Last Updated June 12, 2026
Altimetrik is committed to protecting and respecting your privacy. This Global Privacy Policy is for Altimetrik group companies, “Altimetrik”, "we", "us" or "our" in this privacy policy, we are referring to the relevant company in the Altimetrik group company responsible for processing your data.
This privacy policy sets out how Altimetrik will process any personal information that it may collect about you as a website visitor, subcontractor or consultant to us.
This privacy policy also sets out how we protect your privacy and your rights in respect of our use of your personal information.
Personal Information we collect:
We may collect and process the following personal information about you:
Personal information that you give us:
This is information about you that you give to us by filling in forms on our website, giving us by subcontractor/consultant contract or corresponding with us by email or otherwise. It may include but is not limited to, your name, address, email address and telephone number; information about your business relationship with Altimetrik and/or information about your professional role, background and interests.
Personal information that our website collects about you:
If you visit our website, it will automatically collect some information about you and your visit, including the Internet protocol (IP) address used to connect your device to the Internet. If you interact with us through social media services, we may be able to access certain information about such interaction. We are not responsible for the manner in which social media service providers handle your personal information.
If you exchange emails or other electronic communications with our employees and other staff members, we may store details of those conversations.
Some of our premises have closed circuit TV (CCTV) systems and other security and access management systems which may record you and certain information about your visit if you visit our premises for security and safety purposes.
We may collect the following categories of personal data to support the engagement, administration, and management of consultants or sub-contractors:
Contact information, Professional information, Identification documents, payment data, Engagement-related information: such as deliverables, project assignments, performance feedback, and time tracking data (if applicable), IT system access logs: including login and access records to company systems or platforms, where relevant to the engagement.
Other information: We may also collect some information from other sources. For example:
If we have a business relationship with the organisation that you represent, your colleagues or other business contacts may give us information about you such as your contact details or details of your role and interactions with us.
We may collect information from third party data providers or publicly available sources for anti-money-laundering, export control, credit rating background checking and similar purposes, and to protect our business and comply with our legal and regulatory obligations.
Our website may contain links to websites of third parties who are not affiliated to Altimetrik. If you access such third party websites by clicking on such links, we are not responsible for the way in which such third parties process your personal information that they collect.
Sensitive Information
We request that you do not send or share with us any sensitive personal information. There may be limited situations where we do request strictly necessary sensitive personal information from you, for example when we are undertaking due diligence, Background verification and compliance checks. We will only process sensitive personal information where we have a lawful basis to do so and in accordance with this privacy policy.
Sensitive Information
We request that you do not send or share with us any sensitive personal information. There may be limited situations where we do request strictly necessary sensitive personal information from you, for example when we are undertaking due diligence, Background verification and compliance checks. We will only process sensitive personal information where we have a lawful basis to do so and in accordance with this privacy policy.
Use of your personal information
We may collect, store and use your personal information for the purposes to operate, manage, develop and promote our business and our relationship with the organisation you represent (if any) and related transactions.
Disclosure and international transfer of your personal information
We may disclose your personal information, where reasonably necessary for the various purposes set out above:
- to other members of Altimetrik group of companies;
- to your colleagues within the organisation or customers (in case of Subcon/consultant) that you work with;
- to service providers who host our web services or other information technology systems or otherwise hold or process your information on our behalf, under conditions of confidentiality;
- to business partners, channel partners, service partners, agents, suppliers and sub-contractors for the performance of any contract we enter into with them;
- to our professional advisors (including but not limited to accountants, lawyers or auditors);
- to a person who takes over our business and assets, or relevant parts of them; or
- where we are required by law to disclose.
Our data security and retention policies
The security, integrity and confidentiality of your personal information is extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect your personal information from unauthorized access, disclosure, use and modification.
We will delete your personal information when we no longer need such personal information, for instance where it is no longer necessary for us to retain your personal information to fulfil the purposes for which we had collected it, we believe that your personal information that we hold is inaccurate; or in certain cases where you have informed us that you no longer consent to our processing of your personal information.
However there are legal or regulatory requirements which may require us to retain your personal information for a specified period, and in such cases we will retain your personal information for such specified period;
Your rights
You have the following rights (subject to applicable local laws) in relation to the personal information that we hold about you:
- Right to access and information: to access your personal information, and some related information, under relevant data protection law;
- Right to rectification: to require any inaccurate personal information to be corrected or deleted;
- Right to object: to object to our use of your personal information for direct marketing purposes at any time and you may have the right to object to our processing of some or all of your personal information;
- Right to erasure: to require us to delete your personal information in certain circumstances;
- Right to restrict: to require us to restrict the processing of your personal information in certain circumstances (when processing is restricted, we can still store your personal information, but may not use it further);
- Right to portability: to obtain from us your personal information, in a structured, commonly used and machine-readable format in certain circumstances;
- Right to withdraw consent: where we are processing your personal information based on your consent to such processing, to withdraw your consent at any time; and
- Right to lodge a complaint: lodge a complaint to your local supervisory authority in your country.
If you wish to exercise any of these rights (subject to applicable local laws), or ask any questions or share any concerns related to this privacy policy or Altimetrik’ s privacy practices, please write us at legal@altimetrik.com/dpo@altimetrik.com.
Contact us
If you have any questions, requests or complaints about our processing of your personal information, please contact us at legal@altimetrik.com/dpo@altimetrik.com.
Changes to this policy
This privacy policy is valid from the time of its publication on the Altimetrik websites, and all previous versions of this privacy policy become invalid as of such time. Any changes we make to this privacy policy in the future will be posted to our website and also available if you contact us by using the details in the section above. Please check back frequently to see any changes.
Country specific terms
In addition to the above global privacy policy, the following country specific terms will also apply if you are located in one of the following countries (regardless of whether the processing takes place in such countries or not).
USA and Canada
Our processing of your personal data is governing by applicable State data protection laws in the USA including California Consumer Privacy Act (CCPA) or Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, depending on your location.
Your data will be processed based on legal obligations, legal compliance, and legitimate interests for processing your data.
We retain your data for the period required by applicable law. We implement technical and organizational measures to protect your data. We will respond to your request within 10 days to 90 days from the date of request in accordance with applicable data protection laws.
India
We are responsible for complying with all applicable data protection laws, including but not limited to, Digital Personal Data Protection Act 2023, Information Technology Act 2000 and any rules thereunder.
The information shared by you including your personal information can be shared without obtaining your prior consent, with Government agencies mandated under the law to obtain personal information including personal information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences.
Transfer of personal information:
We may transfer your personal information to any other body corporate or a person located in India or outside India, that ensures the same level of data protection that is adhered to by them as provided under the local law and regulations.
Such transfer may only take place if it is necessary for the performance of the lawful contract between the body corporate or any person on its behalf and provider of information or where you have consented to such transfer.
Provided, that we shall not be responsible for the authenticity of the personal information provided by you.
Your duty as provider of information:
- You shall comply with all applicable laws for the time being in force while exercising rights under the provisions of local laws or this privacy policy.
- You shall ensure not to impersonate another person while providing personal information including sensitive personal information for a specified purpose.
- You shall not suppress any material information while providing personal information including sensitive personal information for any document, unique identifier, proof of identity or proof of address.
- You shall only furnish such information as is verifiably authentic while exercising the right to correction or erasure.
Your additional rights:
- You have the right to grievance redressal in relation to your complaint about our performance of obligations under this privacy policy.
- You have the right to nominate any other individual, who shall exercise the rights given under this privacy policy on your behalf in the event of death or incapacity.
- You have the right to obtain a summary of personal information which is being processed and the processing activities undertaken with respect to such personal data.
- You have the right to know the details of recipients with whom your personal information has been shared.
Singapore
Our processing of your personal data is governing by Personal Data Protection Act (PDPA).
Accuracy of Personal Data:
We will take reasonable steps to ensure that the personal information we collect about you is accurate, complete and kept up to date. It is important that you update us of any changes to your personal information.
Withdrawal of Consent
If you wish to withdraw consent, you should give us reasonable advance notice.
Exercising Your Rights
You may write to us to know how we are using or disclosing your personal information. We will respond to your request as soon as possible, or within 30 days from the date we receive your request. If we are unable to do so within the 30 days, we will let you know and give you an estimate of how much longer we require. If you find that the personal information we hold about you is inaccurate, incomplete or not up-to-date you may ask us to correct such information. Where we are satisfied on reasonable grounds that a correction should be made, we will correct such information as soon as possible, or within 30 days from the date we receive your request.
EU and UK
Altimetrik is committed to protecting your personal data and this policy outlines how we collect, use, store, and share your data under GDPR/UK GDPR.
Lawful basis for processing
We will only process your personal information as necessary so that we can pursue the purposes described in this privacy policy and where we have a legal basis for such processing. Where our lawful basis for processing is that such processing is necessary to pursue our legitimate interests, we will only process your personal information where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest. In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information.
For certain processing, if we rely on your consent, such consent will be clear, freely given, genuine and you will be able to withdraw your consent at any time.
Data Transfers
If you are dealing with us within the European Economic Area or the UK, you should be aware that this may include transfers to countries outside the European Economic Area and the UK, which have not been determined by the European Commission or the UK to have an adequate level of data protection. In those cases, where we transfer your personal information to other members of Altimetrik group, our service providers or partners, we will ensure that our arrangements with them are governed by relevant legal mechanisms and safeguards including data transfer agreements, designed to ensure that your personal information is protected and in compliance with applicable law.
Withdrawal of Consent
Where our processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Please note that withdrawal of consent does not affect the lawfulness of processing carried out prior to your withdrawal. To withdraw your consent, please contact us with reasonable advance notice.
Your Rights Under the GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request access to the personal data we hold about you and to obtain information on how it is being processed.
- Right to Rectification: If you believe that the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
- Right to Erasure: In certain circumstances, you may request that we delete your personal data.
- Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations.
- Right to Data Portability: Where applicable, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis.
We will respond to your request without undue delay and in any case within one month of receipt. If we are unable to meet this timeframe, we will inform you of the reason and the expected timeframe for our response.
Mexico / Uruguay
Our processing of your personal data is governing by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) in Mexico and Unidad Reguladora y de Control de Datos Personales (URCDP) in Uruguay, depending on your location.
Your data is processed based on contractual necessity, or legal obligations, legal compliance, and legitimate interests for processing your data.
If we process the data based on your consent, you may withdraw your consent at any time by contacting legal@altimetrik.com.
Your data will also be retained for the duration of the contractual relationship and for the period required by applicable law thereafter. We apply technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of your data.
You have the right to, access your personal data, rectify inaccurate or outdated information, cancel your data when no longer needed or unlawfully held and object to the processing of your data for specific purposes. We will respond to your request within 5 business days/20 business days depends upon your location.
Switzerland
Our processing of your personal data is governed by the Swiss Federal Act on Data Protection (FADP) and its implementing ordinances, as amended from time to time.
Your personal data is processed where necessary for the performance of a contract, compliance with legal obligations, the pursuit of our legitimate interests, or, where required under applicable law, based on your consent.
Where processing is based on your consent, you may withdraw your consent at any time by contacting . The withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.
Your personal data will be retained for the duration of the contractual relationship and thereafter for such periods as required or permitted by applicable law. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.
Subject to the conditions and limitations set out under the FADP, you have the right to request access to your personal data, request correction of inaccurate personal data, request information regarding the processing of your personal data, and, where applicable, object to or request the restriction of certain processing activities. You may also request the deletion of your personal data where retention is no longer required by law or for legitimate business purposes.
Requests concerning your personal data may be submitted to . We will respond to your request within the timeframes required under applicable Swiss data protection laws.
Colombia
Our processing of your personal data is governed by Law 1581 of 2012, Decree 1074 of 2015, and other applicable Colombian data protection regulations.
Your personal data is processed where necessary for the performance of a contract, compliance with legal obligations, the pursuit of our legitimate interests, or based on your prior, express, and informed authorization where required by applicable law.
Where processing is based on your authorization, you may revoke such authorization at any time by contacting . The revocation of authorization shall not affect the lawfulness of processing carried out prior to such revocation or where processing is otherwise permitted under applicable law.
Your personal data will be retained for the duration of the contractual relationship and thereafter for the period required or permitted by applicable law. We implement appropriate technical, administrative, and physical safeguards to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
As the data subject, you have the right to know, update, and rectify your personal data; request proof of the authorization granted for processing; be informed about the use of your personal data; submit complaints before the Superintendence of Industry and Commerce for violations of applicable data protection laws; revoke your authorization and/or request the deletion of your personal data where applicable; and access your personal data free of charge.
Requests concerning your personal data may be submitted to . We will respond to consultation requests within ten (10) business days and to complaints or correction/deletion requests within fifteen (15) business days, in accordance with applicable Colombian data protection laws.
Privacy Policy for Other Categories of Data Subjects
Candidates
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include Candidate name, contact details, resume, date of birth, educational qualifications (including skill details), employment-related information, details pertaining to background checks, passport details, and, where required by law in selected countries, financial details and national identification details.
Use of Your Personal Information
- To assess a candidate's suitability for job requirements as part of the recruitment or internship selection process, including background verification by our authorized vendor.
- To carry out employer-related activities if you are selected to join the organization and to ensure compliance with applicable labor and other relevant laws.
Legal Basis of Processing
We process your Personal Information when it is necessary for recruitment or background verification in order to evaluate your candidature based on your consent, as permitted under applicable laws.
Data Recipients / Accessible To
Your data may be accessible to authorized Altimetrik team members, its subsidiaries or affiliates, authorized service providers (including background verification vendors), cloud service providers, government bodies, statutory and regulatory authorities, law enforcement agencies (where applicable), and our clients (where applicable) based on contractual obligations.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
Employees and Alumni
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include contact details, family particulars, educational qualifications, personal details, work experience, national identification information, official identification details, salary, compensation, taxation, benefits, claims and other financial information, performance and development records, digital access and IT-related information, travel-related records, health and safety records, background checks and screening details, leave and attendance records, and information obtained from monitoring the use of our official systems and networks (as permitted by applicable laws).
Use of Your Personal Information
- To support employee onboarding and associated employment processes.
- To carry out employment-related activities and ensure compliance with applicable labor and other relevant laws.
- As an alumni/ex-employee, to maintain alumni engagement, provide employment-related documents, share current job opportunities, and facilitate alumni community participation.
- Where required by applicable legal or contractual obligations for specific client engagements, additional processing of personal information may be carried out, including additional background checks (which may include health-related and criminal checks) and workplace monitoring using CCTV. Such processing will always comply with applicable laws and standards.
Legal Basis of Processing
We process your Personal Data where necessary for the performance of an employment contract, to comply with legal obligations, based on legitimate interests pursued by us, based on legitimate use under applicable data protection laws, or based on your consent where required.
Data Recipients / Accessible To
Your Personal Data may be accessible to authorized Altimetrik employees (including Human Resources, Finance, and Project Delivery Units), authorized service providers or agents, government bodies, statutory and regulatory authorities, law enforcement agencies, internal and external auditors, Altimetrik clients (where applicable), and any other parties expressly or impliedly authorized by you.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
Vendors
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include vendor name, contact details, address, tax-related details, and contact details of the vendor point of contact (POC).
Use of Your Personal Information
- For vendor empanelment.
- For purchase order creation.
- For facilitating communications.
- For receiving quotations.
Legal Basis of Processing
We process your Personal Information where it is necessary for the performance of a contract to which you are a party or based on your consent, in accordance with applicable laws.
Data Recipients / Accessible To
Your data may be accessible to authorized internal recipients within Altimetrik, its subsidiaries or affiliates, authorized service providers (including cloud service providers), tax consultants and authorities, government bodies, statutory and regulatory authorities, law enforcement agencies (where applicable), and internal or external auditors.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
Privacy Policy for Other Categories of Data Subjects
Candidates
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include Candidate name, contact details, resume, date of birth, educational qualifications (including skill details), employment-related information, details pertaining to background checks, passport details, and, where required by law in selected countries, financial details and national identification details.
Use of Your Personal Information
- To assess a candidate's suitability for job requirements as part of the recruitment or internship selection process, including background verification by our authorized vendor.
- To carry out employer-related activities if you are selected to join the organization and to ensure compliance with applicable labor and other relevant laws.
Legal Basis of Processing
We process your Personal Information when it is necessary for recruitment or background verification in order to evaluate your candidature based on your consent, as permitted under applicable laws.
Data Recipients / Accessible To
Your data may be accessible to authorized Altimetrik team members, its subsidiaries or affiliates, authorized service providers (including background verification vendors), cloud service providers, government bodies, statutory and regulatory authorities, law enforcement agencies (where applicable), and our clients (where applicable) based on contractual obligations.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
Employees and Alumni
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include contact details, family particulars, educational qualifications, personal details, work experience, national identification information, official identification details, salary, compensation, taxation, benefits, claims and other financial information, performance and development records, digital access and IT-related information, travel-related records, health and safety records, background checks and screening details, leave and attendance records, and information obtained from monitoring the use of our official systems and networks (as permitted by applicable laws).
Use of Your Personal Information
- To support employee onboarding and associated employment processes.
- To carry out employment-related activities and ensure compliance with applicable labor and other relevant laws.
- As an alumni/ex-employee, to maintain alumni engagement, provide employment-related documents, share current job opportunities, and facilitate alumni community participation.
- Where required by applicable legal or contractual obligations for specific client engagements, additional processing of personal information may be carried out, including additional background checks (which may include health-related and criminal checks) and workplace monitoring using CCTV. Such processing will always comply with applicable laws and standards.
Legal Basis of Processing
We process your Personal Data where necessary for the performance of an employment contract, to comply with legal obligations, based on legitimate interests pursued by us, based on legitimate use under applicable data protection laws, or based on your consent where required.
Data Recipients / Accessible To
Your Personal Data may be accessible to authorized Altimetrik employees (including Human Resources, Finance, and Project Delivery Units), authorized service providers or agents, government bodies, statutory and regulatory authorities, law enforcement agencies, internal and external auditors, Altimetrik clients (where applicable), and any other parties expressly or impliedly authorized by you.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
Vendors
Categories of Personal Information Processed
Categories of personal (or sensitive personal) details processed may differ based on the legal requirements of a country. Categories of Personal Information (including sensitive personal information) that we process include vendor name, contact details, address, tax-related details, and contact details of the vendor point of contact (POC).
Use of Your Personal Information
- For vendor empanelment.
- For purchase order creation.
- For facilitating communications.
- For receiving quotations.
Legal Basis of Processing
We process your Personal Information where it is necessary for the performance of a contract to which you are a party or based on your consent, in accordance with applicable laws.
Data Recipients / Accessible To
Your data may be accessible to authorized internal recipients within Altimetrik, its subsidiaries or affiliates, authorized service providers (including cloud service providers), tax consultants and authorities, government bodies, statutory and regulatory authorities, law enforcement agencies (where applicable), and internal or external auditors.
For additional privacy practices regarding data security, retention, transfers (if any), and exercising your rights, please refer to our Global Privacy Policy.
