated under Indian law, operating the CORD dispute resolution platform.
- Platform: Our website at www.resolveoncord.com, the case management platform at platform.resolveoncord.com, and all associated digital services.
- User: Any individual who visits, browses, or interacts with the Platform, including parties to disputes, arbitrators, mediators, legal representatives, and institutional clients.
- Registered User: A User who has created an account on the Platform.
- Case Participant: A party, their legal counsel, an appointed neutral (arbitrator, mediator), expert witness, or any individual formally involved in a dispute proceeding administered through CORD.
- Institutional Client: An organisation — including an NBFC, bank, corporate entity, or regulatory body — that has entered into a service agreement with CORD for dispute resolution or dispute system design services.
- Personal Data: Any information that identifies or can identify a natural person, including names, contact details, identification numbers, financial information, and digital identifiers such as IP addresses.
- Processing: Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
- Applicable Rules: The CORD Rules of Arbitration, CORD Mediation Rules, or any sector-specific procedural rules governing a dispute administered through CORD.
Who We Are and How to Reach Us
CORD is operated by Nomology Technology Private Limited, a company registered in India. CORD is an Online Dispute Resolution institution providing arbitration, mediation, and facilitated negotiation services across sectors including banking and NBFCs, insurance, e-commerce, and employment.
For any questions about this Policy or about how we handle your personal data, you may contact us:
- By email: contact@resolveoncord.com
- By post: Nomology Technology Private Limited, F-14, 3rd Cross Manyata Residency, Nagavara - Bengaluru, India
- By telephone: +91-9900389191 (Monday to Friday, 9 AM – 6 PM IST)
What Personal Data We Collect, How We Collect It, and Why
We collect personal data in several distinct contexts. The nature of what we collect, and the reason we collect it, depends on how you interact with the Platform.
A. When You Visit Our Website
When you browse www.resolveoncord.com without creating an account, we automatically collect limited technical data through cookies and our hosting infrastructure. This includes your IP address, browser type, device type, operating system, the pages you access, the duration of your visit, and the website that directed you to ours. We collect this data to ensure the Platform functions correctly and to understand how it is being used so we can improve it. The legal basis for this collection is our legitimate interest in operating a secure and effective website.
B. When You Contact Us
When you reach out through our contact form, live chat, or by email — whether to enquire about our services, request a demo, or seek assistance — we collect your name, professional email address, organisation name, and the content of your communication. We use this information solely to respond to your enquiry. The legal basis is consent, and we retain this data for up to three years from your last interaction with us, unless you ask us to delete it sooner.
C. When You Register an Account
When you create an account on the Platform, we collect your name, professional email address, mobile number, the name and type of your organisation, and your account credentials. This information is necessary to administer your account and provide you with access to our services. If your account is created by an Institutional Client on your behalf, we collect your information from that client. We retain account data for the duration of your account and for up to three years after its deletion, unless a longer period is required by law.
D. When You File or Participate in a Dispute
This is the context in which we collect the most significant personal data, and where we take our responsibilities most seriously.
When a dispute is initiated, CORD receives — from parties, their counsel, and from the Applicable Rules process — personal data about all Case Participants. This may include:
- Names, addresses, contact details, and identification information of parties and their representatives
- Financial information including amounts in dispute, bank account details, and payment history
- Statements of claim, statements of defence, witness statements, expert reports, documentary evidence, and arbitral awards
- Hearing records, transcripts, and procedural communications
- Conflict of interest declarations and arbitrator appointment information
We process this data to administer the dispute resolution procedure in accordance with the Applicable Rules, to communicate with all participants, and to issue and record the outcome of proceedings. The legal basis is the performance of our contractual and institutional obligations under the Applicable Rules, and where relevant, compliance with legal obligations.
CORD retains case materials for a minimum of ten years from the conclusion of a case, in keeping with applicable statutes of limitation and the institutional obligations of a dispute resolution body.
E. When You Are a Neutral (Arbitrator or Mediator)
When you join the CORD panel or are appointed as a neutral in a proceeding, we collect your professional profile including your name, qualifications, areas of expertise, language capabilities, prior case history on the Platform, and conflict of interest declarations submitted in connection with appointments. This data is used to administer your appointments, maintain the integrity of the proceedings, and, where your profile is publicly listed on the CORD platform, to facilitate your discoverability by parties and institutions.
F. When You Use Our E-Learning Platform
Where you access CORD's training and certification programmes through our e-learning portal (hosted on Odoo), we collect your name, email address, professional background, course enrolment and completion records, and any assessments or submissions made through the platform. This data is used to administer your learning programme and issue certifications. It is retained for the duration of your enrolment and for up to three years thereafter.
G. When Institutional Clients Provide Third-Party Data
Institutional Clients — such as NBFCs that engage CORD for bulk case administration — frequently provide us with personal data about borrowers and counterparties in connection with case filings. Where this occurs, the Institutional Client acts as the data controller for that data, and CORD processes it as a data processor acting on the client's instructions. Institutional Clients are responsible for ensuring that any personal data they share with CORD has been collected in compliance with applicable law, including obtaining any necessary consents.
How We Use Your Personal Data
We use personal data only for the purposes for which it was collected. Specifically:
- To administer dispute resolution proceedings in accordance with the Applicable Rules
- To communicate with parties, their counsel, neutrals, and institutional clients throughout the dispute process
- To operate and improve the Platform, including detecting and addressing technical issues
- To process payments and maintain financial records in compliance with applicable law
- To administer the CORD panel of neutrals and manage appointments
- To deliver training, certification, and e-learning programmes
- To publish anonymised and aggregated statistics about CORD proceedings
- To send service communications and, where you have consented, updates about CORD's services and publications
- To comply with legal and regulatory obligations, including requirements from SEBI and other regulators
We do not sell personal data to third parties. We do not use personal data collected in the course of dispute proceedings for marketing purposes.
Who We Share Your Data With
CORD shares personal data only where necessary and only with parties bound by appropriate confidentiality and data security obligations:
- Neutrals and Tribunals: Arbitrators, mediators, and arbitral tribunals appointed under the Applicable Rules receive the case materials necessary to conduct the proceedings. They act as independent data controllers for the data they process in that capacity.
- Parties and Their Representatives: In accordance with the Applicable Rules, submissions, pleadings, and evidence are shared between the parties and their legal counsel as required by due process.
- Technology Service Providers: We engage third-party providers for platform hosting, data storage, video conferencing, and case management infrastructure. These providers are bound by contractual data processing obligations and are not permitted to use your data for any other purpose.
- Regulatory Authorities: Where CORD operates under a regulatory framework — such as the SEBI SmartODR framework — we may be required to share data with the relevant regulator in accordance with applicable rules and directions.
- Institutional Clients: Where an Institutional Client has filed a case on behalf of a party, we may share case status and outcome information with that client in accordance with our service agreement.
- Legal and Compliance Requirements: We may disclose personal data where required to comply with a legal obligation, court order, or lawful request from a public authority, or to protect CORD's legal rights.
Data in Arbitration and Mediation Proceedings
Dispute resolution proceedings involve multiple data controllers and require specific treatment of personal data. CORD acknowledges that:
Confidentiality is a foundational principle of arbitration and mediation. Personal data submitted in the course of proceedings is treated as confidential and is not disclosed beyond what the Applicable Rules require. CORD maintains appropriate access controls to ensure that case data is accessible only to those directly involved in the proceedings.
If you are a party to a dispute and you provide personal data about third parties — such as witnesses — you are responsible for ensuring that their data is shared with CORD in compliance with applicable data protection law.
If you are an Institutional Client submitting cases in bulk, your data processing agreement with CORD sets out the respective responsibilities of CORD as data processor and your organisation as data controller in respect of borrower or counterparty data.
Arbitral awards and decisions in other proceedings are retained by CORD for research and institutional record-keeping purposes, in redacted or anonymised form where appropriate.
Artificial Intelligence and Technology on the Platform
CORD uses technology — including AI-assisted tools — to support case management, document processing, and platform operations. CORD has received the JUST AI Award for responsible and ethical use of artificial intelligence in legal dispute resolution, and our AI governance framework is embedded in the CORD Rules.
Where AI tools are used in connection with your case, they operate as a support layer for case managers and neutrals — not as decision-makers. No arbitral or mediation decision is made by an AI system. The neutral remains solely responsible for all procedural and substantive decisions in a case.
Personal data submitted through the Platform is not used to train AI models without your explicit consent. Where AI tools process personal data in the context of a dispute, CORD acts as a data processor operating on the instructions of the party or institution that submitted the data.
Cookies and Tracking Technologies
Our website uses cookies to ensure the Platform functions correctly and to understand how it is being used. Cookies are small data files placed on your device when you visit a website.
We use three categories of cookies:
- Essential cookies: Required for the Platform to function. These cannot be disabled without affecting your ability to use the Platform.
- Analytics cookies: Used to measure how the Platform is used, identify navigation issues, and improve performance. These are enabled only with your consent.
- Functional cookies: Used to remember your preferences and personalise your experience. These are enabled only with your consent.
You can manage your cookie preferences through the cookie banner on our website, or by adjusting your browser settings. Disabling non-essential cookies will not affect your access to dispute resolution services.
How Long We Keep Your Data
| Data Category | Retention Period |
|---|---|
| Website visitor data | 25 months from last visit, or until consent is withdrawn |
| Contact and enquiry data | 3 years from last interaction, or until consent is withdrawn |
| Account data | Duration of account plus 3 years after deletion |
| Dispute case materials | Minimum 10 years from conclusion of proceedings |
| Payment records | As required by applicable financial and tax law |
| E-learning records | Duration of enrolment plus 3 years |
| Neutral panel data | Duration of panel membership plus 3 years |
Your Rights Over Your Personal Data
Subject to applicable law and the nature of the proceedings in which your data is involved, you have the following rights:
- Right to Access: You may request a copy of the personal data we hold about you and information about how it is being processed.
- Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
- Right to Erasure: In certain circumstances, you may request that we delete your personal data. Please note that where data is held in connection with concluded or ongoing dispute proceedings, we may have legal or institutional obligations that require us to retain it.
- Right to Restriction: You may request that we limit the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have disputed.
- Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests, including for marketing purposes.
- Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract, you may request that we provide your personal data in a structured, machine-readable format.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Please note that these rights are not absolute and may be subject to exceptions under applicable law. Where your personal data is processed as part of an arbitration or mediation proceeding, the confidentiality obligations and institutional requirements of those proceedings may affect how and to what extent we can respond to your request.
How to Exercise Your Rights
To exercise any of the rights set out in Section 10, or to ask questions about how we process your personal data, please contact us at:
- Email: contact@resolveoncord.com
- Subject line: Data Rights Request
We will acknowledge your request promptly and respond within 30 days. If your request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, and will notify you accordingly.
We may ask you to verify your identity before acting on any request, to ensure that personal data is not disclosed to or amended on the instructions of an unauthorised person.
How We Protect Your Data
CORD takes the security of personal data seriously. We maintain appropriate administrative, technical, and physical safeguards to protect personal data against unauthorised access, loss, destruction, or disclosure. These include encrypted data transmission, access controls on a need-to-know basis, regular security assessments, and contractual data security obligations with all third-party service providers.
However, no method of transmission over the internet is completely secure. While we do everything reasonably practicable to protect your data, we cannot guarantee absolute security of data transmitted to or from the Platform.
If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
International Transfers of Personal Data
CORD is based in India and processes personal data primarily within India. However, in the course of administering international arbitration proceedings or using globally hosted technology services, personal data may be transferred to or accessed from other jurisdictions.
Where such transfers occur — for example, where a party, their counsel, or an appointed neutral is located outside India — we transfer personal data only to the extent necessary to administer the proceedings in accordance with the Applicable Rules. We take appropriate steps to ensure adequate protection of personal data in connection with any such transfers.
If you wish to make specific arrangements regarding data transfers in connection with your proceedings, please contact your CORD case manager before the appointment of a tribunal or the exchange of materials.
Third-Party Websites and Links
The CORD website and Platform may contain links to third-party websites, including regulatory portals, legal databases, and partner organisations. CORD is not responsible for the privacy practices of those websites and encourages you to review their privacy policies before providing any personal data. This Policy applies only to the CORD Platform and services.
Children's Privacy
The CORD Platform and dispute resolution services are intended for use by individuals and organisations engaged in commercial, financial, and institutional matters. Our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@resolveoncord.com and we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or the applicable regulatory environment. When we make material changes, we will post the updated Policy on our website and, where appropriate, notify Registered Users by email. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.
We encourage you to review this Policy periodically. Your continued use of the Platform following any changes constitutes your acceptance of the updated Policy.
Grievance Redressal
If you have a complaint about how CORD has handled your personal data, we ask that you first contact us directly. We are committed to resolving complaints promptly and transparently.
In accordance with the Information Technology Act, 2000, and the rules made thereunder, CORD has designated a Grievance Officer to address privacy-related concerns:
- Grievance Officer: Shweta Devgan
- Organisation: Nomology Technology Private Limited (CORD)
- Email: contact@resolveoncord.com
- Subject line: Please clearly mark your email as relating to a privacy violation — for example, “Privacy Violation — Grievance” — so that it is routed to the Grievance Officer without delay.
We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.
If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.