Privacy Policy

1. Scope of this policy

This policy applies to personal information collected through the Verborix Technologies website (the "Site"), through contact and enquiry forms, email correspondence, proposal and contracting activity, events, and other direct business communication with Verborix. It does not apply to information collected by third-party websites that we may link to, or to information our clients process using their own systems, which is governed by those clients' own privacy notices and by any data processing agreement between Verborix and the client.

2. Information we collect

We collect information in the following categories, depending on how you interact with us:

2.1 Information you provide directly

• Contact details: name, job title, company name, email address, phone number, and mailing address submitted through contact forms, email, or in-person or virtual meetings.
• Enquiry and project information: details about your business needs, project scope, budget indications, technical requirements, and any files or documents you choose to share with us to evaluate a potential engagement.
• Communications: the content of emails, calls, messages, and meeting notes exchanged with our team.
• Recruitment information: if you apply for a role or submit your details for consideration, we may collect your resume/CV, work history, references, and related information.

2.2 Information collected automatically

• Usage data: pages visited, time spent on pages, links clicked, referring and exit pages, and general navigation patterns on the Site.
• Device and connection data: IP address, browser type and version, operating system, device type, and approximate location derived from IP address.
• Cookies and similar identifiers: as described in Section 6 below.

2.3 Information from other sources

We may supplement the information above with information from publicly available sources (such as a company website or LinkedIn profile) or from business partners, where this helps us understand a prospective client's or candidate's context ahead of a conversation.

3. How we collect information

We collect information when you fill out a form on the Site, send us an email, call us, meet with us, apply for a role, or otherwise voluntarily provide it. We also collect certain information automatically through standard web server logs and, where enabled, analytics tools and cookies.

4. How we use information

We use the information we collect to:

• Respond to enquiries and requests for information;
• Evaluate project fit, scope potential engagements, and prepare proposals or quotations;
• Communicate with you about our services, ongoing projects, or scheduled meetings;
• Operate, maintain, secure, and improve the Site and our internal systems;
• Understand aggregate usage of the Site so we can improve its content and performance;
• Evaluate candidates for open roles or future opportunities, where you have applied;
• Comply with applicable legal, regulatory, tax, and accounting obligations; and
• Establish, exercise, or defend legal claims where necessary.

We do not sell personal information, and we do not use information submitted through our contact forms for unrelated advertising purposes.

5. Legal basis for processing

Where applicable data protection law requires a legal basis for processing (for example, under the EU/UK General Data Protection Regulation), we rely on one or more of the following:

• Consent — where you have given clear consent, such as opting in to receive marketing communications, which you may withdraw at any time;
• Contractual necessity — where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you or your organization;
• Legitimate interests — where processing is necessary for our legitimate interests in operating and improving our business and Site, provided those interests are not overridden by your rights; and
• Legal obligation — where processing is necessary to comply with a legal or regulatory requirement.

6. Cookies and similar technologies

The Site may use cookies and similar technologies (such as local storage or pixel tags) to remember preferences, understand how visitors use the Site, and, where enabled, support analytics tools. We use only cookies that are strictly necessary for the Site to function, together with optional analytics cookies where enabled. You can control or disable non-essential cookies through your browser settings; disabling cookies may affect some functionality of the Site. If we add analytics, advertising, or CRM-tracking cookies in the future, we will update this section and, where legally required, request your consent through a cookie banner or similar mechanism before doing so.

7. How we share information

We do not sell or rent personal information. We may share information in the following circumstances:

• Service providers: with vendors who host our Site, provide email and communication tools, customer relationship management (CRM) systems, analytics services, or other operational support, under confidentiality and data protection obligations appropriate to the service provided;
• Professional advisers: with our lawyers, auditors, and accountants where necessary for their services to us;
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections;
• Legal and safety reasons: where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Verborix, our clients, or others; and
• With your direction: where you have asked us to share information with a specific third party, such as a technology or delivery partner involved in a proposed engagement.

8. International data transfers

Verborix is headquartered in India, and information we collect may be stored and processed in India or in other countries where our service providers operate. Where we transfer personal information out of a jurisdiction that restricts such transfers (such as the European Economic Area or the United Kingdom), we aim to use appropriate safeguards recognized under applicable law, such as standard contractual clauses, before making the transfer.

9. Data retention

We retain personal information for as long as reasonably necessary to fulfil the purposes described in this policy, including to respond to your enquiry, maintain a business relationship, meet legal, tax, or regulatory retention requirements, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we take reasonable steps to securely delete, anonymize, or archive it in accordance with our internal data retention practices.

10. Security

We apply administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, including access controls, encryption in transit for the Site, and restricted internal access to enquiry and client data on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

11. Your rights and choices

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — request that we correct inaccurate or incomplete information;
• Deletion — request that we delete personal information, subject to certain legal exceptions;
• Restriction or objection — request that we restrict or stop certain processing of your information;
• Portability — request a copy of certain information in a structured, machine-readable format;
• Withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal; and
• Opt out of marketing — unsubscribe from marketing communications at any time using the link provided in those communications or by contacting us directly.

To exercise any of these rights, please contact us using the details in Section 16. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law.

12. Region-specific disclosures

12.1 European Economic Area and United Kingdom (GDPR/UK GDPR)

If you are located in the EEA or UK, the legal bases described in Section 5 apply to our processing of your personal information, and you have the rights described in Section 11. You also have the right to lodge a complaint with your local data protection supervisory authority.

12.2 California and other U.S. state privacy laws

If you are a California resident, applicable law may give you additional rights, including the right to know the categories of personal information we collect and disclose, the right to request deletion, and the right to non-discrimination for exercising your privacy rights. We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined under California law.

12.3 India (Digital Personal Data Protection Act)

As an Indian company, Verborix processes personal information in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, where in force. Where the Act's provisions apply, we act as a data fiduciary with respect to personal data collected through the Site and provide the notice, consent, and grievance-redressal mechanisms required by that law.

13. Children's privacy

The Site is intended for business audiences and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Third-party links

The Site may contain links to third-party websites, including our social media profiles. We are not responsible for the privacy practices or content of those third-party sites, and we encourage you to review their privacy policies before providing any personal information.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. If changes are material, we will provide additional notice where appropriate, such as a notice on the Site or by email.

16. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

• Verborix Technologies Pvt. Ltd.
• Email: info@verborix.com
• Phone: +91 99874 90395
• Location: Mumbai, India

This policy is provided as a general-purpose template and has not been reviewed by a lawyer. Please have qualified legal counsel review and adapt it before publishing, particularly if you add analytics, advertising, cookie consent tooling, CRM integrations, payment processing, or handle personal information from jurisdictions with specific compliance requirements (such as the EU/UK GDPR, California privacy laws, or India's DPDP Act).