Privacy Policy
Decimal Point Analytics Private Limited (“DPA”, “we”, “our” or “us”), a company incorporated in India, respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, receive, use, store, disclose, transfer, retain and safeguard personal information when you visit this website, communicate with us, apply for employment, or engage with us as a prospective client, client, vendor, partner or service provider.
This website is operated by Decimal Point Analytics Private Limited, India, and is intended to serve business contacts in the Gulf Cooperation Council (“GCC”) countries, including the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Oman and Kuwait.
We process personal information in accordance with the laws applicable to the relevant processing activity, including applicable Indian data protection laws and, where applicable, the laws of the relevant GCC jurisdiction or special financial zone.
Visiting this website or reading this Privacy Policy does not, by itself, constitute consent to processing for which separate consent is required.
1. Purpose of this Privacy Policy
The purpose of this Privacy Policy is to explain:
the personal information DPA collects or receives;
the purposes and legal grounds for processing;
how information is protected, disclosed, transferred and retained;
the rights and choices available to individuals; and
how to contact DPA about privacy-related requests, concerns or complaints.
2. Scope and Applicability
This Privacy Policy applies where DPA determines the purposes and means of processing personal information as a Data Fiduciary/controller in connection with:
this website;
enquiries, marketing and business development;
recruitment and employment-related interactions;
vendor, service-provider and partner relationships; and
direct relationships with prospective, current and former clients.
DPA India is responsible for the processing described in this Privacy Policy, except where a supplementary notice identifies another responsible entity.
Where DPA processes personal information on behalf of a client, DPA generally acts as a Data Processor/service provider. Such processing is governed by applicable law and the relevant client contract, statement of work and data processing agreement. This Privacy Policy does not replace those obligations.
Where another entity independently determines how personal information is processed, we will provide its identity and relevant privacy information where required.
Nothing in this Privacy Policy limits mandatory rights or protections available under applicable law, including the right to complain to a competent authority or seek relief before a court with jurisdiction.
3. Definitions
“Personal Information” or “Personal Data” means information relating to an identified or identifiable individual.
“Processing” means an operation performed on personal information, including collection, recording, storage, use, disclosure, transfer, correction or deletion.
“Data Principal” or “Data Subject” means the individual to whom personal information relates.
“Data Fiduciary” or “Controller” means the entity that determines the purposes and means of processing personal information.
“Data Processor” means an entity that processes personal information on behalf of a controller.
“Consent” means a freely given, specific, informed and unambiguous indication of agreement through affirmative action, meeting any additional requirements of applicable law.
4. Personal Information We Collect
4.1 Sources of Personal Information
We may collect or receive personal information:
directly from you through forms, emails, enquiries, applications, meetings, events or other interactions;
automatically through website logs, cookies and similar technologies, subject to applicable consent requirements;
from professional networks, recruitment platforms, referrals, business partners and publicly available sources, where collection and use are lawful; and
from clients, vendors or other business contacts in connection with a lawful business relationship.
4.2 Categories of Personal Information
Depending on your interaction with us, we may collect:
name, job title and organisation;
email address, telephone number, address and country;
information included in enquiries, correspondence and feedback;
website usage information, IP address, browser details and device identifiers;
education, qualifications, employment history and other application information;
billing, payment and tax-related information;
identity or employment-related details where necessary and legally permitted; and
photographs or recordings where relevant and appropriately notified.
We do not collect every category from every individual. Mandatory fields are identified when information is requested. Where relevant, we explain the consequences of not providing information needed for a particular request or service.
4.3 Data Minimisation and Purpose Limitation
We collect personal information that is relevant and reasonably necessary for the stated purpose.
We will not use personal information for an incompatible new purpose unless applicable law permits that processing. Where required, we will provide further notice and obtain fresh consent before proceeding.
4.4 Sensitive Information
Our general website enquiry forms are not intended to collect sensitive information, such as health information, religious beliefs, biometric identifiers or financial account credentials. Please do not submit such information through a general enquiry.
Where sensitive information is necessary for a specific lawful activity, we will provide appropriate information and obtain any consent, authorisation or permit required by applicable law.
4.5 Children’s Information
Our website and business services are not directed at children. We do not knowingly collect children’s personal information through general website enquiries.
If we become aware that such information has been collected without the required legal basis or consent, we will take appropriate steps to delete or otherwise lawfully handle it.
5. How We Use Personal Information
We may process personal information for the following purposes:
Communication: responding to enquiries, requests, complaints and feedback.
Service Delivery: managing business relationships and providing agreed services and support.
Billing and Payments: issuing invoices, processing payments and maintaining relevant records.
Security and Fraud Prevention: protecting our website, systems and information and investigating suspected misuse.
Legal Compliance: meeting applicable statutory, regulatory, accounting and other legal obligations.
Website Operations and Analytics: maintaining functionality and understanding website performance, subject to applicable consent requirements.
Marketing: providing newsletters, event invitations and promotional communications in accordance with Section 15.
Recruitment and Employment: evaluating applications and managing relevant recruitment or employment processes.
Dispute Management: establishing, exercising or defending legal claims.
Depending on the applicable law and activity, we rely on consent, steps requested by an individual before entering into a contract, performance of a contract with that individual, compliance with a legal obligation, or another ground permitted by applicable law.
We rely on legitimate interests only where the applicable law recognises that ground and its conditions are met. We assess the necessity of the processing and its impact on individuals. A commercial interest or contract with an organisation does not automatically provide a lawful ground for every use of an individual’s information.
You may contact us for information about the legal ground applicable to a particular processing activity.
6. Cookies and Similar Technologies
Our website may use cookies, pixels, tags and similar technologies to support website functionality, security, preferences, analytics and advertising.
Essential technologies are used where necessary to provide requested functionality and maintain website security.
Before using optional analytics or advertising technologies, we will provide information about their purposes and obtain your consent. Where these technologies are used, the accompanying cookie controls will allow you to accept, reject or manage them and subsequently withdraw your consent.
Rejecting optional technologies will not prevent you from submitting a general enquiry.
Information about the providers, purposes and durations of optional technologies will be made available through the relevant consent interface before they are activated.
Browser settings may provide additional options for managing or deleting cookies. These settings may not control every tracking technology, and disabling essential cookies may affect website functionality.
For questions or assistance concerning cookies and preferences, please contact [email protected].
7. Consent, Preferences and Withdrawal
Where we rely on consent, we request it clearly for the relevant purpose. Optional marketing consent is not a condition for submitting an enquiry.
You may withdraw consent through the relevant unsubscribe or preference controls, where provided, or by emailing [email protected].
Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We will stop the processing covered by the withdrawal unless a separate lawful ground permits or requires its continuation.
Where relevant, we will explain any effect on a service that depends on the processing concerned.
We retain appropriate records of consent and withdrawal to demonstrate compliance.
8. Disclosure and Sharing of Personal Information
8.1 Service Providers and Business Partners
Where necessary for the purposes described in this Policy, we may disclose personal information to:
relevant group entities and authorised personnel;
website hosting, cloud, IT and security providers;
customer relationship management and communication providers;
analytics or advertising providers, subject to applicable consent;
recruitment and background-check providers, where relevant; and
professional advisers, auditors and payment-service providers.
We limit disclosures to the information needed for the relevant purpose. Processors handling information on our behalf are subject to appropriate contractual instructions, confidentiality obligations and security requirements.
Where a partner receives information for its own independent purposes, we will provide any additional notice and obtain any consent required by law.
8.2 Legal and Regulatory Disclosures
We may disclose personal information to courts, regulators, public authorities or other recipients where required or otherwise lawfully permitted.
We assess the legal basis and scope of such disclosures and limit them as appropriate.
8.3 Business Transfers
Personal information may be disclosed or transferred in connection with a merger, restructuring, acquisition or business transfer, subject to applicable law, appropriate confidentiality safeguards and any required notice or consent.
8.4 No Sale of Personal Information
DPA does not sell personal information.
9. International Data Transfers
DPA operates from India. Personal information submitted through this website may therefore be received, accessed, stored or otherwise processed in India, even where you are located in a GCC country.
Depending on the services and systems used, information may also be processed in other countries where our authorised group entities or service providers operate. This may include processing for website hosting, email, customer relationship management, technical support and other purposes described in this Policy.
We carry out international transfers only where permitted by applicable law and after meeting the relevant transfer conditions.
Depending on the applicable jurisdiction, this may require an adequacy determination, approved contractual safeguards, an authorised intra-group arrangement, a permitted exception, a risk assessment or regulatory authorisation.
Technical and organisational security measures support these arrangements but do not replace a required legal transfer mechanism.
Acceptance of this Privacy Policy is not blanket consent to overseas transfers.
You may contact [email protected] for information about the destinations and safeguards relevant to your personal information and, where applicable, how to obtain a copy of those safeguards. We will provide additional transfer information at the point of collection where required by applicable law.
10. Security of Personal Information
We maintain appropriate technical and organisational measures to protect personal information against unauthorised access, misuse, loss, alteration and disclosure.
These measures include controls appropriate to the information and risks involved, such as restricted access, confidentiality requirements, secure transmission, monitoring, vendor assessment and incident-response procedures.
No system can guarantee absolute security. This does not limit our obligations under applicable law.
11. Security Incidents and Breach Notification
If a personal data incident occurs, we will assess its nature and impact and take appropriate containment, investigation and remediation measures.
We will notify competent authorities, affected individuals and clients where required, within the applicable legal or contractual deadlines.
Notifications will contain the information required by the relevant law, which may include the nature of the incident, likely consequences, remedial measures and contact details.
We will maintain appropriate incident records.
12. Data Retention and Disposal
We retain personal information only for as long as necessary for the relevant purpose or as required or permitted by applicable law.
We apply the following retention criteria:
Enquiries: for the period needed to respond and manage related follow-up. Inactive enquiries are reviewed for deletion.
Client and vendor records: for the relationship and any applicable statutory recordkeeping or legal-claims period.
Marketing information: until consent is withdrawn or the information is otherwise no longer lawfully required. Limited suppression records may be retained to honour an opt-out.
Recruitment information: for the recruitment process and a justified period for related legal obligations or claims. Retention for future vacancies is separately explained.
Cookies and website logs: for the durations communicated through the relevant cookie information or the period justified by operational and security needs.
Dispute records: for a necessary and lawful period relating to an identified dispute, investigation or legal hold.
We securely delete or irreversibly anonymise personal information when retention is no longer justified. Backup information is protected and removed through the applicable backup lifecycle.
You may request further information about the retention period applicable to your personal information.
13. Accuracy of Personal Information
We take reasonable steps to maintain accurate personal information for its intended use.
Please inform us if relevant information changes or is inaccurate. Correction requests may be sent to [email protected].
14. Your Privacy Rights
Depending on the applicable law, your rights may include:
obtaining information about processing and recipients;
accessing your personal information and obtaining a copy;
correcting, completing or updating information;
requesting deletion;
withdrawing consent;
objecting to or restricting certain processing;
receiving information in a portable format;
objecting to certain decisions based solely on automated processing, or requesting human review, where applicable;
nominating another person to exercise rights where the law provides for this; and
complaining to the competent data protection authority or seeking judicial relief.
We may request proportionate information to verify identity or authority to act for another person.
We will respond without undue delay and ordinarily within thirty (30) days of receipt, or within a shorter period where required by applicable law. An extension will be used only where legally permitted, and we will explain the reason and revised deadline as required.
If we cannot fulfil a request, we will explain the applicable reason and available complaint route, subject to lawful restrictions.
Please send requests to [email protected].
15. Marketing Communications
For this GCC website, we will obtain your prior opt-in consent before sending optional electronic marketing communications.
Submitting an enquiry, requesting a proposal or downloading material does not automatically subscribe you to marketing communications.
Marketing communications will identify DPA and provide a straightforward way to unsubscribe. You may also withdraw consent by emailing [email protected].
Following withdrawal, we may continue to send necessary non-marketing communications relating to an existing engagement, security matter or legal obligation.
16. Third-Party Links and Platforms
Our website may link to platforms operated independently by third parties. Their handling of personal information is governed by their own privacy notices.
Please review those notices before providing information.
This section does not exclude DPA’s responsibility for processing it controls or for service providers acting on its behalf.
17. Privacy Governance and Compliance Monitoring
We maintain privacy governance measures appropriate to our processing activities and applicable obligations.
These include assigning responsibilities, reviewing suppliers, managing access, maintaining relevant records, training personnel and assessing privacy risks.
Where required, we carry out impact assessments, appoint designated privacy personnel and meet applicable registration or regulatory requirements.
18. Changes to this Privacy Policy
We may update this Policy to reflect changes in our operations, website, processing activities or applicable law.
The current version will be displayed on this website.
Where required, we will notify you of material changes before they take effect and obtain fresh consent where necessary.
Updating this Policy does not itself authorise a new use of personal information that requires consent.
19. Privacy Contact and Grievance Redressal
For questions, requests or complaints concerning personal information, please contact:
Privacy / Grievance Officer: Malcolm Mascarenhas
Email: [email protected]
Address: Decimal Point Analytics Private Limited, 9th Floor, Hiranandani Business Park, Lightbridge, Saki Vihar Road, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072, India.
Requests and complaints will be handled within the periods described in Section 14.
You may also complain to the competent data protection authority under the law applicable to your processing. We can provide relevant authority contact details on request.
Contacting DPA first is not a condition for exercising any direct complaint right provided by law.
20. Our Offices
DPA has offices and business presence in:
New York · London · Mumbai · Nashik · Gandhinagar.
For current office and contact information, please refer to the Contact Us section of our website.
This GCC-focused website is operated by DPA India. Its regional focus does not, by itself, indicate that DPA has an office or separately incorporated entity in each GCC country.
