Privacy
Policy.

1. Introduction & Scope

Nivedis ("Nivedis", "we", "us", or "our") operates as a specialist technology consulting, enterprise integration engineering, cloud transformation, and IT talent solutions provider headquartered in India and serving clients across North America, the United Kingdom, Europe, and Asia-Pacific.

This Privacy Policy outlines how we collect, use, disclose, protect, and retain personal information when you visit nivedis.com, submit technical discovery enquiries, engage our consulting services, or participate in candidate talent evaluations.

2. Information We Collect

We collect information in three primary categories depending on your interaction with our organization:

A. Information You Voluntarily Provide

• Business & Enquiry Contact Details: Full name, corporate email address, phone number, company name, job title, and technical requirements submitted through our discovery form or email communications.
• Candidate & Contractor Profiles: Resumes/CVs, technical skill matrices, certifications, employment history, portfolio links, and compensation expectations provided during talent evaluation or staff augmentation onboarding.
• Project & Scoping Documentation: Architecture briefs, integration scope requirements, system specifications, and meeting notes shared during pre-engagement discovery calls.

B. Information Collected Automatically

• Technical Metadata: IP address, browser type and version, operating system, referring URL, pages viewed, time spent per page, and general geographic location (country/city level).
• Session & Performance Data: Non-invasive telemetry to verify site responsiveness, detect performance bottlenecks, and prevent security vulnerabilities.

3. How We Use Your Information

We process collected information strictly for legitimate commercial and technical purposes:

• Delivering Consulting Engagements: Architecture planning, integration engineering (MuleSoft, Boomi, SAP, Salesforce), cloud migration, AI/LLM solutions, and security auditing.
• Specialist Staffing & Talent Augmentation: Matching pre-vetted engineers, architects, and developers with active client technical requirements.
• Client Relationship Management: Responding to discovery requests, preparing Statements of Work (SOWs), and issuing technical assessments.
• Security & Legal Compliance: Detecting malicious traffic, maintaining audit logs, and fulfilling statutory compliance obligations.

4. Legal Bases for Processing (GDPR & DPDP)

Under international data protection regulations (including the EU GDPR, UK GDPR, and the Digital Personal Data Protection Act), we process personal information under the following lawful bases:

• Contractual Necessity: To take pre-contractual steps at your request (such as providing technical proposals) or perform obligations under an active Master Services Agreement.
• Legitimate Interests: To operate, secure, and improve our business advisory services, manage talent recruitment, and communicate with enterprise stakeholders.
• Consent: Where you have granted explicit consent for specific communications or evaluations.
• Legal Obligation: To comply with applicable tax, accounting, labor, or regulatory reporting requirements.

5. Information Sharing & Third-Party Processors

We maintain strict confidentiality standards. We do not sell, trade, or rent your personal or business data.

We disclose information only to vetted third-party service providers (Data Processors) operating under written Data Processing Agreements (DPAs) with strict security covenants:

• Cloud Infrastructure Providers: Secure enterprise hosting, encrypted storage, and DNS management.
• Communication & Form Infrastructure: Managed email delivery and secure form processing services.
• Professional Advisors: Legal counsel, auditors, and financial advisors bound by professional confidentiality obligations.
• Statutory Authorities: Only when required by valid court order, subpoena, or applicable statutory law.

6. International Data Transfers

Given our global delivery model connecting Indian engineering hubs with clients in the US, UK, and Europe, data may be transferred across international borders. All cross-border transfers are safeguarded through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• End-to-end data encryption in transit (TLS 1.3) and at rest (AES-256).
• Contractual confidentiality and IP protection protocols.

7. Data Security & Retention

We implement comprehensive technical and organizational measures aligned with ISO 27001 and SOC2 principles, including role-based access control (RBAC), multi-factor authentication, perimeter firewalls, and regular security vulnerability assessments.

Retention Period: We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, manage ongoing client relationships, or comply with statutory limitation periods (typically 3 to 7 years for commercial contracts).

8. Your Data Protection Rights

Depending on your jurisdiction, you are entitled to exercise the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when no longer legally required.
• Right to Restrict Processing: Limit how we process your information in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct communications.

To exercise any of these rights, contact us at hello@nivedis.com. We respond to all verified requests within 30 calendar days at no charge.

9. Contact & Grievance Redressal

For questions, privacy inquiries, or data protection concerns, please contact our Data Governance team:

Nivedis Technologies
Email: hello@nivedis.com
Location: Bangalore / India (Operating Globally)
Website: https://www.nivedis.com