Privacy Policy

Decimal Point Analytics Private Limited (“DPA”, “we”, “our” or “us”), a company incorporated in India, respects your privacy.

This Privacy Policy explains how we collect, use, disclose, transfer, retain and protect personal information through this website and related business interactions concerning the United Kingdom.

This website is operated by DPA India. Where applicable, we process information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, applicable electronic communications rules and other relevant laws.

Visiting this website does not, by itself, constitute consent to processing requiring separate consent.

1.  Purpose of this Privacy Policy

This Policy explains what information we collect, why and on what grounds we use it, how it is shared and protected, how long it is retained, and your rights.

2.  Scope and Applicability

DPA India is the controller for the website, enquiries, marketing subscriptions, recruitment interactions and business relationships described in this Policy, unless a supplementary notice identifies another controller.

Where DPA processes information on behalf of a client, applicable law and the relevant client agreement govern that processing. Requests concerning client-controlled information should normally be directed to that client.

Supplementary notices may apply to particular activities. Nothing in this Policy restricts mandatory rights or remedies.

3.  Definitions

“Personal Data” or “Personal Information” means information relating to an identified or identifiable individual.

“Controller” means the entity deciding why and how personal data is processed.

“Processor” means an entity handling personal data on a controller’s behalf.

“Processing” includes collecting, storing, using, disclosing, transferring and deleting personal data.

4.  Personal Information We Collect

4.1  Sources of Personal Information

We obtain information directly from you, through website interactions, from your organisation, referrals, recruitment platforms, professional networks and other lawful sources.

Where information is obtained indirectly, we provide the legally required information about its source and use within the applicable period, unless an exception applies.

4.2  Categories of Personal Information

We may collect:

• name, contact details and online identifiers;

• employer, job title, qualifications and employment history;

• enquiries, correspondence and service interests;

• transaction and billing information;

• IP address, browser details and website activity; and

• preferences and consent records.

Mandatory fields are identified. Without information necessary for an enquiry, application or service, we may be unable to complete that activity.

4.3  Data Minimisation and Purpose Limitation

We collect relevant information and use it for specified purposes. We provide additional notice and obtain consent for changed processing where required.

4.4  Sensitive Information

General enquiry forms are not intended for sensitive information. Where special-category or criminal-offence information is necessary, we meet the additional legal conditions and provide appropriate notice.

4.5  Children’s Information

Our website is intended for adults acting professionally. If children’s information is collected without the required legal basis or authorisation, we take appropriate corrective action.

5.  How We Use Personal Information

When relying on legitimate interests, we assess necessity and balance our interests against your rights.

Before undertaking automated decision-making requiring specific information or safeguards, we provide those disclosures and safeguards.

6.  Cookies and Similar Technologies

Essential technologies support requested functionality and security.

Optional analytics and advertising technologies are activated only after consent. The relevant interface explains providers, purposes and durations and allows acceptance, rejection and subsequent changes.

Rejecting optional tracking does not prevent a general enquiry.

Browser controls may provide additional options but do not necessarily control every tracking technology. Contact [email protected] for assistance.

7.  Consent, Preferences and Withdrawal

You may withdraw consent through available controls or by emailing [email protected].

Withdrawal does not affect earlier lawful processing. We stop the relevant processing unless a separate lawful ground permits or requires continuation.

Optional marketing consent is not required to submit an enquiry.

8.  Disclosure and Sharing of Personal Information

8.1  Service Providers and Business Partners

We share relevant information with authorised group personnel, hosting and IT providers, email and CRM providers, recruitment providers, payment providers and professional advisers.

Analytics or advertising providers receive relevant technical information only subject to the applicable permissions.

Processors are bound by appropriate instructions, confidentiality and security obligations.

8.2  Legal and Regulatory Disclosures

We disclose information where required or lawfully permitted, assessing and limiting the scope appropriately.

8.3  Business Transfers

Information may be transferred during a merger, restructuring or acquisition, subject to applicable safeguards and notice requirements.

8.4  Independent Recipients

Where another organisation receives information for independent purposes, we provide further information and obtain consent where required.

9.  International Data Transfers

Information may be processed in India and other countries where relevant group entities and authorised providers operate, including the United States and United Kingdom.

Where a transfer is restricted under UK law, we use an appropriate legal mechanism, such as applicable UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to European Commission Standard Contractual Clauses, or a permitted exception.

We complete required transfer assessments and implement supplementary safeguards where necessary.

You may request information about relevant destinations and a copy of applicable safeguards, subject to necessary confidentiality protections.

10.  Security of Personal Information

We apply safeguards appropriate to the information and risks, including access restrictions, confidentiality measures, secure transmission, supplier review and incident-response procedures.

No system guarantees absolute security. Our legal obligations remain unaffected.

11.  Security Incidents and Breach Notification

We assess and respond to incidents and notify the Information Commissioner’s Office, affected individuals or clients where legally or contractually required.

We observe applicable deadlines and maintain appropriate records.

12.  Data Retention and Disposal

We retain information only as long as necessary or legally justified.

Enquiries are retained for response and relevant follow-up; business records for the relationship and applicable legal periods; recruitment records for the process and justified related needs; and marketing records until withdrawal or another reason for deletion.

Limited suppression records may be retained to honour opt-outs. Justified legal holds may extend retention.

Cookie durations are communicated through the relevant interface. Security logs are retained for justified operational needs.

Information is securely deleted or irreversibly anonymised when no longer required. Backups remain protected until removed through their lifecycle.

13.  Accuracy of Personal Information

We take reasonable steps to maintain accurate information. Please contact us to request correction or updating.

14.  Your Privacy Rights

Subject to applicable conditions, you may:

• access and obtain a copy of your information;

• correct inaccurate or incomplete information;

• request erasure or restriction;

• receive certain information in a portable format;

• withdraw consent;

• object to processing based on legitimate interests; and

• exercise applicable rights concerning automated decision-making.

You may object to direct marketing, including related profiling, at any time. We will stop processing for that purpose.

Send requests to [email protected]. We may verify identity proportionately.

We respond without undue delay and within one month, subject to legally permitted extensions or adjustments. We explain any refusal and available complaint rights.

15.  Marketing Communications

For this website, we obtain prior opt-in consent for optional electronic marketing.

An enquiry or download does not automatically subscribe you. Messages identify DPA and provide an unsubscribe method.

Necessary service, security or legal communications may continue after marketing withdrawal.

16.  Third-Party Links and Platforms

Independent websites have their own privacy practices. Please review their notices.

This does not exclude our responsibility for processing we control or providers acting on our behalf.

17.  Privacy Governance and Compliance Monitoring

We maintain appropriate responsibilities, records, training, supplier reviews and privacy-risk assessments.

We carry out impact assessments and meet applicable regulatory requirements where required.

18.  Changes to this Privacy Policy

The current Policy is published on this website. Material changes are notified, and fresh consent obtained, where required.

A policy update does not itself authorise processing requiring consent.

19.  Privacy Contact and Grievance Redressal

Privacy / Grievance Officer: Malcolm Mascarenhas

Email: [email protected]

Address: Decimal Point Analytics Private Limited, 9th Floor, Hiranandani Business Park, Lightbridge, Saki Vihar Road, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072, India.

You may complain to the Information Commissioner’s Office through ico.org.uk.

You are not required to contact DPA first to exercise a direct complaint right.

20.  Our Offices

DPA has offices and business presence in New York, London, Mumbai, Nashik and Gandhinagar.

Current details are available through our Contact Us section. This website is operated by DPA India.