Privacy Policy

Addsus Solutions & Services LLP ("Addsus", "we", "us", or "our") operates as a technology solutions provider. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at addsus.com, engage our services, or interact with us in any capacity.

By accessing our website or engaging our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

This policy applies to all information collected through our website, email communications, sales conversations, client onboarding, and any other interactions with Addsus.

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Complete our contact or enquiry forms — including your name, email address, phone number, company name, and message content.
• Submit a job application — including your resume, cover letter, work history, and references.
• Engage us for professional services — including project briefs, contracts, billing information, and correspondence.
• Subscribe to our newsletter or marketing communications.
• Communicate with us via email, phone, or in-person meetings.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location (country/city level).
• Browser type, version, and operating system.
• Pages viewed, time spent on each page, and navigation paths.
• Referring website or search engine query.
• Device identifiers and screen resolution.

This data is collected using cookies, web beacons, and analytics tools. See Section 8 for our full Cookies Policy.

2.3 Information from Third Parties

We may receive information about you from third-party sources such as LinkedIn, job boards, referral partners, and publicly available business databases — used solely for evaluating potential business relationships or employment applications.

We use the information we collect for the following purposes:

• Delivering Services: To fulfil contractual obligations, manage client engagements, and provide the technology services you have engaged us for.
• Communication: To respond to enquiries, send project updates, issue invoices, and provide customer support.
• Recruitment: To evaluate job applications, conduct interviews, and manage the hiring process. We retain application data for up to 12 months.
• Marketing: To send newsletters, case studies, and service updates — only where you have given explicit consent or where we have a legitimate interest. You may opt out at any time.
• Website Improvement: To analyse usage patterns, identify performance issues, and improve the quality and relevance of our website content.
• Legal Compliance: To meet our obligations under applicable Indian and international law, including tax, accounting, and anti-money laundering regulations.
• Security: To detect, investigate, and prevent fraudulent or unauthorised activity.

We process your personal data only where we have a lawful basis to do so — including contractual necessity, legitimate interest, your consent, or a legal obligation.

Addsus does not sell, rent, or trade your personal information. We share your data only in the following circumstances:

• Service Providers: We engage trusted third-party vendors for cloud hosting (AWS, GCP), analytics (Google Analytics), CRM, and communication tools. These parties process data on our behalf under strict data processing agreements.
• Professional Advisors: Lawyers, accountants, and auditors who require access to your information to provide professional services to Addsus.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. You will be notified before your information becomes subject to a different privacy policy.
• Legal Requirements: Where required by court order, government authority, or applicable law — including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India).
• With Your Consent: In any other circumstance where you have given explicit, informed consent.

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by law. Our standard retention periods are:

• Client & Contract Data: 7 years from the end of the contractual relationship, in compliance with Indian accounting and tax obligations.
• Enquiry & Contact Form Data: 24 months from the date of last contact, unless a commercial relationship develops.
• Job Application Data: 12 months from the date of application, or until the position is filled — whichever is later.
• Website Analytics Data: 26 months (Google Analytics default), after which it is automatically anonymised or deleted.
• Marketing Data: Until you withdraw consent or request deletion, subject to a maximum of 36 months of inactivity.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with any individual.

We implement enterprise-grade technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data at rest in our cloud infrastructure.
• Role-based access controls (RBAC) ensuring only authorised personnel can access personal data.
• Regular third-party penetration testing and vulnerability assessments.
• Multi-factor authentication (MFA) enforced across all internal systems.
• Annual security awareness training for all employees with access to personal data.
• A documented incident response plan with defined SLAs for breach notification.

Despite these safeguards, no method of transmission or storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within 72 hours as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data. We honour these rights for all individuals, regardless of location:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no legitimate legal basis for continued processing.
• Right to Restriction: Request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection contact at privacy@addsus.com. We will respond within 30 days. We may need to verify your identity before processing the request.

We use cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and understand where our visitors come from. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the website to function. These cannot be disabled and do not require consent.
• Analytics Cookies: Used to collect anonymous data on how visitors use our website (e.g., Google Analytics). These are only set with your consent.
• Preference Cookies: Remember settings such as language and region to personalise your experience.
• Marketing Cookies: Used to track visitors across websites and display relevant advertisements. These are only activated with your explicit consent.

You can manage or withdraw cookie consent at any time via the cookie settings panel accessible from our website footer. You may also configure your browser to refuse cookies, though this may affect website functionality.

Addsus is headquartered in Hyderabad, India. Your personal data may be processed by our service providers in countries outside India, including the United States and the European Union.

Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the relevant authority, or transfers to jurisdictions with an adequacy decision. We do not transfer data to countries without adequate data protection frameworks without your explicit consent or without contractual protections in place.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@addsus.com and we will take prompt steps to delete such data.

We review this Privacy Policy periodically and may update it to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on our website for at least 30 days.
• Send an email notification to active clients and newsletter subscribers.

Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our designated Data Protection contact: