Skip to content
WeWork Logo

WeWork India Privacy Notice

WeWork India Privacy Notice

Last Updated on: 13 July 2026

WeWork India Management Limited (formerly known as WeWork India Management Private Limited), together with WeWork Companies Inc. and its affiliates (collectively, “WeWork India”, “we”, “us”, or “our”), respects your privacy and is committed to protecting your Personal Data.

This Privacy Notice explains how we collect, use, disclose, store and otherwise process your Personal Data when you access or use:

    • the WeWork India website;
    • the WeWork India mobile application;
    • digital products, online services and applications operated by or on behalf of WeWork India; and
    • any other digital channels through which WeWork India provides its products and services.

The above are collectively referred to as “Platforms”.

This Privacy Notice applies to all individuals who access or use the Platform, including prospective customers, members, employees of members, visitors, applicants, authorised representatives, vendors, business partners and other users interacting with WeWork India through the Platform.

We may collect Personal Data directly from you or through trusted third-party service providers that support our website operations.

This Privacy Notice explains how WeWork India collects, uses, discloses, stores, transfers, retains, and otherwise processes your Personal Data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA"). WeWork India also maintains a Privacy Information Management System (PIMS) based on ISO/IEC 27701 to support its privacy governance practices.

By using our website, you acknowledge that you have read and understood this Privacy Notice.

Please note that our platforms may contain links to third-party websites or services. These are governed by their own privacy policies, and we do not control how they handle your data.

1. Definitions

To help you understand this Privacy Notice, the following terms are used in line with the Digital Personal Data Protection Act, 2023 (“DPDPA”), ISO/IEC 27701 and our internal privacy management practices:

    • “Personal Data” means any data about an individual who can be identified by or in relation to that data.
    • “Data Principal”/ “Interested Parties” refers to the individual to whom the Personal Data relates (for example, you as a user of our website).
    • “Data Fiduciary” / “Organization” means the entity that determines the purpose and means of processing Personal Data. For the purpose of this Privacy Notice, WeWork India acts as the Data Fiduciary.
    • “Data Processor” means any person or entity that processes Personal Data on behalf of the Data Fiduciary.
    • “Processing” means any operation performed on Personal Data, including collection, storage, use, sharing, or deletion.
    • “Consent” means your clear, informed, and voluntary agreement for the processing of your Personal Data for a specific purpose. You may withdraw your consent at any time.

Any terms not defined in this Privacy Notice will have the meaning assigned to them under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 and aligned with ISO/IEC 27701.

2. Lawful Grounds of Processing

WeWork India processes your Personal Data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023.

We rely on the following lawful grounds:

2.1. Consent

In most cases, we process your Personal Data based on your consent. For example, when you fill out a form on our website or choose to receive marketing communications from us.

When we rely on your consent:

    • We clearly explain why your data is being collected
    • You have the option to choose whether to provide your data
    • You can withdraw your consent at any time

If we need to use your Personal Data for a new purpose, we will seek your consent again, where required.

2.2. Legitimate Uses 

In certain circumstances, applicable law permits us to process Personal Data without obtaining your consent. These include Certain Legitimate Uses permitted under Section 7 of the DPDPA, including where:

    • you voluntarily provide your Personal Data for a specified purpose;
    • processing is necessary to comply with legal or regulatory obligations;
    • processing is required pursuant to any judgment, decree or order issued under applicable law;
    • processing is necessary to respond to medical emergencies or disasters;
    • processing is necessary to protect the safety of individuals;
    • processing is otherwise permitted under applicable law.

3. Personal Data Collected and How We Use It

WeWork India collects certain Personal Data from customers and users to provide workspace booking services securely, efficiently, and in compliance with applicable laws, including the DPDPA, 2023. This data is used only for the purposes outlined below and is processed on lawful grounds such as Consent or Legitimate Uses under the DPDPA.

WeWork India collects Personal Data under the categories described below. The specific Personal Data collected within each category may vary depending on the products, services, features, or functionalities you access or use, your interactions with the Platform, and applicable legal or regulatory requirements. WeWork India will collect and process only such Personal Data as is necessary for the purposes described in this Privacy Notice and in accordance with applicable law. Some Personal Data is mandatory to provide specific services, while other information is optional. You may choose not to provide optional data or opt out of non-essential communications; however, not providing mandatory data may limit your ability to use certain services.

    • Identity Information — Examples: Full name, username, member ID, employee ID (where applicable); Collection Channel: Website, Mobile Application, Member Platform, Member Services; Purpose: To identify you, create and administer your account, facilitate workspace bookings, verify your identity, and provide the products and services requested by you.; Legal Basis: Consent and Certain Legitimate Uses, where applicable.
    • Contact Information — Examples: Email address, phone number, city, company name, correspondence address; Collection Channel: Website, Mobile Application, Member Platform, Member Services, Customer Support; Purpose: To communicate with you regarding enquiries, memberships, bookings, support requests, updates, marketing communications (where applicable), and other requested services.; Legal Basis: Consent and Certain Legitimate Uses.
    • Professional and Employment Information — Examples: Company name, designation, work experience, educational qualifications, résumé/CV, industry, salary information (for recruitment); Collection Channel: Careers Portal, Website, Mobile Application, Member Platform; Purpose: To assess job applications, administer recruitment processes, manage corporate memberships, and provide business-related services.; Legal Basis: Consent.
    • Authentication and Account Information — Examples: Login credentials, OTPs, authentication tokens, linked third-party login credentials; Collection Channel: Website, Mobile Application, Member Platform; Purpose: To authenticate users, secure accounts, enable access to the Platform, protect against unauthorised access, and maintain Platform security.; Legal Basis: Certain Legitimate Uses.
    • Service and Transaction Information — Examples: Workspace bookings, membership details, visitor information, referrals, support requests, payment and billing information (where applicable); Collection Channel: Member Platform, Mobile Application, Website, Member Services; Purpose: To provide, administer, and improve workspace, community, booking, billing, visitor management, and other member services requested by you.; Legal Basis: Consent and Legitimate Uses, where applicable.
    • Technical and Usage Information — Examples: Device information, IP address, browser information, operating system, cookies, SDK identifiers, usage logs, diagnostic information; Collection Channel: Website, Mobile Application, Member Platform; Purpose: To operate, secure, maintain and improve the Platform, analyse usage patterns, troubleshoot issues, prevent fraud, and enhance user experience.; Legal Basis: Consent (where required) and Legitimate Uses.
    • Marketing and Preference Information — Examples: Communication preferences, newsletter subscriptions, event registrations, survey responses; Collection Channel: Website, Mobile Application, Member Platform; Purpose: To provide newsletters, event invitations, promotional communications, customer engagement activities, and to improve our products and services based on your preferences.; Legal Basis: Consent.
    • Other Personal Data You Choose to Provide — Examples: Information submitted through forms, enquiries, support requests, feedback, documents, or communications; Collection Channel: Website, Mobile Application, Member Platform, Customer Support; Purpose: To respond to your requests, provide the requested products or services, resolve issues, comply with legal obligations, and support our business operations.; Legal Basis: Consent and Legitimate Uses, where applicable.

WeWork India processes Personal Data only for the purposes described in this Privacy Notice or for any other purpose permitted under applicable law. Where processing for a new purpose requires your consent, we will seek such consent before commencing the new processing activity.

We may obtain Personal Data about you from third-party sources in addition to data you provide directly. This may include information received from your company, employer, partner, authorised representative, or host if you are visiting or accessing one of our spaces.

We may also collect Personal Data from publicly and commercially available sources, as permitted under applicable law, as well as from third parties with whom we maintain lawful arrangements.

Where necessary to provide the Services requested by you, we may combine such information with Personal Data collected directly from you.

If we obtain Personal Data about you from a third party, we take reasonable steps to verify that such data has been sourced legitimately and in compliance with applicable laws.

WeWork India ensures that all Personal Data is processed lawfully, fairly, and transparently, and only the minimum necessary data is collected to achieve these purposes.

Where you provide us with Personal Data relating to any third party (including but not limited to your employees, authorised users, clients, customers, visitors, contractors, guests, referrers or other individuals), you represent and warrant that you have obtained all necessary permissions, authorisations or consent (where required under applicable law) prior to sharing such Personal Data with us, and that you are authorised to provide such Personal Data for the purposes described in this Privacy Notice.

Where Personal Data relating to third parties is submitted through the Platform, WeWork India processes such Personal Data solely for providing the requested services, administering member accounts, managing workspace operations, complying with applicable legal obligations, and other purposes described in this Privacy Notice.

4. Data Sharing and Disclosure

We may share your Personal Data only where necessary to provide our services, operate our website, or comply with applicable laws.

4.1. Service Providers and Partners

We may share your Personal Data with trusted third-party service providers who support our website and business operations, such as IT service providers, analytics providers, marketing partners (where you have provided consent), and other operational vendors.

These third parties are required to handle your Personal Data securely, use it only for specified purposes, and comply with applicable data protection requirements.

4.2. Legal and Regulatory Disclosures

We may disclose your Personal Data to government authorities, regulators, law enforcement agencies, or courts where required to:

    • Comply with legal or regulatory obligations
    • Respond to lawful requests or legal processes
    • Prevent, detect, or investigate fraud or other unlawful activities

4.3. Third-Party Services Requested by You

If you request a service that involves a third party, we may share your Personal Data with that third party to fulfil your request. Where possible, you will have a choice regarding such sharing. However, if the sharing is necessary to provide the requested service, you may not be able to use that service without it. WeWork India may processes Personal Data on behalf of the Member for the purpose of providing the requested Platform services. Depending on the nature of the processing, WeWork India may act as an independent Data Fiduciary or process such Personal Data in accordance with contractual arrangements entered into with the Member.

4.4. Identity Verification (where applicable)

In certain cases, we may share limited Personal Data with verification partners to confirm your identity or details, where required for service delivery or compliance with applicable laws.

We ensure that all third parties processing Personal Data on our behalf are engaged in accordance with applicable laws and our internal data protection standards.

4.5. Cross Border Data Transfer 

WeWork India primarily stores and processes Personal Data within India. However, in certain cases, your Personal Data may be shared with WeWork Companies Inc. and its affiliates, or accessed by entities located outside India, where necessary to provide our services, improve user experience, or comply with legal obligations.

Such sharing may occur, for example, to support our global operations, enhance community features, or facilitate service delivery across WeWork entities.

Where such transfers take place, we ensure that appropriate safeguards are implemented to protect your Personal Data and that such processing is carried out in accordance with applicable data protection laws and our internal data protection standards.

WeWork India implements appropriate safeguards to protect Personal Data during such activities and ensures that any access is subject to applicable data protection and security requirements.

5. Protection of Personal Data

We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction. The security of our customers’ information is a priority, and we maintain physical, administrative, and electronic safeguards designed to protect the data entrusted to us.

Personal Data collected through our systems is stored within secure environments and is accessible only to authorized personnel who require such access for legitimate business purposes. Access is governed by layered security controls and subject to monitoring.

Such measures include encryption of data in transit and at rest, multi-factor authentication (MFA), masking of Aadhaar details, role-based access controls (RBAC), security monitoring through tools such as Security Information and Event Management (SIEM) solutions, and periodic access reviews. These examples are illustrative and form part of a broader security framework that we continuously review and enhance in line with applicable laws, regulatory expectations, and industry standards.

6. Data Principal Rights

A Data Principal is an individual to whom the Personal Data relates, in this context, the Users of our Website and services. As a Data Principal, you are entitled to the following rights under the Digital Personal Data Protection Act, 2023 (DPDPA): 

    • Right to Access Information: You can access and review the Personal Data that WeWork India processes and stores about you. 
    • Right to Nominate: In the event of your death or incapacity, you may nominate another individual to exercise your rights on your behalf with WeWork India. 
    • Right to Correction & Erasure: You may request WeWork India to correct, complete, update, or delete your Personal Data. 
    • Right to Grievance Redressal: You have access to a grievance redressal mechanism provided by WeWork India for any concerns related to the processing of your Personal Data. You may first submit your grievance via email to our designated Data Principal Grievance Redressal team at dpo@wework.co.in WeWork India will review your grievance and make reasonable efforts to address it in accordance with applicable laws.

If you are not satisfied with the resolution provided, you may escalate your complaint to the Data Protection Board of India after first using and exhausting WeWork India’s internal grievance redressal process.

7. Exercising Your Rights

To exercise any of the above rights, or to register a nominee who may act on your behalf in the event of death or incapacity, you may email us at dpo@wework.co.in with the relevant details.

When registering a nominee or submitting a rights request, we may take reasonable steps to verify your identity and the nominee’s details to prevent unauthorized requests and ensure compliance with applicable laws. A nominee may exercise the Data Principal’s rights in accordance with applicable law and subject to appropriate verification.

WeWork India will review and process all requests in accordance with applicable data protection laws and respond within the timelines prescribed under the Digital Personal Data Protection Act, 2023.

Other mechanisms for controlling your data:

    • Opt-Out of Non-Essential Communications – You can choose not to receive promotional or marketing communications. Please note that mandatory data required to provide core services cannot be opted out.
    • Consent Withdrawal – You may withdraw your consent for WeWork India to process your Personal Data at any time by withdrawing your consent through the preference centre accessible on the website. Upon withdrawal, active processing will stop, though data may be retained for legal or archival purposes. Note that this may limit access to certain services.

What happens next:

    • Acknowledgment – WeWork India will confirm receipt of your request.
    • Verification – For security, we may request additional information to verify your identity.
    • Processing – Your request will be reviewed and processed in accordance with the DPDPA.
    • Response Timeline – We will respond within the timelines prescribed under applicable laws.
    • Escalation – If unsatisfied with the resolution, you may escalate via WeWork India’s grievance redressal mechanism or approach the Data Protection Board of India after using our process

8. Personal Data of Minors and Persons with Disabilities

Our website is not intended for children (individuals below 18 years of age), and we do not knowingly collect or process Personal Data of children.

In the event that we become aware that Personal Data of a child has been inadvertently collected, we will take prompt steps to delete such data in accordance with applicable laws.

If you believe that a child has shared Personal Data with us, please contact us at dpo@wework.co.in, and we will take appropriate action.

We may, however, process Personal Data relating to persons with disabilities in the course of providing our services, including for purposes such as facilitating accessibility, supporting inclusive hiring practices, or providing reasonable accommodations, where applicable.

Verifiable Guardian Consent (Where Applicable) Where a person with a disability is unable to provide valid consent independently under applicable law, we will process their Personal Data only after obtaining verifiable consent from a lawful guardian or authorised representative.

Verifiable guardian consent means that we take reasonable steps to confirm:

    • The identity of the guardian or authorised representative; and
    • That such person is legally authorised to act on behalf of the individual.

This may include verification through registered contact details, supporting documentation establishing authority, or other appropriate mechanisms to ensure the authenticity of the consent.

We ensure that such consent is obtained and recorded in accordance with applicable legal and regulatory requirements, including the Digital Personal Data Protection Act, 2023.

9. Cookies and Other Tracking Technologies

WeWork India uses cookies, pixels, software development kits (SDKs), local storage technologies and similar tracking technologies across the Website, Mobile Application, Member Platform and other digital services to provide functionality, remember your preferences, analyse usage, improve performance, enhance security and deliver requested services.

When you first visit our website, you will be presented with a cookie banner that allows you to accept, reject, or customize your cookie preferences through our preference manager. You may update or withdraw your consent at any time by accessing the cookie settings available on our website.

You can also manage or block cookies through your browser settings. Please refer to your browser’s help function for guidance. However, please note that disabling certain cookies may impact the functionality and performance of the website.

For more details, please refer to our Cookie Notice for further details on Cookies deployed on our Website.

When you use the WeWork India Mobile Application, Member Platform or other digital services, we may use Software Development Kits (SDKs), APIs and similar technologies to enable authentication, analytics, security monitoring, crash reporting, performance optimisation, notifications and other essential service functionality. The list of SDKs that collects Personal information are mentioned in the table below:

10. Data Retention and Deletion

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services and comply with legal, regulatory, contractual, accounting, security, and reporting requirements.

The retention period may vary depending on the type of Personal Data and how it is used. This may include categories such as identity verification records, financial and transaction data, technical and security logs, customer communications, and marketing or consent preferences.

In certain cases, we may retain your Personal Data for longer periods where required or permitted by law, such as for fraud prevention, dispute resolution, or the establishment, exercise, or defense of legal claims.

Once your Personal Data is no longer required, we will take reasonable steps to securely delete, anonymize, or de-identify it in accordance with applicable standards.

You may request the deletion of your Personal Data in accordance with applicable data protection laws. Please note that we may continue to retain certain information where necessary to comply with legal or regulatory obligations.

11. Data Breach

WeWork India takes the security of your Personal Data seriously and implements strong technical, administrative, and physical safeguards to protect it from unauthorized access, loss, disclosure, or alteration. 

In the event of a data breach, WeWork India will: 

    • Promptly investigate and contain the breach, 
    • Notify affected Data Principals as required by law, 
    • Report the breach to the relevant regulatory authorities, including the Data Protection Board of India, and 
    • Take steps to prevent recurrence and minimize any impact. 

Your Role as a Data Principal: 

You are encouraged to stay vigilant and report any suspicious activity or potential misuse of your Personal Data to WeWork India immediately. Prompt reporting allows us to act quickly to contain the breach and protect your data. You can contact us through cybersecurity@wework.co.in to report any suspected Data Breach incident. 

12. Review and Revision

We may update this Privacy Notice from time to time to reflect changes in our services, regulatory requirements, or how we handle your Personal Data. Whenever we make updates, the revised notice will be published on our official website at https://wework.co.in/, along with the “Last Updated” date. 

We encourage you to review this Privacy Notice regularly so that you remain informed about how we collect, use, and protect your information. 

By continuing to use our website or other online services after any updates are published, you acknowledge and accept the changes. If you do not agree with the updated Privacy Notice, you may stop using our services and withdraw your consent at any time by contacting us through our grievance redressal channels. 

13. Contact Us

Should there be any query or grievance that you may have regarding this privacy Notice or regarding usage of our online channels, you may contact us in the following manner:  

E-mail us at: dpo@wework.co.in