This policy explains what personal data [Legal entity name, e.g. Xploreteq Solutions Private Limited] ("Xploreteq", "we") collects when you use this website, why we collect it, how long we keep it, and the choices you have. We have written it to meet the Digital Personal Data Protection Act, 2023 and the Rules made under it, and to be readable without a lawyer.
Who we are
Xploreteq is a cybersecurity, AI governance and data protection consultancy headquartered in Pune, India. For the purposes of the DPDP Act, we are the Data Fiduciary for personal data collected through this website.
Registered office: Office No. 407, V18 Building, Balewadi High Street, Opposite Cummins Asia Campus, Balewadi, Pune 411045
Other offices: Mumbai (Awfis, Aston Building, Andheri West) · Bengaluru (91springboard, Residency Road)
Contact: sales@xploreteq.com
What we collect, and why
- When you contact us by email or through a form or link on this site: your name, work email, organisation, role and the content of your message. We use it to respond to you and, where you have asked, to arrange an assessment, workshop or consultation. Lawful basis: your consent, given by contacting us for that purpose.
- When you apply for a role: the details and documents you send. We use them to assess your application and to contact you about it. Lawful basis: your consent, given by applying.
- Technical data needed to serve the site securely: IP address, browser type, pages requested and timestamps, held in server logs by our hosting provider. We use this to operate and protect the site. Lawful basis: legitimate use for the security of the service.
- Analytics data — only if you accept analytics cookies (see below): aggregated page views, approximate location at city level, device and browser type. We use this to understand which content is useful. Lawful basis: your consent, which you can withdraw at any time.
We do not sell personal data, we do not run advertising on this site, and we do not collect personal data from children through it.
Cookies
We ask before we track anything. When you first visit, a banner lets you accept all cookies, reject all optional cookies, or choose by category. Nothing optional loads until you say yes. You can change your choice at any time from Cookie Settings in the footer.
- Strictly necessary — one entry in your browser's local storage (
xq_consent_v1) that records your cookie choice so we do not ask again. It holds no personal data and expires when you clear site data. - Analytics (optional, off by default) — Google Analytics 4, loaded only after consent, with IP anonymisation and advertising features disabled. Used to measure page usage in aggregate.
- Marketing (optional, off by default) — none in use at the time of this policy. If that changes, the banner and this page will say so before anything loads.
Who we share data with
Only with providers who process it on our instructions and under contract: our website hosting provider, our email and productivity provider (Microsoft 365), and — if you consent to analytics — Google. Some of these providers process data outside India. The DPDP Act permits such transfers except to countries restricted by the Central Government, and we keep contractual safeguards in place with each provider.
How long we keep it
- Enquiries: for as long as the conversation is live and up to 24 months after our last contact, unless it leads to an engagement, in which case the engagement contract governs.
- Job applications: up to 12 months after the role closes, unless you ask us to delete sooner or to keep your details for future roles.
- Server logs: up to 90 days, for security purposes.
- Analytics data: per the retention setting on our analytics account, currently 14 months.
When the purpose is served, we erase the data or anonymise it so it no longer identifies you.
Your rights
Under the DPDP Act you may ask us for a summary of the personal data we hold about you and who we have shared it with; ask us to correct, complete, update or erase it; withdraw consent you have given; nominate a person to exercise these rights on your behalf; and raise a grievance. We respond within the period the Rules prescribe. To exercise any right, write to our Grievance Officer below. We may need to verify your identity before acting.
If you are not satisfied with our response, you may approach the Data Protection Board of India.
How we protect it
Xploreteq is certified to ISO/IEC 27001:2022. Personal data collected through this site is held on access-controlled systems, encrypted in transit, and limited to the people who need it to respond to you. We hold ourselves to the same safeguards we deploy for clients.
Grievance Officer
[Grievance Officer name]
[Legal entity name, e.g. Xploreteq Solutions Private Limited]
Office No. 407, V18 Building, Balewadi High Street, Opposite Cummins Asia Campus, Balewadi, Pune 411045
[grievance email, e.g. privacy@xploreteq.com]
Changes to this policy
When we change this policy we will update the effective date above. If a change affects how we use data you have already given us, we will tell you before it takes effect.