This Privacy Policy explains how Infrasys Limited ("Infrasys", "we", "us", or "our"), a public company incorporated in India, headquartered at Spaze Itech Park, Sector 49, Gurugram, Haryana 122018, collects, uses, stores, and protects personal information when you visit our website at https://infrasys.tech/, contact us, or engage our services.
1. Introduction
Infrasys Limited is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. We are a global technology and consulting partner providing IT Services, ERP & Enterprise Applications, Artificial Intelligence & Machine Learning, Data Analytics & Business Intelligence, Cybersecurity & Data Risk, Cloud & Digital Transformation, and Business Consulting & Managed Services.
This policy applies to all personal data collected through our website, business enquiries, project engagements, recruitment processes, and any other interaction with Infrasys Limited. By using our website or engaging with us, you agree to the practices described in this policy.
2. Data We Collect
2.1 Information You Provide Directly
- Full name, email address, phone number, and company/organisation name
- Job title and professional background when contacting us for business purposes
- Messages, enquiries, and project requirements submitted via our contact form
- CV, cover letters, LinkedIn profile URLs, salary information submitted during recruitment
- Newsletter subscription email addresses
2.2 Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, and navigation patterns
- Referring URLs and search terms used to find our website
- Cookie identifiers and session data (see Section 10)
2.3 Information from Third Parties
- Business contact information from professional networks such as LinkedIn
- Referral information from partner organisations or existing clients
3. How We Collect Data
We collect personal data through the following means:
- Contact and enquiry forms on our website (infrasys.tech)
- Job application forms and recruitment correspondence
- Email communications and phone calls
- Newsletter and subscription sign-ups
- Cookies and website analytics tools
- Business meetings, conferences, and events
- LinkedIn and other professional platforms where you interact with us
4. How We Use Your Data
We use your personal data for the following purposes:
- Service Delivery: To respond to enquiries, provide consulting services, and manage client engagements
- Recruitment: To evaluate job applications, conduct interviews, and process onboarding
- Communication: To send service updates, project communications, and respond to your messages
- Marketing: To send newsletters, insights, and relevant service information (with your consent)
- Website Improvement: To analyse usage patterns and improve the performance and content of our website
- Legal Compliance: To meet our obligations under applicable Indian and international law
- Security: To detect fraud, protect our systems, and ensure the safety of our clients and data
5. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Consent: Where you have explicitly opted in (e.g., newsletter subscriptions)
- Contractual Necessity: Where processing is required to fulfil a contract or service agreement
- Legitimate Interests: For business development, client communication, and website security
- Legal Obligation: Where we are required to process data under Indian law (e.g., IT Act 2000, DPDP Act 2023)
6. Data Sharing & Disclosure
Infrasys Limited does not sell your personal data. We may share data with:
- Service Providers: Cloud hosting providers (AWS, Azure, GCP), email platforms, and analytics tools operating under data processing agreements
- Group Companies: Affiliated Infrasys entities for internal business operations
- Professional Advisors: Legal, accounting, or audit firms under strict confidentiality obligations
- Regulatory Authorities: Government bodies, law enforcement, or courts where required by law
- Business Transfers: In the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections
All third parties are contractually required to maintain the security and confidentiality of your data.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:
- Client data: For the duration of the engagement plus 7 years for legal and audit compliance
- Job applications: 12 months from the date of application, or longer if you consent
- Marketing data: Until you withdraw consent or unsubscribe
- Website analytics: Aggregated and anonymised after 26 months
- Contact enquiries: 3 years from the date of last communication
8. Data Security
Infrasys implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:
- SSL/TLS encryption for all data transmitted through our website
- Access controls and role-based permissions for internal systems
- Regular security assessments and vulnerability testing
- Employee training on data protection and information security
- Incident response procedures for data breach notification
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you in accordance with applicable law.
9. Your Rights
Subject to applicable law, including India's Digital Personal Data Protection Act (DPDP) 2023, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data where we have no legitimate reason to retain it
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
- Right to Grievance Redressal: Lodge a complaint with us or with the Data Protection Board of India
- Right to Nominate: Nominate another person to exercise rights on your behalf
To exercise any of these rights, please contact us at info@infrasys.tech. We will respond within 30 days.
10. Cookies & Tracking
Our website uses cookies and similar tracking technologies to improve your experience. Types of cookies we use:
- Essential Cookies: Required for the website to function (e.g., session management, dark mode preference)
- Analytics Cookies: To understand how visitors use our website (e.g., page views, time on site)
- Preference Cookies: To remember your settings such as theme (light/dark mode)
You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality. We do not use cookies for advertising or behavioural tracking.
11. Third-Party Links
Our website may contain links to third-party websites including LinkedIn, social media platforms, and partner sites. Infrasys Limited is not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Children's Privacy
Our services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@infrasys.tech.
13. International Data Transfers
As a global company operating across 6+ countries, your data may be transferred to and processed in countries outside India. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Contractual clauses that require the recipient to protect data to equivalent standards
- Use of cloud providers certified under recognised security frameworks (ISO 27001, SOC 2)
- Compliance with India's DPDP Act 2023 provisions on cross-border data transfers
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
