Privacy Policy

In compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India)

1. Who We Are & How to Contact Us

Data Controller / Data Fiduciary: Matrix Secure Applications (OPC) Private Limited

Contact (privacy, DPO, grievance, security): contact@matrix-secure.in

We handle all privacy requests through the email above.

If you are in the EU/EEA, UK, India, Brazil, California, or another region with specific rights, include your location in your request.

2. Scope & Relationship to Client Data

This Policy covers personal information we collect through our Site, marketing, events, business development, and recruiting.

When we provide services to business customers, we may process personal data on their instructions as a processor or service provider.

In those cases, our Data Processing Addendum (DPA) with the customer governs. The customer's privacy notice applies to their end users.

3. Information We Collect

A) You Provide Directly

Contact details: name, work email, phone, company, role, country/region.
Inquiry content: messages, project details, RFPs/RFIs, attachments.
Subscriptions & preferences: newsletter sign-ups, event registrations, content downloads.
Recruitment data: CV/resume, cover letter, professional history, education, skills, interview notes, references, and any information you choose to submit (e.g., accommodation requests).

B) Collected Automatically

Usage & device data: IP address, approximate location, device identifiers, browser/OS, language, referring/exit pages, page views, time on page, clicks and interactions.
Cookies & similar tech: cookies, local storage, pixels, SDKs for functionality, analytics, and (where enabled) advertising/retargeting. See Cookies & Tracking below.

C) From Third Parties

Business lead sources/partners (where permitted): professional contact info and interest signals.
Social networks you interact with (e.g., LinkedIn).
Recruiting/background providers (where lawful and with notice).

Note: We do not intentionally collect sensitive personal data via the Site.

Please avoid sharing sensitive information unless requested and necessary (for example, recruiting accommodations).

4. How We Use Personal Information (Purposes & Legal Bases)

We use information to:

Operate the Site and provide Services (forms, downloads, demos).
Respond to inquiries and support requests.
Share newsletters and product updates where you have opted in.
Evaluate applications and manage recruitment.
Measure site performance and improve user experience.
Detect, investigate, and prevent security incidents.
Meet legal obligations and enforce our agreements.

Legal bases include consent, contracts, and legal duties.

5. Cookies & Tracking

We use:

Strictly necessary cookies (security, form submissions, basic site features).
Functional cookies (remember choices such as language).
Analytics cookies (traffic, performance, user flows).
Advertising/retargeting cookies (to show relevant ads across sites, where enabled).

Your Choices

Review our cookie practices and preferences in our Cookie Policy.
Adjust your browser settings to block or delete cookies.
We honor Global Privacy Control (GPC) signals where required by law.

6. How We Share Information

We may share personal information with:

Service providers and processors (hosting, analytics, email, CRM).
Business partners for co-marketing or events when you engage or consent.
Professional advisors and authorities when required by law.
Parties involved in a merger, acquisition, financing, or asset sale, with appropriate safeguards.

We do not sell personal information for money. Some states view analytics as a data sale. See below to opt out.

7. International Transfers

We transfer data globally using safe tools like Standard Contractual Clauses (SCCs).

8. Data Retention

We keep data only as long as needed to fulfill our services and follow the law. Typical periods:

Marketing leads: until you opt out or after 18–24 months of inactivity.
Inquiries/support: 2–3 years.
Recruitment: for the hiring process and up to 12–24 months thereafter.
Analytics logs: 12–24 months, and may be aggregated or pseudonymized where feasible.

9. Data Security

We use encryption, access controls, and logs to keep data safe. No method is 100% secure. Email contact@matrix-secure.in if you suspect a breach.

10. Your Privacy Rights & Choices

Depending on your location, you can view, edit, or delete your data. You can also opt out of targeted ads.

How to Exercise

Email contact@matrix-secure.in with your request and location. We may ask to verify your identity. Authorized agents (where permitted) should include proof of authorization and the consumer's verification info.

Marketing

Use the unsubscribe link in our emails or email contact@matrix-secure.in. Review cookie practices in our Cookie Policy.

11. Children's Privacy

The Services are not directed to children under 13 (or the age of digital consent in your country). We do not knowingly collect data from children. If you believe a child has provided data, contact contact@matrix-secure.in to request deletion.

12. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects about individuals via the Site. We may use analytics and audience segmentation to understand interests and improve content, subject to your choices and applicable law.

13. Third-Party Links & Social Media

Our Site may link to third-party websites, plug-ins, and platforms. Their privacy practices govern data you provide to them. Review their policies before sharing data.

14. Region-Specific Information

EU/EEA & UK (GDPR/UK GDPR)

You have rights listed in Section 10. You may also lodge a complaint with your local supervisory authority. For cross-border transfers, we rely on safeguards described in Section 7.

India (DPDP Act, 2023)

You may consent/withdraw consent, and request access, correction, erasure, and grievance redressal. Grievance Officer contact: contact@matrix-secure.in (please include "DPDP" in the subject). We will acknowledge and resolve grievances within statutory timelines.

United States (CCPA/CPRA and Similar State Laws)

You may request access, correction, deletion, and opt out of sale/share or targeted advertising. We will not discriminate against you for exercising rights.

Submit requests to contact@matrix-secure.in or use /do-not-sell when available. We honor GPC signals where required.

Brazil (LGPD)

You may confirm processing, access, correct, anonymize/block/ delete, port, withdraw consent, and request information about sharing and legal bases. Contact contact@matrix-secure.in.

We contractually require confidentiality, security, and deletion/return of data at the end of service. A current list of key subprocessors can be requested at contact@matrix-secure.in.

16. Client Project Data (Processor Role)

When acting as a processor/service provider for clients, we process personal data solely per client instructions, implement appropriate security measures, assist with data subject requests as required, and support transfer mechanisms (e.g., SCCs). See our DPA with your organization for details.

17. Changes to This Policy

We may update this Policy to reflect changes in our practices or legal requirements. We will post updates with a new "Last updated" date and, where required, provide additional notice. Continued use of the Services after an update constitutes acknowledgment of the revised Policy.

18. Contact

Questions, requests, or complaints: contact@matrix-secure.in

We aim to respond within applicable legal timelines.