Scope
This policy applies to personal data collected through the CIPL public website, website-generated email enquiries, recruitment links and communications, and the WhatsApp AI chat experience linked from the website.
Separate privacy notices, employment documents, client contracts, or service-specific terms may apply when you are an employee, applicant, client, vendor, or an individual whose information CIPL processes while delivering services for a client. Where those documents conflict with this policy, the more specific document governs the relevant processing.
Information we collect
Information you provide
- Contact and enquiry details, including your name, work email address, phone number, enquiry topic, company details, and message.
- Communications sent by email or WhatsApp, including message content, attachments, delivery information, and conversation history.
- Recruitment information submitted through CIPL's ERP careers portal or email, such as a resume, employment history, education, skills, location, and application responses.
- Business information provided during discussions about CIPL services, proposals, contracts, support, or delivery.
Information collected automatically
Our hosting and security systems may record technical information such as IP address, browser and device type, operating system, requested pages, referring page, date and time, response status, and security or error events. We use this information to operate, secure, troubleshoot, and improve the website.
Please avoid sending unnecessary sensitive information. Do not submit passwords, authentication codes, payment-card details, government identifiers, health information, or confidential client data through the public contact form or WhatsApp unless CIPL specifically requests it through an approved secure process.
How we use information
- Respond to enquiries, arrange discussions, prepare proposals, and provide requested information.
- Operate the WhatsApp AI chat experience, maintain useful conversation context, route requests, monitor quality, and prevent misuse.
- Publish job openings, receive and evaluate applications, communicate with candidates, and manage recruitment records.
- Deliver, administer, secure, and support contracted services and business relationships.
- Maintain website availability, diagnose errors, protect systems, investigate suspicious activity, and prevent fraud or abuse.
- Comply with law, respond to lawful requests, enforce agreements, establish or defend legal claims, and maintain required business records.
- Improve our website, communications, operating processes, service quality, and user experience using aggregated or appropriately protected information where practical.
Basis for processing
We process personal data for lawful purposes and in accordance with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 and related rules as their provisions come into force.
Depending on the context, processing may be based on your consent, action you voluntarily request, steps connected with a proposed or existing contract, employment and recruitment purposes, compliance with law, responding to emergencies, security and fraud prevention, or another use permitted by applicable law. Where processing is based on consent, you may withdraw that consent using the contact details below. Withdrawal does not affect processing already completed lawfully.
Sharing and disclosure
CIPL does not sell personal data collected through this public website. We may share information only when reasonably necessary with:
- Authorised CIPL personnel who need it for the purposes described in this policy.
- Hosting, communication, security, recruitment, IT, professional-advisory, and other service providers working for CIPL under appropriate obligations.
- Clients, partners, or vendors when needed to respond to your request, progress a business engagement, or provide a service, with appropriate safeguards.
- Government, regulatory, law-enforcement, judicial, or other authorities when disclosure is required or permitted by law.
- Parties involved in a merger, reorganisation, financing, acquisition, sale, or transfer of all or part of the business, subject to confidentiality and applicable law.
External services and links
The website connects to services operated by other organisations. Their processing is governed by their own notices and settings:
- WhatsApp: clicking the chat icon opens WhatsApp and may share account, device, message, and usage information with WhatsApp or Meta. Messages may also be processed by CIPL's internally developed AI-enabled chat systems to provide a response.
- Google Maps: the embedded office maps may allow Google to receive device, network, location, cookie, and interaction information.
- CIPL ERP careers portal: job applications are completed on CIPL's ERP environment, where application details are received and managed by CIPL.
- Email: the contact form prepares a message in your chosen email application. The website does not upload the completed form to CIPL; your information is sent only when you choose to send the email and is also processed by your email provider.
- Other links: external sites, social networks, ERP, and helpdesk services may collect information under their own terms and privacy policies.
Cookies, similar technologies, and logs
The CIPL public website does not intentionally use advertising pixels or analytics cookies. The website may use essential browser or server functionality required for security, delivery, and performance. Embedded or linked third-party services, including Google Maps and WhatsApp, may use cookies or similar technologies under their own policies.
If CIPL introduces analytics, personalisation, or advertising technologies, we will update this notice and provide consent controls where required by law.
Security
We use reasonable administrative, technical, and organisational safeguards designed for the nature and risk of the information involved. Measures may include role-based access, authentication controls, network protection, system hardening, monitoring, backups, logging, vendor controls, employee responsibilities, and incident-response procedures.
No website, transmission, or storage system is completely secure. You are responsible for using secure devices and networks and for protecting information before sending it to us.
Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to maintain business and recruitment records, meet contractual or legal obligations, resolve disputes, prevent fraud, and establish or defend claims.
Retention periods vary according to the type of record, sensitivity, relationship, operational need, legal limitation period, and contractual requirement. When information is no longer required, we take reasonable steps to delete, anonymise, or securely archive it in accordance with our retention practices and applicable law.
Your choices and rights
Subject to applicable law and relevant exemptions, you may ask CIPL to:
- Provide information about the personal data we process about you and how it has been used or shared.
- Correct inaccurate or incomplete personal data.
- Erase personal data that is no longer required or must be deleted by law.
- Withdraw consent where consent is the basis for processing.
- Address a grievance about how your personal data has been handled.
- Recognise a valid nominee or authorised representative where applicable law permits.
We may need to verify your identity and authority before acting on a request. Some information may be retained where law, contract, security, recordkeeping, or legal-claim requirements permit or require it.
Children's data
This website and CIPL's business enquiry channels are not directed to children under 18. Children should not submit personal data through the website or WhatsApp chat. If you believe a child has provided personal data without appropriate authorisation, contact us so we can review and take suitable action.
International processing
Some technology and communication providers may process or store information outside India. Where personal data is transferred or made available across borders, CIPL takes reasonable steps to use appropriate contractual, security, and organisational safeguards and to comply with restrictions notified under applicable law.
Data processed for CIPL clients
In customer support, recovery, sales, survey, retention, managed IT, and automation engagements, CIPL may process personal data on behalf of a client. The client ordinarily determines why and how that data is processed, while CIPL processes it under the applicable contract, instructions, security requirements, and law.
If your enquiry concerns information handled for one of our clients, we may direct you to that client or coordinate with them so the request reaches the organisation responsible for the relevant decision.
Changes to this policy
We may update this policy when our website, services, technology, legal obligations, or data-handling practices change. The revised version will be posted on this page. Where a change materially affects how we use information already collected, we will provide additional notice or seek consent when required.
Contact and grievances
For a privacy request, consent withdrawal, correction, erasure request, or grievance, contact CIPL through the contact channels available on this website. Please include enough information for us to identify the relevant interaction and understand your request, but do not email identity documents unless we ask for them through a suitable process.
We will review and respond within the period required by applicable law. If you are not satisfied, you may use any escalation or regulatory remedy available under applicable law.
