Privacy Policy

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent (e.g., submitting a contact form or subscribing to communications).
• Contractual Necessity: Where processing is necessary to fulfill our contractual obligations to you.
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving services and marketing.
• Legal Obligation: Where processing is required to comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our website, conducting our business, or servicing you (e.g., hosting providers, email services, analytics tools), subject to confidentiality agreements.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets.
• With Your Consent: When you explicitly consent to the sharing of your information.

We use cookies and similar technologies to enhance your browsing experience. These include:

• Essential Cookies: Necessary for website functionality and cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form submissions are retained for up to 24 months.
• Client project data is retained for the duration of the engagement plus 3 years for legal compliance.
• Website analytics data is retained in anonymized form indefinitely.

You may request deletion of your data at any time (see Section 7).

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Nominate: Under India's DPDPA, you may nominate a person to exercise your rights on your behalf.

To exercise any of these rights, please contact us at santosh@acumenworkflows.com. We will respond within 30 days.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for data in transit
• Encrypted storage for sensitive data at rest
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Acumen Workflows is: