Privacy Policy

1. Who We Are (Data Fiduciary & Controller)

For the purposes of applicable data protection legislation, LogicDelta Consultancy acts as the Data Fiduciary (under the DPDP Act 2023) and the Data Controller (under the GDPR).

Digital Communication & Grievance Office:
Email: [email protected] / [email protected]
Web Portal: https://logicdelta.com/

2. Categories of Personal Data We Process

We process only personal data that is adequate, relevant, and strictly limited to what is necessary for our business engagements:

• Identity & Contact Data: Full name, corporate email address, employer/company name, job title, and professional credentials submitted through our consultation forms.
• Project & Technical Requirements: Scope documents, RFP specifications, architecture briefs, and project attachment files (e.g. PDF, DOCX, ZIP) provided voluntarily.
• Digital & Technical Telemetry: IP address (anonymized), browser user-agent, operating system, referral URLs, session timestamps, and interaction data collected via essential telemetry.
• Candidate & Staffing Data: Professional resumes, technical portfolio summaries, and certifications submitted for engineering squad placements.

3. Legal Grounds for Processing

Under DPDP Act Section 6 and GDPR Article 6, our processing activities rest upon the following legitimate legal bases:

• Explicit Consent: Where you have freely given specific, informed, and unambiguous consent by submitting an inquiry, scheduling an executive briefing, or agreeing to non-essential cookies.
• Contractual Performance & Pre-Contractual Measures: Processing required to prepare Non-Disclosure Agreements (NDAs), provide RFP technical proposals, or perform digital consultancy agreements.
• Legitimate Business Interests: Maintaining network security, preventing fraud, managing IT operations, and evaluating B2B client compatibility without overriding individual fundamental rights.
• Legal & Regulatory Compliance: Fulfilling statutory obligations under applicable IT, tax, corporate, and e-governance laws.

4. Rights of Data Principals (DPDP Act) & Data Subjects (GDPR)

You possess enforceable legal rights regarding your personal data. We provide dedicated digital mechanisms to exercise these rights at no cost:

• Right to Access & Summary: You may request a plain-language summary of your personal data processed by LogicDelta, the processing activities undertaken, and the identities of any authorized data processors.
• Right to Correction, Completion & Updating: You have the right to request correction of inaccurate data or completion of incomplete records.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Grievance Redressal (DPDP Section 13): You may file a grievance directly with our designated Data Protection & Grievance Officer at [email protected]. We respond to all formal grievances within 7 business days. If unsatisfied, you have the statutory right to escalate to the Data Protection Board of India (DPBI).
• Right to Nominate (DPDP Section 14): Under the DPDP Act 2023, you have the right to nominate any individual who shall, in the event of death or incapacity, exercise your data rights.
• Right to Withdraw Consent: Where processing is consent-based, you may withdraw your consent at any time through our digital portal with immediate effect for future processing.
• Right to Data Portability & Restriction (GDPR Art. 18, 20): European data subjects may request structured, machine-readable copies of their data or restrict processing under specified circumstances.

5. Cross-Border Data Transfers

As a global consultancy serving clients across India, the United States, Canada, the European Union, and the Middle East, technical data may be transferred cross-border. All international data transfers adhere strictly to:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EU/UK transfers.
• Applicable government notifications and transfer restrictions under the DPDP Act 2023.
• End-to-end transport encryption (TLS 1.3) and AES-256 storage encryption.

6. Security Safeguards & ISO 27001 Alignment

To prevent unauthorized access, accidental alteration, disclosure, or destruction, LogicDelta implements robust organizational and technical controls aligned with ISO 27001 and CISA standards:

• Multi-factor authentication (MFA) and role-based access control (RBAC) across all corporate systems.
• Zero-trust perimeter architecture with active intrusion monitoring and automated threat detection.
• Secure file upload handling: submitted RFP attachments are scanned, encrypted, and accessible solely by cleared technical evaluators under mutual NDA.
• Incident response procedures ensuring notification to supervisory authorities (CERT-In / DPBI / EU DPA) and affected principals in accordance with statutory timeframes.

7. Data Retention Schedules

Personal data is retained only for the duration necessary to satisfy the purposes outlined herein:

• Inquiries & RFP Briefs: Retained for 24 months from the last communication, or immediately deleted upon your verified request.
• Contractual & Engagement Records: Retained for 7 years to satisfy statutory tax, auditing, and corporate compliance mandates.
• Telemetry & Log Data: Retained for 90 days, after which logs are automatically purged or permanently anonymized.

8. Cookies and Tracking Technologies

Our website employs cookies and similar client-side storage technologies to deliver core navigation, evaluate aggregate website performance, and remember your preferences. You maintain complete control over non-essential cookies through our interactive Cookie Settings panel accessible at any time via the footer link.

9. Contact Our Data Protection & Grievance Officer

If you have questions, require clarification, or wish to exercise any data principal rights under the DPDP Act 2023 or GDPR, please contact our dedicated officer:

LogicDelta Consultancy reserves the right to update this policy in response to evolving statutory rules or regulatory notifications issued by the Data Protection Board of India or European Data Protection Board.