Privacy Policy
Decimal Point Analytics Private Limited (“DPA”, “we”, “our” or “us”), a company incorporated in India, respects your privacy.
This Privacy Policy explains how we collect, use, disclose, transfer, retain and protect personal information through this website and related business interactions concerning the United States and Canada.
This website is operated by DPA India. We process information in accordance with the laws applicable to the relevant activity, including applicable Canadian federal and provincial privacy laws and United States federal and state laws.
Visiting this website does not, by itself, constitute consent to processing requiring separate consent.
1. Purpose of this Privacy Policy
This Policy explains what information we collect, why we use it, who receives it, how it is protected and retained, and how you can exercise privacy rights or contact us.
2. Scope and Applicability
This Policy applies to website visitors, business enquiries, marketing subscriptions, recruitment interactions and relationships with clients, vendors and partners where DPA determines how personal information is used.
Where DPA processes information on behalf of a client, applicable law and the relevant client agreement govern that processing. Requests concerning client-controlled information should normally be directed to that client.
Supplementary notices may apply to particular services, activities or jurisdictions. Nothing in this Policy limits mandatory legal rights.
3. Definitions
“Personal Information” means information relating to an identifiable individual or otherwise protected as personal information under applicable law.
“Processing” includes collecting, storing, using, disclosing, transferring, correcting and deleting information.
“Service Provider” or “Processor” means an organisation handling information on our behalf under appropriate instructions.
4. Personal Information We Collect
4.1 Sources of Personal Information
We obtain information directly from you, from website interactions, your organisation, business referrals, recruitment platforms, professional networks and other lawful sources.
4.2 Categories of Personal Information
Depending on the interaction, we may collect:
names, contact details and online identifiers;
employer, job title, qualifications and employment history;
enquiries, correspondence and service interests;
transaction, billing and payment-related information;
IP addresses, browser details and website activity; and
communication preferences and consent records.
Mandatory fields are identified when information is requested.
4.3 Data Minimisation and Purpose Limitation
We collect information relevant to the stated purpose and provide further notice or obtain additional consent before a new use where required.
4.4 Sensitive Information
Please do not submit sensitive information through general enquiry forms. Where such information is necessary, we provide appropriate information and apply the additional legal safeguards required.
4.5 Children’s Information
Our website is intended for adults acting in a professional capacity. If we discover that children’s information has been collected without required authorisation, we take appropriate corrective action.
5. How We Use Personal Information
We use information to:
respond to enquiries and provide agreed services;
manage client, supplier and partner relationships;
administer billing and business records;
maintain website functionality and security;
evaluate employment applications;
send optional marketing in accordance with Section 15; and
comply with legal obligations and manage disputes.
For Canadian information, we obtain meaningful consent where required, taking account of sensitivity and reasonable expectations. We rely on exceptions only where legally permitted.
We do not make optional marketing consent a condition of responding to an enquiry.
6. Cookies and Similar Technologies
We may use cookies, pixels and similar technologies for essential functionality, security, preferences, analytics and advertising.
Optional analytics and advertising technologies are activated only after consent through the relevant controls. Those controls allow acceptance, rejection and subsequent changes.
Information about providers, purposes and durations is made available through the consent interface.
Where legally required, we honour recognised opt-out signals, including Global Privacy Control, for the processing covered by that signal.
Rejecting optional tracking does not prevent submission of a general enquiry.
7. Consent, Preferences and Withdrawal
You may withdraw consent through available preference or unsubscribe controls, or by emailing [email protected].
Withdrawal does not invalidate earlier lawful processing. We explain any relevant consequences and retain information only where another lawful basis permits or requires it.
8. Disclosure and Sharing of Personal Information
8.1 Service Providers and Business Partners
We may disclose relevant information to group entities, hosting and IT providers, email and CRM providers, recruitment providers, payment providers and professional advisers.
Technical identifiers and website activity may be disclosed to analytics or advertising providers subject to the relevant permissions.
Processors are subject to appropriate contractual instructions, confidentiality and security requirements.
8.2 Legal and Regulatory Disclosures
We may disclose information where required or otherwise lawfully permitted, limiting disclosure as appropriate.
8.3 Business Transfers
Information may be transferred during a merger, restructuring or acquisition, subject to applicable safeguards and notice requirements.
8.4 Advertising-Related Disclosures
Certain advertising disclosures may qualify as “sale”, “sharing” or targeted advertising under United States laws, even without payment.
Where applicable, we provide the required notice and opt-out controls before engaging in that processing.
9. International Data Transfers
Information may be processed in India and in other countries where relevant group entities and authorised providers operate, including the United States and United Kingdom.
We apply legally required safeguards and remain accountable for information entrusted to processors.
Information processed outside Canada may be accessible to foreign courts, law enforcement or national security authorities under applicable laws.
Contact us for information about relevant locations and safeguards.
10. Security of Personal Information
We apply technical and organisational safeguards appropriate to the information and risks, including access restrictions, confidentiality measures, secure transmission and incident-response procedures.
No system guarantees absolute security. This does not limit our legal obligations.
11. Security Incidents and Breach Notification
We investigate personal data incidents and take appropriate containment and remediation measures.
We notify individuals, authorities and clients where required, within applicable deadlines, and maintain relevant records.
12. Data Retention and Disposal
We retain information only for a justified purpose or applicable legal requirement.
Enquiries are retained for response and relevant follow-up; business records for the relationship and applicable recordkeeping periods; recruitment records for the recruitment process and justified related needs; and marketing records until withdrawal or another reason for deletion.
Limited suppression records may be kept to honour opt-outs. Information subject to a justified legal hold may be retained longer.
Information is securely deleted or irreversibly anonymised when no longer required. Backups remain protected until removed through their lifecycle.
13. Accuracy of Personal Information
We take reasonable steps to maintain accurate information. Please contact us to correct information that is inaccurate or out of date.
14. Your Privacy Rights
Canadian individuals may request access, correction, information about use and disclosure, and withdrawal of consent, subject to applicable law. Provincial law may provide additional rights.
United States individuals, where applicable law provides, may request access, correction, deletion, portability, relevant disclosure information, or an opt-out of sale, sharing, targeted advertising or specified profiling. Additional rights concerning sensitive information may apply.
We do not unlawfully discriminate against individuals for exercising rights.
Send requests to [email protected]. Authorised agents may act where permitted. We verify identity or authority proportionately where appropriate, but do not impose verification where prohibited for opt-outs.
We respond within applicable deadlines, generally 30 days for Canadian access requests and 45 days for many US access, correction and deletion requests, subject to lawful extensions. Shorter applicable opt-out deadlines are observed.
Where an appeal right applies, email us with the subject “Privacy Request Appeal”. We explain the outcome and applicable further complaint routes.
15. Marketing Communications
For subscriptions and enquiries collected through this website, we obtain prior opt-in consent before sending optional electronic marketing.
Submitting an enquiry does not automatically subscribe you. Marketing identifies DPA and provides an unsubscribe method.
Necessary non-marketing communications may continue.
16. Third-Party Links and Platforms
Independent third-party websites have their own privacy practices. Please review their notices.
This does not exclude DPA’s responsibilities for processing it controls or providers acting on its behalf.
17. Privacy Governance and Compliance Monitoring
We maintain appropriate responsibilities, records, training, supplier reviews and privacy-risk assessments.
We meet additional regulatory requirements where applicable.
18. Changes to this Privacy Policy
The current version is published on this website. We provide notice of material changes and obtain fresh consent where required.
Updating this Policy does not itself authorise processing requiring consent.
19. Privacy Contact and Grievance Redressal
Privacy / Grievance Officer: Malcolm Mascarenhas
Email: [email protected]
Address: Decimal Point Analytics Private Limited, 9th Floor, Hiranandani Business Park, Lightbridge, Saki Vihar Road, Tunga Village, Chandivali, Powai, Mumbai, Maharashtra 400072, India.
Canadian individuals may complain to the Office of the Privacy Commissioner of Canada or the competent provincial authority.
United States individuals may contact their relevant state Attorney General or competent privacy regulator.
Contacting DPA first is not a condition for exercising a direct legal complaint right.
20. Our Offices
DPA has offices and business presence in New York, London, Mumbai, Nashik and Gandhinagar.
Current details are available through our Contact Us section. This website is operated by DPA India.
