PrivacyPolicy

1. Introduction

Divination Digisol Pvt. Ltd. ("Divination Digisol", "we", "us" or "our") is committed to protecting the privacy and security of the personal data entrusted to us by our clients, partners, candidates and website visitors. We act as a data controller for the personal data we collect through this website and our commercial relationships, and as a data processor when we handle personal data on behalf of our enterprise clients under a written services agreement or Data Processing Addendum (DPA).

This Privacy Policy explains what personal data we collect, the purposes and legal bases for processing it, how we share and safeguard it, how long we keep it, and the rights available to you. It applies to all our websites, applications, products and services that reference or link to this policy.

2. Scope & roles

The way we handle personal data depends on our role in the relationship:

• Controller — where we determine the purposes and means of processing (e.g. our marketing, recruitment and website operations), this policy governs that activity.
• Processor / sub-processor — where we process personal data solely to deliver services to a client, that client is the controller and their instructions and DPA govern the processing; this policy is provided for transparency only.

3. Information we collect

We collect personal data in the following categories, limited to what is relevant for the purposes described in this policy:

• Contact & professional data — name, email, phone, company, job title and the content of your enquiry when you contact us, request a proposal or engage our services.
• Recruitment data — CV/résumé, employment history, qualifications, references and any information you include in a job application.
• Account & transaction data — billing details, purchase orders and records of the services provided under a commercial engagement.
• Technical & usage data — IP address, device and browser type, operating system, referring URLs, pages visited and interaction events, collected automatically to secure and improve the site.
• Cookies & similar technologies — identifiers used for essential functionality, analytics and (with consent where required) marketing. See section 8.
• Client-provided data — personal data contained within systems, datasets or environments our clients ask us to build, host, migrate or support, processed strictly per their instructions.

4. How we use your information

We process personal data for the following business purposes:

• To respond to enquiries, provide quotes and manage our relationship with you.
• To deliver, maintain, support and improve our products and services.
• To evaluate job applications and manage our recruitment process.
• To operate, secure, monitor and improve our website and infrastructure.
• To send service communications and, where permitted, relevant marketing you may opt out of at any time.
• To meet legal, regulatory, tax, accounting and contractual obligations, and to establish, exercise or defend legal claims.

5. Legal bases for processing

Where the EU/UK GDPR or comparable laws apply, we rely on one or more of the following legal bases:

• Contract — processing necessary to enter into or perform a contract with you or your organisation.
• Legitimate interests — to run, secure and grow our business, provided your rights do not override those interests.
• Consent — for optional marketing and non-essential cookies, which you may withdraw at any time.
• Legal obligation — where processing is required to comply with applicable law.

6. Data sharing & sub-processors

We do not sell your personal data. We disclose it only where necessary and under appropriate contractual, confidentiality and data-protection safeguards, to the following categories of recipients:

• Vetted service providers and sub-processors (e.g. cloud hosting, analytics, communications and payment providers) acting on our documented instructions.
• Professional advisers such as auditors, lawyers and accountants where reasonably required.
• Acquirers or successors in connection with a merger, acquisition or reorganisation, subject to this policy.
• Regulators, law-enforcement or other authorities where required by law or to protect our rights and the safety of others.

7. International data transfers

We operate globally and may transfer personal data to countries other than the one in which it was collected. Where we transfer data out of the EEA, UK or other regulated regions, we implement an appropriate transfer mechanism — such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision — together with supplementary technical and organisational measures where needed.

8. Cookies & tracking technologies

We use strictly necessary cookies to operate the site, and — subject to your consent where legally required — analytics and marketing cookies to understand usage and improve your experience. You can manage non-essential cookies through your browser settings or our cookie controls. Disabling certain cookies may affect site functionality.

9. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, contractual or reporting requirements. Retention periods are determined by the nature of the data, the purpose of processing, applicable statutory limitation periods and our contractual commitments. When no longer required, data is securely deleted or irreversibly anonymised.

10. Information security

We maintain a defence-in-depth information-security programme aligned with recognised industry standards. Technical and organisational measures include:

• Encryption of data in transit and, where appropriate, at rest.
• Role-based access controls, least-privilege access and multi-factor authentication.
• Network segmentation, logging, monitoring and vulnerability management.
• Secure software-development practices, code review and dependency scanning.
• Vendor due diligence, staff confidentiality obligations and security-awareness training.
• Documented incident-response and breach-notification procedures.

11. Your privacy rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to request portability, and to withdraw consent where processing is based on it. Residents of certain regions (including the EEA, UK, and US states such as California) may have additional rights, including the right not to be discriminated against for exercising them.

To exercise any of these rights, contact us at info@divinationdigisol.com. We will respond within the timeframe required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local supervisory authority.

12. Children’s privacy

Our website and services are intended for businesses and professional users and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or business operations. Material changes will be indicated by updating the “Last updated” date, and where appropriate we will provide additional notice. Your continued use of our website after an update constitutes acceptance of the revised policy.

14. Contact us

If you have questions, concerns or requests regarding this policy or our handling of personal data, contact our privacy team at info@divinationdigisol.com, or write to us at Divination Digisol Pvt. Ltd., Pune, Maharashtra, IN.