- India's Digital Personal Data Protection (DPDP) Act, 2023;
- The Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth);
- The General Data Protection Regulation (EU GDPR) and the UK GDPR; and
- Any other applicable statutory privacy rules and regulations.
1. Information We Collect
Depending on our relationship with you and the services we provide, we may collect and process:
- Contact details: Name, business address, email address, and telephone number.
- Professional and business details: Company name, job title, corporate identification, and employment background.
- Client & operational data: Information relating to clients, suppliers, and partners; business records; and financial, accounting, or billing information required to execute our consulting and operational engagements.
- Communications records: Correspondence via email, telephone recordings (where permitted by law), web forms, and messaging applications such as WhatsApp.
- Technical & website usage data: IP addresses, browser types, device identifiers, operating systems, and site interaction metrics.
- Compliance & verification data: Identity verification documents and compliance records required by applicable regulatory standards or contracts.
- Special categories / Sensitive data: Where permitted by law, sensitive personal data strictly necessary for fulfilling specialized compliance, tax, or operational support requirement.
2. How We Collect Personal Information
We collect personal information through lawful and transparent means:
- Directly from you when you submit queries, engage our services, or contact us.
- Automatically through website cookies, server logs, and tracking technologies.
- From your employers, authorised representatives, or clients who engage us on your behalf.
- From verified third-party partners, vendors, and publicly available registers (such as corporate registries).
3. Purpose and Legal Grounds for Processing
We process your personal information for specific, lawful purposes:
- Delivering client-contracted consulting, operational, and administrative support services.
- Communicating status updates, answering inquiries, and managing commercial relationships.
- Invoicing, accounting, payment processing, and internal operational audits.
- Maintaining network security, preventing fraud, and investigating unauthorized access.
- Meeting legal, regulatory, and corporate governance requirements across the jurisdictions in which we operate.
- Sending service-related notices and relevant marketing updates (subject to consent and opt-out rights).
4. Sharing and Disclosure of Personal Information
We do not sell personal data. We disclose personal information strictly on a need-to-know basis to:
- Our employees, contractors, and affiliates who require access to deliver our services.
- Professional advisers, including external legal counsel, auditors, and tax consultants.
- Technology vendors, such as secure cloud storage facilities, SaaS platforms, email systems, and enterprise tools.
- Statutory authorities, courts, tax departments, or law enforcement bodies when mandated by law or court order. All third-party processors are bound by contractual data-protection terms, confidentiality commitments, and security requirements equivalent to this policy.
5. International Data Transfers
Because we operate across borders—primarily serving clients and coordinating resources between India, Australia, the United Kingdom, and other global regions—your information may be accessed, stored, or processed outside your country of residence. Where data crosses borders, we implement recognized transfer mechanisms, including:
- Standard Contractual Clauses (SCCs) / International Data Transfer Agreements (IDTAs).
- Contractual confidentiality and equivalent technical safeguard mandates.
- Compliance with transfer restrictions stipulated by India's DPDP Act and the Australian Privacy Principles.
6. Information Security and Safeguards
We maintain technical, administrative, and physical measures to protect personal information against loss, unauthorized access, alteration, destruction, or disclosure. Safeguards include role-based access controls, multi-factor authentication, enterprise-grade encryption for data in transit and at rest, and regular system audits. However, no data transmission across the internet can be guaranteed as 100% secure.
7. Data Retention
We retain personal data only for the period necessary to:
- Fulfill the operational purposes outlined in this policy.
- Satisfy statutory limitation periods, contractual obligations, and statutory recordkeeping mandates (e.g., tax, audit, and corporate governance requirements). Once retention obligations expire, data is securely deleted, permanently overwritten, or anonymized.
8. Cookies and Tracking Technologies
Our website uses essential, functional, and analytical cookies to ensure proper operation, evaluate traffic patterns, and optimize user experience. You can manage or disable non-essential cookies through your browser settings. Disabling cookies may affect certain website functionalities.
9. Electronic and Third-Party Messaging Platforms
When interacting with us over messaging platforms (such as WhatsApp), communications are subject to the underlying platform's terms and privacy architectures. We retain message logs as part of our business and service history. To maintain confidentiality, do not share unencrypted high-risk credentials or sensitive personal documents over consumer messaging channels unless requested through a secure link.
10. Data Breach Response
We maintain an incident response protocol to evaluate and address potential security events. In the event of a confirmed personal data breach posing a risk to individuals, we will notify affected parties and relevant data protection authorities within the timeframes prescribed by applicable law.
11. Your Privacy Rights
Depending on the law of your jurisdiction (including the DPDP Act, Australian Privacy Act, or GDPR), you may hold the following rights:
- Access: Request confirmation of processing and a copy of the personal information we hold about you.
- Correction & Updating: Request corrections to inaccurate, incomplete, or outdated data.
- Erasure: Request deletion of personal data where legal grounds for continued processing no longer apply.
- Grievance Redressal: Nominate a representative or file a grievance regarding our data management practices.
- Consent Withdrawal: Withdraw previously given consent for optional processing activities.
- Marketing Opt-Out: Unsubscribe from promotional and direct marketing messages at any time.
12. Children's Data
Our services and website are intended solely for business professionals and adults. We do not knowingly solicit or collect personal information from minors.
13. Changes to This Policy
We may modify this Privacy Policy periodically to reflect technological shifts, operational updates, or legal developments. Revised versions will be published directly to our website alongside a revised "Last Updated" date.
14. Contact Us & Privacy Inquiries
If you have any questions or concerns about our privacy practices, data protection policies, or wish to exercise your statutory data rights, please contact our designated Data Protection & Grievance Officer at nipesh@fidelitymattersconsulting.com, or reach out to us directly through our Contact Us page.
+91 9611570865