At Fidelity Matters Consulting (“FMC”, “we”, “us” or “our”), we respect your privacy and are committed to protecting the personal information entrusted to us.
This Privacy Policy explains how Fidelity Matters Consulting collects, uses, discloses, stores, protects, and otherwise handles personal information when you visit our website, contact us, engage our services, interact with us, or where we process personal information on behalf of our business clients.
Fidelity Matters Consulting provides back-office administrative and operational practice-support services to clients globally. Our principal service delivery operations are located in India, and depending on the nature of a particular engagement, our clients, personnel, technology providers, and approved service providers may be located in other countries.
Depending on the nature of the relationship and the services provided, FMC may process Personal Information for its own business purposes as a Data Fiduciary or equivalent entity under applicable law, or on behalf of a client as a processor, service provider or equivalent entity.
Where FMC processes Personal Information on behalf of a client, the client may determine the purposes and means of such processing and may remain responsible for its own obligations under applicable privacy and data protection laws. Such processing may additionally be governed by the applicable Service Agreement, data processing agreement or other contractual terms, together with the client's lawful instructions and applicable law.
We handle personal information in accordance with applicable privacy and data protection laws relevant to the particular processing activity, individual, client engagement, and jurisdiction. Depending on the circumstances, applicable laws may include:
The applicability of any particular privacy or data protection law depends on the nature of the processing, the location and status of the relevant individual or organisation, the services provided, the applicable contractual arrangements, and any applicable territorial or extraterritorial requirements. References to particular laws in this Privacy Policy do not constitute a representation that every such law applies to every processing activity.
Depending on our relationship with you and the services we provide, we may collect and process the following categories of personal information:
We collect personal information through lawful and transparent means:
Where we receive personal information from another organization to provide services to that organization, our handling of that information is governed by the applicable contractual arrangements, documented instructions, and applicable privacy and data protection laws.
Fidelity Matters Consulting provides back-office administrative and operational support services to businesses and organizations.
In performing those services, we may process personal information on behalf of our clients. This may include information relating to our client's customers, clients, employees, suppliers, or business contacts.
In these circumstances, the relevant client may determine the purposes and, where applicable, the legal basis for which the information is collected and processed. Fidelity Matters Consulting acts in accordance with its contractual role and handles the information strictly in accordance with:
In these circumstances, the client is the controller, business or equivalent, and Fidelity Matters Consulting acts as its processor or service provider, as those terms are used in applicable privacy law. We process client personal information only to provide the contracted services and on the client's documented instructions. We do not sell or share client personal information, or use it for our own purposes. We may, however, process limited information where reasonably necessary to provide, secure, administer, or improve our services; comply with applicable laws; establish or defend legal claims; maintain security; prevent fraud or abuse; maintain business records; or as otherwise expressly permitted by the applicable Service Agreement or law.
If you are seeking to access, correct, delete, or otherwise exercise a privacy right in relation to information that we process solely on behalf of one of our business clients, we may refer your request to the relevant client or assist that client in responding, as appropriate to the applicable law and contractual arrangements.
We may use personal information for specific, legitimate business purposes, including:
We do not sell or rent personal data. We disclose or provide access to personal information strictly on a need-to-know basis to:
Personnel, contractors, and third-party service providers who have access to personal information are subject to appropriate contractual confidentiality, privacy, and security obligations having regard to their role, responsibilities, and level of access.
In relation to information we process for a client, we disclose it to approved service providers, or transfer it to other countries, only where the applicable Service Agreement or the client's documented instructions permit it, or where the law requires it.
Fidelity Matters Consulting provides services to clients globally. Our principal service delivery operations are located in India. Depending on the nature of the services provided, personal information may be accessed, transferred, stored, or processed across national borders by Fidelity Matters Consulting, our personnel, technology providers, or approved service providers.
Personal information processed in connection with a client engagement may be handled in India and, where required for the provision of services, in other jurisdictions in which the relevant client, personnel, technology provider, or approved service provider operates.
Where personal information is transferred, accessed, or processed across national borders, we apply contractual, technical, and organisational safeguards appropriate to the nature of the information, the processing activity, the applicable law, and the requirements of the relevant client engagement.
Depending on the circumstances, safeguards may include:
Where we process personal information on behalf of a client, international transfers or access outside the client's jurisdiction will be carried out only as permitted by the applicable Service Agreement, the client's documented instructions, and applicable privacy and data-protection law.
Australian Clients:
For Australian engagements, cross-border handling of personal information may be subject to the Privacy Act 1988 (Cth), including Australian Privacy Principle 8 (APP 8), where applicable.
Where an Australian client provides personal information to Fidelity Matters Consulting for the purpose of performing contracted services, the applicable Service Agreement and related privacy and security requirements will govern the handling of that information.
Fidelity Matters Consulting will handle personal information in accordance with the applicable contractual requirements and will not do or omit to do anything that would cause the Australian client to breach its applicable privacy obligations in relation to that information.
Where required, Fidelity Matters Consulting will reasonably assist the client with its applicable privacy and data-protection obligations relating to cross-border processing, subject to the terms of the Service Agreement.
Personal information may be processed in India and, where required for the provision of services, in other jurisdictions identified in the applicable client agreement or approved by the client.
The specific countries or locations in which personal information may be processed may vary depending on the client, services, personnel, technology providers, and approved service providers involved.
We maintain reasonable technical, physical, and administrative measures designed to protect personal information against loss, misuse, unauthorised access, alteration, destruction, or disclosure.
Depending on the nature of the information, systems used, and requirements of the relevant client engagement, safeguards may include:
Security measures may vary depending on the systems, client requirements, data sensitivity, and technology providers involved.
While we take reasonable precautions and seek to maintain appropriate security measures, no electronic transmission or storage system can be guaranteed to be completely secure.
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, to provide contracted services, to satisfy contractual requirements, and to comply with statutory accounting, tax, and legal recordkeeping obligations.
Where we process information on behalf of a client, retention and deletion schedules are governed by the relevant service agreement and the client's documented instructions. When information is no longer required, it is securely deleted, permanently overwritten, or anonymized in accordance with applicable retention procedures.
Information may remain temporarily in routine system backups, disaster-recovery systems, or other technical storage environments until the applicable backup or system-retention cycle is completed, unless earlier deletion is technically available and required by applicable law or contractual obligations.
Our website uses essential, functional, and analytical cookies to ensure proper operation, enhance security, remember preferences, and analyze website traffic.
Where required by applicable law, we will obtain appropriate consent before placing or using non-essential cookies or similar tracking technologies.
You can configure or disable non-essential cookies via your browser settings. Disabling cookies may affect certain website functionalities.
We may communicate with clients, partners, and prospects via email, telephone, and business messaging platforms such as WhatsApp. Communications over third-party platforms are subject to the underlying platform’s terms and privacy architectures.
To protect confidentiality, we recommend that you do not send unencrypted sensitive credentials, passwords, or payment details through ordinary consumer messaging channels. High-risk documentation should be shared only through authorized secure portals.
We maintain an incident-response process to identify, assess, contain, investigate and remediate suspected or confirmed security incidents involving personal information.
Where we process personal information on behalf of a client, we will notify the client without undue delay and within the timeframe specified in the applicable Service Agreement. Where the Service Agreement requires notification within 24 hours, we will comply with that timeframe without making notification conditional on completion of the investigation.
We will provide reasonably available information and material updates to assist the client in assessing and responding to the incident, including determining applicable notification and regulatory obligations.
Where applicable law independently requires Fidelity Matters Consulting to notify an individual, regulator or other authority, we will comply with that obligation. Each party remains responsible for its own statutory and regulatory reporting obligations, subject to applicable law and the relevant contractual arrangements.
Depending on the jurisdiction applicable to you (such as India's DPDP Act, the Australian Privacy Act, the EU or UK GDPR, or US state privacy laws), you may hold statutory rights regarding your personal information, including:
The availability and scope of these rights, including applicable exceptions and conditions, depend on the law applicable to the relevant processing activity.
Where we process personal information solely on behalf of a client as a service provider, privacy-rights requests may be referred to the relevant contracting client where appropriate, and we may assist that client in responding in accordance with applicable law and contractual arrangements.
We take privacy concerns seriously. If you have questions or believe that your personal information has been handled inconsistently with this Privacy Policy or applicable privacy law, please contact us using the details below.
Please include your name, contact information, a clear description of your concern, and any supporting information that may assist us in reviewing the matter.
We will review privacy complaints and seek to respond within a reasonable period having regard to the nature and complexity of the matter and any timeframe required by applicable law.
Where we process personal information on behalf of a client, we may refer the complaint to the relevant client where that client is responsible for the relevant processing activity, or assist the client in responding as appropriate.
Australian Privacy Complaints:
If Australian privacy law applies and you are not satisfied with the handling of your complaint, you may have the right to lodge a privacy complaint with the Office of the Australian Information Commissioner (OAIC), subject to the requirements and complaint procedures applicable to your circumstances.
Generally, you should first raise your privacy complaint with the organisation responsible for handling your personal information and allow a reasonable opportunity for the matter to be addressed before contacting the OAIC. Further information is available from the OAIC.
Other jurisdictions: If you are in the European Union, the United Kingdom or another jurisdiction with a data-protection authority, you may also have the right to complain to your local authority (for example, the UK Information Commissioner's Office or your national EU data-protection authority).
Our website and services are primarily intended for businesses, working professionals, and adults. We do not knowingly seek to collect personal information directly from children through our website for purposes unrelated to our legitimate business activities.
We may modify this Privacy Policy periodically to reflect technological changes, operational updates, or evolving legal frameworks. Updated versions will be published directly to our website when changes are made.
If you have questions about this Privacy Policy, wish to exercise an applicable statutory privacy right, or wish to submit a privacy grievance, please contact our designated officer:
Attention: Privacy & Grievance Contact
Entity: Fidelity Matters Consulting (trading name of Nipesh Prataprai Mehta, sole proprietor)
Name: Nipesh Prataprai Mehta
Address: 2004, 20th Floor, Tower 8, Salarpuria Sattva Divinity, Pantarapalya, Mysore Road, Nayandahalli, Bengaluru – 560026, Karnataka, India
Email: nipesh@fidelitymattersconsulting.com
Phone: +91 96115 70865
We handle privacy inquiries and grievances in accordance with applicable statutory requirements and the circumstances of the relevant processing activity.
This Privacy Policy applies to Fidelity Matters Consulting's website, direct commercial communications, and personal information handled in connection with our own business operations.
Where Fidelity Matters Consulting processes personal information exclusively on behalf of a client practice, the relevant client's privacy notice, service agreement, and documented instructions will govern the handling of that data. Nothing in this Privacy Policy is intended to override specific contractual data-processing obligations agreed with our clients.
© 2026 Fidelity Matters Consulting. All rights reserved | Privacy Policy | Terms and Conditions | Compliance | Disclaimer
+91 9611570865