Privacy Policy

Altimetrik is committed to protecting and respecting your privacy. This Global Privacy Policy is for Altimetrik group companies, “Altimetrik”, "we", "us" or "our" in this privacy policy, we are referring to the relevant company in the Altimetrik group company responsible for processing your data.

This privacy policy sets out how Altimetrik will process any personal information that it may collect about you as a website visitor, subcontractor or consultant to us.

This privacy policy also sets out how we protect your privacy and your rights in respect of our use of your personal information.

Personal Information we collect:

We may collect and process the following personal information about you:

Personal information that you give us:

This is information about you that you give to us by filling in forms on our website, giving us by subcontractor/consultant contract or corresponding with us by email or otherwise. It may include but is not limited to, your name, address, email address and telephone number; information about your business relationship with Altimetrik and/or information about your professional role, background and interests.

Personal information that our website collects about you:

If you visit our website, it will automatically collect some information about you and your visit, including the Internet protocol (IP) address used to connect your device to the Internet. If you interact with us through social media services, we may be able to access certain information about such interaction. We are not responsible for the manner in which social media service providers handle your personal information.

If you exchange emails or other electronic communications with our employees and other staff members, we may store details of those conversations.

Some of our premises have closed circuit TV (CCTV) systems and other security and access management systems which may record you and certain information about your visit if you visit our premises for security and safety purposes.

We may collect the following categories of personal data to support the engagement, administration, and management of consultants or sub-contractors:

Contact information, Professional information, Identification documents, payment data, Engagement-related information: such as deliverables, project assignments, performance feedback, and time tracking data (if applicable), IT system access logs: including login and access records to company systems or platforms, where relevant to the engagement.

Other information: We may also collect some information from other sources. For example:

If we have a business relationship with the organisation that you represent, your colleagues or other business contacts may give us information about you such as your contact details or details of your role and interactions with us.

We may collect information from third party data providers or publicly available sources for anti-money-laundering, export control, credit rating background checking and similar purposes, and to protect our business and comply with our legal and regulatory obligations.

Our website may contain links to websites of third parties who are not affiliated to Altimetrik. If you access such third party websites by clicking on such links, we are not responsible for the way in which such third parties process your personal information that they collect.

Sensitive Information

We request that you do not send or share with us any sensitive personal information. There may be limited situations where we do request strictly necessary sensitive personal information from you, for example when we are undertaking due diligence, Background verification and compliance checks. We will only process sensitive personal information where we have a lawful basis to do so and in accordance with this privacy policy.

‍Use of your personal information

We may collect, store and use your personal information for the purposes to operate, manage, develop and promote our business and our relationship with the organisation you represent (if any) and related transactions.

Disclosure and international transfer of your personal information

We may disclose your personal information, where reasonably necessary for the various purposes set out above:

• to other members of Altimetrik group of companies;
• to your colleagues within the organisation or customers (in case of Subcon/consultant) that you work with;
• to service providers who host our web services or other information technology systems or otherwise hold or process your information on our behalf, under conditions of confidentiality;
• to business partners, channel partners, service partners, agents, suppliers and sub-contractors for the performance of any contract we enter into with them;
• to our professional advisors (including but not limited to accountants, lawyers or auditors);
• to a person who takes over our business and assets, or relevant parts of them; or
• where we are required by law to disclose.

‍

‍Our data security and retention policies

The security, integrity and confidentiality of your personal information is extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect your personal information from unauthorized access, disclosure, use and modification.

We will delete your personal information when we no longer need such personal information, for instance where it is no longer necessary for us to retain your personal information to fulfil the purposes for which we had collected it,  we believe that your personal information that we hold is inaccurate; or in certain cases where you have informed us that you no longer consent to our processing of your personal information.

However there are legal or regulatory requirements which may require us to retain your personal information for a specified period, and in such cases we will retain your personal information for such specified period;

Your rights

‍You have the following rights (subject to applicable local laws) in relation to the personal information that we hold about you:

• Right to access and information: to access your personal information, and some related information, under relevant data protection law;
• Right to rectification: to require any inaccurate personal information to be corrected or deleted;
• Right to object: to object to our use of your personal information for direct marketing purposes at any time and you may have the right to object to our processing of some or all of your personal information;
• Right to erasure: to require us to delete your personal information in certain circumstances;
• Right to restrict: to require us to restrict the processing of your personal information in certain circumstances (when processing is restricted, we can still store your personal information, but may not use it further);
• Right to portability: to obtain from us your personal information, in a structured, commonly used and machine-readable format in certain circumstances;
• Right to withdraw consent: where we are processing your personal information based on your consent to such processing, to withdraw your consent at any time; and
• Right to lodge a complaint: lodge a complaint to your local supervisory authority in your country.

‍

If you wish to exercise any of these rights (subject to applicable local laws), or ask any questions or share any concerns related to this privacy policy or Altimetrik’ s privacy practices, please write us at legal@altimetrik.com/dpo@altimetrik.com.

Contact us

If you have any questions, requests or complaints about our processing of your personal information, please contact us at legal@altimetrik.com/dpo@altimetrik.com.

Changes to this policy

This privacy policy is valid from the time of its publication on the Altimetrik websites, and all previous versions of this privacy policy become invalid as of such time. Any changes we make to this privacy policy in the future will be posted to our website and also available if you contact us by using the details in the section above. Please check back frequently to see any changes.

Country specific terms

In addition to the above global privacy policy, the following country specific terms will also apply if you are located in one of the following countries (regardless of whether the processing takes place in such countries or not).

USA and Canada

Our processing of your personal data is governing by applicable State data protection laws in the USA including California Consumer Privacy Act (CCPA) or Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, depending on your location.

Your data will be processed based on legal obligations, legal compliance, and legitimate interests for processing your data.

We retain your data for the period required by applicable law. We implement technical and organizational measures to protect your data. We will respond to your request within 10 days to 90 days from the date of request in accordance with applicable data protection laws.

India

We are responsible for complying with all applicable data protection laws, including but not limited to, Digital Personal Data Protection Act 2023, Information Technology Act 2000 and any rules thereunder.

The information shared by you including your personal information can be shared without obtaining your prior consent, with Government agencies mandated under the law to obtain personal information including personal information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences.

Transfer of personal information:

We may transfer your personal information to any other body corporate or a person located in India or outside India, that ensures the same level of data protection that is adhered to by them as provided under the local law and regulations.

Such transfer may only take place if it is necessary for the performance of the lawful contract between the body corporate or any person on its behalf and provider of information or where you have consented to such transfer.

Provided, that we shall not be responsible for the authenticity of the personal information provided by you.

Your duty as provider of information:

• You shall comply with all applicable laws for the time being in force while exercising rights under the provisions of local laws or this privacy policy.
• You shall ensure not to impersonate another person while providing personal information including sensitive personal information for a specified purpose.
• You shall not suppress any material information while providing personal information including sensitive personal information for any document, unique identifier, proof of identity or proof of address.
• You shall only furnish such information as is verifiably authentic while exercising the right to correction or erasure.

‍

Your additional rights:

• You have the right to grievance redressal in relation to your complaint about our performance of obligations under this privacy policy.
• You have the right to nominate any other individual, who shall exercise the rights given under this privacy policy on your behalf in the event of death or incapacity.
• You have the right to obtain a summary of personal information which is being processed and the processing activities undertaken with respect to such personal data.
• You have the right to know the details of recipients with whom your personal information has been shared.

Singapore

Our processing of your personal data is governing by Personal Data Protection Act (PDPA).

Accuracy of Personal Data:

We will take reasonable steps to ensure that the personal information we collect about you is accurate, complete and kept up to date. It is important that you update us of any changes to your personal information.

Withdrawal of Consent

If you wish to withdraw consent, you should give us reasonable advance notice.

Exercising Your Rights

You may write to us to know how we are using or disclosing your personal information. We will respond to your request as soon as possible, or within 30 days from the date we receive your request. If we are unable to do so within the 30 days, we will let you know and give you an estimate of how much longer we require. If you find that the personal information we hold about you is inaccurate, incomplete or not up-to-date you may ask us to correct such information. Where we are satisfied on reasonable grounds that a correction should be made, we will correct such information as soon as possible, or within 30 days from the date we receive your request.

‍EU and UK

Altimetrik is committed to protecting your personal data and this policy outlines how we collect, use, store, and share your data under GDPR/UK GDPR.

Lawful basis for processing

We will only process your personal information as necessary so that we can pursue the purposes described in this privacy policy and where we have a legal basis for such processing. Where our lawful basis for processing is that such processing is necessary to pursue our legitimate interests, we will only process your personal information where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest. In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information.

For certain processing, if we rely on your consent, such consent will be clear, freely given, genuine and you will be able to withdraw your consent at any time.

Data Transfers

If you are dealing with us within the European Economic Area or the UK, you should be aware that this may include transfers to countries outside the European Economic Area and the UK, which have not been determined by the European Commission or the UK to have an adequate level of data protection. In those cases, where we transfer your personal information to other members of Altimetrik group, our service providers or partners, we will ensure that our arrangements with them are governed by relevant legal mechanisms and safeguards including data transfer agreements, designed to ensure that your personal information is protected and in compliance with applicable law.

Mexico / Uruguay

Our processing of your personal data is governing by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) in Mexico and Unidad Reguladora y de Control de Datos Personales (URCDP) in Uruguay, depending on your location.

Your data is processed based on contractual necessity, or legal obligations, legal compliance, and legitimate interests for processing your data.

If we process the data based on your consent, you may withdraw your consent at any time by contacting legal@altimetrik.com.

Your data will also be retained for the duration of the contractual relationship and for the period required by applicable law thereafter. We apply technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of your data.

You have the right to, access your personal data, rectify inaccurate or outdated information, cancel your data when no longer needed or unlawfully held and object to the processing of your data for specific purposes. We will respond to your request within 5 business days/20 business days depends upon your location.