PRIVACY POLICY
1. Who We Are
GetARQ ("Company", "We", "Us", or "Our") is a technology and workforce solutions business registered in India under legal entity [LEGAL ENTITY NAME] (Entity Type: [ENTITY TYPE]), with registered office address at [REGISTERED OFFICE ADDRESS]. We operate digital product development services and technical talent resourcing capabilities for organizations worldwide.
2. Scope
This Privacy Policy outlines how We collect, process, store, retain, disclose, and safeguard personal data obtained from website visitors, prospective and existing clients, freelance talent network applicants, job candidates, and business contacts in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025, and applicable provisions of the Information Technology Act, 2000 during statutory transition.
3. Definitions
- "Data Principal": The individual to whom the personal data relates.
- "Data Fiduciary": The entity (GetARQ) that determines the purpose and means of processing personal data.
- "Personal Data": Any data about an individual who is identifiable by or in relation to such data.
- "Processing": Any operation performed on personal data, including collection, recording, organization, storage, retrieval, disclosure, or erasure.
4. Personal Data We Collect
We limit personal data collection strictly to information required for legitimate business purposes, technical execution, communication, and workforce evaluation.
5. Website Visitor Information
When you visit our website, we may log standard HTTP request metadata including IP address, browser type, operating system version, referring URL, and page timestamps for security monitoring and server diagnostics.
6. Contact Enquiries
When prospective clients or visitors submit an inquiry form, we collect name, corporate email address, phone number, company name, project requirements, estimated timeline, and message details to respond to project requirements.
7. Client/Business Information
For active commercial engagements, we process legal entity details, authorized representative contacts, billing address, tax registration numbers (e.g. GSTIN), statement of work parameters, and operational communications.
8. Freelancer/Talent Information
When technology professionals apply to join the GetARQ Talent Network, we process professional details necessary for candidate evaluation and client opportunity matching.
FREELANCER DATA SUBMISSION WARNING
Applicants should not submit passwords, payment credentials, government-issued identity documents (e.g. Aadhaar, PAN, Passport), health information, or other unnecessary sensitive information unless specifically requested through an authorized GetARQ verification process.
9. Job Applicant Information
For direct employment opportunities at GetARQ, we process resume details, career history, educational qualifications, reference contacts, and interview evaluations.
10. How Information Is Collected
Information is collected directly through online forms, CV uploads, email communications, business interactions, and automated HTTP/cookie session interactions.
11. Data Collection Summary Table
| Category | Examples | Purpose | Collection Method | Retention Approach |
|---|---|---|---|---|
| Website Enquiries | Name, email, phone, company, project scope | To review, respond to, and service client project requirements | Direct input via web forms | 2 Years from last interaction |
| Talent Applications | Name, email, resume, GitHub, tech stack, rates | To evaluate technical skills and match talent with client projects | Direct submission & CV upload | 3 Years in private storage |
| Client Records | Billing contact, GSTIN, MSA/SOW contracts | To execute commercial agreements and tax compliance | Contract execution & invoicing | 8 Years (statutory requirement) |
| Technical Logs | IP address, user agent, timestamps | To maintain security, prevent abuse, and log server activity | Automated HTTP logs | 1 Year rolling period |
12. Purposes of Processing
We process personal data exclusively for specified, explicit, and legitimate purposes:
• To respond to your project enquiry and evaluate technical requirements.
• To evaluate your application for the GetARQ talent network.
• To determine whether your skills match client engineering opportunities.
• To maintain website security, prevent fraud, and audit access logs.
13. Talent Matching
For candidates seeking contract opportunities, technical profile summaries (excluding sensitive direct credentials) may be shared with prospective clients for opportunity evaluation.
14. Communications
We communicate regarding active inquiries, project progress, legal updates, and talent applications. Marketing communications are sent only where optional consent has been provided.
15. Website Operation and Security
We enforce technical protections including HTTPS encryption, CSRF tokens, strict input validation, rate limiting, secure password hashing, private resume file storage, and access authorization.
16. Cookies
We use essential functional cookies to secure form submissions and maintain active user sessions. Detailed information is provided in our Cookie Policy.
17. Third-Party Service Providers
We engage vetted infrastructure, email delivery, and cloud hosting providers under contract to operate our web application. Third parties are prohibited from processing data for independent purposes.
18. Sharing and Disclosure
We do not sell, rent, or trade personal data. Disclosures occur strictly to fulfill contract terms, enforce legal rights, or comply with lawful requests under Indian jurisdiction.
19. International Transfers
Where processing requires cloud infrastructure hosted internationally, data transfers comply with cross-border transfer guidelines under Indian data protection laws.
20. Data Retention
Personal data is retained only for the period necessary to fulfill its processing purpose or meet statutory recordkeeping requirements under Indian law.
21. Security Measures
We maintain appropriate technical and administrative safeguards. Uploaded candidate resumes are stored on private, non-public storage disks accessible solely by authorized personnel.
22. Data Breach / Incident Handling
In the event of a verified data incident affecting personal data, we will follow statutory notification procedures mandated under the DPDP Act and relevant authorities.
23. Data Principal Rights
Under the DPDP Act, 2023, Data Principals possess statutory rights regarding their personal data.
24. Access Right
You have the right to request confirmation of whether your personal data is being processed and obtain a summary of personal data undergoing processing.
25. Correction Right
You have the right to request correction, completion, or updating of inaccurate or misleading personal data.
26. Erasure Right
You have the right to request erasure of your personal data unless retention is required by applicable law or necessary for specified legal obligations.
27. Consent Withdrawal
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
28. Grievance Redressal
Data Principals may submit inquiries, rights enforcement requests, or grievances to our designated Data Protection Officer / Grievance Redressal mechanism via our online Privacy Request Portal or by emailing [GRIEVANCE EMAIL].
29. Children's Data
Our website and services are intended exclusively for individuals aged 18 and older. We do not knowingly process personal data of minors.
30. Third-Party Websites
Our site may contain links to third-party platforms (e.g. GitHub, LinkedIn). We are not responsible for the privacy practices or content of external platforms.
31. Changes to Policy
We review and update this policy periodically. Any updates will be published on this page with an updated version number and effective date.
32. Contact Information
For questions regarding this policy or privacy practices, contact:
Privacy Desk: [PRIVACY EMAIL]
Grievance Officer: [GRIEVANCE EMAIL]
General Enquiries: [GENERAL CONTACT EMAIL]
Address: [REGISTERED OFFICE ADDRESS], India.