1. Introduction and identity
ECUGIE TECHNOLOGIES (“ECUGIE”, “we”, “our” or “us”) respects the privacy of people who visit our website, contact us, apply for roles, or interact with our technology-services business. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data, and how individuals may exercise applicable privacy rights.
For website enquiries, recruitment and our own business administration, ECUGIE generally determines the purposes and means of processing. For customer projects, ECUGIE may instead process personal data on the customer’s documented instructions, subject to the relevant agreement and the customer’s privacy notice. “Personal data” means information relating to an identified or identifiable individual.
ECUGIE’s business contact location is Gurugram, Haryana, India. The complete registered legal identity and registered-office address will be provided in the website’s official company/contact details before this policy is published. References to subsidiaries or group companies apply only if such entities exist and are actually involved.
2. Scope
This Policy covers the ECUGIE website and related forms, business enquiries, proposals, communications, recruitment, professional relationships, and any other activity for which ECUGIE acts as the responsible organisation. Separate notices or contractual terms may govern employees, customer-hosted systems, specific products, or processing undertaken for clients.
3. Categories of personal data
Identity and business contact data: name, organisation, role, email address, phone number and professional contact details.
Enquiry and project information: messages, requirements, proposals, service interests and correspondence.
Recruitment information: résumé/CV, experience, qualifications, portfolio links, professional references and materials voluntarily submitted.
Technical and security data, where collected: IP address, browser/device characteristics, request timestamps, server logs and security events.
Marketing preferences and subscription information, where a subscription feature is offered.
Contractual and vendor information necessary for lawful business administration.
4. Sources and methods of collection
We obtain information directly through website forms, email and other communications; through recruitment applications; through business and contractual interactions; from lawful professional or public sources; and automatically through infrastructure or technologies actually enabled on the website. We do not assume that a particular analytics, advertising or tracking provider is deployed merely because this Policy describes the possibility of such technologies.
5. Purposes of processing
Answer enquiries, arrange discussions and prepare proposals for requested services.
Provide, administer and support business relationships and contracted services.
Evaluate candidates, communicate recruitment decisions and manage hiring.
Operate, secure, troubleshoot and improve the website and its infrastructure.
Maintain records, prevent misuse, respond to incidents and meet legal obligations.
Send requested or otherwise legally permitted business updates and marketing, with available opt-out controls.
6. Lawful grounds and consent
Where EU or UK GDPR applies, the lawful basis may be consent, contractual necessity, legal obligation, or legitimate interests assessed in accordance with those laws; other bases apply only where legally justified. Under India’s Digital Personal Data Protection framework, processing will be based on valid consent or other uses expressly permitted by applicable provisions as they commence. A purpose described here is not, by itself, a lawful basis.
Where consent is required, we will provide appropriate notice, seek a clear affirmative choice and permit withdrawal through an accessible process. Withdrawal does not invalidate processing already lawfully performed, and may affect services that require the information.
7. Sensitive information
Do not submit government identifiers, financial credentials, health details, biometrics, religious or political information, or other sensitive information through general enquiry forms. If ECUGIE specifically requires such information for a lawful purpose, it will provide appropriate notice, access restrictions and additional safeguards. Voluntary submission alone does not establish legally valid consent.
8. Recruitment and careers
Career applications may contain contact information, employment history, qualifications and uploaded CVs. ECUGIE’s careers workflow is designed to use private document storage, including a Google Drive-based upload integration. Access should be limited to authorised recruitment personnel; the storage location, processor terms, deletion controls and international transfers must be checked before production launch.
For unsuccessful applicants, ECUGIE proposes retaining application materials for up to 12 months after the relevant recruitment process closes, unless a shorter period is appropriate, the applicant validly agrees to a separate talent-pool period, or law requires otherwise. Successful applicants’ records are handled under the applicable employment retention schedule. Applicants can request correction or deletion where the law permits.
9. Cookies, analytics and similar technologies
Essential cookies or similar technologies may be needed for security, session continuity or website functionality. Optional analytics, preference, advertising or third-party tracking technologies will be disclosed based on what is actually deployed. Where consent is legally required, non-essential technologies will not be activated until valid consent is obtained, and visitors will be able to change their choices.
Visitors can also manage browser cookies, though blocking essential technologies may affect functionality. Cookie names, providers, purposes and lifetimes should be published in the separate Cookie Policy once the live implementation has been audited. ECUGIE does not represent that Google Analytics, advertising pixels or behavioural advertising tools are currently in use.
10. Marketing communications
If visitors request newsletters or updates, or where marketing is otherwise lawfully permitted, ECUGIE may use relevant contact details to communicate about its services. Marketing messages will include a practical unsubscribe or opt-out mechanism. Service or legally required communications may continue where necessary.
11. Sharing and service providers
Personal data may be shared, only as necessary and lawfully, with authorised staff, hosting and infrastructure providers, document-storage and recruitment service providers, email and communication providers, professional advisers, customers or business partners where appropriate, and regulators or authorities where legally required. ECUGIE will apply appropriate confidentiality, security and data-processing terms to processors and vendors.
ECUGIE does not sell personal data as part of its stated website business model. We will not describe a particular third party as a recipient unless it is actually used.
12. International transfers
Some service providers or authorised personnel may process or access data outside India or the individual’s country. ECUGIE will assess applicable transfer restrictions and use legally required measures, which may include adequacy decisions, contractual safeguards or other recognised mechanisms under EU/UK law, and any restrictions applicable under Indian law. No claim is made that all data is stored exclusively in India; final hosting and backup locations remain subject to confirmation.
13. Retention and deletion
ECUGIE uses a purpose-based retention approach, subject to legal, contractual, tax, accounting, cybersecurity and dispute-related requirements. The following periods are proposed operating standards, not universal statutory periods:
| "Data category" | "Proposed standard" |
|---|---|
| "Contact/project enquiries" | "Up to 24 months after the last meaningful interaction, unless converted to a customer record or otherwise lawfully retained." |
| "Unsuccessful recruitment" | "Up to 12 months after the recruitment process closes, subject to legal requirements and valid separate consent for longer talent-pool use." |
| "Successful recruitment" | "Under the applicable employee-record retention schedule." |
| "Website/security logs" | "A 90-day operational target only where legally permissible; preserve logs for any longer mandatory period, including applicable CERT-In requirements." |
| "Marketing subscriptions" | "Until opt-out/withdrawal or another applicable deletion trigger, with minimal suppression records where needed." |
| "Contracts, invoices and financial records" | "Proposed eight-year business baseline where justified, subject to the actual statutory and contractual schedule." |
| "Customer project data" | "As agreed with the customer and required by law; follow documented return/deletion instructions." |
| "Cookies and identifiers" | "According to their documented purpose and actual configured lifetime." |
Data will be securely deleted, anonymised or otherwise disposed of when no longer required. Legal holds, active disputes and mandatory retention may override routine deletion. A formal retention register and automated deletion processes should implement these commitments.
14. Security safeguards
ECUGIE applies risk-appropriate technical and organisational controls, such as access restrictions, authentication, secure transmission, private storage where appropriate, monitoring, backups, confidentiality obligations and incident-response procedures. No internet service is completely risk-free. Personal data breaches will be investigated, contained, documented and reported to individuals or authorities when required by applicable law.
15. Individual rights
Subject to the applicable jurisdiction, individuals may request information or access, correction, updating, erasure, withdrawal of consent and grievance redressal. Other rights, such as objection, restriction, portability and safeguards against certain automated decisions, apply only where provided by the relevant law. Rights are subject to lawful exemptions and identity verification.
To make a request, email privacy_data@ecugie.com with sufficient information to identify the relevant interaction. ECUGIE will acknowledge, evaluate and respond within the time limits required by applicable law; it may ask for reasonable identity verification and explain lawful grounds for any refusal.
16. Children’s privacy
The ECUGIE website is directed at professional and business audiences, not children. ECUGIE does not intentionally solicit children’s personal data through general website forms. Where India’s applicable DPDP provisions require it, a child is a person under 18 and additional verifiable parental consent and other safeguards apply, subject to statutory exemptions. Other jurisdictions may use different thresholds. If unlawful collection is identified, ECUGIE will take appropriate corrective action.
17. Third-party websites and social networks
Links to third-party websites, social networks and integrated services are governed by those providers’ own notices and practices. ECUGIE does not control independent third-party platforms. Users should review their terms and privacy settings before sharing information.
18. Automated decision-making
ECUGIE does not describe its general website enquiry or recruitment process as making solely automated decisions with legal or similarly significant effects. If such processing is introduced, ECUGIE will provide the notices, safeguards and rights required by applicable law.
19. Grievances and regulatory complaints
Privacy enquiries, requests and grievances may be sent to privacy_data@ecugie.com. ECUGIE will designate an authorised Privacy & Grievance Officer or responsible contact, establish a request register, and publish any further details required by applicable law. Individuals may contact competent supervisory or data protection authorities where the law permits. Nothing in this Policy removes statutory remedies or imposes mandatory arbitration on privacy complaints.
20. Applicable legal framework
Relevant Indian legislation includes the Information Technology Act, 2000 and applicable rules and directions, and the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as their respective provisions come into force. EU GDPR, UK GDPR and other regional privacy laws apply only where their jurisdictional tests are met. If this Policy conflicts with mandatory applicable law, the law prevails. ECUGIE will review this Policy when commencement dates or legal requirements change.
21. Updates to this policy
ECUGIE may revise this Policy as its services, technology, data practices or legal obligations change. The published version will display its effective date and most recent update. Material changes will be communicated, and fresh consent sought, when required by law.
22. Contact
ECUGIE TECHNOLOGIES Business location: Gurugram, Haryana, India Privacy enquiries and grievance requests: privacy_data@ecugie.com Website: ecugie.com