Privacy Policy

Decimal Point Analytics Private Limited (“DPA”, “we”, “our” or “us”), a company incorporated in India, respects your privacy.

This Privacy Policy explains how we collect, use, disclose, transfer, retain and protect personal information through this website and related business interactions concerning the European Economic Area (“EEA”), comprising the European Union, Iceland, Liechtenstein and Norway.

This website is operated by DPA India. Where applicable, we process information in accordance with the General Data Protection Regulation (“GDPR”) and relevant national privacy and electronic communications laws.

Visiting this website does not, by itself, constitute consent to processing requiring separate consent.

1.  Purpose of this Privacy Policy

This Policy explains the information we collect, its sources, the purposes and legal grounds for processing, recipients, international transfers, retention and your rights.

2.  Scope and Applicability

DPA India is the controller for the website, enquiries, subscriptions, recruitment interactions and business relationships described here, unless a supplementary notice identifies another controller.

Where DPA processes information on behalf of a client, applicable law and the relevant client agreement govern that processing. Requests concerning client-controlled information should normally be directed to that client.

Supplementary notices may apply to specific activities. Nothing in this Policy restricts mandatory rights or remedies.

3.  Definitions

“Personal Data” or “Personal Information” means information relating to an identified or identifiable individual.

“Controller” means the entity determining the purposes and means of processing.

“Processor” means an entity processing personal data on a controller’s behalf.

“Processing” includes collecting, storing, using, disclosing, transferring, correcting and deleting personal data.

4.  Personal Information We Collect

4.1  Sources of Personal Information

We obtain information directly from you, through website interactions, from your organisation, referrals, recruitment platforms, professional networks and other lawful sources.

Where we obtain information indirectly, we provide the required information about its source and use within the period prescribed by GDPR, unless an applicable exception permits otherwise.

4.2  Categories of Personal Information

We may collect:

• name, contact details and online identifiers;

• employer, job title, qualifications and employment history;

• enquiries, correspondence and service interests;

• transaction and billing information;

• IP address, browser details and website activity; and

• communication preferences and consent records.

Mandatory fields are identified. Failure to provide necessary information may prevent us from responding to an enquiry, considering an application or providing a requested service.

4.3  Data Minimisation and Purpose Limitation

We collect information relevant to specified purposes. We provide further notice and obtain additional consent for changed processing where required.

4.4  Sensitive Information

General enquiry forms are not intended for sensitive information.

Where special-category or criminal-offence data is necessary, we satisfy the additional legal conditions and provide appropriate information before collection.

4.5  Children’s Information

Our website is intended for adults acting professionally. If children’s information is collected without the required legal basis or authorisation, we take appropriate corrective action.

5.  How We Use Personal Information

We assess necessity and balance our legitimate interests against your interests and fundamental rights.

If we introduce solely automated decisions producing legal or similarly significant effects, we will first provide the required information about the logic, significance and consequences, identify a permitted legal basis, and implement applicable safeguards.

6.  Cookies and Similar Technologies

Essential technologies support requested functionality and security.

Optional analytics and advertising technologies are activated only after consent. The relevant interface explains their providers, purposes and durations and allows acceptance, rejection and subsequent changes.

Rejecting optional tracking does not prevent submission of a general enquiry.

Browser settings may provide additional controls but may not cover every tracking technology. Contact [email protected] for assistance.

7.  Consent, Preferences and Withdrawal

Consent is requested clearly for the relevant purpose. Optional marketing consent is not required to submit an enquiry.

You may withdraw through available controls or by emailing [email protected].

Withdrawal does not affect earlier lawful processing. We stop the processing concerned unless another lawful ground permits or requires continuation.

8.  Disclosure and Sharing of Personal Information

8.1  Service Providers and Business Partners

We may share relevant information with authorised group personnel, hosting and IT providers, email and CRM providers, recruitment providers, payment providers and professional advisers.

Analytics and advertising providers receive relevant technical information subject to the applicable permissions.

Processors are bound by appropriate instructions, confidentiality obligations and security requirements.

8.2  Legal and Regulatory Disclosures

We assess requests from authorities and disclose information only where required or otherwise lawfully permitted.

8.3  Business Transfers

Information may be transferred during a merger, restructuring or acquisition, subject to appropriate safeguards and applicable notice requirements.

8.4  Independent Recipients

Where a recipient uses information for independent purposes, we provide additional information and obtain consent where required.

9.  International Data Transfers

Information may be processed in India and other countries where relevant group entities and authorised providers operate, including the United States and United Kingdom.

Where GDPR international-transfer restrictions apply, we use a legally permitted mechanism, such as an applicable European Commission adequacy decision, Standard Contractual Clauses or a permitted derogation.

We assess transfer risks and implement supplementary measures where required. We do not assume that a country provides adequate protection merely because it has privacy legislation.

You may request information about relevant destinations and a copy of applicable safeguards, subject to necessary confidentiality protections.

10.  Security of Personal Information

We apply technical and organisational measures appropriate to the information and risks, including access restrictions, confidentiality controls, secure transmission, supplier review and incident-response procedures.

No system guarantees absolute security. Our legal obligations remain unaffected.

11.  Security Incidents and Breach Notification

We assess incidents, take appropriate containment and remediation action, and notify supervisory authorities, affected individuals and clients where required.

We observe applicable deadlines and maintain appropriate incident records.

12.  Data Retention and Disposal

We retain information only for the period necessary for its purpose or another lawful requirement.

Enquiries are retained for response and relevant follow-up; business records for the relationship and applicable legal periods; recruitment information for the process and justified related needs; and marketing records until withdrawal or another reason for deletion.

Limited suppression records may be kept to honour opt-outs. Justified legal holds may extend retention.

Cookie durations are communicated through the relevant interface. Logs are retained for justified operational and security needs.

Information is securely deleted or irreversibly anonymised when no longer required. Backups remain protected until removed through their lifecycle.

13.  Accuracy of Personal Information

We take reasonable steps to maintain accurate information. Please contact us to request correction, completion or updating.

14.  Your Privacy Rights

Subject to the conditions in GDPR, you may:

• access your information and obtain a copy;

• correct inaccurate or incomplete information;

• request erasure;

• restrict processing;

• receive certain information in a portable format;

• withdraw consent;

• object to processing based on legitimate interests; and

• exercise rights concerning qualifying automated decisions.

You may object to direct marketing, including related profiling, at any time. We will stop processing for that purpose.

Send requests to [email protected]. We may seek proportionate identity verification.

We respond without undue delay and within one month. Where legally permitted because of complexity or the number of requests, this may be extended by a further two months. We will inform you within the initial month and explain the reasons.

If a request cannot be fulfilled, we explain the reason and available complaint or judicial remedies.

15.  Marketing Communications

For this website, we obtain prior opt-in consent before sending optional electronic marketing.

An enquiry, proposal request or download does not automatically subscribe you. Messages identify DPA and provide an unsubscribe method.

Necessary service, security and legal communications may continue after marketing withdrawal.

16.  Third-Party Links and Platforms

Independent websites have their own privacy practices. Please review their notices before providing information.

This does not exclude DPA’s responsibilities for processing it controls or providers acting on its behalf.

17.  Privacy Governance and Compliance Monitoring

We maintain appropriate responsibilities, processing records, training, supplier reviews and privacy-risk assessments.

We conduct impact assessments and meet applicable appointment and regulatory requirements where required.

18.  Changes to this Privacy Policy

The current Policy is published on this website. We provide notice of material changes and obtain fresh consent where required.

Updating the Policy does not itself authorise processing requiring consent.

19.  Privacy Contact and Grievance Redressal

Privacy / Grievance Officer: Malcolm Mascarenhas

Email: [email protected]

Address: Decimal Point Analytics Private Limited, 9th Floor, Hiranandani Business Park, Lightbridge, Saki Vihar Road, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072, India.

You may complain to the supervisory authority in the EEA country of your habitual residence, place of work or the alleged infringement.

You are not required to contact DPA first to exercise that right.

20.  Our Offices

DPA has offices and business presence in New York, London, Mumbai, Nashik and Gandhinagar.

Current details are available through our Contact Us section. This website is operated by DPA India.